Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 08:54:06.370 00:06:00.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 08:59:11.177 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:33656 10 6452 1 2025-08-02 08:55:06.365 00:06:00.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 09:00:11.567 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52734 10 6452 1 2025-08-02 09:01:11.979 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60180 10 6452 1 2025-08-02 09:02:08.635 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 09:02:08.553 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:02:08.499 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 09:02:08.416 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 09:02:08.235 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:02:12.352 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54554 10 6452 1 2025-08-02 09:03:12.714 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:40116 10 6452 1 2025-08-02 09:04:13.119 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36636 10 6452 1 2025-08-02 09:05:13.522 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57790 10 6452 1 2025-08-02 09:01:06.369 00:06:00.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 09:06:13.922 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:57642 10 6452 1 2025-08-02 09:07:07.934 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 09:02:06.367 00:06:00.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 09:07:08.142 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 09:07:07.874 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:07:08.223 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:07:08.306 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 09:07:14.352 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52740 10 6452 1 2025-08-02 09:08:14.725 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33424 10 6452 1 2025-08-02 09:09:15.134 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57130 10 6452 1 2025-08-02 09:10:15.539 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:53168 10 6452 1 2025-08-02 09:11:15.896 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38234 10 6452 1 2025-08-02 09:12:08.257 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 09:12:08.151 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 09:12:08.066 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 09:12:08.205 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:12:08.174 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:12:16.308 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52204 10 6452 1 2025-08-02 09:08:06.370 00:06:00.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 09:13:16.707 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37214 10 6452 1 2025-08-02 09:09:06.368 00:06:00.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 09:14:17.110 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45170 10 6452 1 2025-08-02 09:15:17.517 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40630 10 6452 1 2025-08-02 09:16:17.917 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37580 10 6452 1 2025-08-02 09:17:08.528 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 09:17:08.576 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 09:17:08.472 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 09:17:08.341 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:17:08.445 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:17:18.279 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37798 10 6452 1 2025-08-02 09:18:18.649 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46488 10 6452 1 2025-08-02 09:19:19.064 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56812 10 6452 1 2025-08-02 09:15:06.372 00:06:00.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 09:20:19.461 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37148 10 6452 1 2025-08-02 09:16:06.369 00:06:00.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 09:21:19.866 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38042 10 6452 1 2025-08-02 09:22:08.649 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 09:22:08.411 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 09:22:08.221 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 09:22:08.475 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:22:08.568 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:22:20.274 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54310 10 6452 1 2025-08-02 09:23:20.683 00:00:10.465 TCP 1.101.0.1:3000 -> 23.104.0.1:50524 12 10367 1 2025-08-02 09:24:21.185 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:51792 10 6452 1 2025-08-02 09:25:21.559 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51704 10 6452 1 2025-08-02 09:26:21.964 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44348 10 6452 1 2025-08-02 09:27:08.552 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 09:22:06.375 00:06:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 09:27:08.563 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 09:27:08.480 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 09:27:08.539 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:27:08.468 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:27:22.379 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41404 10 6452 1 2025-08-02 09:23:06.372 00:06:00.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 09:28:22.781 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:55420 10 6452 1 2025-08-02 09:29:23.211 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:43614 10 6452 1 2025-08-02 09:30:23.585 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41682 10 6452 1 2025-08-02 09:31:23.996 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49190 10 6452 1 2025-08-02 09:32:08.764 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 09:32:08.683 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 09:32:08.563 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 09:32:08.660 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:32:08.683 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:32:24.410 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53900 10 6452 1 2025-08-02 09:33:24.814 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34218 10 6452 1 2025-08-02 09:29:06.377 00:06:00.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 09:34:25.235 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59592 10 6452 1 2025-08-02 09:30:06.374 00:06:00.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 09:35:25.645 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44386 10 6452 1 2025-08-02 09:36:26.063 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54916 10 6452 1 2025-08-02 09:37:09.916 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 09:37:10.018 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 09:37:10.016 00:00:00.049 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:37:10.045 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:37:10.127 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 09:37:26.465 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33964 10 6452 1 2025-08-02 09:38:26.876 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56302 10 6452 1 2025-08-02 09:39:27.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53186 10 6452 1 2025-08-02 09:40:27.682 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34666 10 6452 1 2025-08-02 09:36:06.378 00:06:00.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 09:41:28.109 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41054 10 6452 1 2025-08-02 09:42:08.914 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 09:42:08.884 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 09:37:06.374 00:06:00.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 09:42:08.835 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 09:42:08.795 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:42:08.831 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:42:28.471 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37258 10 6452 1 2025-08-02 09:43:28.874 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60722 10 6452 1 2025-08-02 09:44:29.286 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48560 10 6452 1 2025-08-02 09:45:29.687 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42268 10 6452 1 2025-08-02 09:46:30.109 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35060 10 6452 1 2025-08-02 09:47:08.876 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 09:47:08.790 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 09:47:08.996 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:47:08.770 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:47:08.852 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 09:47:30.472 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48612 10 6452 1 2025-08-02 09:43:06.378 00:06:00.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 09:48:30.883 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59772 10 6452 1 2025-08-02 09:44:06.376 00:06:00.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 09:49:31.287 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43580 10 6452 1 2025-08-02 09:50:31.644 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32782 10 6452 1 2025-08-02 09:51:32.059 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37412 10 6452 1 2025-08-02 09:52:09.111 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 09:52:09.043 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 09:52:09.089 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:52:08.943 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:52:09.026 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 09:52:32.458 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40702 10 6452 1 2025-08-02 09:53:32.860 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40972 10 6452 1 2025-08-02 09:54:33.274 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:39304 10 6452 1 2025-08-02 09:50:06.380 00:06:00.171 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 09:55:33.704 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47562 10 6452 1 2025-08-02 09:51:06.377 00:06:00.177 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 09:56:34.114 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60800 10 6452 1 2025-08-02 09:57:08.936 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 09:57:09.171 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 09:57:09.050 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:57:08.927 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 09:57:09.011 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 09:57:34.526 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:33922 11 6504 1 2025-08-02 09:58:35.005 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53060 10 6452 1 Summary: total flows: 138, total bytes: 421705, total packets: 1035, avg bps: 869, avg pps: 0, avg bpp: 407 Time window: 2025-08-02 08:54:06 - 2025-08-02 09:58:45 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0049s User: 0.0010s Wall: 0.0029s flows/second: 47111.7 Runtime: 0.0030s