Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 00:54:05.672 00:06:00.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 00:59:15.413 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43562 10 6452 1 2025-08-01 00:55:05.669 00:06:00.238 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 01:00:15.815 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49326 10 6452 1 2025-08-01 01:01:29.591 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:01:29.631 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 01:01:29.258 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 01:01:29.551 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:01:16.222 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:54420 10 6452 1 2025-08-01 01:01:29.674 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 01:02:16.587 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38062 10 6452 1 2025-08-01 01:03:16.993 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55222 10 6452 1 2025-08-01 01:04:17.355 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46502 10 6452 1 2025-08-01 01:05:17.754 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43406 10 6452 1 2025-08-01 01:01:05.672 00:06:00.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 01:06:29.567 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 01:06:29.701 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 01:06:29.638 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 01:06:29.470 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:06:29.484 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:06:18.117 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36830 10 6452 1 2025-08-01 01:02:05.671 00:06:00.238 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 01:07:18.519 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47008 10 6452 1 2025-08-01 01:08:18.927 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:47702 10 6452 1 2025-08-01 01:09:19.352 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54004 10 6452 1 2025-08-01 01:10:19.760 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58550 10 6452 1 2025-08-01 01:11:29.920 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 01:11:29.894 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 01:11:29.747 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 01:11:29.758 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:11:29.836 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:11:20.131 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48726 10 6452 1 2025-08-01 01:12:20.535 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53184 10 6452 1 2025-08-01 01:08:05.676 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 01:13:20.938 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60152 10 6452 1 2025-08-01 01:09:05.675 00:06:00.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 01:14:21.356 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39648 10 6452 1 2025-08-01 01:15:21.762 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:60314 10 6452 1 2025-08-01 01:16:29.727 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:16:22.183 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54676 12 6556 1 2025-08-01 01:16:30.055 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 01:16:30.127 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 01:16:30.030 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:16:30.113 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 01:17:22.590 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:32792 10 6452 1 2025-08-01 01:18:22.995 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60786 10 6452 1 2025-08-01 01:19:23.405 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57990 10 6452 1 2025-08-01 01:15:05.678 00:06:00.234 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 01:20:23.810 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59340 10 6452 1 2025-08-01 01:16:05.677 00:06:00.239 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 01:21:30.261 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 01:21:29.953 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 01:21:30.155 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 01:21:24.217 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60604 10 6452 1 2025-08-01 01:21:30.011 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:21:30.179 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:22:24.611 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54382 10 6452 1 2025-08-01 01:23:25.017 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44928 10 6452 1 2025-08-01 01:24:25.421 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39714 10 6452 1 2025-08-01 01:25:25.832 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60914 10 6452 1 2025-08-01 01:26:30.359 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 01:26:30.433 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 01:26:30.428 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 01:26:30.007 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:26:30.276 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:26:26.240 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33160 10 6452 1 2025-08-01 01:22:05.681 00:06:00.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 01:27:26.650 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44288 10 6452 1 2025-08-01 01:23:05.677 00:06:00.241 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 01:28:27.073 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37524 10 6452 1 2025-08-01 01:29:27.469 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54096 12 6556 1 2025-08-01 01:30:27.873 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37700 10 6452 1 2025-08-01 01:31:30.149 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 01:31:30.087 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 01:31:29.990 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:31:30.199 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:31:30.282 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 01:31:28.282 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58244 10 6452 1 2025-08-01 01:32:28.686 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:57246 11 6492 1 2025-08-01 01:33:29.118 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52412 10 6452 1 2025-08-01 01:29:05.685 00:06:00.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 01:34:29.533 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49192 10 6452 1 2025-08-01 01:30:05.681 00:06:00.239 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 01:35:29.934 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49576 10 6452 1 2025-08-01 01:36:30.295 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 01:36:30.296 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 01:36:30.133 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:36:30.212 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:36:30.295 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 01:36:30.358 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59010 10 6452 1 2025-08-01 01:37:30.726 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:34804 10 6452 1 2025-08-01 01:38:31.153 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50026 10 6452 1 2025-08-01 01:39:31.556 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52920 10 6452 1 2025-08-01 01:40:31.952 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34362 10 6452 1 2025-08-01 01:36:05.692 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 01:41:30.311 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 01:41:30.366 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 01:41:30.244 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:41:30.398 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:41:30.481 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 01:41:32.369 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:38184 10 6452 1 2025-08-01 01:37:05.690 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 01:42:32.752 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:56204 10 6452 1 2025-08-01 01:43:33.118 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43752 10 6452 1 2025-08-01 01:44:33.489 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56166 10 6452 1 2025-08-01 01:45:33.891 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46480 10 6452 1 2025-08-01 01:46:30.479 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 01:46:30.314 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 01:46:30.212 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 01:46:30.414 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:46:30.395 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:46:34.314 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34088 10 6452 1 2025-08-01 01:47:34.728 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35150 10 6452 1 2025-08-01 01:43:05.693 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 01:48:35.145 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:45540 10 6452 1 2025-08-01 01:44:05.690 00:06:00.233 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 01:49:35.506 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56804 10 6452 1 2025-08-01 01:50:35.911 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58946 10 6452 1 2025-08-01 01:51:30.329 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:51:30.995 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:51:30.823 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 01:51:30.836 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 01:51:31.079 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 01:51:36.308 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56880 10 6452 1 2025-08-01 01:52:36.712 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42116 10 6452 1 2025-08-01 01:53:37.102 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39698 10 6452 1 2025-08-01 01:54:37.509 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55852 10 6452 1 2025-08-01 01:50:05.694 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 01:55:37.909 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38056 10 6452 1 2025-08-01 01:51:05.694 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 01:56:30.635 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 01:56:30.627 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 01:56:30.574 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:56:30.549 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 01:56:30.631 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 01:56:38.313 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59496 10 6452 1 2025-08-01 01:57:38.680 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:36960 10 6452 1 2025-08-01 01:58:39.098 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:50568 10 6452 1 Summary: total flows: 138, total bytes: 417986, total packets: 1037, avg bps: 860, avg pps: 0, avg bpp: 403 Time window: 2025-08-01 00:54:05 - 2025-08-01 01:58:49 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0023s User: 0.0023s Wall: 0.0060s flows/second: 23150.7 Runtime: 0.0060s