Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-28 08:55:03.782 00:05:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 08:59:18.457 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52186 10 6452 1 2025-07-28 08:59:43.749 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 08:59:43.742 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 08:59:43.737 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 08:59:43.446 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 08:59:43.666 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:00:18.858 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:39626 10 6452 1 2025-07-28 09:01:19.283 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45562 10 6452 1 2025-07-28 09:02:19.683 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:35154 10 6452 1 2025-07-28 09:03:20.117 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37522 10 6452 1 2025-07-28 09:00:03.781 00:05:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 09:04:20.542 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58252 10 6452 1 2025-07-28 09:04:43.554 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 09:04:43.633 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 09:04:43.663 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:04:43.784 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:04:43.868 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 09:01:03.784 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 09:05:20.942 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59602 10 6452 1 2025-07-28 09:06:21.357 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33732 10 6452 1 2025-07-28 09:07:21.760 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:33762 10 6452 1 2025-07-28 09:08:22.172 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33656 10 6452 1 2025-07-28 09:09:22.579 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43830 10 6452 1 2025-07-28 09:09:43.793 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 09:09:43.798 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 09:09:43.671 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:09:43.722 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:09:43.804 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 09:06:03.783 00:05:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 09:10:22.978 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38884 10 6452 1 2025-07-28 09:07:03.785 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 09:11:23.392 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47662 10 6452 1 2025-07-28 09:12:23.758 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:36394 10 6452 1 2025-07-28 09:13:24.186 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:49500 12 10367 1 2025-07-28 09:14:44.036 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 09:14:24.674 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:33302 10 6452 1 2025-07-28 09:14:43.892 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 09:14:43.894 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 09:14:43.823 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:14:43.952 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:15:25.041 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32868 12 6556 1 2025-07-28 09:12:03.783 00:05:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 09:16:25.446 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56788 10 6452 1 2025-07-28 09:13:03.787 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 09:17:25.846 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43164 10 6452 1 2025-07-28 09:18:26.252 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58452 10 6452 1 2025-07-28 09:19:26.661 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42468 10 6452 1 2025-07-28 09:19:44.188 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 09:19:44.392 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 09:19:44.195 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 09:19:44.221 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:19:44.106 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:20:27.080 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57096 10 6452 1 2025-07-28 09:21:27.490 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53228 10 6452 1 2025-07-28 09:18:03.785 00:05:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 09:22:27.854 00:00:10.481 TCP 1.101.0.1:3000 -> 23.104.0.1:37758 10 6452 1 2025-07-28 09:19:03.788 00:05:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 09:23:28.370 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43500 10 6452 1 2025-07-28 09:24:28.777 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38756 10 6452 1 2025-07-28 09:24:44.006 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 09:24:44.113 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 09:24:43.851 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:24:44.219 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:24:44.303 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 09:25:29.187 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59904 10 6452 1 2025-07-28 09:26:29.593 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57788 10 6452 1 2025-07-28 09:27:29.957 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42426 10 6452 1 2025-07-28 09:24:03.790 00:05:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 09:28:30.373 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39456 10 6452 1 2025-07-28 09:25:03.793 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 09:29:44.212 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 09:29:44.191 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 09:29:44.128 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 09:29:43.931 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:29:44.129 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:29:30.778 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47726 10 6452 1 2025-07-28 09:30:31.182 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48656 10 6452 1 2025-07-28 09:31:31.589 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38412 10 6452 1 2025-07-28 09:32:31.984 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57094 10 6452 1 2025-07-28 09:33:32.359 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:40986 10 6452 1 2025-07-28 09:30:03.792 00:05:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 09:34:44.372 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 09:34:44.446 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 09:34:44.358 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 09:34:44.217 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:34:32.736 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60150 10 6452 1 2025-07-28 09:34:44.283 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:31:03.794 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 09:35:33.147 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46600 10 6452 1 2025-07-28 09:36:33.548 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53282 10 6452 1 2025-07-28 09:37:33.950 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36610 10 6452 1 2025-07-28 09:38:34.350 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45236 10 6452 1 2025-07-28 09:39:44.386 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 09:39:44.239 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 09:39:44.150 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:39:44.327 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:39:44.410 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 09:39:34.760 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52522 10 6452 1 2025-07-28 09:36:03.795 00:05:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 09:40:35.176 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47376 10 6452 1 2025-07-28 09:37:03.797 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 09:41:35.578 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41408 10 6452 1 2025-07-28 09:42:35.975 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38654 10 6452 1 2025-07-28 09:43:36.387 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:44408 10 6452 1 2025-07-28 09:44:44.556 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 09:44:44.417 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 09:44:44.412 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 09:44:44.046 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:44:44.474 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:44:36.817 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48794 10 6452 1 2025-07-28 09:45:37.186 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41000 10 6452 1 2025-07-28 09:42:03.798 00:05:00.336 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 09:46:37.592 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:58658 10 6452 1 2025-07-28 09:43:03.800 00:05:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 09:47:37.985 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39256 10 6452 1 2025-07-28 09:48:38.393 00:00:10.315 TCP 1.101.0.1:3000 -> 23.104.0.1:41632 10 6452 1 2025-07-28 09:49:44.879 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 09:49:44.797 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 09:49:44.861 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 09:49:44.807 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:49:44.795 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:49:38.748 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37084 10 6452 1 2025-07-28 09:50:39.114 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43260 10 6452 1 2025-07-28 09:51:39.521 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45952 10 6452 1 2025-07-28 09:48:03.800 00:05:00.335 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 09:52:39.929 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:47380 10 6452 1 2025-07-28 09:49:03.803 00:05:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 09:53:40.352 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58722 10 6452 1 2025-07-28 09:54:44.837 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 09:54:44.638 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 09:54:44.835 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 09:54:44.672 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:54:44.753 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 09:54:40.753 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52182 10 6452 1 2025-07-28 09:55:41.115 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:59080 10 6452 1 2025-07-28 09:56:41.485 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48268 10 6452 1 2025-07-28 09:57:41.910 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60140 10 6452 1 2025-07-28 09:54:03.806 00:05:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 Summary: total flows: 139, total bytes: 414567, total packets: 1014, avg bps: 863, avg pps: 0, avg bpp: 408 Time window: 2025-07-28 08:55:03 - 2025-07-28 09:59:04 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0035s User: 0.0009s Wall: 0.0019s flows/second: 71350.9 Runtime: 0.0020s