Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 21:54:13.235 00:06:00.657 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 21:59:27.222 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56350 10 6452 1 2025-08-14 21:55:13.237 00:06:00.652 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 22:00:27.622 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52392 10 6452 1 2025-08-14 22:01:28.031 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34484 10 6452 1 2025-08-14 22:02:28.430 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56686 10 6452 1 2025-08-14 22:03:10.348 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 22:03:10.150 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:03:10.265 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:03:10.260 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 22:03:10.193 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 22:03:28.840 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:48674 10 6452 1 2025-08-14 22:04:29.280 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57888 10 6452 1 2025-08-14 22:05:29.683 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:52230 12 10367 1 2025-08-14 22:01:13.235 00:06:00.659 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 22:06:30.148 00:00:12.095 TCP 1.101.0.1:3000 -> 23.104.0.1:42426 10 6452 1 2025-08-14 22:02:13.238 00:06:00.654 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 22:07:32.294 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59668 10 6452 1 2025-08-14 22:08:10.396 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 22:08:10.396 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 22:08:10.331 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 22:08:10.191 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:08:10.314 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:08:32.696 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47330 10 6452 1 2025-08-14 22:09:33.118 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50008 10 6452 1 2025-08-14 22:10:33.521 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:33908 10 6452 1 2025-08-14 22:11:33.874 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46052 10 6452 1 2025-08-14 22:12:34.278 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47920 10 6452 1 2025-08-14 22:13:10.563 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 22:13:10.419 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 22:08:13.236 00:06:00.661 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 22:13:10.485 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 22:13:10.453 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:13:10.480 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:13:34.687 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41490 10 6452 1 2025-08-14 22:09:13.240 00:06:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 22:14:35.059 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40490 10 6452 1 2025-08-14 22:15:35.464 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33060 10 6452 1 2025-08-14 22:16:35.864 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:34820 10 6452 1 2025-08-14 22:17:36.286 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50378 10 6452 1 2025-08-14 22:18:10.418 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 22:18:10.657 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 22:18:10.489 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:18:10.488 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:18:10.570 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 22:18:36.652 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53914 10 6452 1 2025-08-14 22:19:37.069 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56126 10 6452 1 2025-08-14 22:15:13.240 00:06:00.659 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 22:20:37.477 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45786 10 6452 1 2025-08-14 22:16:13.241 00:06:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 22:21:37.884 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54692 10 6452 1 2025-08-14 22:22:38.251 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49972 10 6452 1 2025-08-14 22:23:10.660 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 22:23:10.713 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 22:23:10.672 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:23:10.718 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:23:10.803 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 22:23:38.656 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33150 10 6452 1 2025-08-14 22:24:39.064 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56130 10 6452 1 2025-08-14 22:25:39.471 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53998 10 6452 1 2025-08-14 22:26:39.871 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42102 10 6452 1 2025-08-14 22:22:13.238 00:06:00.662 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 22:27:40.277 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50782 10 6452 1 2025-08-14 22:28:10.651 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 22:28:10.652 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 22:28:10.599 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:28:10.773 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:23:13.243 00:06:00.657 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 22:28:10.857 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 22:28:40.679 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45324 10 6452 1 2025-08-14 22:29:41.110 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49088 10 6452 1 2025-08-14 22:30:41.479 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48968 10 6452 1 2025-08-14 22:31:41.880 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42158 10 6452 1 2025-08-14 22:32:42.283 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45246 10 6452 1 2025-08-14 22:33:11.406 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 22:33:11.265 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 22:33:11.200 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:33:11.324 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:33:11.191 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 22:33:42.692 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57068 10 6452 1 2025-08-14 22:29:13.242 00:06:00.660 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 22:34:43.135 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43694 10 6452 1 2025-08-14 22:30:13.244 00:06:00.655 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 22:35:43.542 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52804 10 6452 1 2025-08-14 22:36:43.958 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35082 10 6452 1 2025-08-14 22:37:44.365 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40438 10 6452 1 2025-08-14 22:38:10.901 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 22:38:10.825 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 22:38:10.894 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 22:38:10.823 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:38:10.818 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:38:44.772 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36146 10 6452 1 2025-08-14 22:39:45.175 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46436 10 6452 1 2025-08-14 22:40:45.577 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60086 10 6452 1 2025-08-14 22:36:13.243 00:06:00.663 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 22:41:45.983 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41704 10 6452 1 2025-08-14 22:37:13.248 00:06:00.657 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 22:42:46.386 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55838 10 6452 1 2025-08-14 22:43:11.001 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 22:43:11.121 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 22:43:10.808 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 22:43:10.713 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:43:10.917 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:43:46.753 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45622 10 6452 1 2025-08-14 22:44:47.155 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49540 10 6452 1 2025-08-14 22:45:47.518 00:00:10.514 TCP 1.101.0.1:3000 -> 23.104.0.1:40332 14 14280 1 2025-08-14 22:46:48.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47218 10 6452 1 2025-08-14 22:47:48.509 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46868 10 6452 1 2025-08-14 22:48:11.075 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 22:48:10.991 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 22:43:13.245 00:06:00.662 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 22:48:11.156 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 22:48:10.709 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:48:10.991 00:00:00.044 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:48:48.871 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42976 10 6452 1 2025-08-14 22:44:13.251 00:06:00.655 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 22:49:49.282 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54430 10 6452 1 2025-08-14 22:50:49.695 00:00:10.668 TCP 1.101.0.1:3000 -> 23.104.0.1:38046 10 6452 1 2025-08-14 22:51:50.405 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43304 10 6452 1 2025-08-14 22:52:50.805 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38056 10 6452 1 2025-08-14 22:53:11.535 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 22:53:11.362 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 22:53:11.412 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 22:53:11.124 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:53:11.452 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:53:51.204 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51824 10 6452 1 2025-08-14 22:54:51.600 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44166 10 6452 1 2025-08-14 22:50:13.251 00:06:00.659 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 22:55:52.003 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38734 10 6452 1 2025-08-14 22:51:13.252 00:06:00.654 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 22:56:52.400 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49502 10 6452 1 2025-08-14 22:57:52.766 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49656 10 6452 1 2025-08-14 22:58:11.200 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 22:58:11.210 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 22:58:11.252 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:58:11.117 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 22:58:11.335 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 137, total bytes: 423029, total packets: 1028, avg bps: 881, avg pps: 0, avg bpp: 411 Time window: 2025-08-14 21:54:13 - 2025-08-14 22:58:11 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0037s User: 0.0009s Wall: 0.0025s flows/second: 53874.0 Runtime: 0.0026s