Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 18:59:04.371 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 18:58:46.052 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33468 10 6661 1 2025-08-16 18:59:04.289 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 18:59:04.423 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 18:59:04.158 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 18:59:04.289 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 18:57:14.329 00:02:00.487 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-16 18:59:46.420 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53556 10 6661 1 2025-08-16 18:56:14.328 00:04:00.492 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 19:00:46.840 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:39776 10 6661 1 2025-08-16 19:00:14.331 00:01:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 19:01:47.264 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58240 10 6661 1 2025-08-16 19:02:47.630 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37182 10 6661 1 2025-08-16 19:03:48.033 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58636 10 6661 1 2025-08-16 19:04:04.460 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 19:04:04.368 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 19:04:04.309 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:04:04.655 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:04:04.736 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 19:02:14.334 00:02:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-16 19:04:48.394 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48414 10 6661 1 2025-08-16 19:01:14.331 00:04:00.489 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 19:05:48.794 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:58192 12 10367 1 2025-08-16 19:05:14.335 00:01:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 19:06:49.243 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59038 10 6452 1 2025-08-16 19:06:14.334 00:01:00.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-16 19:07:49.656 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47786 10 6452 1 2025-08-16 19:09:04.718 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 19:09:04.519 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 19:09:04.298 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 19:09:04.635 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:09:04.636 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:08:50.061 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42418 10 6452 1 2025-08-16 19:09:50.463 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:59756 10 6452 1 2025-08-16 19:08:14.334 00:02:00.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-16 19:10:50.860 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57822 10 6452 1 2025-08-16 19:07:14.335 00:04:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 19:11:51.275 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53648 10 6452 1 2025-08-16 19:11:14.335 00:01:00.485 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-16 19:12:51.678 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38508 10 6452 1 2025-08-16 19:14:04.943 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 19:14:04.973 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 19:14:04.808 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:14:04.862 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:13:52.106 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48574 10 6452 1 2025-08-16 19:14:04.692 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 19:14:52.502 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43478 10 6452 1 2025-08-16 19:13:14.335 00:02:00.489 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-16 19:15:52.911 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59474 10 6452 1 2025-08-16 19:12:14.337 00:04:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 19:16:53.314 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46620 10 6452 1 2025-08-16 19:16:14.336 00:01:00.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-16 19:17:53.723 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47596 10 6452 1 2025-08-16 19:17:14.339 00:01:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 19:19:04.756 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 19:19:04.565 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 19:19:04.666 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 19:19:04.744 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:18:54.147 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37724 10 6452 1 2025-08-16 19:19:04.673 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:19:54.550 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51434 10 6452 1 2025-08-16 19:18:14.336 00:02:00.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-16 19:20:54.951 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40364 10 6452 1 2025-08-16 19:19:14.339 00:02:00.484 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-16 19:21:55.370 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59356 10 6452 1 2025-08-16 19:21:14.337 00:01:00.490 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-16 19:22:55.766 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34026 10 6452 1 2025-08-16 19:22:14.340 00:01:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 19:24:04.952 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 19:24:04.870 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 19:24:04.682 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 19:24:04.824 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:24:04.870 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:23:56.184 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45436 10 6452 1 2025-08-16 19:24:56.589 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59464 10 6452 1 2025-08-16 19:25:56.995 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37608 10 6452 1 2025-08-16 19:24:14.341 00:02:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-16 19:26:57.412 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54474 10 6452 1 2025-08-16 19:23:14.337 00:04:00.492 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 19:27:57.816 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35304 10 6452 1 2025-08-16 19:27:14.341 00:01:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 19:29:04.863 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:29:04.946 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 19:29:04.994 00:00:00.051 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 19:28:58.221 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34672 10 6452 1 2025-08-16 19:29:04.991 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 19:29:04.989 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:29:58.620 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:38646 10 6452 1 2025-08-16 19:30:58.995 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54108 10 6452 1 2025-08-16 19:29:14.342 00:02:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-16 19:31:59.400 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:47368 10 6452 1 2025-08-16 19:28:14.340 00:04:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 19:32:59.827 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37000 10 6452 1 2025-08-16 19:32:14.344 00:01:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 19:34:05.382 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 19:34:05.036 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 19:34:05.049 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 19:34:04.995 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:34:05.299 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:33:14.341 00:01:00.490 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-16 19:34:00.229 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60894 10 6452 1 2025-08-16 19:35:00.631 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56472 10 6452 1 2025-08-16 19:34:14.343 00:02:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-16 19:36:01.031 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52196 10 6452 1 2025-08-16 19:37:01.438 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43092 10 6452 1 2025-08-16 19:35:14.342 00:02:00.490 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-16 19:38:01.838 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:42132 10 6452 1 2025-08-16 19:37:14.344 00:01:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 19:39:04.926 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 19:39:04.963 00:00:00.034 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:39:05.240 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 19:39:05.083 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 19:39:05.157 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:38:14.341 00:01:00.490 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-16 19:39:02.267 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39292 10 6452 1 2025-08-16 19:40:02.674 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41924 10 6452 1 2025-08-16 19:41:03.100 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49952 10 6452 1 2025-08-16 19:39:14.344 00:02:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-16 19:40:14.341 00:02:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-16 19:42:03.504 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45652 10 6452 1 2025-08-16 19:43:03.906 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38332 12 6556 1 2025-08-16 19:42:14.345 00:01:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 19:44:05.384 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 19:44:04.921 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:44:05.165 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 19:44:05.225 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 19:44:05.301 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:44:04.315 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37574 10 6452 1 2025-08-16 19:43:14.341 00:01:00.492 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-16 19:45:04.683 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58426 10 6452 1 2025-08-16 19:46:05.114 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:57306 10 6452 1 2025-08-16 19:45:14.342 00:02:00.492 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-16 19:47:05.475 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44140 10 6452 1 2025-08-16 19:44:14.345 00:04:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 19:48:05.877 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51872 10 6452 1 2025-08-16 19:49:05.359 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 19:49:05.408 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 19:49:05.277 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 19:49:05.103 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:49:05.276 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:48:14.343 00:01:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-16 19:49:06.281 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40132 10 6452 1 2025-08-16 19:49:14.345 00:01:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 19:50:06.682 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52676 10 6452 1 2025-08-16 19:51:07.109 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58410 10 6452 1 2025-08-16 19:50:14.344 00:02:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-16 19:52:07.503 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34478 10 6452 1 2025-08-16 19:51:14.351 00:02:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-16 19:53:07.862 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33928 10 6452 1 2025-08-16 19:54:06.066 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 19:54:05.671 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 19:54:05.636 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 19:54:05.287 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:54:05.983 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 19:53:14.349 00:01:00.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-16 19:54:08.277 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47140 10 6452 1 2025-08-16 19:54:14.350 00:01:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 19:55:08.696 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:50926 12 10367 1 2025-08-16 19:56:09.193 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45672 10 6452 1 2025-08-16 19:55:14.349 00:02:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-16 19:57:09.607 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37692 10 6452 1 2025-08-16 19:56:14.351 00:02:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-16 19:58:10.013 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48888 10 6452 1 Summary: total flows: 163, total bytes: 426889, total packets: 1034, avg bps: 916, avg pps: 0, avg bpp: 412 Time window: 2025-08-16 18:56:14 - 2025-08-16 19:58:20 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0036s User: 0.0012s Wall: 0.0079s flows/second: 20724.9 Runtime: 0.0079s