Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-25 01:54:02.058 00:06:00.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 01:59:09.889 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:41714 10 6438 1 2025-07-25 02:00:10.312 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43646 10 6438 1 2025-07-25 01:56:02.061 00:06:00.423 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 02:01:10.711 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50406 10 6438 1 2025-07-25 02:02:11.117 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58082 10 6438 1 2025-07-25 02:03:08.596 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 02:03:08.732 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 02:03:08.638 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:03:08.733 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:03:08.816 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 02:03:11.517 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45802 10 6438 1 2025-07-25 02:04:11.880 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57362 10 6438 1 2025-07-25 02:05:12.247 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56176 10 6438 1 2025-07-25 02:01:02.059 00:06:00.431 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 02:06:12.650 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60230 10 6438 1 2025-07-25 02:07:13.062 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39600 10 6438 1 2025-07-25 02:03:02.062 00:06:00.427 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 02:08:08.896 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 02:08:08.756 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 02:08:08.675 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 02:08:08.697 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:08:08.813 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:08:13.464 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:54198 12 10352 1 2025-07-25 02:09:13.938 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34158 10 6438 1 2025-07-25 02:10:14.362 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34530 10 6438 1 2025-07-25 02:11:14.766 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37992 10 6438 1 2025-07-25 02:12:15.176 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:45444 10 6438 1 2025-07-25 02:08:02.060 00:06:00.431 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 02:13:09.265 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 02:13:09.253 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 02:13:08.691 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:13:08.989 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:13:09.072 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 02:13:15.551 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:32970 10 6438 1 2025-07-25 02:14:15.958 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56690 10 6438 1 2025-07-25 02:10:02.062 00:06:00.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 02:15:16.364 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47990 10 6438 1 2025-07-25 02:16:16.775 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49372 10 6438 1 2025-07-25 02:17:17.184 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47998 10 6438 1 2025-07-25 02:18:08.898 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 02:18:08.814 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:18:08.651 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 02:18:08.966 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 02:18:08.841 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:18:17.592 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39048 10 6438 1 2025-07-25 02:19:17.990 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50634 10 6438 1 2025-07-25 02:15:02.067 00:06:00.426 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 02:20:18.399 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38580 10 6438 1 2025-07-25 02:21:18.808 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47974 10 6438 1 2025-07-25 02:17:02.070 00:06:00.422 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 02:22:19.215 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59470 10 6438 1 2025-07-25 02:23:08.877 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 02:23:09.123 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 02:23:08.818 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:23:08.959 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:23:09.040 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 02:23:19.615 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49314 10 6438 1 2025-07-25 02:24:20.018 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55654 10 6438 1 2025-07-25 02:25:20.380 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36572 10 6438 1 2025-07-25 02:26:20.788 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49426 10 6438 1 2025-07-25 02:22:02.069 00:06:00.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 02:27:21.189 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49644 10 6438 1 2025-07-25 02:28:09.340 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 02:28:08.937 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 02:28:09.181 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:28:09.401 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:28:09.483 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 02:28:21.592 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58068 10 6438 1 2025-07-25 02:24:02.072 00:06:00.421 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 02:29:21.961 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:41758 10 6438 1 2025-07-25 02:30:22.385 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51952 10 6438 1 2025-07-25 02:31:22.785 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57082 10 6438 1 2025-07-25 02:32:23.148 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41434 10 6438 1 2025-07-25 02:33:09.452 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 02:33:09.392 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 02:33:09.183 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:33:09.251 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:33:09.334 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 02:33:23.560 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:37318 12 10350 1 2025-07-25 02:29:02.072 00:06:00.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 02:34:23.999 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33056 10 6438 1 2025-07-25 02:35:24.364 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53228 10 6438 1 2025-07-25 02:31:02.075 00:06:00.419 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 02:36:24.767 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:39810 10 6438 1 2025-07-25 02:37:25.183 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53414 10 6438 1 2025-07-25 02:38:09.287 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 02:38:09.433 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 02:38:09.221 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:38:09.294 00:00:00.039 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:38:09.378 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 02:38:25.587 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46260 10 6438 1 2025-07-25 02:39:25.988 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35332 10 6438 1 2025-07-25 02:40:26.394 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54374 10 6438 1 2025-07-25 02:36:02.073 00:06:00.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 02:41:26.810 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:57284 10 6438 1 2025-07-25 02:42:27.179 00:00:10.504 TCP 1.101.0.1:3000 -> 23.104.0.1:38086 10 6438 1 2025-07-25 02:38:02.077 00:06:00.419 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 02:43:09.106 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 02:43:09.369 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 02:43:09.238 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:43:09.110 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:43:09.192 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 02:43:27.724 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47742 10 6438 1 2025-07-25 02:44:28.128 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57118 10 6438 1 2025-07-25 02:45:28.534 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49936 10 6438 1 2025-07-25 02:46:28.900 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58252 12 6542 1 2025-07-25 02:47:29.315 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49152 10 6438 1 2025-07-25 02:48:09.481 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 02:43:02.074 00:06:00.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 02:48:09.683 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 02:48:09.672 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 02:48:09.143 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:48:09.399 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:48:29.732 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57024 10 6438 1 2025-07-25 02:49:30.137 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37842 10 6438 1 2025-07-25 02:45:02.076 00:06:00.420 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 02:50:30.537 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51446 10 6438 1 2025-07-25 02:51:30.939 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54048 10 6438 1 2025-07-25 02:52:31.354 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38494 10 6438 1 2025-07-25 02:53:09.831 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 02:53:09.748 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 02:53:09.661 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 02:53:09.678 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:53:09.746 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:53:31.757 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:43798 10 6438 1 2025-07-25 02:54:32.125 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48578 10 6438 1 2025-07-25 02:50:02.076 00:06:00.427 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-25 02:55:32.531 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50028 10 6438 1 2025-07-25 02:56:32.934 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:47840 10 6438 1 2025-07-25 02:52:02.078 00:06:00.420 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-25 02:57:33.355 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49104 10 6438 1 2025-07-25 02:58:09.898 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-25 02:58:09.653 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-25 02:58:09.851 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-25 02:58:09.577 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:58:09.815 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-25 02:58:33.767 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:43392 12 10352 1 Summary: total flows: 138, total bytes: 428742, total packets: 1040, avg bps: 883, avg pps: 0, avg bpp: 412 Time window: 2025-07-25 01:54:02 - 2025-07-25 02:58:44 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0013s User: 0.0027s Wall: 0.0019s flows/second: 74551.0 Runtime: 0.0019s