Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 00:55:13.883 00:05:00.587 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 00:59:28.535 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51520 10 6452 1 2025-08-16 00:56:13.885 00:05:00.582 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 01:00:28.898 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52028 10 6452 1 2025-08-16 01:01:29.307 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59076 10 6452 1 2025-08-16 01:02:29.671 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54948 10 6452 1 2025-08-16 01:03:42.677 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 01:03:42.805 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 01:03:30.037 00:00:10.574 TCP 1.101.0.1:3000 -> 23.104.0.1:51282 10 6452 1 2025-08-16 01:03:42.736 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 01:03:42.424 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:03:42.594 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:04:30.656 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44036 10 6452 1 2025-08-16 01:01:13.886 00:05:00.584 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 01:05:31.073 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34420 10 6452 1 2025-08-16 01:02:13.889 00:05:00.579 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 01:06:31.432 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36350 10 6452 1 2025-08-16 01:07:31.848 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:45628 10 6452 1 2025-08-16 01:08:42.768 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 01:08:42.979 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 01:08:42.587 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 01:08:42.729 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:08:42.687 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:08:32.274 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49116 10 6452 1 2025-08-16 01:09:32.677 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:34216 10 6452 1 2025-08-16 01:10:33.071 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49938 10 6452 1 2025-08-16 01:07:13.888 00:05:00.584 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 01:11:33.477 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37580 10 6452 1 2025-08-16 01:08:13.892 00:05:00.578 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 01:12:33.883 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50874 10 6452 1 2025-08-16 01:13:43.193 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 01:13:43.174 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 01:13:43.116 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 01:13:43.131 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:13:34.294 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45388 10 6452 1 2025-08-16 01:13:43.110 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:14:34.698 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:49076 10 6452 1 2025-08-16 01:15:35.079 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59610 10 6452 1 2025-08-16 01:16:35.480 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59058 10 6452 1 2025-08-16 01:13:13.891 00:05:00.582 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 01:17:35.884 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:52304 10 6452 1 2025-08-16 01:14:13.894 00:05:00.577 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 01:18:43.442 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 01:18:43.307 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 01:18:43.082 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:18:43.359 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:18:43.173 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 01:18:36.307 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50276 10 6452 1 2025-08-16 01:19:36.711 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35806 10 6452 1 2025-08-16 01:20:37.124 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41500 10 6452 1 2025-08-16 01:21:37.521 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:36096 10 6452 1 2025-08-16 01:22:37.945 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39736 10 6452 1 2025-08-16 01:19:13.894 00:05:00.584 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 01:23:43.142 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 01:23:43.230 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 01:23:43.195 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 01:23:43.121 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:23:43.058 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:23:38.354 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45222 10 6452 1 2025-08-16 01:20:13.896 00:05:00.578 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 01:24:38.765 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53058 10 6452 1 2025-08-16 01:25:39.133 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37704 12 6556 1 2025-08-16 01:26:39.537 00:00:10.454 TCP 1.101.0.1:3000 -> 23.104.0.1:36554 10 6452 1 2025-08-16 01:27:40.025 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49476 10 6452 1 2025-08-16 01:28:43.271 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 01:28:43.041 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 01:28:43.078 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:28:43.032 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:28:43.116 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 01:28:40.430 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38014 10 6452 1 2025-08-16 01:25:13.895 00:05:00.584 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 01:29:40.793 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39050 10 6452 1 2025-08-16 01:26:13.898 00:05:00.580 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 01:30:41.197 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:36906 12 10367 1 2025-08-16 01:31:41.635 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33772 10 6452 1 2025-08-16 01:32:42.037 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35310 10 6452 1 2025-08-16 01:33:43.248 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 01:33:43.254 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 01:33:43.330 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:33:43.253 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:33:43.336 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 01:33:42.440 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48186 10 6452 1 2025-08-16 01:34:42.844 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:42688 10 6452 1 2025-08-16 01:31:13.898 00:05:00.583 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 01:35:43.283 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33642 10 6452 1 2025-08-16 01:32:13.901 00:05:00.578 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 01:36:43.646 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43334 10 6452 1 2025-08-16 01:37:44.071 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38130 10 6452 1 2025-08-16 01:38:43.790 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 01:38:43.851 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 01:38:43.663 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:38:43.852 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:38:43.936 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 01:38:44.473 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34612 10 6452 1 2025-08-16 01:39:44.885 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:46942 12 6556 1 2025-08-16 01:40:45.319 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49566 10 6452 1 2025-08-16 01:37:13.902 00:05:00.581 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 01:41:45.725 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:35512 10 6452 1 2025-08-16 01:38:13.906 00:05:00.576 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 01:42:46.157 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58450 10 6452 1 2025-08-16 01:43:43.645 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 01:43:43.649 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 01:43:43.701 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 01:43:43.593 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:43:43.564 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:43:46.564 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47722 10 6452 1 2025-08-16 01:44:46.976 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36104 10 6452 1 2025-08-16 01:45:47.394 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38196 10 6452 1 2025-08-16 01:46:47.797 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41180 10 6452 1 2025-08-16 01:43:13.904 00:05:00.580 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 01:47:48.200 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37528 10 6452 1 2025-08-16 01:44:13.908 00:05:00.575 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 01:48:43.892 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 01:48:43.578 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 01:48:43.490 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 01:48:43.596 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:48:43.809 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:48:48.602 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33222 10 6452 1 2025-08-16 01:49:49.005 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35864 10 6452 1 2025-08-16 01:50:49.412 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41452 10 6452 1 2025-08-16 01:51:49.810 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40028 10 6452 1 2025-08-16 01:52:50.175 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60536 10 6452 1 2025-08-16 01:49:13.909 00:05:00.578 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 01:53:43.837 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 01:53:43.901 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 01:53:43.814 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 01:53:43.616 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:53:43.754 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:53:50.578 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49988 10 6452 1 2025-08-16 01:50:13.911 00:05:00.572 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 01:54:50.983 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36338 10 6452 1 2025-08-16 01:55:51.397 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49020 10 6452 1 2025-08-16 01:56:51.799 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55358 10 6452 1 2025-08-16 01:57:52.211 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43908 10 6452 1 2025-08-16 01:58:44.033 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 01:58:43.786 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 01:58:43.997 00:00:00.049 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:58:43.950 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 01:58:43.782 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 Summary: total flows: 139, total bytes: 414671, total packets: 1016, avg bps: 870, avg pps: 0, avg bpp: 408 Time window: 2025-08-16 00:55:13 - 2025-08-16 01:58:44 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0013s User: 0.0025s Wall: 0.0021s flows/second: 67275.4 Runtime: 0.0021s