Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 14:55:13.668 00:05:00.600 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 14:59:22.624 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37832 10 6452 1 2025-08-15 14:56:13.671 00:05:00.594 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 15:00:23.026 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48274 10 6452 1 2025-08-15 15:01:23.433 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33352 10 6452 1 2025-08-15 15:02:23.832 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41760 10 6452 1 2025-08-15 15:03:30.721 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 15:03:30.834 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 15:03:30.798 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 15:03:30.616 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:03:24.188 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46430 10 6452 1 2025-08-15 15:03:30.639 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:04:24.590 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49326 10 6452 1 2025-08-15 15:01:13.670 00:05:00.599 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 15:05:25.001 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:36750 12 10365 1 2025-08-15 15:02:13.673 00:05:00.594 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 15:06:25.477 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52690 10 6452 1 2025-08-15 15:07:25.888 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:34664 10 6452 1 2025-08-15 15:08:30.737 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 15:08:30.753 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 15:08:30.752 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 15:08:30.582 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:08:30.655 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:08:26.276 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35148 10 6452 1 2025-08-15 15:09:26.680 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38672 10 6452 1 2025-08-15 15:10:27.105 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59430 10 6452 1 2025-08-15 15:07:13.670 00:05:00.599 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 15:11:27.525 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51320 10 6452 1 2025-08-15 15:08:13.674 00:05:00.593 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 15:12:27.928 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:44234 10 6452 1 2025-08-15 15:13:30.942 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 15:13:30.955 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 15:13:30.786 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:13:30.974 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:13:31.057 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 15:13:28.347 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40018 10 6452 1 2025-08-15 15:14:28.756 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42366 10 6452 1 2025-08-15 15:15:29.151 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:56076 10 6452 1 2025-08-15 15:16:29.509 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36412 10 6452 1 2025-08-15 15:13:13.672 00:05:00.600 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 15:17:29.912 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45528 10 6452 1 2025-08-15 15:14:13.675 00:05:00.595 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 15:18:31.165 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 15:18:30.918 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 15:18:30.989 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 15:18:30.836 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:18:31.082 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:18:30.274 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57806 12 6556 1 2025-08-15 15:19:30.678 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43728 10 6452 1 2025-08-15 15:20:31.103 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40366 10 6452 1 2025-08-15 15:21:31.477 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42684 10 6452 1 2025-08-15 15:22:31.883 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:44442 12 6556 1 2025-08-15 15:19:13.673 00:05:00.599 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 15:23:31.377 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 15:23:31.296 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:23:31.294 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 15:23:31.413 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 15:23:31.377 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:23:32.310 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40948 10 6452 1 2025-08-15 15:20:13.675 00:05:00.595 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 15:24:32.713 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35828 10 6452 1 2025-08-15 15:25:33.100 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38928 10 6452 1 2025-08-15 15:26:33.470 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38198 10 6452 1 2025-08-15 15:27:33.877 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38788 10 6452 1 2025-08-15 15:28:31.395 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 15:28:31.137 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 15:28:31.233 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 15:28:31.164 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:28:31.314 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:28:34.279 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59854 10 6452 1 2025-08-15 15:25:13.674 00:05:00.602 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 15:29:34.636 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54178 10 6452 1 2025-08-15 15:26:13.677 00:05:00.597 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 15:30:35.036 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56264 10 6452 1 2025-08-15 15:31:35.435 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40974 10 6452 1 2025-08-15 15:32:35.796 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:38514 10 6452 1 2025-08-15 15:33:31.384 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 15:33:31.303 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:33:31.314 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 15:33:31.475 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 15:33:30.919 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:33:36.177 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46072 10 6452 1 2025-08-15 15:34:36.579 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:41214 10 6452 1 2025-08-15 15:31:13.675 00:05:00.601 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 15:35:36.978 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57530 10 6452 1 2025-08-15 15:32:13.678 00:05:00.595 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 15:36:37.384 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:42520 10 6452 1 2025-08-15 15:37:37.814 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:56302 10 6452 1 2025-08-15 15:38:31.668 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 15:38:31.585 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:38:31.655 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 15:38:31.580 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 15:38:31.449 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:38:38.195 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54106 10 6452 1 2025-08-15 15:39:38.595 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56384 10 6452 1 2025-08-15 15:40:39.003 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43614 10 6452 1 2025-08-15 15:37:13.675 00:05:00.603 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 15:41:39.403 00:00:10.926 TCP 1.101.0.1:3000 -> 23.104.0.1:35018 10 6452 1 2025-08-15 15:38:13.679 00:05:00.596 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 15:42:40.366 00:00:10.465 TCP 1.101.0.1:3000 -> 23.104.0.1:56916 10 6452 1 2025-08-15 15:43:31.560 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 15:43:31.559 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 15:43:31.638 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:43:31.562 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:43:31.644 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 15:43:40.869 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33988 10 6452 1 2025-08-15 15:44:41.232 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57688 10 6452 1 2025-08-15 15:45:41.589 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53642 10 6452 1 2025-08-15 15:46:41.956 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42956 10 6452 1 2025-08-15 15:43:13.687 00:05:00.593 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 15:47:42.319 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36778 10 6452 1 2025-08-15 15:44:13.691 00:05:00.586 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 15:48:31.651 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 15:48:31.692 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 15:48:31.568 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 15:48:31.655 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:48:31.568 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:48:42.730 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60016 10 6452 1 2025-08-15 15:49:43.139 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43226 10 6452 1 2025-08-15 15:50:43.546 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:50526 12 10367 1 2025-08-15 15:51:44.025 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52940 10 6452 1 2025-08-15 15:52:44.426 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41356 10 6452 1 2025-08-15 15:49:13.689 00:05:00.593 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 15:53:31.915 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 15:53:31.616 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 15:53:31.674 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 15:53:31.667 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:53:31.832 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:53:44.840 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:52290 10 6452 1 2025-08-15 15:50:13.691 00:05:00.588 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 15:54:45.278 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45448 10 6452 1 2025-08-15 15:55:45.686 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42878 10 6452 1 2025-08-15 15:56:46.065 00:00:10.646 TCP 1.101.0.1:3000 -> 23.104.0.1:47454 10 6452 1 2025-08-15 15:57:46.750 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56866 10 6452 1 2025-08-15 15:58:31.967 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 15:58:31.884 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 15:58:31.904 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 15:58:31.896 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 15:58:31.741 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 139, total bytes: 418584, total packets: 1018, avg bps: 881, avg pps: 0, avg bpp: 411 Time window: 2025-08-15 14:55:13 - 2025-08-15 15:58:31 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0019s User: 0.0019s Wall: 0.0016s flows/second: 87749.6 Runtime: 0.0016s