Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 01:54:10.045 00:06:00.082 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 01:59:22.400 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48178 10 6452 1 2025-08-09 02:00:22.063 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 02:00:21.980 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:00:21.596 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 02:00:21.996 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 02:00:21.653 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:00:22.798 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:55718 10 6452 1 2025-08-09 02:01:23.185 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37978 10 6452 1 2025-08-09 02:02:23.593 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57984 10 6452 1 2025-08-09 02:03:23.993 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33212 10 6452 1 2025-08-09 02:04:24.403 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52444 10 6452 1 2025-08-09 02:00:10.049 00:06:00.076 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 02:05:21.962 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 02:05:21.915 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 02:05:21.797 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:05:21.916 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:05:21.998 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 02:05:24.817 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45568 10 6452 1 2025-08-09 02:01:10.047 00:06:00.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 02:06:25.218 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37432 10 6452 1 2025-08-09 02:07:25.620 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49290 10 6452 1 2025-08-09 02:08:26.031 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44750 10 6452 1 2025-08-09 02:09:26.431 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55580 10 6452 1 2025-08-09 02:10:22.009 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 02:10:21.862 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 02:10:21.868 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 02:10:21.596 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:10:21.925 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:10:26.835 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:51312 10 6452 1 2025-08-09 02:11:27.223 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33058 10 6452 1 2025-08-09 02:07:10.054 00:06:00.074 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 02:12:27.621 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53498 10 6452 1 2025-08-09 02:08:10.050 00:06:00.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 02:13:28.036 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:56084 10 6452 1 2025-08-09 02:14:28.397 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52986 10 6452 1 2025-08-09 02:15:22.154 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 02:15:22.071 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 02:15:22.071 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 02:15:22.147 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:15:22.070 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:15:28.762 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52648 10 6452 1 2025-08-09 02:16:29.172 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51494 10 6452 1 2025-08-09 02:17:29.532 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57982 10 6452 1 2025-08-09 02:18:29.937 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41600 10 6452 1 2025-08-09 02:14:10.053 00:06:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 02:19:30.354 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:40098 10 6452 1 2025-08-09 02:15:10.051 00:06:00.080 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 02:20:22.145 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 02:20:22.202 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 02:20:22.278 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 02:20:22.090 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:20:22.062 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:20:30.711 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55694 10 6452 1 2025-08-09 02:21:31.108 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:38692 10 6452 1 2025-08-09 02:22:31.472 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55084 10 6452 1 2025-08-09 02:23:31.834 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35198 10 6452 1 2025-08-09 02:24:32.258 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:40712 10 6452 1 2025-08-09 02:25:22.291 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 02:25:22.216 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 02:25:22.209 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 02:25:22.141 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:25:22.209 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:25:32.616 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57630 10 6452 1 2025-08-09 02:21:10.057 00:06:00.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 02:26:33.020 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48144 10 6452 1 2025-08-09 02:22:10.053 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 02:27:33.382 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44080 10 6452 1 2025-08-09 02:28:33.797 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:39672 12 10576 1 2025-08-09 02:29:34.273 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42034 10 6661 1 2025-08-09 02:30:22.443 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 02:30:22.357 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 02:30:22.358 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 02:30:22.399 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:30:22.361 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:30:34.674 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55270 10 6661 1 2025-08-09 02:31:35.056 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:44722 10 6661 1 2025-08-09 02:32:35.426 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:48842 10 6661 1 2025-08-09 02:28:10.057 00:06:00.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 02:33:35.849 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:37388 10 6661 1 2025-08-09 02:29:10.055 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 02:34:36.275 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49314 10 6661 1 2025-08-09 02:35:22.453 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 02:35:22.353 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 02:35:22.445 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 02:35:22.398 00:00:00.034 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:35:22.365 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:35:36.642 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39288 10 6661 1 2025-08-09 02:36:37.051 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57974 10 6661 1 2025-08-09 02:37:37.413 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49478 10 6661 1 2025-08-09 02:38:37.817 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:40712 10 6661 1 2025-08-09 02:39:38.212 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50146 10 6661 1 2025-08-09 02:35:10.060 00:06:00.082 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 02:40:22.775 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 02:40:22.561 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 02:40:22.561 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 02:40:22.231 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:40:22.693 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:40:38.615 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43228 10 6661 1 2025-08-09 02:36:10.061 00:06:00.085 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 02:41:38.981 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58528 10 6661 1 2025-08-09 02:42:39.388 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51146 10 6661 1 2025-08-09 02:43:39.787 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40358 10 6661 1 2025-08-09 02:44:40.197 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60376 10 6661 1 2025-08-09 02:45:23.399 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 02:45:22.838 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 02:45:23.210 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 02:45:23.120 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:45:23.318 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:45:40.558 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55296 10 6661 1 2025-08-09 02:46:40.961 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55650 10 6661 1 2025-08-09 02:42:10.062 00:06:00.091 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 02:47:41.364 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58374 10 6661 1 2025-08-09 02:43:10.060 00:06:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 02:48:41.770 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59512 10 6661 1 2025-08-09 02:49:42.176 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48106 10 6661 1 2025-08-09 02:50:22.744 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 02:50:22.978 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 02:50:22.402 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:50:22.891 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:50:22.973 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 02:50:42.540 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57530 10 6661 1 2025-08-09 02:51:42.939 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:56896 10 6661 1 2025-08-09 02:52:43.364 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41574 10 6661 1 2025-08-09 02:53:43.730 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56848 10 6661 1 2025-08-09 02:49:10.063 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 02:54:44.136 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55054 10 6661 1 2025-08-09 02:50:10.061 00:06:00.102 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 02:55:22.788 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 02:55:22.858 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 02:55:22.862 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:55:22.857 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 02:55:22.939 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 02:55:44.497 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51524 10 6661 1 2025-08-09 02:56:44.862 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39756 10 6661 1 2025-08-09 02:57:45.278 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34014 10 6661 1 Summary: total flows: 136, total bytes: 420610, total packets: 1010, avg bps: 879, avg pps: 0, avg bpp: 416 Time window: 2025-08-09 01:54:10 - 2025-08-09 02:57:55 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0035s User: 0.0009s Wall: 0.0020s flows/second: 66794.5 Runtime: 0.0021s