Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 06:54:10.138 00:06:00.204 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 06:59:28.998 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50066 10 6452 1 2025-08-09 06:55:10.135 00:06:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 07:00:28.116 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 07:00:27.708 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 07:00:27.640 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:00:27.894 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:00:27.977 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 07:00:29.373 00:00:10.527 TCP 1.101.0.1:3000 -> 23.104.0.1:59608 10 6452 1 2025-08-09 07:01:29.944 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:42114 10 6452 1 2025-08-09 07:02:30.319 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47092 10 6452 1 2025-08-09 07:03:30.730 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54330 10 6452 1 2025-08-09 07:04:31.143 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39000 10 6452 1 2025-08-09 07:05:28.076 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 07:05:27.991 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 07:05:28.002 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 07:05:27.692 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:05:27.993 00:00:00.042 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:05:31.548 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52274 10 6452 1 2025-08-09 07:01:10.139 00:06:00.203 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 07:06:31.951 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42366 10 6452 1 2025-08-09 07:02:10.136 00:06:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 07:07:32.362 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44782 10 6452 1 2025-08-09 07:08:32.772 00:00:10.457 TCP 1.101.0.1:3000 -> 23.104.0.1:52702 12 10365 1 2025-08-09 07:09:33.265 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49668 10 6452 1 2025-08-09 07:10:28.312 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 07:10:28.227 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 07:10:28.226 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 07:10:27.793 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:10:28.230 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:10:33.629 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55572 10 6452 1 2025-08-09 07:11:34.057 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:44314 10 6452 1 2025-08-09 07:12:34.415 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:32996 10 6452 1 2025-08-09 07:08:10.141 00:06:00.204 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 07:13:34.831 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:53342 10 6452 1 2025-08-09 07:09:10.139 00:06:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 07:14:35.214 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57920 10 6452 1 2025-08-09 07:15:28.124 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 07:15:28.306 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 07:15:28.077 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:15:28.284 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:15:28.365 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 07:15:35.591 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49194 10 6452 1 2025-08-09 07:16:35.997 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60854 10 6452 1 2025-08-09 07:17:36.418 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50532 10 6452 1 2025-08-09 07:18:36.784 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40102 10 6452 1 2025-08-09 07:19:37.199 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55140 10 6452 1 2025-08-09 07:15:10.142 00:06:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 07:20:28.300 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 07:20:28.132 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 07:20:28.160 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:20:28.647 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:20:28.730 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 07:20:37.612 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41260 10 6452 1 2025-08-09 07:16:10.139 00:06:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 07:21:37.970 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45646 10 6452 1 2025-08-09 07:22:38.337 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55672 10 6452 1 2025-08-09 07:23:38.696 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44760 10 6452 1 2025-08-09 07:24:39.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37966 10 6452 1 2025-08-09 07:25:28.373 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 07:25:28.215 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 07:25:28.236 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:25:28.313 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:25:28.397 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 07:25:39.513 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36260 10 6452 1 2025-08-09 07:26:39.919 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:48460 10 6452 1 2025-08-09 07:22:10.150 00:06:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 07:27:40.336 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45764 10 6452 1 2025-08-09 07:23:10.148 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 07:28:40.741 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47358 10 6452 1 2025-08-09 07:29:41.114 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46392 10 6452 1 2025-08-09 07:30:28.721 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 07:30:28.638 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:30:28.355 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 07:30:28.570 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 07:30:28.649 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:30:41.519 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43714 10 6452 1 2025-08-09 07:31:41.886 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:42274 10 6452 1 2025-08-09 07:32:42.273 00:00:11.222 TCP 1.101.0.1:3000 -> 23.104.0.1:57264 10 6452 1 2025-08-09 07:33:43.523 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57952 10 6452 1 2025-08-09 07:29:10.151 00:06:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 07:34:43.925 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:52024 10 6452 1 2025-08-09 07:30:10.150 00:06:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 07:35:28.609 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 07:35:28.670 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 07:35:28.522 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 07:35:28.471 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:35:28.526 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:35:44.310 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44968 10 6452 1 2025-08-09 07:36:44.709 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51640 10 6452 1 2025-08-09 07:37:45.118 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55302 10 6452 1 2025-08-09 07:38:45.519 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41926 10 6452 1 2025-08-09 07:39:45.919 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33218 10 6452 1 2025-08-09 07:40:28.669 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 07:40:28.872 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 07:40:28.373 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:40:28.773 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:40:28.855 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 07:40:46.332 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56658 10 6452 1 2025-08-09 07:36:10.153 00:06:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 07:41:46.694 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43838 10 6452 1 2025-08-09 07:37:10.151 00:06:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 07:42:47.066 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46936 10 6452 1 2025-08-09 07:43:47.478 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40798 10 6452 1 2025-08-09 07:44:47.874 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48686 10 6452 1 2025-08-09 07:45:29.053 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 07:45:28.723 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 07:45:28.798 00:00:00.020 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 07:45:28.467 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:45:28.970 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:45:48.289 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43990 10 6452 1 2025-08-09 07:46:48.691 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39412 10 6452 1 2025-08-09 07:47:49.114 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51128 10 6452 1 2025-08-09 07:43:10.160 00:06:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 07:48:49.542 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50098 10 6452 1 2025-08-09 07:44:10.156 00:06:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 07:49:49.950 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:58380 10 6452 1 2025-08-09 07:50:28.814 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 07:50:28.818 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 07:50:28.821 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 07:50:28.913 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:50:28.734 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:50:50.332 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49694 10 6452 1 2025-08-09 07:51:50.733 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34908 10 6452 1 2025-08-09 07:52:51.143 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48808 10 6452 1 2025-08-09 07:53:51.542 00:00:10.556 TCP 1.101.0.1:3000 -> 23.104.0.1:49374 10 6452 1 2025-08-09 07:54:52.135 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52034 10 6452 1 2025-08-09 07:50:10.162 00:06:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 07:55:28.883 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 07:55:29.010 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 07:55:29.161 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 07:55:29.045 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:55:28.799 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 07:55:52.535 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44002 10 6452 1 2025-08-09 07:51:10.159 00:06:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 07:56:52.940 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:38260 10 6452 1 2025-08-09 07:57:53.320 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40276 10 6452 1 Summary: total flows: 137, total bytes: 415199, total packets: 1024, avg bps: 866, avg pps: 0, avg bpp: 405 Time window: 2025-08-09 06:54:10 - 2025-08-09 07:58:03 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0040s User: 0.0010s Wall: 0.0023s flows/second: 58953.5 Runtime: 0.0023s