Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 08:58:52.316 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 08:58:52.230 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 08:58:52.126 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 08:58:42.523 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39136 10 6452 1 2025-08-16 08:58:52.229 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 08:58:52.312 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 08:55:14.087 00:04:00.538 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 08:54:14.092 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 790 1 2025-08-16 08:59:42.936 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:52100 10 6452 1 2025-08-16 09:00:43.324 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:59878 10 6452 1 2025-08-16 09:01:43.700 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51636 10 6452 1 2025-08-16 09:02:44.072 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45920 10 6452 1 2025-08-16 09:03:52.454 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:03:52.385 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 09:03:52.490 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 09:03:52.461 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:03:44.481 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47776 10 6452 1 2025-08-16 09:03:52.538 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 09:00:14.090 00:04:00.537 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 09:04:44.880 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:43366 10 6452 1 2025-08-16 09:00:14.624 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-08-16 09:05:45.267 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36568 10 6452 1 2025-08-16 09:06:45.674 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33398 10 6452 1 2025-08-16 09:07:46.112 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34852 10 6452 1 2025-08-16 09:08:52.614 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 09:08:52.475 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 09:08:52.478 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 09:08:52.353 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:08:52.533 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:08:46.514 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48552 10 6452 1 2025-08-16 09:05:14.092 00:04:00.537 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 09:09:46.917 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35542 10 6452 1 2025-08-16 09:07:14.094 00:03:00.531 TCP 179.21.23.23:179 -> 179.21.23.21:38570 8 492 1 2025-08-16 09:10:47.321 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50078 10 6452 1 2025-08-16 09:11:47.680 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:45192 10 6452 1 2025-08-16 09:12:48.114 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38808 10 6452 1 2025-08-16 09:13:52.607 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 09:13:52.527 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 09:13:52.335 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 09:13:52.393 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:13:52.524 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:13:48.516 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54458 10 6452 1 2025-08-16 09:14:48.882 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38020 10 6452 1 2025-08-16 09:11:14.094 00:04:00.534 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 09:10:14.093 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-08-16 09:15:49.285 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40624 10 6452 1 2025-08-16 09:16:49.685 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57772 10 6452 1 2025-08-16 09:17:50.109 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41288 10 6452 1 2025-08-16 09:18:52.614 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 09:18:52.531 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 09:18:52.531 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 09:18:52.647 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:18:52.531 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:18:50.518 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41512 10 6452 1 2025-08-16 09:19:50.921 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55752 10 6452 1 2025-08-16 09:16:14.096 00:04:00.537 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 09:20:51.339 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:36708 12 10365 1 2025-08-16 09:16:14.633 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-08-16 09:21:51.782 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55594 10 6452 1 2025-08-16 09:22:52.192 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56844 10 6452 1 2025-08-16 09:23:52.747 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 09:23:52.526 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:23:52.761 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:23:52.764 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 09:23:52.843 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 09:23:52.594 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54274 10 6452 1 2025-08-16 09:24:52.993 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48366 10 6452 1 2025-08-16 09:21:14.098 00:04:00.538 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 09:25:53.401 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41760 10 6452 1 2025-08-16 09:23:14.097 00:03:00.542 TCP 179.21.23.21:38570 -> 179.21.23.23:179 8 492 1 2025-08-16 09:26:53.807 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:37888 10 6452 1 2025-08-16 09:27:54.180 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47916 10 6452 1 2025-08-16 09:28:52.881 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:28:52.958 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 09:28:52.968 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 09:28:52.738 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:28:52.965 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 09:28:54.580 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56058 10 6452 1 2025-08-16 09:29:54.986 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40376 10 6452 1 2025-08-16 09:30:55.388 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45372 10 6452 1 2025-08-16 09:26:14.099 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 790 1 2025-08-16 09:27:14.102 00:04:00.538 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 09:31:55.798 00:00:10.537 TCP 1.101.0.1:3000 -> 23.104.0.1:40194 10 6452 1 2025-08-16 09:32:56.379 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:49948 10 6452 1 2025-08-16 09:33:53.049 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 09:33:53.215 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 09:33:52.843 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:33:53.072 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:33:53.156 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 09:33:56.749 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59324 10 6452 1 2025-08-16 09:34:57.149 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51646 10 6452 1 2025-08-16 09:35:57.555 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:48832 12 10365 1 2025-08-16 09:32:14.102 00:04:00.539 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 09:36:58.005 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33828 10 6452 1 2025-08-16 09:32:14.637 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-08-16 09:37:58.407 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35742 10 6452 1 2025-08-16 09:38:53.337 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 09:38:53.261 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 09:38:53.313 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 09:38:53.265 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:38:53.254 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:38:58.821 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34832 10 6452 1 2025-08-16 09:39:59.231 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39532 10 6452 1 2025-08-16 09:40:59.634 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34078 10 6452 1 2025-08-16 09:37:14.102 00:04:00.543 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 09:42:00.036 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36018 10 6452 1 2025-08-16 09:43:00.438 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55252 10 6452 1 2025-08-16 09:43:53.054 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 09:43:53.216 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 09:43:53.216 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 09:43:53.099 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:43:52.971 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:44:00.803 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49018 10 6452 1 2025-08-16 09:39:14.105 00:06:00.538 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-16 09:45:01.210 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:54508 10 6452 1 2025-08-16 09:46:01.587 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55812 10 6452 1 2025-08-16 09:46:14.108 00:01:00.537 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 09:42:14.103 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-08-16 09:47:01.984 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:60564 10 6452 1 2025-08-16 09:48:02.354 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39148 10 6452 1 2025-08-16 09:48:53.227 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 09:48:53.237 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 09:48:53.028 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:48:53.299 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:48:53.383 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 09:49:02.765 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:52086 10 6452 1 2025-08-16 09:50:03.193 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40248 10 6452 1 2025-08-16 09:51:03.598 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55258 10 6452 1 2025-08-16 09:48:14.106 00:04:00.540 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 09:52:04.003 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49374 10 6452 1 2025-08-16 09:48:14.648 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-08-16 09:53:04.408 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48288 10 6452 1 2025-08-16 09:53:53.893 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 09:53:53.525 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 09:53:53.659 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 09:53:53.532 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:53:53.809 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 09:54:04.805 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60510 10 6452 1 2025-08-16 09:55:05.212 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60066 10 6452 1 2025-08-16 09:56:05.612 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38002 10 6452 1 2025-08-16 09:53:14.108 00:04:00.541 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 09:57:06.013 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33916 10 6452 1 2025-08-16 09:55:14.105 00:03:00.546 TCP 179.21.23.21:38570 -> 179.21.23.23:179 8 492 1 2025-08-16 09:58:06.424 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33064 10 6452 1 Summary: total flows: 144, total bytes: 425810, total packets: 1040, avg bps: 886, avg pps: 0, avg bpp: 409 Time window: 2025-08-16 08:54:14 - 2025-08-16 09:58:16 Total flows processed: 144, passed: 144, Blocks skipped: 0, Bytes read: 15040 Sys: 0.0036s User: 0.0009s Wall: 0.0031s flows/second: 45801.2 Runtime: 0.0032s