Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-17 07:59:19.863 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 07:59:05.113 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56170 10 6452 1 2025-08-17 07:59:19.706 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 07:59:19.937 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 07:59:20.020 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 07:59:20.109 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 08:00:05.480 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45378 10 6452 1 2025-08-17 08:01:05.880 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49962 10 6452 1 2025-08-17 07:57:14.617 00:05:00.460 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 08:02:06.280 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:41004 10 6452 1 2025-08-17 07:59:14.616 00:05:00.465 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 08:03:06.662 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42956 10 6452 1 2025-08-17 08:04:07.081 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43838 10 6452 1 2025-08-17 08:04:19.920 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:04:20.073 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 08:04:20.253 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 08:04:20.077 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:04:20.160 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 08:05:07.495 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49692 10 6452 1 2025-08-17 08:06:07.910 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56764 10 6452 1 2025-08-17 08:03:14.617 00:05:00.460 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 08:07:08.325 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:41046 10 6452 1 2025-08-17 08:08:08.755 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:45368 10 6452 1 2025-08-17 08:05:14.616 00:05:00.465 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 08:09:09.130 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35602 10 6452 1 2025-08-17 08:09:20.316 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 08:09:20.369 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 08:09:20.237 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 08:09:20.099 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:09:20.232 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:10:09.530 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:56206 14 10471 1 2025-08-17 08:11:10.020 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57636 10 6452 1 2025-08-17 08:12:10.434 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56374 10 6452 1 2025-08-17 08:09:14.621 00:05:00.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 08:13:10.840 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:36152 10 6452 1 2025-08-17 08:14:20.325 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 08:14:11.268 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:50564 10 6452 1 2025-08-17 08:14:20.529 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 08:14:20.043 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:14:20.333 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:14:20.414 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 08:11:14.616 00:05:00.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 08:15:11.691 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35448 10 6452 1 2025-08-17 08:16:12.110 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41080 10 6452 1 2025-08-17 08:17:12.511 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57042 10 6452 1 2025-08-17 08:18:12.913 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60100 10 6452 1 2025-08-17 08:15:14.620 00:05:00.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 08:19:20.726 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 08:19:20.548 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 08:19:20.688 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 08:19:20.720 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:19:13.277 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54344 10 6452 1 2025-08-17 08:19:20.644 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:20:13.675 00:00:11.078 TCP 1.101.0.1:3000 -> 23.104.0.1:37696 10 6452 1 2025-08-17 08:17:14.618 00:05:00.471 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 08:21:14.794 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49284 10 6452 1 2025-08-17 08:22:15.193 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56730 10 6452 1 2025-08-17 08:23:15.594 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36576 10 6452 1 2025-08-17 08:24:20.283 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 08:24:20.434 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 08:24:20.455 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:24:20.541 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:24:20.623 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 08:24:16.000 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44640 10 6452 1 2025-08-17 08:21:14.623 00:05:00.464 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 08:25:16.401 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39702 10 6452 1 2025-08-17 08:26:16.765 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38788 10 6452 1 2025-08-17 08:23:14.622 00:05:00.466 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 08:27:17.134 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41784 10 6452 1 2025-08-17 08:28:17.535 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:47872 10 6452 1 2025-08-17 08:29:20.882 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 08:29:20.794 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 08:29:20.741 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 08:29:20.380 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:29:20.801 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:29:17.889 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36026 10 6452 1 2025-08-17 08:30:18.298 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56932 10 6452 1 2025-08-17 08:27:14.626 00:05:00.462 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 08:31:18.702 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:54046 10 6452 1 2025-08-17 08:32:19.066 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38600 10 6452 1 2025-08-17 08:29:14.623 00:05:00.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 08:33:19.470 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36884 10 6452 1 2025-08-17 08:34:20.978 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 08:34:20.783 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 08:34:20.775 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 08:34:20.748 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:34:20.894 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:34:19.872 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39772 10 6452 1 2025-08-17 08:35:20.238 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38476 10 6452 1 2025-08-17 08:36:20.602 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33828 10 6452 1 2025-08-17 08:33:14.626 00:05:00.461 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 08:37:20.968 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38896 10 6452 1 2025-08-17 08:38:21.392 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49154 10 6452 1 2025-08-17 08:35:14.624 00:05:00.466 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 08:39:20.769 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 08:39:20.815 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 08:39:20.762 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 08:39:20.422 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:39:20.686 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:39:21.814 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36146 10 6452 1 2025-08-17 08:40:22.228 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54784 10 6452 1 2025-08-17 08:41:22.629 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36332 10 6452 1 2025-08-17 08:42:23.030 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50690 10 6452 1 2025-08-17 08:39:14.627 00:05:00.462 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 08:43:23.435 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54104 10 6452 1 2025-08-17 08:44:20.894 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 08:44:20.895 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 08:44:20.521 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:44:20.718 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:44:20.801 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 08:44:23.838 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:52966 10 6452 1 2025-08-17 08:41:14.625 00:05:00.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 08:45:24.260 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52732 10 6452 1 2025-08-17 08:46:24.666 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35572 10 6452 1 2025-08-17 08:47:25.100 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50830 10 6452 1 2025-08-17 08:48:25.472 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50026 10 6452 1 2025-08-17 08:45:14.627 00:05:00.463 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 08:49:20.872 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 08:49:20.988 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 08:49:20.531 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:49:20.774 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:49:20.858 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 08:49:25.873 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36680 10 6452 1 2025-08-17 08:50:26.277 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55436 10 6452 1 2025-08-17 08:47:14.626 00:05:00.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 08:51:26.685 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54242 10 6452 1 2025-08-17 08:52:27.108 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51956 10 6452 1 2025-08-17 08:53:27.506 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38688 10 6452 1 2025-08-17 08:54:21.191 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-17 08:54:21.072 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-17 08:54:21.114 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-17 08:54:20.989 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:54:21.110 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-17 08:54:27.913 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33790 10 6452 1 2025-08-17 08:51:14.630 00:05:00.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-17 08:55:28.318 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47750 10 6452 1 2025-08-17 08:56:28.716 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53560 10 6452 1 2025-08-17 08:53:14.627 00:05:00.471 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-17 08:57:29.136 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40152 10 6452 1 2025-08-17 08:58:29.543 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37022 10 6452 1 Summary: total flows: 140, total bytes: 421019, total packets: 1024, avg bps: 913, avg pps: 0, avg bpp: 411 Time window: 2025-08-17 07:57:14 - 2025-08-17 08:58:39 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0019s User: 0.0028s Wall: 0.0026s flows/second: 54200.0 Runtime: 0.0026s