Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 00:54:06.697 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 00:59:39.882 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:56326 12 6556 1 2025-08-03 01:00:40.306 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50176 10 6452 1 2025-08-03 01:01:40.713 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39828 10 6452 1 2025-08-03 01:02:27.444 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 01:02:27.241 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 01:02:27.221 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 01:02:27.332 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:02:27.360 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:02:41.117 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38702 10 6452 1 2025-08-03 01:03:41.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52030 12 6556 1 2025-08-03 01:04:41.921 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:39672 10 6452 1 2025-08-03 01:00:06.701 00:06:00.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 01:05:42.328 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33122 10 6452 1 2025-08-03 01:01:06.698 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 01:06:42.693 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38368 10 6452 1 2025-08-03 01:07:27.445 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 01:07:27.364 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 01:07:27.501 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 01:07:27.286 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:07:27.361 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:07:43.059 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:39262 10 6452 1 2025-08-03 01:08:43.479 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:59154 10 6452 1 2025-08-03 01:09:43.843 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:52534 10 6452 1 2025-08-03 01:10:44.228 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58874 10 6452 1 2025-08-03 01:11:44.626 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53956 10 6452 1 2025-08-03 01:07:06.702 00:06:00.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 01:12:27.651 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 01:12:27.652 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 01:12:27.480 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 01:12:27.413 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:12:27.568 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:12:45.031 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49372 12 6556 1 2025-08-03 01:08:06.700 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 01:13:45.441 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60416 10 6452 1 2025-08-03 01:14:45.848 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:46762 10 6452 1 2025-08-03 01:15:46.297 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37218 10 6452 1 2025-08-03 01:16:46.701 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54208 10 6452 1 2025-08-03 01:17:27.707 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 01:17:27.660 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 01:17:27.619 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 01:17:27.493 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:17:27.623 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:17:47.113 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33420 10 6452 1 2025-08-03 01:18:47.513 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48524 10 6452 1 2025-08-03 01:14:06.704 00:06:00.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 01:19:47.922 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32940 10 6452 1 2025-08-03 01:15:06.701 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 01:20:48.337 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:53970 10 6452 1 2025-08-03 01:21:48.707 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57030 10 6452 1 2025-08-03 01:22:27.919 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 01:22:27.837 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 01:22:27.771 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 01:22:27.693 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:22:27.837 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:22:49.120 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49768 10 6452 1 2025-08-03 01:23:49.525 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46752 10 6452 1 2025-08-03 01:24:49.929 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:50536 10 6452 1 2025-08-03 01:25:50.320 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51110 10 6452 1 2025-08-03 01:21:06.706 00:06:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 01:26:50.743 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52574 10 6452 1 2025-08-03 01:22:06.703 00:06:00.158 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 01:27:27.990 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 01:27:28.168 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 01:27:28.118 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 01:27:27.967 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:27:27.909 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:27:51.150 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41938 10 6452 1 2025-08-03 01:28:51.555 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56406 10 6452 1 2025-08-03 01:29:51.961 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40296 10 6452 1 2025-08-03 01:30:52.366 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42466 10 6452 1 2025-08-03 01:31:52.724 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45510 10 6452 1 2025-08-03 01:32:28.004 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 01:32:27.915 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 01:32:27.856 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 01:32:27.713 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:32:27.920 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:32:53.142 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54280 10 6452 1 2025-08-03 01:28:06.707 00:06:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 01:33:53.548 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60594 10 6452 1 2025-08-03 01:29:06.706 00:06:00.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 01:34:53.946 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:55190 10 6452 1 2025-08-03 01:35:54.363 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49018 10 6452 1 2025-08-03 01:36:54.763 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56184 10 6452 1 2025-08-03 01:37:28.134 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 01:37:27.908 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 01:37:28.050 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 01:37:27.748 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:37:28.051 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:37:55.185 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58960 10 6452 1 2025-08-03 01:38:55.585 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34306 10 6452 1 2025-08-03 01:39:55.994 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:39990 10 6452 1 2025-08-03 01:35:06.710 00:06:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 01:36:06.707 00:06:00.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 01:40:56.463 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55744 10 6452 1 2025-08-03 01:41:56.823 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42142 10 6452 1 2025-08-03 01:42:28.161 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 01:42:28.168 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 01:42:28.131 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:42:28.006 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:42:28.090 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 01:42:57.187 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46074 10 6452 1 2025-08-03 01:43:57.594 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42044 10 6452 1 2025-08-03 01:44:58.003 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40960 10 6452 1 2025-08-03 01:45:58.368 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60060 10 6452 1 2025-08-03 01:42:06.709 00:06:00.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 01:46:58.766 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56194 10 6452 1 2025-08-03 01:47:28.234 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 01:47:28.252 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 01:47:28.198 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 01:47:28.043 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:47:28.151 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:43:06.707 00:06:00.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 01:47:59.169 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49400 10 6452 1 2025-08-03 01:48:59.572 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40956 10 6452 1 2025-08-03 01:49:59.974 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34386 10 6452 1 2025-08-03 01:51:00.387 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33882 10 6452 1 2025-08-03 01:52:00.790 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45782 10 6452 1 2025-08-03 01:52:28.208 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 01:52:28.207 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 01:52:28.137 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:52:28.212 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:52:28.296 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 01:53:01.197 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:46256 10 6452 1 2025-08-03 01:49:06.711 00:06:00.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 01:54:01.591 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:47872 11 6504 1 2025-08-03 01:50:06.709 00:06:00.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 01:55:02.059 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53816 10 6452 1 2025-08-03 01:56:02.458 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49974 10 6452 1 2025-08-03 01:57:02.815 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38894 10 6452 1 2025-08-03 01:57:28.816 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:57:28.907 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 01:57:28.820 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 01:57:28.568 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 01:57:28.900 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 01:58:03.214 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58520 10 6452 1 Summary: total flows: 136, total bytes: 410789, total packets: 1015, avg bps: 854, avg pps: 0, avg bpp: 404 Time window: 2025-08-03 00:54:06 - 2025-08-03 01:58:13 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0026s User: 0.0017s Wall: 0.0022s flows/second: 60982.0 Runtime: 0.0023s