Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 14:54:12.048 00:06:00.653 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-12 14:59:34.183 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50362 10 6452 1 2025-08-12 15:00:34.588 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43480 10 6452 1 2025-08-12 15:01:34.994 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36872 10 6452 1 2025-08-12 15:02:04.062 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 15:02:03.830 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 15:02:03.831 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 15:02:03.932 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:02:03.978 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 14:57:12.047 00:06:00.658 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-12 15:02:35.395 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60830 12 6556 1 2025-08-12 15:03:35.800 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58372 10 6452 1 2025-08-12 15:04:36.212 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41488 10 6452 1 2025-08-12 15:05:36.614 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58004 10 6452 1 2025-08-12 15:01:12.051 00:06:00.652 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-12 15:06:37.015 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59318 10 6452 1 2025-08-12 15:07:04.022 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 15:07:04.242 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 15:07:04.187 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 15:07:03.842 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:07:03.937 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:07:37.378 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47420 10 6452 1 2025-08-12 15:08:37.779 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38802 10 6452 1 2025-08-12 15:04:12.052 00:06:00.653 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-12 15:09:38.194 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52498 10 6452 1 2025-08-12 15:10:38.591 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58296 10 6452 1 2025-08-12 15:11:38.990 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37988 10 6452 1 2025-08-12 15:12:04.247 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 15:12:04.164 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 15:12:04.304 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:12:04.088 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:12:04.171 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 15:12:39.353 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51104 10 6452 1 2025-08-12 15:08:12.057 00:06:00.648 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-12 15:13:39.756 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:45280 10 6452 1 2025-08-12 15:14:40.199 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52592 10 6452 1 2025-08-12 15:15:40.616 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52114 10 6452 1 2025-08-12 15:11:12.056 00:06:00.652 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-12 15:16:41.025 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56570 10 6452 1 2025-08-12 15:17:04.334 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 15:17:04.363 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 15:17:04.320 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 15:17:04.148 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:17:04.250 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:17:41.438 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:32858 10 6452 1 2025-08-12 15:18:41.818 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37336 10 6452 1 2025-08-12 15:19:42.228 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38508 10 6452 1 2025-08-12 15:15:12.060 00:06:00.646 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-12 15:20:42.630 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57234 10 6452 1 2025-08-12 15:21:43.030 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60488 10 6452 1 2025-08-12 15:22:04.372 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 15:22:04.169 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 15:22:04.393 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 15:22:04.419 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:22:04.289 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:22:43.431 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34124 10 6452 1 2025-08-12 15:18:12.059 00:06:00.652 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-12 15:23:43.832 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57150 10 6452 1 2025-08-12 15:24:44.191 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36338 10 6452 1 2025-08-12 15:25:44.616 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57058 10 6452 1 2025-08-12 15:27:04.484 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 15:26:44.982 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53664 10 6452 1 2025-08-12 15:27:04.475 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 15:27:04.476 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 15:27:04.434 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:27:04.401 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:22:12.062 00:06:00.653 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-12 15:27:45.391 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32916 10 6452 1 2025-08-12 15:28:45.802 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46676 10 6452 1 2025-08-12 15:29:46.205 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48040 10 6452 1 2025-08-12 15:25:12.060 00:06:00.657 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-12 15:30:46.614 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34518 10 6452 1 2025-08-12 15:31:47.025 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37246 10 6452 1 2025-08-12 15:32:04.665 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:32:04.912 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:32:04.662 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 15:32:04.743 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 15:32:04.993 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 15:32:47.430 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53136 10 6452 1 2025-08-12 15:33:47.794 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45864 10 6452 1 2025-08-12 15:29:12.063 00:06:00.653 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-12 15:34:48.203 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53754 10 6452 1 2025-08-12 15:35:48.600 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47454 10 6452 1 2025-08-12 15:36:49.008 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47330 10 6452 1 2025-08-12 15:37:04.893 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:37:04.684 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 15:37:04.663 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 15:37:04.618 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:37:04.975 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 15:32:12.061 00:06:00.658 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-12 15:37:49.369 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45598 10 6452 1 2025-08-12 15:38:49.734 00:00:11.127 TCP 1.101.0.1:3000 -> 23.104.0.1:35182 10 6452 1 2025-08-12 15:39:50.926 00:00:10.697 TCP 1.101.0.1:3000 -> 23.104.0.1:50006 10 6452 1 2025-08-12 15:40:51.663 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57134 10 6452 1 2025-08-12 15:36:12.065 00:06:00.653 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-12 15:42:04.973 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 15:42:04.799 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 15:42:04.803 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 15:42:04.678 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:42:04.891 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:41:52.084 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33274 10 6452 1 2025-08-12 15:42:52.443 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52902 10 6452 1 2025-08-12 15:43:52.846 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:50160 10 6452 1 2025-08-12 15:39:12.063 00:06:00.658 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-12 15:44:53.275 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59916 10 6452 1 2025-08-12 15:45:53.633 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50716 10 6452 1 2025-08-12 15:46:54.058 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49298 10 6452 1 2025-08-12 15:47:04.760 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 15:47:04.931 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 15:47:04.775 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:47:04.945 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:47:05.028 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 15:47:54.464 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59942 10 6452 1 2025-08-12 15:43:12.067 00:06:00.665 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-12 15:48:54.862 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:40316 10 6452 1 2025-08-12 15:49:55.230 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49588 10 6452 1 2025-08-12 15:50:55.635 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45072 10 6452 1 2025-08-12 15:46:12.072 00:06:00.650 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-12 15:52:04.911 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 15:52:04.646 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:52:04.913 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:52:04.995 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 15:52:05.212 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 15:51:56.037 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36714 10 6452 1 2025-08-12 15:52:56.397 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48426 10 6452 1 2025-08-12 15:53:56.798 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35794 10 6452 1 2025-08-12 15:54:57.203 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52132 10 6452 1 2025-08-12 15:50:12.069 00:06:00.652 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-12 15:55:57.611 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50460 10 6452 1 2025-08-12 15:57:04.956 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:57:05.072 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 15:57:05.195 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 15:56:58.015 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48780 10 6452 1 2025-08-12 15:57:05.078 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 15:57:05.160 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 15:57:58.377 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45584 10 6452 1 2025-08-12 15:53:12.065 00:06:00.658 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 137, total bytes: 411390, total packets: 1024, avg bps: 843, avg pps: 0, avg bpp: 401 Time window: 2025-08-12 14:54:12 - 2025-08-12 15:59:12 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0029s User: 0.0010s Wall: 0.0015s flows/second: 90548.3 Runtime: 0.0015s