Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 14:54:13.052 00:06:00.704 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 14:59:36.469 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47374 10 6452 1 2025-08-14 14:55:13.056 00:06:00.698 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 15:00:36.836 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45814 10 6452 1 2025-08-14 15:01:37.243 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56088 10 6452 1 2025-08-14 15:02:37.645 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34860 10 6452 1 2025-08-14 15:03:01.704 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 15:03:01.805 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 15:03:01.824 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:03:01.869 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:03:01.951 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 15:03:38.010 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54686 10 6452 1 2025-08-14 15:04:38.414 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39542 10 6452 1 2025-08-14 15:05:38.829 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53688 10 6452 1 2025-08-14 15:01:13.055 00:06:00.705 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 15:06:39.226 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59890 10 6452 1 2025-08-14 15:02:13.058 00:06:00.698 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 15:07:39.632 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:33104 10 6452 1 2025-08-14 15:08:01.859 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 15:08:02.014 00:00:00.040 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 15:08:02.007 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 15:08:01.708 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:08:01.776 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:08:40.056 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42464 10 6452 1 2025-08-14 15:09:40.462 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:40690 10 6452 1 2025-08-14 15:10:40.834 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:37168 10 6452 1 2025-08-14 15:11:41.267 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39932 12 6556 1 2025-08-14 15:12:41.674 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:36254 10 6452 1 2025-08-14 15:13:02.035 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 15:13:01.942 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 15:13:01.767 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 15:13:01.748 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:13:01.954 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:08:13.072 00:06:00.688 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 15:13:42.050 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42424 10 6452 1 2025-08-14 15:09:13.076 00:06:00.683 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 15:14:42.461 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45064 10 6452 1 2025-08-14 15:15:42.874 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53682 10 6452 1 2025-08-14 15:16:43.285 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60808 11 6492 1 2025-08-14 15:17:43.651 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47080 10 6452 1 2025-08-14 15:18:02.134 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 15:18:02.023 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 15:18:02.097 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 15:18:01.968 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:18:02.051 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:18:44.063 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50050 10 6452 1 2025-08-14 15:19:44.429 00:00:10.658 TCP 1.101.0.1:3000 -> 23.104.0.1:36824 10 6452 1 2025-08-14 15:15:13.076 00:06:00.686 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 15:20:45.120 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:37724 12 10367 1 2025-08-14 15:16:13.077 00:06:00.681 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 15:21:45.601 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44888 10 6452 1 2025-08-14 15:22:46.005 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33604 10 6452 1 2025-08-14 15:23:02.588 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 15:23:02.466 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 15:23:02.507 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 15:23:02.084 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:23:02.506 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:23:46.404 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49254 10 6452 1 2025-08-14 15:24:46.806 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34304 10 6452 1 2025-08-14 15:25:47.213 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:45012 12 10365 1 2025-08-14 15:26:47.696 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35332 10 6452 1 2025-08-14 15:22:13.074 00:06:00.687 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 15:27:48.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56546 10 6452 1 2025-08-14 15:28:02.214 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 15:28:02.222 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 15:28:02.384 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:28:02.222 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:28:02.304 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 15:23:13.077 00:06:00.682 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 15:28:48.523 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48486 10 6452 1 2025-08-14 15:29:48.927 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:52864 10 6452 1 2025-08-14 15:30:49.339 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47252 10 6452 1 2025-08-14 15:31:49.747 00:00:10.527 TCP 1.101.0.1:3000 -> 23.104.0.1:46886 10 6452 1 2025-08-14 15:33:02.557 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 15:33:02.475 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:33:02.434 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 15:32:50.311 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33764 10 6452 1 2025-08-14 15:33:02.438 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 15:33:02.311 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:33:50.710 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41172 10 6452 1 2025-08-14 15:29:13.076 00:06:00.687 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 15:34:51.117 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55154 10 6452 1 2025-08-14 15:30:13.078 00:06:00.682 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 15:35:51.515 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57758 10 6452 1 2025-08-14 15:36:51.921 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:56602 10 6452 1 2025-08-14 15:38:02.576 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 15:38:02.491 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 15:38:02.416 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 15:38:02.129 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:38:02.493 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:37:52.294 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60942 10 6452 1 2025-08-14 15:38:52.698 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33032 10 6452 1 2025-08-14 15:39:53.114 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57382 10 6452 1 2025-08-14 15:40:53.481 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48750 10 6452 1 2025-08-14 15:36:13.079 00:06:00.687 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 15:41:53.896 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:53234 10 6452 1 2025-08-14 15:37:13.082 00:06:00.683 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 15:43:02.704 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 15:43:02.407 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 15:43:02.501 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 15:43:02.527 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:43:02.622 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:42:54.271 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:33464 10 6452 1 2025-08-14 15:43:54.654 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:43462 10 6452 1 2025-08-14 15:44:55.034 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44502 10 6452 1 2025-08-14 15:45:55.438 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51446 10 6452 1 2025-08-14 15:46:55.840 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:49828 10 6452 1 2025-08-14 15:48:03.398 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 15:48:03.093 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 15:48:03.593 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 15:48:02.934 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:48:03.315 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:47:56.264 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34186 10 6452 1 2025-08-14 15:43:13.081 00:06:00.687 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 15:48:56.623 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48626 12 6556 1 2025-08-14 15:44:13.085 00:06:00.681 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 15:49:57.027 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47374 10 6452 1 2025-08-14 15:50:57.434 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45212 10 6452 1 2025-08-14 15:51:57.842 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:53936 10 6452 1 2025-08-14 15:53:02.783 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 15:53:02.821 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 15:53:02.909 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 15:53:02.645 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:53:02.700 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:52:58.273 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50608 10 6452 1 2025-08-14 15:53:58.673 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55970 10 6452 1 2025-08-14 15:54:59.111 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:41884 10 6452 1 2025-08-14 15:50:13.083 00:06:00.686 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 15:55:59.476 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40698 10 6452 1 2025-08-14 15:51:13.086 00:06:00.682 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 15:56:59.841 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:59480 10 6452 1 2025-08-14 15:58:02.902 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 15:58:02.906 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 15:58:02.896 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:58:02.833 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 15:58:02.915 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 15:58:00.277 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55244 10 6452 1 Summary: total flows: 137, total bytes: 419362, total packets: 1031, avg bps: 874, avg pps: 0, avg bpp: 406 Time window: 2025-08-14 14:54:13 - 2025-08-14 15:58:10 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0016s User: 0.0016s Wall: 0.0014s flows/second: 94556.5 Runtime: 0.0015s