Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 17:55:13.743 00:05:00.574 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 17:59:38.392 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47098 10 6452 1 2025-08-15 17:56:13.745 00:05:00.569 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 18:00:38.804 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54078 10 6452 1 2025-08-15 18:01:39.212 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33926 10 6452 1 2025-08-15 18:02:39.612 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56526 10 6452 1 2025-08-15 18:03:34.352 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 18:03:34.505 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 18:03:34.391 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:03:34.440 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:03:34.522 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 18:03:39.978 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:42682 11 6504 1 2025-08-15 18:04:40.402 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:36362 10 6452 1 2025-08-15 18:01:13.743 00:05:00.575 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 18:05:40.822 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55352 10 6452 1 2025-08-15 18:02:13.745 00:05:00.570 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 18:06:41.222 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42930 10 6452 1 2025-08-15 18:07:41.629 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44950 10 6452 1 2025-08-15 18:08:34.574 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 18:08:34.476 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 18:08:34.488 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 18:08:34.361 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:08:34.492 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:08:41.994 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45850 10 6452 1 2025-08-15 18:09:42.394 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44758 10 6452 1 2025-08-15 18:10:42.806 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48404 10 6452 1 2025-08-15 18:07:13.745 00:05:00.574 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 18:11:43.220 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56798 10 6452 1 2025-08-15 18:08:13.748 00:05:00.569 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 18:12:43.637 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51238 10 6452 1 2025-08-15 18:13:34.760 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 18:13:34.599 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 18:13:34.670 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 18:13:34.439 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:13:34.676 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:13:44.000 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59582 10 6452 1 2025-08-15 18:14:44.357 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45868 10 6452 1 2025-08-15 18:15:44.760 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49858 10 6452 1 2025-08-15 18:16:45.166 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47804 10 6452 1 2025-08-15 18:13:13.758 00:05:00.564 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 18:17:45.571 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36482 10 6452 1 2025-08-15 18:14:13.757 00:05:00.563 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 18:18:34.654 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 18:18:34.927 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 18:18:34.602 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:18:34.671 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:18:34.755 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 18:18:45.980 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41788 10 6452 1 2025-08-15 18:19:46.389 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49308 10 6452 1 2025-08-15 18:20:46.789 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47116 10 6452 1 2025-08-15 18:21:47.151 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40654 10 6452 1 2025-08-15 18:22:47.554 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40250 10 6452 1 2025-08-15 18:19:13.755 00:05:00.569 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 18:23:34.700 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 18:23:34.614 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 18:23:34.611 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 18:23:34.344 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:23:34.616 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:23:47.952 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35916 10 6452 1 2025-08-15 18:20:13.757 00:05:00.565 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 18:24:48.318 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56098 10 6452 1 2025-08-15 18:25:48.684 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52392 10 6452 1 2025-08-15 18:26:49.059 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53782 10 6452 1 2025-08-15 18:27:49.466 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51072 10 6452 1 2025-08-15 18:28:34.903 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 18:28:34.920 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 18:28:34.923 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 18:28:34.833 00:00:00.037 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:28:34.822 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:28:49.825 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:57892 10 6452 1 2025-08-15 18:25:13.758 00:05:00.570 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 18:29:50.267 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52806 10 6452 1 2025-08-15 18:26:13.758 00:05:00.565 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 18:30:50.670 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53798 10 6452 1 2025-08-15 18:31:51.096 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41988 10 6452 1 2025-08-15 18:32:51.508 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34294 10 6452 1 2025-08-15 18:33:34.612 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 18:33:34.859 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:33:34.904 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:33:35.004 00:00:00.050 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 18:33:34.989 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 18:33:51.931 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:56650 10 6452 1 2025-08-15 18:34:52.307 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54478 10 6452 1 2025-08-15 18:31:13.760 00:05:00.570 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 18:35:52.713 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59846 10 6452 1 2025-08-15 18:32:13.761 00:05:00.566 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 18:36:53.117 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:51216 10 6452 1 2025-08-15 18:37:53.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44368 10 6452 1 2025-08-15 18:38:34.776 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 18:38:35.003 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:38:35.097 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 18:38:35.015 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:38:35.085 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 18:38:53.925 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:60216 10 6452 1 2025-08-15 18:39:54.355 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47986 10 6452 1 2025-08-15 18:40:54.767 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:53576 12 10367 1 2025-08-15 18:37:13.759 00:05:00.571 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 18:41:55.212 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:37086 10 6452 1 2025-08-15 18:38:13.764 00:05:00.564 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 18:42:55.569 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58654 10 6452 1 2025-08-15 18:43:35.152 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 18:43:34.924 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 18:43:35.008 00:00:00.038 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 18:43:35.058 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:43:35.070 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:43:55.933 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:50114 10 6452 1 2025-08-15 18:44:56.372 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50860 10 6452 1 2025-08-15 18:45:56.780 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:58042 10 6452 1 2025-08-15 18:46:57.145 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34536 10 6452 1 2025-08-15 18:43:13.761 00:05:00.570 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 18:47:57.552 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34894 10 6452 1 2025-08-15 18:44:13.764 00:05:00.565 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 18:48:35.339 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 18:48:35.263 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 18:48:35.216 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 18:48:35.162 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:48:35.257 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:48:57.953 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42964 12 6556 1 2025-08-15 18:49:58.360 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36582 10 6452 1 2025-08-15 18:50:58.768 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57856 10 6452 1 2025-08-15 18:51:59.185 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56898 10 6452 1 2025-08-15 18:52:59.596 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37302 10 6452 1 2025-08-15 18:49:13.766 00:05:00.567 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 18:53:35.205 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 18:53:35.270 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 18:53:35.365 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 18:53:35.317 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:53:35.122 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:54:00.004 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34002 10 6452 1 2025-08-15 18:50:13.768 00:05:00.563 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 18:55:00.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43806 10 6452 1 2025-08-15 18:56:00.759 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54702 10 6452 1 2025-08-15 18:57:01.178 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44048 10 6452 1 2025-08-15 18:58:01.580 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34898 10 6452 1 2025-08-15 18:58:35.447 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 18:58:35.318 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 18:58:35.059 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:58:35.447 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 18:58:35.530 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 139, total bytes: 414619, total packets: 1015, avg bps: 872, avg pps: 0, avg bpp: 408 Time window: 2025-08-15 17:55:13 - 2025-08-15 18:58:35 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0031s User: 0.0010s Wall: 0.0022s flows/second: 62387.2 Runtime: 0.0022s