Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-05 11:55:07.958 00:05:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 11:59:04.521 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:41238 12 10365 1 2025-08-05 11:56:07.958 00:05:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 12:00:04.995 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44080 10 6452 1 2025-08-05 12:01:05.362 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56152 10 6452 1 2025-08-05 12:02:05.727 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37882 10 6452 1 2025-08-05 12:03:06.115 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59852 10 6452 1 2025-08-05 12:03:38.313 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 12:03:38.320 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 12:03:38.081 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:03:38.180 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:03:38.262 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 12:04:06.519 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59972 10 6452 1 2025-08-05 12:01:07.960 00:05:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 12:05:06.924 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:43306 10 6452 1 2025-08-05 12:02:07.959 00:05:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 12:06:07.347 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51736 10 6452 1 2025-08-05 12:07:07.765 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:46606 10 6452 1 2025-08-05 12:08:08.183 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54850 10 6452 1 2025-08-05 12:08:38.650 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 12:08:38.640 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 12:08:38.649 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 12:08:38.610 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:08:38.569 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:09:08.586 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:60852 10 6452 1 2025-08-05 12:10:08.957 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44290 10 6452 1 2025-08-05 12:07:07.963 00:05:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 12:11:09.366 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50400 10 6452 1 2025-08-05 12:08:07.961 00:05:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 12:12:09.809 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:38444 10 6452 1 2025-08-05 12:13:10.197 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:58806 10 6452 1 2025-08-05 12:13:38.743 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 12:13:38.620 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 12:13:38.564 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 12:13:38.380 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:13:38.661 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:14:10.560 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46200 10 6452 1 2025-08-05 12:15:10.963 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58616 10 6452 1 2025-08-05 12:16:11.365 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60382 10 6452 1 2025-08-05 12:13:07.989 00:05:00.114 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 12:17:11.767 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:57738 10 6452 1 2025-08-05 12:14:07.988 00:05:00.119 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 12:18:12.134 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45330 10 6452 1 2025-08-05 12:18:38.646 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 12:18:38.775 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 12:18:38.826 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 12:18:38.333 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:18:38.564 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:19:12.498 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:57096 10 6452 1 2025-08-05 12:20:12.994 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:56928 11 6504 1 2025-08-05 12:21:13.459 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57022 10 6452 1 2025-08-05 12:22:13.861 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48910 10 6452 1 2025-08-05 12:19:07.991 00:05:00.114 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 12:23:14.282 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48924 10 6452 1 2025-08-05 12:23:38.773 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 12:23:38.681 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 12:23:38.807 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 12:23:38.825 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:23:38.690 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:20:07.989 00:05:00.118 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 12:24:14.704 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42528 10 6452 1 2025-08-05 12:25:15.096 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42590 10 6452 1 2025-08-05 12:26:15.507 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51648 10 6452 1 2025-08-05 12:27:15.906 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49862 10 6452 1 2025-08-05 12:28:16.270 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45026 10 6452 1 2025-08-05 12:28:38.770 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 12:28:38.679 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 12:28:38.618 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:28:38.887 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:28:38.981 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 12:25:07.992 00:05:00.114 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 12:29:16.636 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57670 10 6452 1 2025-08-05 12:26:07.990 00:05:00.120 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 12:30:17.050 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33196 10 6452 1 2025-08-05 12:31:17.415 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:50858 11 6504 1 2025-08-05 12:32:17.886 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:45236 10 6452 1 2025-08-05 12:33:18.313 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47408 10 6452 1 2025-08-05 12:33:38.996 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 12:33:38.997 00:00:00.048 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 12:33:38.663 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:33:38.936 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:33:39.020 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 12:34:18.677 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:33758 12 10365 1 2025-08-05 12:31:07.995 00:05:00.113 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 12:35:19.154 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44884 10 6452 1 2025-08-05 12:32:07.990 00:05:00.119 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 12:36:19.563 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35674 10 6452 1 2025-08-05 12:37:19.969 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50222 10 6452 1 2025-08-05 12:38:39.086 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 12:38:20.411 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57932 10 6452 1 2025-08-05 12:38:39.004 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 12:38:39.063 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 12:38:39.092 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:38:39.004 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:39:20.817 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58390 10 6452 1 2025-08-05 12:40:21.221 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36702 10 6452 1 2025-08-05 12:37:07.994 00:05:00.115 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 12:41:21.625 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43024 10 6452 1 2025-08-05 12:38:07.993 00:05:00.121 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 12:42:22.034 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:36124 10 6452 1 2025-08-05 12:43:22.406 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47302 10 6452 1 2025-08-05 12:43:39.157 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 12:43:39.077 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 12:43:39.140 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 12:43:38.962 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:43:39.074 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:44:22.821 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37364 10 6452 1 2025-08-05 12:45:23.231 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57610 10 6452 1 2025-08-05 12:46:23.588 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51928 10 6452 1 2025-08-05 12:43:07.996 00:05:00.116 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-05 12:47:23.944 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51768 10 6452 1 2025-08-05 12:44:07.993 00:05:00.121 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-05 12:48:39.337 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 12:48:24.355 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55546 10 6452 1 2025-08-05 12:48:39.195 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 12:48:39.248 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 12:48:38.824 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:48:39.255 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:49:24.758 00:00:10.549 TCP 1.101.0.1:3000 -> 23.104.0.1:59924 10 6452 1 2025-08-05 12:50:25.353 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46468 10 6452 1 2025-08-05 12:51:25.720 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:44798 10 6452 1 2025-08-05 12:52:26.114 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58068 10 6452 1 2025-08-05 12:53:39.433 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 12:53:39.433 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 12:53:39.320 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:53:26.511 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40152 10 6452 1 2025-08-05 12:53:39.283 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:53:39.367 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 12:49:08.003 00:06:00.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-05 12:54:26.917 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39422 10 6452 1 2025-08-05 12:50:08.000 00:06:00.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-05 12:55:27.289 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42492 10 6452 1 2025-08-05 12:56:27.693 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49860 10 6452 1 2025-08-05 12:57:28.070 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46204 10 6452 1 2025-08-05 12:58:39.499 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-05 12:58:39.424 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-05 12:58:28.474 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37348 10 6452 1 2025-08-05 12:58:39.346 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-05 12:58:39.491 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-05 12:58:39.417 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 140, total bytes: 425176, total packets: 1030, avg bps: 892, avg pps: 0, avg bpp: 412 Time window: 2025-08-05 11:55:07 - 2025-08-05 12:58:39 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0030s User: 0.0010s Wall: 0.0023s flows/second: 61487.2 Runtime: 0.0023s