Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 02:54:05.720 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 02:59:03.389 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57632 10 6452 1 2025-08-01 03:00:03.790 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49510 10 6452 1 2025-08-01 03:01:04.153 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60940 10 6452 1 2025-08-01 03:01:32.356 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 03:01:32.203 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 03:01:32.364 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 03:01:32.221 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:01:32.273 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:02:04.516 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38196 10 6452 1 2025-08-01 03:03:04.931 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:52030 10 6452 1 2025-08-01 03:04:05.319 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:49788 10 6452 1 2025-08-01 03:00:05.724 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 03:05:05.686 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32840 10 6452 1 2025-08-01 03:01:05.722 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 03:06:06.110 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38960 10 6452 1 2025-08-01 03:06:32.425 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 03:06:32.242 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 03:06:32.191 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 03:06:32.260 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:06:32.343 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:07:06.478 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33902 10 6452 1 2025-08-01 03:08:06.879 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55992 10 6452 1 2025-08-01 03:09:07.238 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41580 10 6452 1 2025-08-01 03:10:07.638 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59206 10 6452 1 2025-08-01 03:11:08.055 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42182 10 6452 1 2025-08-01 03:11:32.292 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 03:11:32.086 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 03:11:32.105 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:11:31.951 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:11:32.034 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 03:07:05.725 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 03:12:08.470 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48458 10 6452 1 2025-08-01 03:08:05.722 00:06:00.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 03:13:08.865 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51926 10 6452 1 2025-08-01 03:14:09.268 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35480 10 6452 1 2025-08-01 03:15:09.673 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48858 10 6452 1 2025-08-01 03:16:10.109 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49024 10 6452 1 2025-08-01 03:16:32.446 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 03:16:32.174 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 03:16:32.315 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 03:16:32.113 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:16:32.365 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:17:10.515 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37914 10 6452 1 2025-08-01 03:18:10.919 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58042 10 6452 1 2025-08-01 03:14:05.727 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 03:19:11.317 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32846 10 6452 1 2025-08-01 03:15:05.727 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 03:20:11.720 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38252 10 6452 1 2025-08-01 03:21:12.118 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45022 10 6452 1 2025-08-01 03:21:32.681 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 03:21:32.743 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 03:21:32.219 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:21:32.576 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:21:32.659 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 03:22:12.519 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42222 10 6452 1 2025-08-01 03:23:12.927 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:42254 10 6452 1 2025-08-01 03:24:13.348 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37164 10 6452 1 2025-08-01 03:25:13.745 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37172 10 6452 1 2025-08-01 03:21:05.731 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 03:26:14.153 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41142 10 6452 1 2025-08-01 03:26:32.449 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 03:26:32.363 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 03:26:32.367 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 03:26:32.229 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:26:32.366 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:22:05.728 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 03:27:14.552 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45922 10 6452 1 2025-08-01 03:28:14.918 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46174 10 6452 1 2025-08-01 03:29:15.330 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33470 10 6452 1 2025-08-01 03:30:15.692 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56404 10 6452 1 2025-08-01 03:31:32.685 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 03:31:16.116 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45754 10 6452 1 2025-08-01 03:31:32.685 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 03:31:32.526 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 03:31:32.558 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:31:32.602 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:32:16.531 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41956 10 6452 1 2025-08-01 03:28:05.736 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 03:33:16.948 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36804 10 6452 1 2025-08-01 03:29:05.732 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 03:34:17.367 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57258 10 6452 1 2025-08-01 03:35:17.766 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:56424 10 6452 1 2025-08-01 03:36:18.141 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42430 10 6452 1 2025-08-01 03:36:32.768 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 03:36:32.714 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 03:36:32.515 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:36:32.771 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:36:32.854 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 03:37:18.546 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46606 10 6452 1 2025-08-01 03:38:18.954 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:45326 12 10367 1 2025-08-01 03:39:19.430 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36690 10 6452 1 2025-08-01 03:35:05.735 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 03:40:19.834 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:40178 10 6452 1 2025-08-01 03:36:05.734 00:06:00.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 03:41:32.760 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 03:41:32.678 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 03:41:32.850 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 03:41:32.715 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:41:32.677 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:41:20.225 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47246 10 6452 1 2025-08-01 03:42:20.632 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37962 10 6452 1 2025-08-01 03:43:21.038 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51006 10 6452 1 2025-08-01 03:44:21.464 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56352 10 6452 1 2025-08-01 03:45:21.869 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56716 10 6452 1 2025-08-01 03:46:32.932 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 03:46:32.926 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 03:46:32.965 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 03:46:32.807 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:46:22.279 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58370 10 6452 1 2025-08-01 03:46:32.849 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:42:05.738 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 03:47:22.681 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42010 10 6452 1 2025-08-01 03:43:05.736 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 03:48:23.135 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:44316 12 10367 1 2025-08-01 03:49:23.612 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52294 10 6452 1 2025-08-01 03:50:24.018 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52434 10 6452 1 2025-08-01 03:51:33.053 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 03:51:33.040 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 03:51:33.099 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:51:24.415 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52698 10 6452 1 2025-08-01 03:51:32.951 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:51:33.034 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 03:52:24.817 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:37290 10 6452 1 2025-08-01 03:53:25.213 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44974 10 6452 1 2025-08-01 03:49:05.740 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 03:54:25.615 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56378 10 6452 1 2025-08-01 03:50:05.738 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 03:55:26.014 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48326 10 6452 1 2025-08-01 03:56:33.348 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 03:56:33.271 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 03:56:32.892 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 03:56:32.699 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:56:33.265 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 03:56:26.417 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46068 10 6452 1 2025-08-01 03:57:26.826 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54326 10 6452 1 2025-08-01 03:58:27.222 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:57314 12 10367 1 Summary: total flows: 137, total bytes: 428622, total packets: 1024, avg bps: 885, avg pps: 0, avg bpp: 418 Time window: 2025-08-01 02:54:05 - 2025-08-01 03:58:37 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0020s User: 0.0020s Wall: 0.0020s flows/second: 67889.8 Runtime: 0.0020s