Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-23 01:54:01.064 00:06:00.495 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 01:58:51.110 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50944 10 6438 1 2025-07-23 01:59:51.518 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53446 10 6438 1 2025-07-23 02:00:51.921 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43052 10 6438 1 2025-07-23 02:01:52.294 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34042 10 6438 1 2025-07-23 02:02:10.718 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:02:10.728 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:02:10.566 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:02:10.634 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:02:10.802 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:02:52.694 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:55570 12 10352 1 2025-07-23 02:03:53.177 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58190 10 6438 1 2025-07-23 02:00:01.068 00:06:00.489 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:04:53.588 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50826 10 6438 1 2025-07-23 02:05:53.990 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36350 10 6438 1 2025-07-23 02:01:01.068 00:06:00.492 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:06:54.404 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37964 10 6438 1 2025-07-23 02:07:10.937 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:07:10.856 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:07:10.917 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:07:10.855 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:07:10.961 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:07:54.832 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:34930 12 10352 1 2025-07-23 02:08:55.312 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:43588 10 6438 1 2025-07-23 02:09:55.694 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38360 10 6438 1 2025-07-23 02:10:56.108 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35582 10 6438 1 2025-07-23 02:07:01.071 00:06:00.492 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:12:10.900 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:12:10.916 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:11:56.578 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52064 10 6438 1 2025-07-23 02:12:10.818 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:12:11.050 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:12:10.990 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:08:01.069 00:06:00.496 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:12:56.979 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48180 10 6438 1 2025-07-23 02:13:57.384 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42124 10 6438 1 2025-07-23 02:14:57.787 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43252 10 6438 1 2025-07-23 02:15:58.191 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60812 10 6438 1 2025-07-23 02:17:11.193 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:17:10.665 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:16:58.592 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58144 10 6438 1 2025-07-23 02:17:11.119 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:17:11.110 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:17:11.110 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:17:58.995 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34974 10 6438 1 2025-07-23 02:14:01.073 00:06:00.492 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:18:59.413 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53162 10 6438 1 2025-07-23 02:15:01.072 00:06:00.497 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:19:59.817 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37006 10 6438 1 2025-07-23 02:21:00.217 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60686 10 6438 1 2025-07-23 02:22:00.626 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49334 10 6438 1 2025-07-23 02:22:11.559 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:22:11.090 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:22:11.332 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:22:11.449 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:22:11.416 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:23:01.033 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:44842 12 10352 1 2025-07-23 02:24:01.509 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39956 10 6438 1 2025-07-23 02:25:01.868 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36694 10 6438 1 2025-07-23 02:21:01.075 00:06:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:26:02.284 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60452 10 6438 1 2025-07-23 02:22:01.073 00:06:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:27:11.281 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:27:02.698 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37878 10 6438 1 2025-07-23 02:27:11.168 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:27:11.213 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:27:11.226 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:27:11.297 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:28:03.109 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32996 10 6438 1 2025-07-23 02:29:03.510 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53282 10 6438 1 2025-07-23 02:30:03.920 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54516 10 6438 1 2025-07-23 02:31:04.328 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43628 10 6438 1 2025-07-23 02:32:11.348 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:32:11.617 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:32:11.043 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:32:11.267 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:32:11.367 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:32:04.736 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41476 10 6438 1 2025-07-23 02:28:01.075 00:06:00.494 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:33:05.111 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58110 10 6438 1 2025-07-23 02:29:01.073 00:06:00.499 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:34:05.507 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37348 10 6438 1 2025-07-23 02:35:05.909 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45618 10 6438 1 2025-07-23 02:36:06.273 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51392 10 6438 1 2025-07-23 02:37:11.399 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:37:11.424 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:37:11.535 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:37:11.543 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:37:11.617 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:37:06.676 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58742 10 6438 1 2025-07-23 02:38:07.106 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37664 10 6438 1 2025-07-23 02:39:07.467 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41136 10 6438 1 2025-07-23 02:35:01.078 00:06:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:40:07.874 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48488 10 6438 1 2025-07-23 02:36:01.075 00:06:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:41:08.279 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:48478 10 6438 1 2025-07-23 02:42:11.842 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:42:11.763 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:42:11.835 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:42:11.760 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:42:11.902 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:42:08.646 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43800 10 6438 1 2025-07-23 02:43:09.055 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53704 10 6438 1 2025-07-23 02:44:09.467 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38374 10 6438 1 2025-07-23 02:45:09.873 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34374 10 6438 1 2025-07-23 02:46:10.282 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55452 10 6438 1 2025-07-23 02:42:01.079 00:06:00.491 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:47:12.463 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:47:12.255 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:47:12.327 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:47:12.216 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:47:12.410 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:47:10.686 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34666 10 6438 1 2025-07-23 02:43:01.077 00:06:00.496 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:48:11.112 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:51254 12 10350 1 2025-07-23 02:49:11.590 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:56346 10 6438 1 2025-07-23 02:50:11.957 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49974 10 6438 1 2025-07-23 02:51:12.364 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44756 10 6438 1 2025-07-23 02:52:11.795 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:52:11.424 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:52:11.755 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:52:11.747 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:52:11.837 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:52:12.766 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:53658 10 6438 1 2025-07-23 02:53:13.145 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:41140 10 6438 1 2025-07-23 02:49:01.080 00:06:00.492 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-23 02:54:13.564 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35648 10 6438 1 2025-07-23 02:50:01.077 00:06:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-23 02:55:13.966 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58298 10 6438 1 2025-07-23 02:56:14.327 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34510 10 6438 1 2025-07-23 02:57:11.879 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-23 02:57:11.875 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-23 02:57:11.525 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:57:11.796 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-23 02:57:11.799 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-23 02:57:14.727 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59658 10 6438 1 2025-07-23 02:58:15.121 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59790 10 6438 1 Summary: total flows: 137, total bytes: 431691, total packets: 1026, avg bps: 893, avg pps: 0, avg bpp: 420 Time window: 2025-07-23 01:54:01 - 2025-07-23 02:58:25 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0029s User: 0.0010s Wall: 0.0019s flows/second: 71881.4 Runtime: 0.0019s