Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-05 00:54:07.726 00:06:00.067 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 00:59:37.136 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39706 10 6452 1 2025-08-05 01:00:37.506 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45324 10 6452 1 2025-08-05 01:01:37.909 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53038 10 6452 1 2025-08-05 01:02:38.309 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34942 10 6452 1 2025-08-05 01:03:24.773 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 01:03:24.826 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:03:24.981 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 01:03:25.128 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:03:25.211 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 01:03:38.712 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47570 10 6452 1 2025-08-05 00:59:07.728 00:06:00.066 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 01:04:39.117 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47650 10 6452 1 2025-08-05 01:05:39.524 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35050 10 6452 1 2025-08-05 01:01:07.726 00:06:00.072 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 01:06:39.925 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:58446 10 6452 1 2025-08-05 01:07:40.367 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52782 10 6452 1 2025-08-05 01:08:25.616 00:00:00.019 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 01:08:25.635 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 01:08:25.776 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:08:25.610 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:08:25.693 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 01:08:40.768 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42578 10 6452 1 2025-08-05 01:09:41.179 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39804 10 6452 1 2025-08-05 01:10:41.583 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46898 10 6452 1 2025-08-05 01:06:07.728 00:06:00.067 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 01:11:41.987 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45752 10 6452 1 2025-08-05 01:12:42.399 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32768 10 6452 1 2025-08-05 01:08:07.727 00:06:00.074 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 01:13:25.533 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 01:13:25.315 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 01:13:25.145 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 01:13:25.324 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:13:25.451 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:13:42.802 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:34706 10 6452 1 2025-08-05 01:14:43.182 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59512 10 6452 1 2025-08-05 01:15:43.546 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42822 10 6452 1 2025-08-05 01:16:43.904 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34656 12 6556 1 2025-08-05 01:17:44.315 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37148 10 6452 1 2025-08-05 01:13:07.730 00:06:00.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 01:18:25.474 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 01:18:25.352 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 01:18:25.404 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:18:25.352 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:18:25.435 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 01:18:44.718 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:56238 10 6452 1 2025-08-05 01:19:45.112 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54230 10 6452 1 2025-08-05 01:15:07.745 00:06:00.065 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 01:20:45.472 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49240 10 6452 1 2025-08-05 01:21:45.884 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53766 10 6452 1 2025-08-05 01:22:46.289 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46630 10 6452 1 2025-08-05 01:23:25.696 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 01:23:25.550 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 01:23:25.439 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 01:23:25.674 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:23:25.614 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:23:46.691 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52590 10 6452 1 2025-08-05 01:24:47.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36646 10 6452 1 2025-08-05 01:20:07.741 00:06:00.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 01:25:47.513 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52124 10 6452 1 2025-08-05 01:26:47.878 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41430 10 6452 1 2025-08-05 01:22:07.740 00:06:00.073 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 01:27:48.276 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56454 10 6452 1 2025-08-05 01:28:25.760 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 01:28:25.517 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 01:28:25.505 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 01:28:25.565 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:28:25.678 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:28:48.686 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49564 10 6452 1 2025-08-05 01:29:49.116 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:53010 10 6452 1 2025-08-05 01:30:49.500 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41302 10 6452 1 2025-08-05 01:31:49.903 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54440 10 6452 1 2025-08-05 01:27:07.748 00:06:00.064 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 01:32:50.270 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32800 10 6452 1 2025-08-05 01:33:25.668 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 01:33:25.582 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 01:33:25.668 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 01:33:25.615 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:33:25.585 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:33:50.672 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51766 10 6452 1 2025-08-05 01:29:07.745 00:06:00.069 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 01:34:51.031 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39230 10 6452 1 2025-08-05 01:35:51.437 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35920 12 6556 1 2025-08-05 01:36:51.836 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:40248 10 6452 1 2025-08-05 01:37:52.258 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37056 10 6452 1 2025-08-05 01:38:25.897 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 01:38:25.704 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 01:38:25.614 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 01:38:25.780 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:38:25.816 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:38:52.658 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48290 10 6452 1 2025-08-05 01:34:07.749 00:06:00.063 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 01:39:53.113 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43132 10 6452 1 2025-08-05 01:40:53.525 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37922 10 6452 1 2025-08-05 01:36:07.747 00:06:00.068 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 01:41:53.933 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:38876 10 6452 1 2025-08-05 01:42:54.321 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49750 10 6452 1 2025-08-05 01:43:25.795 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 01:43:25.713 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:43:25.992 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 01:43:25.954 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 01:43:26.013 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:43:54.730 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38994 10 6452 1 2025-08-05 01:44:55.141 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40314 10 6452 1 2025-08-05 01:41:07.752 00:06:00.063 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 01:45:55.520 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39802 10 6452 1 2025-08-05 01:46:55.948 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:59664 11 6504 1 2025-08-05 01:43:07.749 00:06:00.068 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 01:47:56.406 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43252 10 6452 1 2025-08-05 01:48:26.063 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 01:48:25.908 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 01:48:25.979 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 01:48:25.957 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:48:25.980 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:48:56.808 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53390 10 6452 1 2025-08-05 01:49:57.226 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55204 10 6452 1 2025-08-05 01:50:57.634 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59692 10 6452 1 2025-08-05 01:51:58.035 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33362 10 6452 1 2025-08-05 01:48:07.753 00:06:00.063 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 01:52:58.437 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47286 10 6452 1 2025-08-05 01:53:25.998 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 01:53:26.119 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 01:53:26.118 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 01:53:25.848 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:53:25.916 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:53:58.837 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:45710 10 6452 1 2025-08-05 01:50:07.752 00:06:00.067 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 01:54:59.268 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55672 10 6452 1 2025-08-05 01:55:59.687 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33920 10 6452 1 2025-08-05 01:57:00.116 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48836 10 6452 1 2025-08-05 01:58:00.520 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58280 10 6452 1 2025-08-05 01:58:26.425 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 01:58:26.338 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 01:58:26.521 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 01:58:26.356 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 01:58:26.342 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 136, total bytes: 410685, total packets: 1013, avg bps: 851, avg pps: 0, avg bpp: 405 Time window: 2025-08-05 00:54:07 - 2025-08-05 01:58:26 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0028s User: 0.0019s Wall: 0.0028s flows/second: 48419.1 Runtime: 0.0028s