Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-28 07:55:03.761 00:05:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 07:58:54.159 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55896 10 6452 1 2025-07-28 07:59:43.586 00:00:00.019 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 07:59:43.504 00:00:00.019 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 07:59:43.494 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 07:59:43.215 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 07:59:43.352 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 07:59:54.565 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43534 10 6452 1 2025-07-28 08:00:54.963 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46904 10 6452 1 2025-07-28 08:01:55.363 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49650 10 6452 1 2025-07-28 08:02:55.771 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:50836 10 6452 1 2025-07-28 08:00:03.760 00:05:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 08:03:56.219 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55370 10 6452 1 2025-07-28 08:04:42.599 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 08:04:42.336 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 08:04:42.611 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 08:04:42.456 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:04:42.517 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:01:03.764 00:05:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 08:04:56.596 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45578 10 6452 1 2025-07-28 08:05:56.958 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54510 10 6452 1 2025-07-28 08:06:57.365 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56670 10 6452 1 2025-07-28 08:07:57.768 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34076 10 6452 1 2025-07-28 08:08:58.185 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56920 10 6452 1 2025-07-28 08:09:42.844 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 08:09:42.761 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:09:42.713 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 08:09:42.709 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 08:09:42.654 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:06:03.762 00:05:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 08:09:58.545 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36668 10 6452 1 2025-07-28 08:07:03.764 00:05:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 08:10:58.945 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50020 10 6452 1 2025-07-28 08:11:59.352 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48932 10 6452 1 2025-07-28 08:12:59.764 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:54006 10 6452 1 2025-07-28 08:14:00.202 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40056 10 6452 1 2025-07-28 08:14:42.902 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 08:14:43.371 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 08:14:42.801 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 08:14:42.894 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:14:42.819 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:15:00.611 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43632 10 6452 1 2025-07-28 08:12:03.762 00:05:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 08:16:01.018 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51484 10 6452 1 2025-07-28 08:13:03.764 00:05:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 08:17:01.422 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38792 10 6452 1 2025-07-28 08:18:01.786 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34314 10 6452 1 2025-07-28 08:19:02.186 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50788 10 6452 1 2025-07-28 08:19:42.900 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 08:19:42.591 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 08:19:42.677 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 08:19:42.769 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:19:42.818 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:20:02.592 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59926 10 6452 1 2025-07-28 08:21:02.954 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42424 10 6452 1 2025-07-28 08:18:03.768 00:05:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 08:22:03.328 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56134 10 6452 1 2025-07-28 08:19:03.771 00:05:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 08:23:03.737 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56820 10 6452 1 2025-07-28 08:24:04.149 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56106 10 6452 1 2025-07-28 08:24:43.053 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 08:24:42.890 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 08:24:42.732 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 08:24:42.828 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:24:42.970 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:25:04.556 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55230 10 6452 1 2025-07-28 08:26:04.959 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54142 10 6452 1 2025-07-28 08:27:05.366 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54982 10 6452 1 2025-07-28 08:24:03.771 00:05:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 08:28:05.767 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41764 10 6452 1 2025-07-28 08:25:03.773 00:05:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 08:29:06.183 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44350 10 6452 1 2025-07-28 08:29:43.063 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 08:29:42.903 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 08:29:43.129 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 08:29:42.822 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:29:42.980 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:30:06.600 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56554 10 6452 1 2025-07-28 08:31:07.010 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52218 10 6452 1 2025-07-28 08:32:07.404 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56492 10 6452 1 2025-07-28 08:33:07.806 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:50014 10 6452 1 2025-07-28 08:30:03.772 00:05:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 08:34:08.272 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59190 10 6452 1 2025-07-28 08:34:42.981 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 08:34:42.878 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 08:34:42.886 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 08:34:43.095 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:34:42.899 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:31:03.774 00:05:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 08:35:08.642 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55440 10 6452 1 2025-07-28 08:36:09.056 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46062 10 6452 1 2025-07-28 08:37:09.461 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52278 10 6452 1 2025-07-28 08:38:09.859 00:00:10.503 TCP 1.101.0.1:3000 -> 23.104.0.1:34116 13 10419 1 2025-07-28 08:39:10.404 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43588 10 6452 1 2025-07-28 08:39:43.411 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 08:39:43.187 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 08:39:43.110 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:39:43.171 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:39:43.253 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 08:36:03.773 00:05:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 08:40:10.807 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51904 10 6452 1 2025-07-28 08:37:03.776 00:05:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 08:41:11.210 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36104 10 6452 1 2025-07-28 08:42:11.610 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42130 10 6452 1 2025-07-28 08:43:12.016 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55896 10 6452 1 2025-07-28 08:44:12.435 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37342 10 6452 1 2025-07-28 08:44:43.534 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 08:44:43.436 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 08:44:43.197 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:44:43.536 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:44:43.619 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 08:45:12.842 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:45396 10 6452 1 2025-07-28 08:42:03.777 00:05:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 08:46:13.263 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52976 10 6452 1 2025-07-28 08:43:03.779 00:05:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 08:47:13.670 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:55024 10 6452 1 2025-07-28 08:48:14.031 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45808 10 6452 1 2025-07-28 08:49:14.431 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53556 10 6452 1 2025-07-28 08:49:43.276 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 08:49:43.357 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 08:49:43.224 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:49:43.280 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:49:43.362 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 08:50:14.845 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:38620 10 6452 1 2025-07-28 08:51:15.275 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53110 10 6452 1 2025-07-28 08:48:03.779 00:05:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 08:52:15.678 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47994 10 6452 1 2025-07-28 08:49:03.781 00:05:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 08:53:16.040 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45778 10 6452 1 2025-07-28 08:54:16.443 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58742 10 6452 1 2025-07-28 08:54:43.464 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 08:54:43.596 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 08:54:43.402 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:54:43.471 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:54:43.554 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 08:55:16.850 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:33258 10 6452 1 2025-07-28 08:56:17.272 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40582 10 6452 1 2025-07-28 08:57:17.640 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44238 10 6452 1 2025-07-28 08:54:03.781 00:05:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 08:58:18.053 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45522 10 6452 1 Summary: total flows: 140, total bytes: 420967, total packets: 1023, avg bps: 876, avg pps: 0, avg bpp: 411 Time window: 2025-07-28 07:55:03 - 2025-07-28 08:59:04 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0025s User: 0.0016s Wall: 0.0020s flows/second: 69237.4 Runtime: 0.0020s