Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 02:55:13.943 00:05:00.564 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 02:59:17.356 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56922 10 6452 1 2025-08-16 02:56:13.947 00:05:00.558 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 03:00:17.763 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54804 10 6452 1 2025-08-16 03:01:18.171 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47220 10 6452 1 2025-08-16 03:02:18.570 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38368 10 6452 1 2025-08-16 03:03:18.978 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41528 10 6452 1 2025-08-16 03:03:45.198 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 03:03:45.157 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 03:03:45.105 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:03:45.269 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:03:45.352 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 03:04:19.384 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47454 10 6452 1 2025-08-16 03:01:13.945 00:05:00.563 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 03:05:19.747 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37434 10 6452 1 2025-08-16 03:02:13.949 00:05:00.557 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 03:06:20.151 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44750 10 6452 1 2025-08-16 03:07:20.558 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46738 10 6452 1 2025-08-16 03:08:20.964 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58894 10 6452 1 2025-08-16 03:08:45.817 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 03:08:45.584 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 03:08:45.505 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 03:08:45.358 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:08:45.734 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:09:21.370 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52436 10 6452 1 2025-08-16 03:10:21.776 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38130 10 6452 1 2025-08-16 03:07:13.946 00:05:00.565 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 03:11:22.141 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60368 10 6452 1 2025-08-16 03:08:13.949 00:05:00.559 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 03:12:22.542 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44330 10 6452 1 2025-08-16 03:13:22.939 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:40998 10 6452 1 2025-08-16 03:13:45.511 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 03:13:45.431 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 03:13:45.339 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 03:13:45.270 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:13:45.428 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:14:23.363 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58740 10 6452 1 2025-08-16 03:15:23.763 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:59644 10 6452 1 2025-08-16 03:16:24.134 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44014 10 6452 1 2025-08-16 03:13:13.947 00:05:00.567 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 03:17:24.545 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42248 10 6452 1 2025-08-16 03:14:13.950 00:05:00.562 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 03:18:24.915 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54790 10 6452 1 2025-08-16 03:18:45.602 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 03:18:45.608 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 03:18:45.476 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:18:45.550 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:18:45.632 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 03:19:25.288 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48814 10 6452 1 2025-08-16 03:20:25.688 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:42050 10 6452 1 2025-08-16 03:21:26.111 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36450 10 6452 1 2025-08-16 03:22:26.474 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33088 10 6452 1 2025-08-16 03:19:13.948 00:05:00.566 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 03:23:26.881 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59138 10 6452 1 2025-08-16 03:23:45.662 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 03:23:45.580 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:23:45.573 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 03:23:45.633 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 03:23:45.431 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:20:13.951 00:05:00.562 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 03:24:27.285 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36414 10 6452 1 2025-08-16 03:25:27.688 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46256 10 6452 1 2025-08-16 03:26:28.061 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:55364 10 6452 1 2025-08-16 03:27:28.430 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48880 10 6452 1 2025-08-16 03:28:29.172 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57030 10 6452 1 2025-08-16 03:28:45.606 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 03:28:45.610 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 03:28:45.704 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:28:45.671 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:28:45.754 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 03:25:13.950 00:05:00.567 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 03:29:29.572 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38432 10 6452 1 2025-08-16 03:26:13.952 00:05:00.562 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 03:30:29.974 00:00:10.607 TCP 1.101.0.1:3000 -> 23.104.0.1:58872 12 10367 1 2025-08-16 03:31:30.619 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44918 10 6452 1 2025-08-16 03:32:31.026 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52002 10 6452 1 2025-08-16 03:33:31.425 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39108 10 6452 1 2025-08-16 03:33:45.952 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 03:33:45.915 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 03:33:45.729 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 03:33:45.728 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:33:45.867 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:34:31.836 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:42532 10 6452 1 2025-08-16 03:31:13.951 00:05:00.567 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 03:35:32.260 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49636 10 6452 1 2025-08-16 03:32:13.954 00:05:00.562 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 03:36:32.664 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:34024 10 6452 1 2025-08-16 03:37:33.036 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36448 10 6452 1 2025-08-16 03:38:45.891 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 03:38:33.439 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55272 10 6452 1 2025-08-16 03:38:45.901 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 03:38:45.683 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 03:38:45.833 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:38:45.808 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:39:33.847 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:35346 10 6452 1 2025-08-16 03:40:34.282 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33054 10 6452 1 2025-08-16 03:37:13.953 00:05:00.568 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 03:41:34.694 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53524 10 6452 1 2025-08-16 03:38:13.956 00:05:00.562 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 03:42:35.116 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38412 10 6452 1 2025-08-16 03:43:46.056 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 03:43:45.974 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:43:45.741 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 03:43:35.521 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45172 10 6452 1 2025-08-16 03:43:45.841 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 03:43:45.574 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:44:35.921 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:32810 10 6452 1 2025-08-16 03:45:36.296 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56600 10 6452 1 2025-08-16 03:46:36.694 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49698 10 6452 1 2025-08-16 03:43:13.956 00:05:00.565 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 03:47:37.113 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58208 10 6452 1 2025-08-16 03:44:13.959 00:05:00.560 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 03:48:46.194 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 03:48:45.911 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 03:48:37.531 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59172 10 6452 1 2025-08-16 03:48:46.167 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:48:46.079 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:48:46.162 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 03:49:37.941 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:59200 10 6452 1 2025-08-16 03:50:38.378 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50668 10 6452 1 2025-08-16 03:51:38.784 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49200 10 6452 1 2025-08-16 03:52:39.158 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58660 10 6452 1 2025-08-16 03:49:13.960 00:05:00.566 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-16 03:53:46.486 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 03:53:39.562 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33368 10 6452 1 2025-08-16 03:53:46.253 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 03:53:46.086 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:53:46.485 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 03:53:46.568 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 03:50:13.962 00:05:00.560 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-16 03:54:39.972 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34008 10 6452 1 2025-08-16 03:55:40.396 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:36472 12 10365 1 2025-08-16 03:56:40.832 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34270 10 6452 1 2025-08-16 03:57:41.252 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36674 10 6452 1 2025-08-16 03:58:46.317 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 135, total bytes: 417368, total packets: 1002, avg bps: 875, avg pps: 0, avg bpp: 416 Time window: 2025-08-16 02:55:13 - 2025-08-16 03:58:46 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0010s User: 0.0030s Wall: 0.0021s flows/second: 63836.6 Runtime: 0.0021s