Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 19:55:13.788 00:05:00.565 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 19:59:26.131 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:46876 10 6452 1 2025-08-15 19:56:13.792 00:05:00.558 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:00:26.510 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34918 10 6452 1 2025-08-15 20:01:26.911 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53050 10 6452 1 2025-08-15 20:02:27.275 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48018 10 6452 1 2025-08-15 20:03:36.706 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:03:27.680 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48336 10 6452 1 2025-08-15 20:03:36.555 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:03:36.662 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:03:36.807 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:03:36.890 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:04:28.113 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:34770 10 6452 1 2025-08-15 20:01:13.790 00:05:00.570 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:05:28.477 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38608 10 6452 1 2025-08-15 20:02:13.793 00:05:00.565 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:06:28.842 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:44948 10 6452 1 2025-08-15 20:07:29.261 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40942 10 6452 1 2025-08-15 20:08:36.726 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:08:36.505 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:08:36.635 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:08:36.783 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:08:36.644 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:08:29.673 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51016 10 6452 1 2025-08-15 20:09:30.116 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41128 10 6452 1 2025-08-15 20:10:30.513 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37820 10 6452 1 2025-08-15 20:07:13.791 00:05:00.571 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:11:30.916 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59256 10 6452 1 2025-08-15 20:08:13.795 00:05:00.566 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:12:31.278 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54728 10 6452 1 2025-08-15 20:13:37.387 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:13:37.483 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:13:36.979 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:13:37.212 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:13:37.296 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:13:31.679 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58202 10 6452 1 2025-08-15 20:14:32.110 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42458 10 6452 1 2025-08-15 20:15:32.472 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42340 10 6452 1 2025-08-15 20:16:32.875 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33362 10 6452 1 2025-08-15 20:13:13.795 00:05:00.571 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:17:33.235 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49748 10 6452 1 2025-08-15 20:14:13.796 00:05:00.567 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:18:37.070 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:18:36.990 00:00:00.038 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:18:36.989 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:18:36.965 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:18:36.987 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:18:33.641 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42610 10 6452 1 2025-08-15 20:19:34.053 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37792 10 6452 1 2025-08-15 20:20:34.458 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:54256 10 6452 1 2025-08-15 20:21:34.855 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:35182 10 6452 1 2025-08-15 20:22:35.279 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45850 10 6452 1 2025-08-15 20:19:13.795 00:05:00.574 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:23:37.274 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:23:37.193 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:23:37.062 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:23:37.066 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:23:37.155 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:23:35.640 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36860 10 6452 1 2025-08-15 20:20:13.797 00:05:00.567 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:24:36.064 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49662 10 6452 1 2025-08-15 20:25:36.466 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42646 10 6452 1 2025-08-15 20:26:36.868 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43064 10 6452 1 2025-08-15 20:27:37.277 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40082 10 6452 1 2025-08-15 20:28:37.086 00:00:00.039 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:28:37.255 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:28:37.117 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:28:37.083 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:28:37.005 00:00:00.038 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:28:37.682 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58668 10 6452 1 2025-08-15 20:25:13.795 00:05:00.573 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:29:38.108 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44000 10 6452 1 2025-08-15 20:26:13.798 00:05:00.568 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:30:38.469 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53960 10 6452 1 2025-08-15 20:31:38.867 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53794 10 6452 1 2025-08-15 20:32:39.284 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48562 10 6452 1 2025-08-15 20:33:37.515 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:33:37.317 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:33:37.390 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:33:37.402 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:33:37.434 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:33:39.694 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44846 10 6452 1 2025-08-15 20:34:40.119 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48898 10 6452 1 2025-08-15 20:31:13.798 00:05:00.574 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:35:40.486 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:34366 12 10367 1 2025-08-15 20:32:13.801 00:05:00.568 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:36:40.915 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40106 10 6452 1 2025-08-15 20:37:41.329 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57956 10 6452 1 2025-08-15 20:38:37.314 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:38:37.502 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:38:37.443 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:38:37.198 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:38:37.232 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:38:41.731 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49360 10 6452 1 2025-08-15 20:39:42.140 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33156 10 6452 1 2025-08-15 20:40:42.544 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:55488 10 6452 1 2025-08-15 20:37:13.798 00:05:00.575 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:41:42.959 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59848 10 6452 1 2025-08-15 20:38:13.801 00:05:00.570 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:42:43.361 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37582 10 6452 1 2025-08-15 20:43:37.342 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:43:37.429 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:43:37.383 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:43:37.347 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:43:37.430 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:43:43.767 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:44296 10 6452 1 2025-08-15 20:44:44.143 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:57124 10 6452 1 2025-08-15 20:45:44.503 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55872 10 6452 1 2025-08-15 20:46:44.913 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58196 10 6452 1 2025-08-15 20:43:13.802 00:05:00.573 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:47:45.315 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53138 10 6452 1 2025-08-15 20:44:13.805 00:05:00.568 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:48:37.813 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:48:37.728 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:48:37.601 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:48:37.547 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:48:37.731 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:48:45.726 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49352 10 6452 1 2025-08-15 20:49:46.141 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50968 10 6452 1 2025-08-15 20:50:46.497 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51706 10 6452 1 2025-08-15 20:51:46.901 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58228 10 6452 1 2025-08-15 20:52:47.308 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37856 10 6452 1 2025-08-15 20:49:13.804 00:05:00.573 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 20:53:37.833 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:53:37.902 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:53:37.730 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:53:37.909 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:53:37.991 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 20:53:47.669 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43202 10 6452 1 2025-08-15 20:50:13.807 00:05:00.568 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 20:54:48.098 00:00:10.922 TCP 1.101.0.1:3000 -> 23.104.0.1:57982 10 6452 1 2025-08-15 20:55:49.065 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60012 10 6452 1 2025-08-15 20:56:49.469 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58314 10 6452 1 2025-08-15 20:57:49.872 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55880 10 6452 1 2025-08-15 20:58:37.973 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 20:58:37.846 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 20:58:37.898 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:58:37.748 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 20:58:37.830 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 139, total bytes: 414463, total packets: 1012, avg bps: 871, avg pps: 0, avg bpp: 409 Time window: 2025-08-15 19:55:13 - 2025-08-15 20:58:37 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0025s User: 0.0012s Wall: 0.0013s flows/second: 107249.5 Runtime: 0.0013s