Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-27 13:54:03.371 00:06:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 13:59:20.799 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 13:59:20.720 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 13:59:20.654 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 13:59:20.713 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 13:59:20.796 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 13:59:38.590 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49202 10 6452 1 2025-07-27 14:00:38.996 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59678 10 6452 1 2025-07-27 13:56:03.374 00:06:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 14:01:39.400 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58006 10 6452 1 2025-07-27 14:02:39.763 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:57374 10 6452 1 2025-07-27 14:03:40.141 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47546 10 6452 1 2025-07-27 14:04:21.058 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 14:04:20.976 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:04:20.752 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 14:04:20.977 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 14:04:20.852 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:04:40.550 00:00:12.069 TCP 1.101.0.1:3000 -> 23.104.0.1:59540 10 6452 1 2025-07-27 14:05:42.662 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59886 10 6452 1 2025-07-27 14:01:03.373 00:06:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 14:06:43.098 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42552 10 6452 1 2025-07-27 14:07:43.507 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55258 10 6452 1 2025-07-27 14:03:03.376 00:06:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 14:08:43.907 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46826 10 6452 1 2025-07-27 14:09:20.961 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 14:09:20.879 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 14:09:20.886 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 14:09:20.756 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:09:20.877 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:09:44.312 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53844 10 6452 1 2025-07-27 14:10:44.721 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59250 10 6452 1 2025-07-27 14:11:45.105 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47646 10 6452 1 2025-07-27 14:12:45.505 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54588 10 6452 1 2025-07-27 14:08:03.375 00:06:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 14:13:45.914 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:34284 10 6452 1 2025-07-27 14:14:21.185 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 14:14:21.091 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 14:14:20.920 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:14:20.978 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:14:21.061 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 14:14:46.349 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46846 10 6452 1 2025-07-27 14:10:03.378 00:06:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 14:15:46.756 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:42530 10 6452 1 2025-07-27 14:16:47.183 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60308 10 6452 1 2025-07-27 14:17:47.586 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32914 10 6452 1 2025-07-27 14:18:47.992 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:41512 10 6452 1 2025-07-27 14:19:21.277 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 14:19:21.141 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 14:19:21.123 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 14:19:21.110 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:19:21.195 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:19:48.455 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57756 10 6452 1 2025-07-27 14:15:03.383 00:06:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 14:20:48.861 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39126 10 6452 1 2025-07-27 14:21:49.276 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46460 10 6452 1 2025-07-27 14:17:03.388 00:06:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 14:22:49.683 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:40638 10 6452 1 2025-07-27 14:23:50.109 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53296 10 6452 1 2025-07-27 14:24:21.765 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 14:24:21.681 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 14:24:21.331 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 14:24:21.605 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:24:21.683 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:24:50.473 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51700 10 6452 1 2025-07-27 14:25:50.881 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34826 12 6556 1 2025-07-27 14:22:03.400 00:06:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 14:26:51.292 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:50758 10 6452 1 2025-07-27 14:27:51.655 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52798 10 6452 1 2025-07-27 14:24:03.403 00:06:00.339 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 14:28:52.060 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35516 10 6452 1 2025-07-27 14:29:21.292 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 14:29:21.363 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 14:29:21.419 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 14:29:21.180 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:29:21.210 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:29:52.464 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58448 10 6452 1 2025-07-27 14:30:52.869 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58632 10 6452 1 2025-07-27 14:31:53.279 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52102 10 6452 1 2025-07-27 14:32:53.682 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:39838 11 6504 1 2025-07-27 14:29:03.401 00:06:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 14:33:54.137 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51638 10 6452 1 2025-07-27 14:34:21.477 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 14:34:21.609 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 14:34:21.415 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:34:21.484 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:34:21.567 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 14:34:54.495 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36762 10 6452 1 2025-07-27 14:31:03.405 00:06:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 14:35:54.905 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35810 10 6452 1 2025-07-27 14:36:55.318 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44894 10 6452 1 2025-07-27 14:37:55.682 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44310 10 6452 1 2025-07-27 14:38:56.107 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60726 10 6452 1 2025-07-27 14:39:21.608 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 14:39:21.766 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 14:39:21.657 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 14:39:21.586 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:39:21.525 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:39:56.514 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46194 10 6452 1 2025-07-27 14:36:03.404 00:06:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 14:40:56.914 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40422 10 6452 1 2025-07-27 14:41:57.319 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:50328 10 6452 1 2025-07-27 14:38:03.407 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 14:42:57.672 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43254 10 6452 1 2025-07-27 14:43:58.105 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34372 10 6452 1 2025-07-27 14:44:21.531 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 14:44:21.531 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 14:44:21.570 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:44:21.692 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:44:21.775 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 14:44:58.534 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58474 10 6452 1 2025-07-27 14:45:58.935 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50918 10 6452 1 2025-07-27 14:46:59.353 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33140 10 6452 1 2025-07-27 14:43:03.407 00:06:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 14:47:59.762 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:57402 13 6608 1 2025-07-27 14:49:00.216 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33152 10 6452 1 2025-07-27 14:49:21.905 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 14:49:21.725 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 14:49:21.625 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 14:49:21.643 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:49:21.822 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:45:03.409 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 14:50:00.577 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35308 10 6452 1 2025-07-27 14:51:00.948 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57216 10 6452 1 2025-07-27 14:52:01.356 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58542 10 6452 1 2025-07-27 14:53:01.762 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59556 10 6452 1 2025-07-27 14:54:02.173 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:57100 12 10367 1 2025-07-27 14:54:22.082 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 14:54:21.956 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 14:54:21.889 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 14:54:21.969 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:54:22.000 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 14:50:03.409 00:06:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 14:55:02.648 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52534 10 6452 1 2025-07-27 14:56:03.022 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46222 10 6452 1 2025-07-27 14:52:03.413 00:06:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 14:57:03.441 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53298 10 6452 1 2025-07-27 14:58:03.844 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:48774 10 6452 1 Summary: total flows: 137, total bytes: 415513, total packets: 1030, avg bps: 863, avg pps: 0, avg bpp: 403 Time window: 2025-07-27 13:54:03 - 2025-07-27 14:58:14 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0037s User: 0.0007s Wall: 0.0020s flows/second: 70007.3 Runtime: 0.0020s