Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 13:54:07.538 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 13:58:58.728 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36374 10 6452 1 2025-08-04 13:59:59.147 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48140 10 6452 1 2025-08-04 14:00:59.552 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42488 10 6452 1 2025-08-04 13:56:07.543 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-04 14:01:59.961 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:47424 10 6452 1 2025-08-04 14:03:11.982 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 14:03:12.092 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 14:03:00.391 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41158 10 6452 1 2025-08-04 14:03:12.005 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 14:03:12.230 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:03:11.896 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:04:00.795 00:00:10.570 TCP 1.101.0.1:3000 -> 23.104.0.1:53284 10 6452 1 2025-08-04 14:05:01.412 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60614 10 6452 1 2025-08-04 14:01:07.540 00:06:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 14:06:01.819 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45458 10 6452 1 2025-08-04 14:07:02.227 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55644 10 6452 1 2025-08-04 14:03:07.543 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-04 14:08:12.031 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 14:08:11.825 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 14:08:11.826 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 14:08:11.919 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:08:02.628 00:00:10.572 TCP 1.101.0.1:3000 -> 23.104.0.1:39536 10 6452 1 2025-08-04 14:08:11.948 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:09:03.238 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58420 10 6452 1 2025-08-04 14:10:03.635 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43330 10 6452 1 2025-08-04 14:11:04.047 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37822 10 6452 1 2025-08-04 14:12:04.447 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58030 10 6452 1 2025-08-04 14:13:12.073 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 14:08:07.541 00:06:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 14:13:11.990 00:00:00.038 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 14:13:12.100 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 14:13:11.947 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:13:11.990 00:00:00.047 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:13:04.811 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37164 10 6452 1 2025-08-04 14:14:05.212 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58332 10 6452 1 2025-08-04 14:10:07.546 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-04 14:15:05.616 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:33472 10 6452 1 2025-08-04 14:16:05.972 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41162 10 6452 1 2025-08-04 14:17:06.377 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54728 10 6452 1 2025-08-04 14:18:12.223 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 14:18:12.192 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 14:18:11.850 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 14:18:11.982 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:18:12.140 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:18:06.776 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44402 10 6452 1 2025-08-04 14:19:07.185 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50482 10 6452 1 2025-08-04 14:15:07.543 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 14:20:07.549 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35186 10 6452 1 2025-08-04 14:21:07.908 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37510 10 6452 1 2025-08-04 14:17:07.549 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-04 14:22:08.315 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38320 10 6452 1 2025-08-04 14:23:12.259 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 14:23:12.247 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 14:23:12.085 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:23:12.176 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:23:12.305 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 14:23:08.719 00:00:10.489 TCP 1.101.0.1:3000 -> 23.104.0.1:34550 12 6556 1 2025-08-04 14:24:09.251 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56588 10 6452 1 2025-08-04 14:25:09.666 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53670 10 6452 1 2025-08-04 14:26:10.094 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60766 10 6452 1 2025-08-04 14:22:07.546 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 14:27:10.456 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33222 10 6452 1 2025-08-04 14:28:12.516 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 14:28:12.550 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 14:28:12.123 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:28:12.434 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:28:12.485 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 14:28:10.865 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:40150 10 6452 1 2025-08-04 14:24:07.549 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-04 14:29:11.277 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50874 10 6452 1 2025-08-04 14:30:11.686 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43382 10 6452 1 2025-08-04 14:31:12.105 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:35324 10 6452 1 2025-08-04 14:32:12.503 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42092 10 6452 1 2025-08-04 14:33:12.784 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 14:33:12.507 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 14:33:12.515 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 14:33:12.418 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:33:12.702 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:33:12.903 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38718 12 6556 1 2025-08-04 14:29:07.546 00:06:00.010 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 14:34:13.346 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55202 10 6452 1 2025-08-04 14:35:13.752 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47922 10 6452 1 2025-08-04 14:31:07.551 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-04 14:36:14.113 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52184 10 6452 1 2025-08-04 14:37:14.536 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55254 10 6452 1 2025-08-04 14:38:12.689 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 14:38:12.545 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 14:38:12.378 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 14:38:12.419 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:38:12.607 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:38:14.930 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:42196 10 6452 1 2025-08-04 14:39:15.354 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50750 10 6452 1 2025-08-04 14:40:15.718 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40326 10 6452 1 2025-08-04 14:36:07.548 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 14:41:16.106 00:00:11.624 TCP 1.101.0.1:3000 -> 23.104.0.1:45234 10 6452 1 2025-08-04 14:42:17.786 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49866 10 6452 1 2025-08-04 14:38:07.553 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-04 14:43:12.589 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 14:43:12.506 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:43:12.604 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 14:43:12.765 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 14:43:12.415 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:43:18.151 00:00:10.548 TCP 1.101.0.1:3000 -> 23.104.0.1:60210 10 6452 1 2025-08-04 14:44:18.738 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50246 10 6452 1 2025-08-04 14:45:19.145 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55560 10 6452 1 2025-08-04 14:46:19.545 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44386 10 6452 1 2025-08-04 14:47:19.955 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45212 10 6452 1 2025-08-04 14:43:07.550 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 14:48:13.370 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 14:48:13.291 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 14:48:13.377 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 14:48:12.782 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:48:13.288 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:48:20.323 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33592 10 6452 1 2025-08-04 14:49:20.726 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47128 10 6452 1 2025-08-04 14:45:07.555 00:06:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 8 549 1 2025-08-04 14:50:21.107 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53926 10 6452 1 2025-08-04 14:51:21.508 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38750 10 6452 1 2025-08-04 14:52:21.916 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55984 10 6452 1 2025-08-04 14:53:13.346 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 14:53:13.325 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 14:53:13.327 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 14:53:12.890 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:53:13.264 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:53:22.322 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60602 10 6452 1 2025-08-04 14:54:22.728 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35852 10 6452 1 2025-08-04 14:50:07.554 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 14:55:23.118 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60496 10 6452 1 2025-08-04 14:56:23.528 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42310 10 6452 1 2025-08-04 14:52:07.555 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 14:57:23.941 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:48048 10 6452 1 2025-08-04 14:58:12.924 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 14:58:12.919 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 14:58:13.049 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 14:58:12.976 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:58:12.842 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 14:58:24.363 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:42966 12 10367 1 Summary: total flows: 138, total bytes: 419001, total packets: 983, avg bps: 866, avg pps: 0, avg bpp: 426 Time window: 2025-08-04 13:54:07 - 2025-08-04 14:58:34 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0017s User: 0.0026s Wall: 0.0021s flows/second: 67218.0 Runtime: 0.0021s