Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-28 12:55:03.877 00:05:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 12:58:54.726 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44590 10 6452 1 2025-07-28 12:59:48.457 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 12:59:48.337 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 12:59:48.413 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 12:59:48.335 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 12:59:48.418 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 12:59:55.128 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57154 10 6452 1 2025-07-28 13:00:55.530 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54562 10 6452 1 2025-07-28 13:01:55.894 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:36036 12 6556 1 2025-07-28 13:02:56.315 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57468 10 6452 1 2025-07-28 13:00:03.874 00:05:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 13:03:56.722 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52994 10 6452 1 2025-07-28 13:04:48.317 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 13:04:48.433 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 13:04:48.547 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 13:04:48.292 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:04:48.234 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:01:03.878 00:05:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 13:04:57.134 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52204 10 6452 1 2025-07-28 13:05:57.540 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41866 10 6452 1 2025-07-28 13:06:57.941 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56540 10 6452 1 2025-07-28 13:07:58.362 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58356 10 6452 1 2025-07-28 13:08:58.765 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55224 10 6452 1 2025-07-28 13:09:48.647 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 13:09:48.506 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 13:09:48.706 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 13:09:48.541 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:09:48.566 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:06:03.876 00:05:00.316 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 13:09:59.175 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40936 10 6452 1 2025-07-28 13:07:03.878 00:05:00.311 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 13:10:59.577 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59554 10 6452 1 2025-07-28 13:11:59.979 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52254 10 6452 1 2025-07-28 13:13:00.388 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59940 10 6452 1 2025-07-28 13:14:00.803 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36572 10 6452 1 2025-07-28 13:14:48.764 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 13:14:48.682 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:14:48.773 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 13:14:48.913 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 13:14:48.804 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:15:01.203 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:44242 10 6452 1 2025-07-28 13:12:03.879 00:05:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 13:16:01.563 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50398 10 6452 1 2025-07-28 13:13:03.880 00:05:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 13:17:01.968 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42004 10 6452 1 2025-07-28 13:18:02.334 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60928 10 6452 1 2025-07-28 13:19:02.738 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41634 10 6452 1 2025-07-28 13:19:48.855 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 13:19:48.780 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 13:19:48.827 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:19:48.787 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:19:48.870 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 13:20:03.154 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46972 10 6452 1 2025-07-28 13:21:03.554 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43988 10 6452 1 2025-07-28 13:18:03.878 00:05:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 13:22:03.962 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33622 10 6452 1 2025-07-28 13:19:03.882 00:05:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 13:23:04.372 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45440 10 6452 1 2025-07-28 13:24:04.773 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34334 10 6452 1 2025-07-28 13:24:48.753 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 13:24:48.849 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 13:24:48.874 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:24:48.754 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:24:48.836 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 13:25:05.184 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53206 10 6452 1 2025-07-28 13:26:05.591 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45162 10 6452 1 2025-07-28 13:27:06.004 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38500 10 6452 1 2025-07-28 13:24:03.881 00:05:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 13:28:06.411 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42212 10 6452 1 2025-07-28 13:25:03.883 00:05:00.307 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 13:29:06.779 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36962 10 6452 1 2025-07-28 13:29:49.143 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 13:29:49.224 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 13:29:48.919 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:29:49.004 00:00:00.049 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:29:49.085 00:00:00.051 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 13:30:07.183 00:00:10.618 TCP 1.101.0.1:3000 -> 23.104.0.1:46708 10 6452 1 2025-07-28 13:31:07.839 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:44410 10 6452 1 2025-07-28 13:32:08.261 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34796 10 6452 1 2025-07-28 13:33:08.675 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45882 10 6452 1 2025-07-28 13:30:03.881 00:05:00.312 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 13:34:09.101 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45796 10 6452 1 2025-07-28 13:34:49.449 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 13:34:49.322 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 13:34:49.150 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 13:34:49.170 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:34:49.366 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:31:03.885 00:05:00.307 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 13:35:09.503 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45770 10 6452 1 2025-07-28 13:36:09.910 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45498 10 6452 1 2025-07-28 13:37:10.320 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52550 10 6452 1 2025-07-28 13:38:10.723 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38136 10 6452 1 2025-07-28 13:39:11.133 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35670 10 6452 1 2025-07-28 13:39:49.195 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 13:39:49.116 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 13:39:49.291 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:39:49.203 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:39:49.285 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 13:36:03.883 00:05:00.313 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 13:40:11.545 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49668 10 6452 1 2025-07-28 13:37:03.885 00:05:00.307 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 13:41:11.947 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40670 10 6452 1 2025-07-28 13:42:12.315 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50060 10 6452 1 2025-07-28 13:43:12.713 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54744 10 6452 1 2025-07-28 13:44:13.109 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45986 10 6452 1 2025-07-28 13:44:49.389 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 13:44:49.234 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 13:44:49.149 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:44:49.235 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:44:49.317 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 13:45:13.521 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60070 10 6452 1 2025-07-28 13:42:03.884 00:05:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 13:46:13.887 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:44486 10 6452 1 2025-07-28 13:43:03.887 00:05:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 13:47:14.261 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55340 10 6452 1 2025-07-28 13:48:14.666 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37160 10 6452 1 2025-07-28 13:49:15.090 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:51498 10 6452 1 2025-07-28 13:49:49.617 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 13:49:49.529 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 13:49:49.474 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 13:49:49.410 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:49:49.535 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:50:15.468 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56792 10 6452 1 2025-07-28 13:51:15.867 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50878 10 6452 1 2025-07-28 13:48:03.887 00:05:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 13:52:16.277 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45394 10 6452 1 2025-07-28 13:49:03.890 00:05:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-07-28 13:53:16.687 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44574 10 6452 1 2025-07-28 13:54:17.069 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51454 10 6452 1 2025-07-28 13:54:49.528 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 13:54:49.351 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 13:54:49.518 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 13:54:49.347 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:54:49.446 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 13:55:17.473 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58836 10 6452 1 2025-07-28 13:56:17.872 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48910 10 6452 1 2025-07-28 13:57:18.280 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:51354 10 6452 1 2025-07-28 13:54:03.893 00:05:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-07-28 13:58:18.695 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53634 10 6452 1 Summary: total flows: 140, total bytes: 417104, total packets: 1022, avg bps: 868, avg pps: 0, avg bpp: 408 Time window: 2025-07-28 12:55:03 - 2025-07-28 13:59:04 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0036s User: 0.0009s Wall: 0.0025s flows/second: 55580.0 Runtime: 0.0025s