Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 11:55:13.597 00:05:00.627 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 11:59:09.066 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57888 10 6452 1 2025-08-15 11:56:13.600 00:05:00.622 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 12:00:09.474 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49886 10 6452 1 2025-08-15 12:01:09.880 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:41284 10 6452 1 2025-08-15 12:02:10.300 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51938 10 6452 1 2025-08-15 12:03:10.669 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54646 10 6452 1 2025-08-15 12:03:27.350 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 12:03:27.268 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 12:03:27.207 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 12:03:27.085 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:03:27.267 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:04:11.108 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59844 10 6452 1 2025-08-15 12:01:13.598 00:05:00.629 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 12:05:11.513 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40424 10 6452 1 2025-08-15 12:02:13.611 00:05:00.614 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 12:06:11.916 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42558 10 6452 1 2025-08-15 12:07:12.320 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41652 10 6452 1 2025-08-15 12:08:12.731 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40808 10 6452 1 2025-08-15 12:08:27.198 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 12:08:27.122 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 12:08:27.204 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 12:08:26.841 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:08:27.116 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:09:13.116 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43342 10 6452 1 2025-08-15 12:10:13.479 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44326 10 6452 1 2025-08-15 12:07:13.611 00:05:00.616 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 12:11:13.880 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47970 10 6452 1 2025-08-15 12:08:13.613 00:05:00.612 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 12:12:14.287 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37598 10 6452 1 2025-08-15 12:13:27.449 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 12:13:27.357 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 12:13:27.355 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 12:13:14.693 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37778 10 6452 1 2025-08-15 12:13:27.049 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:13:27.367 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:14:15.114 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53032 10 6452 1 2025-08-15 12:15:15.530 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33430 10 6452 1 2025-08-15 12:16:15.939 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:33796 10 6452 1 2025-08-15 12:13:13.616 00:05:00.613 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 12:17:16.363 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35396 10 6452 1 2025-08-15 12:14:13.618 00:05:00.608 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 12:18:27.141 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:18:27.516 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:18:27.473 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 12:18:16.773 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33988 10 6452 1 2025-08-15 12:18:27.478 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 12:18:27.600 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 12:19:17.184 00:00:10.849 TCP 1.101.0.1:3000 -> 23.104.0.1:41902 10 6452 1 2025-08-15 12:20:18.128 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:44136 12 10367 1 2025-08-15 12:21:18.569 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43470 10 6452 1 2025-08-15 12:22:18.969 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:33102 10 6452 1 2025-08-15 12:19:13.616 00:05:00.613 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 12:23:27.164 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:23:27.334 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 12:23:19.406 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57326 10 6452 1 2025-08-15 12:23:27.420 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 12:23:27.096 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:23:27.247 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 12:20:13.619 00:05:00.609 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 12:24:19.808 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59076 12 6556 1 2025-08-15 12:25:20.217 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38556 10 6452 1 2025-08-15 12:26:20.616 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36574 10 6452 1 2025-08-15 12:27:20.975 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41610 10 6452 1 2025-08-15 12:28:27.598 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 12:28:27.547 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 12:28:27.606 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:28:27.473 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:28:27.555 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 12:28:21.379 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38382 10 6452 1 2025-08-15 12:25:13.617 00:05:00.614 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 12:29:21.792 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:57904 12 6556 1 2025-08-15 12:26:13.620 00:05:00.609 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 12:30:22.252 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41988 10 6452 1 2025-08-15 12:31:22.655 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49932 10 6452 1 2025-08-15 12:32:23.071 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40036 10 6452 1 2025-08-15 12:33:27.598 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 12:33:27.515 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 12:33:27.687 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 12:33:27.516 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:33:27.516 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:33:23.472 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33962 12 6556 1 2025-08-15 12:34:23.871 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45674 10 6452 1 2025-08-15 12:31:13.619 00:05:00.613 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 12:35:24.276 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:60962 12 10367 1 2025-08-15 12:32:13.621 00:05:00.608 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 12:36:24.756 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:49678 10 6452 1 2025-08-15 12:37:25.184 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50604 10 6452 1 2025-08-15 12:38:27.925 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 12:38:27.838 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 12:38:27.899 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 12:38:27.926 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:38:27.842 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:38:25.597 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47640 10 6452 1 2025-08-15 12:39:26.002 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36432 10 6452 1 2025-08-15 12:40:26.416 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59810 10 6452 1 2025-08-15 12:37:13.626 00:05:00.608 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 12:41:26.822 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47174 10 6452 1 2025-08-15 12:38:13.627 00:05:00.604 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 12:42:27.222 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:42988 10 6452 1 2025-08-15 12:43:27.961 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 12:43:27.891 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 12:43:27.926 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 12:43:27.894 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:43:27.879 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:43:27.637 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43396 10 6452 1 2025-08-15 12:44:28.039 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49880 10 6452 1 2025-08-15 12:45:28.445 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44524 10 6452 1 2025-08-15 12:46:28.845 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:33646 10 6452 1 2025-08-15 12:43:13.625 00:05:00.608 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 12:47:29.231 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43328 10 6452 1 2025-08-15 12:44:13.629 00:05:00.603 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 12:48:28.109 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 12:48:27.978 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:48:27.935 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:48:27.847 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 12:48:28.019 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 12:48:29.635 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60924 10 6452 1 2025-08-15 12:49:30.052 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41702 10 6452 1 2025-08-15 12:50:30.425 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46190 10 6452 1 2025-08-15 12:51:30.829 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54368 10 6452 1 2025-08-15 12:52:31.193 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38550 10 6452 1 2025-08-15 12:49:13.628 00:05:00.609 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 12:53:28.237 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 12:53:28.078 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 12:53:27.946 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 12:53:28.071 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:53:28.155 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:53:31.595 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36866 10 6452 1 2025-08-15 12:50:13.631 00:05:00.604 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 12:54:31.964 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:53594 10 6452 1 2025-08-15 12:55:32.339 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47322 10 6452 1 2025-08-15 12:56:32.743 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37530 10 6452 1 2025-08-15 12:57:33.149 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46068 10 6452 1 2025-08-15 12:58:28.334 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 12:58:28.097 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 12:58:28.197 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 12:58:27.910 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:58:28.253 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 12:58:33.558 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54654 10 6452 1 Summary: total flows: 140, total bytes: 425142, total packets: 1030, avg bps: 892, avg pps: 0, avg bpp: 412 Time window: 2025-08-15 11:55:13 - 2025-08-15 12:58:43 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0028s User: 0.0009s Wall: 0.0017s flows/second: 80273.8 Runtime: 0.0018s