Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-28 21:55:04.083 00:04:00.244 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-28 21:59:33.400 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55210 10 6452 1 2025-07-28 21:59:59.385 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 21:59:59.242 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 21:59:59.240 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 21:59:59.079 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 21:59:59.302 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:00:33.805 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46330 10 6452 1 2025-07-28 22:01:34.209 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53190 10 6452 1 2025-07-28 21:57:04.083 00:06:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-28 22:02:34.614 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:58508 10 6452 1 2025-07-28 22:03:35.036 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:44554 12 10365 1 2025-07-28 22:00:04.086 00:04:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-28 22:04:35.509 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40782 10 6452 1 2025-07-28 22:04:59.478 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 22:04:59.422 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 22:04:59.311 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:04:59.302 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:04:59.384 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 22:05:35.919 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52752 10 6452 1 2025-07-28 22:06:36.275 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:37206 11 6504 1 2025-07-28 22:07:36.739 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56882 10 6452 1 2025-07-28 22:08:37.142 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33154 10 6452 1 2025-07-28 22:04:04.084 00:06:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-28 22:09:37.516 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55922 10 6452 1 2025-07-28 22:09:59.547 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 22:09:59.554 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 22:09:59.271 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:09:59.338 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:09:59.420 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 22:05:04.087 00:06:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-28 22:10:37.923 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:53796 10 6452 1 2025-07-28 22:11:38.298 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55018 10 6452 1 2025-07-28 22:12:38.671 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58574 10 6452 1 2025-07-28 22:11:04.086 00:02:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-07-28 22:13:39.100 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48550 10 6452 1 2025-07-28 22:14:39.509 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43430 10 6452 1 2025-07-28 22:14:59.662 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 22:14:59.875 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 22:14:59.282 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:15:00.262 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 22:15:00.180 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:15:39.875 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55882 10 6452 1 2025-07-28 22:16:40.237 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55898 10 6452 1 2025-07-28 22:12:04.091 00:06:00.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-28 22:17:40.637 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43152 10 6452 1 2025-07-28 22:14:04.090 00:04:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-28 22:18:41.039 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46052 10 6452 1 2025-07-28 22:19:41.444 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44170 10 6452 1 2025-07-28 22:19:59.629 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 22:19:59.634 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 22:19:59.722 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:19:59.634 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:19:59.716 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 22:20:41.813 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52014 10 6452 1 2025-07-28 22:19:04.094 00:02:00.252 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-07-28 22:21:42.216 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39888 10 6452 1 2025-07-28 22:22:42.617 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48468 10 6452 1 2025-07-28 22:19:04.090 00:04:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-28 22:23:43.024 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:51460 10 6452 1 2025-07-28 22:24:59.805 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 22:24:43.485 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47316 10 6452 1 2025-07-28 22:24:59.724 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 22:24:59.494 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 22:24:59.681 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:24:59.722 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:25:43.856 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:50214 10 6452 1 2025-07-28 22:22:04.094 00:04:00.253 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-28 22:26:44.235 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42416 10 6452 1 2025-07-28 22:27:44.647 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54460 10 6452 1 2025-07-28 22:24:04.093 00:04:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-28 22:28:45.065 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56994 10 6452 1 2025-07-28 22:29:59.892 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 22:29:59.885 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 22:29:45.471 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57658 10 6452 1 2025-07-28 22:29:59.931 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 22:29:59.602 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:29:59.807 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:30:45.873 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52416 10 6452 1 2025-07-28 22:27:04.094 00:04:00.253 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-28 22:31:46.278 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:52202 10 6452 1 2025-07-28 22:32:46.645 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56900 10 6452 1 2025-07-28 22:33:47.065 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51384 10 6452 1 2025-07-28 22:29:04.093 00:06:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-28 22:34:59.920 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 22:34:47.430 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33900 10 6452 1 2025-07-28 22:35:00.242 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 22:35:00.166 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 22:35:00.056 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:35:00.159 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:35:47.836 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:34058 10 6452 1 2025-07-28 22:32:04.096 00:04:00.254 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-28 22:36:48.271 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41782 10 6452 1 2025-07-28 22:37:48.672 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38650 10 6452 1 2025-07-28 22:38:49.106 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43002 10 6452 1 2025-07-28 22:39:59.843 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 22:39:59.758 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 22:39:49.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38670 10 6452 1 2025-07-28 22:39:59.760 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 22:39:59.877 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:39:59.760 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:36:04.095 00:06:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-28 22:40:49.918 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38026 10 6452 1 2025-07-28 22:37:04.097 00:06:00.255 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-28 22:41:50.282 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60878 10 6452 1 2025-07-28 22:42:50.680 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60198 10 6452 1 2025-07-28 22:43:51.113 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58618 10 6452 1 2025-07-28 22:45:00.492 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 22:43:04.096 00:02:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-07-28 22:45:00.388 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 22:45:00.271 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:44:51.521 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34886 10 6452 1 2025-07-28 22:45:00.483 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:45:00.565 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 22:45:51.928 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:33978 10 6452 1 2025-07-28 22:46:52.361 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47394 10 6452 1 2025-07-28 22:47:52.773 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41608 10 6452 1 2025-07-28 22:48:53.185 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:51956 10 6452 1 2025-07-28 22:44:04.100 00:06:00.253 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-28 22:50:00.303 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 22:46:04.097 00:04:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-28 22:50:00.397 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 22:50:00.306 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:49:53.584 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:33570 10 6452 1 2025-07-28 22:50:00.220 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:50:00.303 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 22:50:53.952 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46842 10 6452 1 2025-07-28 22:51:54.357 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37806 10 6452 1 2025-07-28 22:51:04.101 00:02:00.255 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-07-28 22:52:54.769 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33924 10 6452 1 2025-07-28 22:53:55.185 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:42548 10 6452 1 2025-07-28 22:55:00.438 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-28 22:55:00.354 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-28 22:51:04.098 00:04:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-07-28 22:55:00.269 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-28 22:55:00.434 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:55:00.354 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-28 22:54:55.563 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37688 10 6452 1 2025-07-28 22:55:55.922 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:46098 10 6452 1 2025-07-28 22:56:56.358 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60274 10 6452 1 2025-07-28 22:54:04.102 00:04:00.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-07-28 22:57:56.787 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52528 10 6452 1 Summary: total flows: 142, total bytes: 414882, total packets: 1019, avg bps: 877, avg pps: 0, avg bpp: 407 Time window: 2025-07-28 21:55:04 - 2025-07-28 22:58:07 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0027s User: 0.0018s Wall: 0.0022s flows/second: 64815.7 Runtime: 0.0022s