Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 09:55:13.553 00:05:00.615 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 09:59:20.928 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:58450 10 6452 1 2025-08-15 09:56:13.556 00:05:00.611 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 10:00:21.317 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52812 10 6452 1 2025-08-15 10:01:21.715 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60462 10 6452 1 2025-08-15 10:02:22.134 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42854 10 6452 1 2025-08-15 10:03:24.655 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 10:03:24.572 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 10:03:24.679 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:03:24.643 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:03:24.725 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 10:03:22.501 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:52452 10 6452 1 2025-08-15 10:04:22.876 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43068 10 6452 1 2025-08-15 10:01:13.554 00:05:00.615 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 10:05:23.291 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36894 10 6452 1 2025-08-15 10:02:13.558 00:05:00.609 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 10:06:23.697 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38716 10 6452 1 2025-08-15 10:07:24.114 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33096 10 6452 1 2025-08-15 10:08:24.897 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 10:08:24.815 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:08:24.722 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 10:08:24.818 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 10:08:24.486 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:08:24.550 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44470 10 6452 1 2025-08-15 10:09:24.947 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48928 10 6452 1 2025-08-15 10:10:25.360 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53886 10 6452 1 2025-08-15 10:07:13.556 00:05:00.614 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 10:11:25.766 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:59026 10 6452 1 2025-08-15 10:08:13.559 00:05:00.609 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 10:12:26.198 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47318 10 6452 1 2025-08-15 10:13:24.922 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 10:13:24.758 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 10:13:24.961 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 10:13:24.771 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:13:24.839 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:13:26.610 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33584 10 6452 1 2025-08-15 10:14:27.016 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:57664 10 6452 1 2025-08-15 10:15:27.413 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37466 10 6452 1 2025-08-15 10:16:27.820 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47146 10 6452 1 2025-08-15 10:13:13.564 00:05:00.607 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 10:17:28.226 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:55844 10 6452 1 2025-08-15 10:14:13.567 00:05:00.603 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 10:18:24.956 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 10:18:24.905 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 10:18:24.797 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:18:24.965 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:18:25.048 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 10:18:28.614 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:50268 10 6452 1 2025-08-15 10:19:29.011 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60802 10 6452 1 2025-08-15 10:20:29.414 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:54700 10 6452 1 2025-08-15 10:21:29.786 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55404 10 6452 1 2025-08-15 10:22:30.192 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47514 10 6452 1 2025-08-15 10:19:13.565 00:05:00.620 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 10:23:25.601 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 10:23:25.324 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 10:23:25.406 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 10:23:25.164 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:23:25.518 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:23:30.595 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:38558 10 6452 1 2025-08-15 10:20:13.567 00:05:00.615 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 10:24:30.953 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57116 10 6452 1 2025-08-15 10:25:31.363 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34944 10 6452 1 2025-08-15 10:26:31.768 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:36972 10 6452 1 2025-08-15 10:27:32.149 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:60992 10 6452 1 2025-08-15 10:28:25.386 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 10:28:25.101 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 10:28:25.300 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 10:28:25.154 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:28:25.304 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:28:32.520 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39874 10 6452 1 2025-08-15 10:25:13.570 00:05:00.616 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 10:29:32.931 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:44632 10 6452 1 2025-08-15 10:26:13.573 00:05:00.612 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 10:30:33.355 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45562 10 6452 1 2025-08-15 10:31:33.759 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:47378 10 6452 1 2025-08-15 10:32:34.138 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59598 10 6452 1 2025-08-15 10:33:25.393 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 10:33:25.221 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 10:33:25.115 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:33:25.359 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:33:25.442 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 10:33:34.544 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44270 10 6452 1 2025-08-15 10:34:34.951 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:37048 10 6452 1 2025-08-15 10:31:13.571 00:05:00.618 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 10:35:35.385 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41240 10 6452 1 2025-08-15 10:32:13.573 00:05:00.613 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 10:36:35.786 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39504 10 6452 1 2025-08-15 10:37:36.195 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35582 10 6452 1 2025-08-15 10:38:25.365 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 10:38:25.494 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 10:38:25.066 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:38:25.149 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:38:25.231 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 10:38:36.598 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59310 10 6452 1 2025-08-15 10:39:37.009 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33482 10 6452 1 2025-08-15 10:40:37.407 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39294 10 6452 1 2025-08-15 10:37:13.573 00:05:00.615 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 10:41:37.810 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47080 10 6452 1 2025-08-15 10:38:13.576 00:05:00.611 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 10:42:38.208 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35832 10 6452 1 2025-08-15 10:43:25.941 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 10:43:25.955 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 10:43:25.856 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 10:43:25.818 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:43:25.859 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:43:38.608 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33380 10 6452 1 2025-08-15 10:44:39.016 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:34752 10 6452 1 2025-08-15 10:45:39.412 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46598 10 6452 1 2025-08-15 10:46:39.814 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:37534 10 6452 1 2025-08-15 10:43:13.574 00:05:00.616 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 10:47:40.188 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50848 10 6452 1 2025-08-15 10:44:13.578 00:05:00.611 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 10:48:25.653 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 10:48:25.511 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 10:48:25.571 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 10:48:25.436 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:48:25.570 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:48:40.598 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33184 10 6452 1 2025-08-15 10:49:41.002 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:58506 10 6452 1 2025-08-15 10:50:41.400 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52098 10 6452 1 2025-08-15 10:51:41.803 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:50034 10 6452 1 2025-08-15 10:52:42.186 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57624 10 6452 1 2025-08-15 10:49:13.577 00:05:00.614 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 10:53:25.759 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 10:53:25.502 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:53:25.676 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:53:25.599 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 10:53:25.683 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 10:53:42.588 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37208 10 6452 1 2025-08-15 10:50:13.579 00:05:00.610 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 10:54:42.988 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:35382 10 6452 1 2025-08-15 10:55:43.415 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59810 10 6452 1 2025-08-15 10:56:43.822 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45428 10 6452 1 2025-08-15 10:57:44.191 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53420 10 6452 1 2025-08-15 10:58:25.850 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 10:58:25.573 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 10:58:25.625 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:58:25.883 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 10:58:25.966 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 139, total bytes: 410548, total packets: 1010, avg bps: 866, avg pps: 0, avg bpp: 406 Time window: 2025-08-15 09:55:13 - 2025-08-15 10:58:25 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0018s User: 0.0027s Wall: 0.0029s flows/second: 47441.5 Runtime: 0.0029s