Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 06:55:13.464 00:05:00.625 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 06:59:08.387 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52570 10 6452 1 2025-08-15 06:56:13.465 00:05:00.622 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 07:00:08.749 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43546 10 6452 1 2025-08-15 07:01:09.151 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59850 10 6452 1 2025-08-15 07:02:09.556 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50346 10 6452 1 2025-08-15 07:03:21.459 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 07:03:21.233 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 07:03:09.957 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54362 10 6452 1 2025-08-15 07:03:20.917 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 07:03:21.112 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:03:21.376 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:04:10.369 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37382 10 6452 1 2025-08-15 07:01:13.465 00:05:00.627 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 07:05:10.766 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43192 10 6452 1 2025-08-15 07:02:13.468 00:05:00.621 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 07:06:11.182 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36678 10 6452 1 2025-08-15 07:07:11.582 00:00:10.718 TCP 1.101.0.1:3000 -> 23.104.0.1:41106 10 6452 1 2025-08-15 07:08:21.107 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 07:08:12.333 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55150 10 6452 1 2025-08-15 07:08:20.887 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:08:21.107 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:08:21.108 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 07:08:21.190 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 07:09:12.743 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58788 10 6452 1 2025-08-15 07:10:13.155 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59608 10 6452 1 2025-08-15 07:07:13.486 00:05:00.607 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 07:11:13.568 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45626 10 6452 1 2025-08-15 07:08:13.488 00:05:00.602 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 07:12:13.973 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38086 10 6452 1 2025-08-15 07:13:21.436 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 07:13:21.201 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:13:21.353 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:13:14.389 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43174 10 6452 1 2025-08-15 07:13:21.311 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 07:13:21.215 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 07:14:14.749 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54682 10 6452 1 2025-08-15 07:15:15.160 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38974 10 6452 1 2025-08-15 07:16:15.569 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38836 10 6452 1 2025-08-15 07:13:13.489 00:05:00.605 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 07:17:15.968 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:55232 10 6452 1 2025-08-15 07:14:13.491 00:05:00.600 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 07:18:21.426 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 07:18:21.407 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 07:18:21.409 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 07:18:21.203 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:18:21.342 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:18:16.326 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58214 10 6452 1 2025-08-15 07:19:16.683 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54482 10 6452 1 2025-08-15 07:20:17.050 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39798 10 6452 1 2025-08-15 07:21:17.417 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44754 10 6452 1 2025-08-15 07:22:17.781 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43098 10 6452 1 2025-08-15 07:19:13.490 00:05:00.605 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 07:23:21.590 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 07:23:21.370 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 07:23:21.538 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 07:23:21.164 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:23:21.508 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:23:18.197 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35220 10 6452 1 2025-08-15 07:20:13.493 00:05:00.600 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 07:24:18.605 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47110 10 6452 1 2025-08-15 07:25:19.027 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47222 10 6452 1 2025-08-15 07:26:19.397 00:00:10.693 TCP 1.101.0.1:3000 -> 23.104.0.1:35154 10 6452 1 2025-08-15 07:27:20.140 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60236 10 6452 1 2025-08-15 07:28:21.514 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 07:28:21.517 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 07:28:21.371 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:28:21.450 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:28:21.533 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 07:28:20.541 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36062 10 6452 1 2025-08-15 07:25:13.511 00:05:00.586 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 07:29:20.945 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60754 10 6452 1 2025-08-15 07:26:13.513 00:05:00.580 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 07:30:21.365 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:43870 12 10367 1 2025-08-15 07:31:21.836 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:38022 10 6452 1 2025-08-15 07:32:22.265 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:40768 10 6452 1 2025-08-15 07:33:21.903 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 07:33:21.820 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:33:21.681 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 07:33:21.623 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 07:33:21.421 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:33:22.628 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:36844 10 6452 1 2025-08-15 07:34:22.993 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49874 10 6452 1 2025-08-15 07:31:13.512 00:05:00.586 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 07:35:23.398 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36396 10 6452 1 2025-08-15 07:32:13.514 00:05:00.581 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 07:36:23.797 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34154 10 6452 1 2025-08-15 07:37:24.196 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:38000 10 6452 1 2025-08-15 07:38:21.494 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 07:38:21.768 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 07:38:21.846 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:38:21.763 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:38:21.845 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 07:38:24.554 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42414 10 6452 1 2025-08-15 07:39:24.918 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:52908 10 6452 1 2025-08-15 07:40:25.317 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59332 10 6452 1 2025-08-15 07:37:13.512 00:05:00.586 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 07:41:25.722 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48468 10 6452 1 2025-08-15 07:38:13.515 00:05:00.581 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 07:42:26.126 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52242 10 6452 1 2025-08-15 07:43:21.836 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 07:43:21.985 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 07:43:21.758 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 07:43:21.844 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:43:21.753 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:43:26.530 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54788 10 6452 1 2025-08-15 07:44:26.931 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59862 10 6452 1 2025-08-15 07:45:27.358 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53502 10 6452 1 2025-08-15 07:46:27.774 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39336 10 6452 1 2025-08-15 07:43:13.514 00:05:00.586 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 07:47:28.187 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37104 10 6452 1 2025-08-15 07:44:13.517 00:05:00.581 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 07:48:21.992 00:00:00.055 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 07:48:21.991 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 07:48:21.798 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:48:21.935 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:48:22.018 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 07:48:28.589 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37836 10 6452 1 2025-08-15 07:49:28.988 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35292 10 6452 1 2025-08-15 07:50:29.397 00:00:10.518 TCP 1.101.0.1:3000 -> 23.104.0.1:36202 14 14280 1 2025-08-15 07:51:29.956 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49856 10 6452 1 2025-08-15 07:52:30.364 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46120 10 6452 1 2025-08-15 07:49:13.517 00:05:00.586 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 07:53:21.937 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 07:53:22.057 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 07:53:21.866 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:53:21.953 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:53:22.038 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 07:53:30.768 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44772 10 6452 1 2025-08-15 07:50:13.519 00:05:00.581 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 07:54:31.188 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48704 10 6452 1 2025-08-15 07:55:31.585 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54612 10 6452 1 2025-08-15 07:56:31.986 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33790 10 6452 1 2025-08-15 07:57:32.349 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34758 12 6556 1 2025-08-15 07:58:22.334 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 07:58:21.952 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 07:58:22.112 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 07:58:21.980 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:58:22.250 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 07:58:32.752 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:57020 10 6452 1 Summary: total flows: 140, total bytes: 428847, total packets: 1028, avg bps: 900, avg pps: 0, avg bpp: 417 Time window: 2025-08-15 06:55:13 - 2025-08-15 07:58:43 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0027s User: 0.0009s Wall: 0.0017s flows/second: 84138.5 Runtime: 0.0017s