Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 09:55:11.902 00:05:00.683 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 09:59:12.762 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:37544 10 6452 1 2025-08-12 10:00:13.188 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33128 10 6452 1 2025-08-12 09:57:11.905 00:05:00.679 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 10:01:13.584 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43928 10 6452 1 2025-08-12 10:01:57.827 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 10:01:58.113 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 10:01:57.948 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:01:57.915 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:01:57.998 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 10:02:13.990 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36082 10 6452 1 2025-08-12 10:03:14.402 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:53308 10 6452 1 2025-08-12 10:04:14.781 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59800 10 6452 1 2025-08-12 10:01:11.904 00:05:00.684 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 10:05:15.194 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49928 10 6452 1 2025-08-12 10:06:15.604 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44904 10 6452 1 2025-08-12 10:06:58.367 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 10:06:58.366 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 10:06:57.950 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 10:06:58.161 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:06:58.286 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:03:11.907 00:05:00.679 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 10:07:16.018 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45482 10 6452 1 2025-08-12 10:08:16.415 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39352 10 6452 1 2025-08-12 10:09:16.819 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37632 10 6452 1 2025-08-12 10:10:17.187 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:40426 12 10367 1 2025-08-12 10:07:11.906 00:05:00.683 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 10:11:17.624 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50500 10 6452 1 2025-08-12 10:11:58.426 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 10:11:58.344 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:11:58.334 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 10:11:58.233 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 10:11:58.298 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:12:18.036 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47348 10 6452 1 2025-08-12 10:09:11.911 00:05:00.676 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 10:13:18.439 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58628 10 6452 1 2025-08-12 10:14:18.802 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35406 10 6452 1 2025-08-12 10:15:19.209 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38404 10 6452 1 2025-08-12 10:16:19.610 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40764 10 6452 1 2025-08-12 10:16:58.137 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 10:16:57.996 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 10:16:58.179 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:16:57.990 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:16:58.089 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 10:13:11.910 00:05:00.685 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 10:17:20.030 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52636 10 6452 1 2025-08-12 10:18:20.393 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51930 10 6452 1 2025-08-12 10:15:11.914 00:05:00.680 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 10:19:20.801 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44934 10 6452 1 2025-08-12 10:20:21.208 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55710 10 6452 1 2025-08-12 10:21:21.617 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:48068 10 6452 1 2025-08-12 10:21:58.305 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 10:21:58.297 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 10:21:58.293 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:21:58.475 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:21:58.558 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 10:22:21.984 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:46842 10 6452 1 2025-08-12 10:19:11.911 00:05:00.687 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 10:23:22.359 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46490 10 6452 1 2025-08-12 10:24:22.720 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:55236 10 6452 1 2025-08-12 10:21:11.915 00:05:00.682 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 10:25:23.135 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36150 10 6452 1 2025-08-12 10:26:23.491 00:00:12.725 TCP 1.101.0.1:3000 -> 23.104.0.1:49862 10 6452 1 2025-08-12 10:26:58.695 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 10:26:58.735 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 10:26:58.603 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 10:26:58.559 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:26:58.613 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:27:26.257 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45104 10 6452 1 2025-08-12 10:28:26.616 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39826 10 6452 1 2025-08-12 10:25:11.914 00:05:00.687 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 10:29:26.978 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34798 10 6452 1 2025-08-12 10:30:27.391 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35318 10 6452 1 2025-08-12 10:27:11.917 00:05:00.681 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 10:31:27.797 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48176 10 6452 1 2025-08-12 10:31:58.634 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 10:31:58.459 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 10:31:58.621 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 10:31:58.388 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:31:58.551 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:32:28.207 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54064 10 6452 1 2025-08-12 10:33:28.568 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:32844 10 6452 1 2025-08-12 10:34:28.963 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40196 10 6452 1 2025-08-12 10:31:11.916 00:05:00.686 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 10:35:29.333 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33612 10 6452 1 2025-08-12 10:36:29.753 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:57880 10 6452 1 2025-08-12 10:36:58.924 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 10:36:58.768 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 10:36:58.768 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 10:36:58.660 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:36:58.840 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:33:11.918 00:05:00.681 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 10:37:30.193 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:48068 10 6452 1 2025-08-12 10:38:30.579 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42258 10 6452 1 2025-08-12 10:39:30.986 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57032 10 6452 1 2025-08-12 10:40:31.392 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47396 10 6452 1 2025-08-12 10:37:11.918 00:05:00.693 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 10:41:31.796 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:38388 10 6452 1 2025-08-12 10:41:58.894 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 10:41:58.516 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 10:41:58.903 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 10:41:58.766 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:41:58.812 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:42:32.154 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35384 10 6452 1 2025-08-12 10:39:11.921 00:05:00.688 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 10:43:32.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60146 10 6452 1 2025-08-12 10:44:32.926 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:60752 10 6452 1 2025-08-12 10:45:33.307 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42126 10 6452 1 2025-08-12 10:46:33.671 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59050 10 6452 1 2025-08-12 10:46:59.065 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:46:58.868 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 10:46:59.007 00:00:00.045 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 10:46:58.603 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:46:59.146 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 10:43:11.920 00:05:00.695 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 10:47:34.101 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38984 10 6452 1 2025-08-12 10:48:34.504 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41916 10 6452 1 2025-08-12 10:45:11.921 00:05:00.690 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 10:49:34.914 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46202 10 6452 1 2025-08-12 10:50:35.311 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:57646 10 6452 1 2025-08-12 10:51:35.691 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44948 10 6452 1 2025-08-12 10:51:59.002 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 10:51:58.922 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 10:51:58.979 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 10:51:58.946 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:51:58.918 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:52:36.119 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59820 10 6452 1 2025-08-12 10:49:11.919 00:05:00.697 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 10:53:36.522 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46318 10 6452 1 2025-08-12 10:54:36.919 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:43352 10 6452 1 2025-08-12 10:51:11.922 00:05:00.690 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 10:55:37.343 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43640 10 6452 1 2025-08-12 10:56:37.750 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:33562 10 6452 1 2025-08-12 10:56:59.364 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 10:56:59.410 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 10:56:59.097 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 10:56:59.430 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:56:59.282 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 10:57:38.114 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58990 10 6452 1 2025-08-12 10:58:38.511 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36886 10 6452 1 Summary: total flows: 140, total bytes: 420915, total packets: 1022, avg bps: 882, avg pps: 0, avg bpp: 411 Time window: 2025-08-12 09:55:11 - 2025-08-12 10:58:48 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0030s User: 0.0010s Wall: 0.0016s flows/second: 89118.6 Runtime: 0.0016s