Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 20:54:06.615 00:06:00.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 20:59:02.227 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54374 10 6452 1 2025-08-02 21:00:02.596 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58970 10 6452 1 2025-08-02 21:01:03.003 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44932 10 6452 1 2025-08-02 21:02:03.401 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57508 10 6452 1 2025-08-02 21:02:22.686 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 21:02:22.447 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 21:02:22.452 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:02:22.602 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:02:22.504 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 21:03:03.809 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43274 10 6452 1 2025-08-02 21:04:04.215 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:33814 12 10367 1 2025-08-02 21:00:06.614 00:06:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 21:05:04.695 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55218 10 6452 1 2025-08-02 21:01:06.617 00:06:00.162 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 21:06:05.113 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50472 10 6452 1 2025-08-02 21:07:05.486 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53864 10 6452 1 2025-08-02 21:07:22.719 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 21:07:22.633 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 21:07:22.493 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:07:22.636 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:07:22.700 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 21:08:05.894 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38148 10 6452 1 2025-08-02 21:09:06.293 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51660 10 6452 1 2025-08-02 21:10:06.696 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46696 10 6452 1 2025-08-02 21:11:07.115 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59962 10 6452 1 2025-08-02 21:07:06.616 00:06:00.165 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 21:12:07.518 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48848 10 6452 1 2025-08-02 21:12:23.626 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 21:12:23.229 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 21:12:23.458 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:12:23.543 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:12:23.474 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 21:08:06.619 00:06:00.160 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 21:13:07.942 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:50608 10 6452 1 2025-08-02 21:14:08.364 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56386 10 6452 1 2025-08-02 21:15:08.787 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43194 10 6452 1 2025-08-02 21:16:09.200 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38606 10 6452 1 2025-08-02 21:17:23.071 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 21:17:09.560 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46660 10 6452 1 2025-08-02 21:17:23.084 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 21:17:22.844 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:17:22.987 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:17:23.132 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 21:18:09.919 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44452 10 6452 1 2025-08-02 21:14:06.616 00:06:00.165 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 21:19:10.316 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47698 10 6452 1 2025-08-02 21:15:06.620 00:06:00.160 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 21:20:10.683 00:00:10.536 TCP 1.101.0.1:3000 -> 23.104.0.1:33508 10 6452 1 2025-08-02 21:21:11.257 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58350 10 6452 1 2025-08-02 21:22:22.913 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 21:22:22.933 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 21:22:22.665 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:22:11.664 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48230 10 6452 1 2025-08-02 21:22:22.831 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:22:22.834 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 21:23:12.084 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49896 10 6452 1 2025-08-02 21:24:12.484 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42624 10 6452 1 2025-08-02 21:25:12.889 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:43158 12 6556 1 2025-08-02 21:21:06.620 00:06:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 21:26:13.315 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46216 10 6452 1 2025-08-02 21:22:06.622 00:06:00.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 21:27:22.860 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 21:27:22.722 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:27:22.779 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:27:23.229 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 21:27:23.003 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 21:27:13.739 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50516 10 6452 1 2025-08-02 21:28:14.148 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58244 10 6452 1 2025-08-02 21:29:14.548 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56004 10 6452 1 2025-08-02 21:30:14.915 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47662 10 6452 1 2025-08-02 21:31:15.319 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54390 10 6452 1 2025-08-02 21:32:23.254 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 21:32:23.099 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:32:23.256 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:32:23.262 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 21:32:23.339 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 21:32:15.728 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40804 10 6452 1 2025-08-02 21:28:06.621 00:06:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 21:33:16.131 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35444 10 6452 1 2025-08-02 21:29:06.622 00:06:00.160 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 21:34:16.541 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34654 10 6452 1 2025-08-02 21:35:16.950 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44114 10 6452 1 2025-08-02 21:36:17.364 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48688 10 6452 1 2025-08-02 21:37:23.124 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 21:37:23.252 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:37:23.228 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:37:23.237 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 21:37:23.312 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 21:37:17.764 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38500 10 6452 1 2025-08-02 21:38:18.175 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43946 10 6452 1 2025-08-02 21:39:18.580 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57014 10 6452 1 2025-08-02 21:35:06.624 00:06:00.165 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 21:40:18.978 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35188 10 6452 1 2025-08-02 21:36:06.626 00:06:00.160 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 21:41:19.385 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49574 10 6452 1 2025-08-02 21:42:23.368 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 21:42:23.065 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:42:23.241 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:42:23.221 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 21:42:23.323 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 21:42:19.793 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41896 10 6452 1 2025-08-02 21:43:20.201 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52090 10 6452 1 2025-08-02 21:44:20.601 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43866 10 6452 1 2025-08-02 21:45:21.007 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51190 10 6452 1 2025-08-02 21:46:21.414 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44910 10 6452 1 2025-08-02 21:42:06.626 00:06:00.165 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 21:47:23.599 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 21:47:23.587 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:47:23.341 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:47:23.592 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 21:47:23.427 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 21:47:21.818 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60702 10 6452 1 2025-08-02 21:43:06.628 00:06:00.160 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 21:48:22.223 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33678 10 6452 1 2025-08-02 21:49:22.627 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36374 10 6452 1 2025-08-02 21:50:23.037 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54828 10 6452 1 2025-08-02 21:51:23.444 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57204 10 6452 1 2025-08-02 21:52:23.558 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 21:52:23.566 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:52:23.426 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:52:23.413 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 21:52:23.509 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 21:52:23.846 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:46796 10 6452 1 2025-08-02 21:53:24.274 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37270 10 6452 1 2025-08-02 21:49:06.628 00:06:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 21:54:24.687 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43470 10 6452 1 2025-08-02 21:50:06.632 00:06:00.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 21:55:25.123 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:56846 10 6452 1 2025-08-02 21:56:25.541 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49462 10 6452 1 2025-08-02 21:57:23.619 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 21:57:23.563 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:57:23.555 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 21:57:23.680 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 21:57:23.638 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 21:57:25.946 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:43960 10 6452 1 2025-08-02 21:58:26.379 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48190 10 6452 1 Summary: total flows: 137, total bytes: 420896, total packets: 1022, avg bps: 870, avg pps: 0, avg bpp: 411 Time window: 2025-08-02 20:54:06 - 2025-08-02 21:58:36 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0032s User: 0.0011s Wall: 0.0021s flows/second: 63839.5 Runtime: 0.0022s