Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 10:54:16.292 00:06:00.242 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 10:59:26.521 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47306 10 6452 1 2025-08-20 10:55:16.296 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 11:00:26.928 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:37516 10 6452 1 2025-08-20 11:00:50.231 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 11:00:50.238 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 11:00:50.306 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:00:50.160 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:00:50.241 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 11:01:27.304 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39892 10 6452 1 2025-08-20 11:02:27.713 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:49860 10 6452 1 2025-08-20 11:03:28.109 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47558 10 6452 1 2025-08-20 11:04:28.516 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58478 10 6452 1 2025-08-20 11:05:28.920 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53008 10 6452 1 2025-08-20 11:05:50.472 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 11:05:50.265 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 11:05:50.156 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 11:05:50.289 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:05:50.390 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:01:16.293 00:06:00.241 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 11:06:29.333 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50504 10 6452 1 2025-08-20 11:02:16.296 00:06:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 11:07:29.740 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:46972 11 6504 1 2025-08-20 11:08:30.199 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59218 10 6452 1 2025-08-20 11:09:30.602 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58494 10 6452 1 2025-08-20 11:10:30.961 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58102 10 6452 1 2025-08-20 11:10:50.587 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 11:10:50.556 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 11:10:50.409 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:10:50.594 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:10:50.676 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 11:11:31.323 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35868 10 6452 1 2025-08-20 11:12:31.728 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55494 10 6452 1 2025-08-20 11:08:16.294 00:06:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 11:13:32.107 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47232 10 6452 1 2025-08-20 11:09:16.297 00:06:00.239 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 11:14:32.474 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35634 10 6452 1 2025-08-20 11:15:32.874 00:00:10.519 TCP 1.101.0.1:3000 -> 23.104.0.1:39938 14 14282 1 2025-08-20 11:15:50.489 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 11:15:50.427 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 11:15:50.190 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:15:50.579 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:15:50.662 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 11:16:33.431 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51906 10 6452 1 2025-08-20 11:17:33.835 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:57430 10 6452 1 2025-08-20 11:18:34.278 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:40492 10 6452 1 2025-08-20 11:19:34.657 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59834 10 6452 1 2025-08-20 11:15:16.300 00:06:00.240 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 11:20:35.017 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34820 10 6452 1 2025-08-20 11:20:50.600 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 11:20:50.634 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 11:20:50.520 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 11:20:50.349 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:20:50.518 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:16:16.303 00:06:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 11:21:35.377 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42060 10 6452 1 2025-08-20 11:22:35.779 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44126 10 6452 1 2025-08-20 11:23:36.191 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57658 10 6452 1 2025-08-20 11:24:36.592 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39048 10 6452 1 2025-08-20 11:25:36.954 00:00:10.476 TCP 1.101.0.1:3000 -> 23.104.0.1:45898 10 6452 1 2025-08-20 11:25:50.795 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 11:25:50.786 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 11:25:50.706 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 11:25:50.562 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:25:50.713 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:26:37.498 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54196 10 6452 1 2025-08-20 11:22:16.301 00:06:00.243 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 11:27:37.902 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56578 12 6556 1 2025-08-20 11:23:16.303 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 11:28:38.309 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35966 10 6452 1 2025-08-20 11:29:38.716 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44390 10 6452 1 2025-08-20 11:30:39.123 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40978 10 6452 1 2025-08-20 11:30:51.338 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 11:30:51.255 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:30:51.061 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 11:30:51.185 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 11:30:51.211 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:31:39.527 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36466 10 6452 1 2025-08-20 11:32:39.929 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:41584 10 6452 1 2025-08-20 11:33:40.356 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53314 10 6452 1 2025-08-20 11:29:16.302 00:06:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 11:34:40.757 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33096 10 6452 1 2025-08-20 11:30:16.304 00:06:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 11:35:51.006 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 11:35:50.917 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 11:35:50.975 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 11:35:50.788 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:35:41.153 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49280 10 6452 1 2025-08-20 11:35:50.922 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:36:41.561 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56130 10 6452 1 2025-08-20 11:37:41.968 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58242 10 6452 1 2025-08-20 11:38:42.371 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48986 10 6452 1 2025-08-20 11:39:42.774 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34206 10 6452 1 2025-08-20 11:40:50.991 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 11:40:50.889 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 11:40:43.178 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48702 10 6452 1 2025-08-20 11:40:51.098 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:40:51.139 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:40:51.221 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 11:36:16.308 00:06:00.241 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 11:41:43.578 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48376 10 6452 1 2025-08-20 11:37:16.311 00:06:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 11:42:43.977 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41128 10 6452 1 2025-08-20 11:43:44.399 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55958 10 6452 1 2025-08-20 11:44:44.802 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54060 10 6452 1 2025-08-20 11:45:51.094 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 11:45:51.355 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 11:45:51.118 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:45:50.962 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:45:51.046 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 11:45:45.205 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56642 10 6452 1 2025-08-20 11:46:45.606 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54490 10 6452 1 2025-08-20 11:47:46.012 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60576 10 6452 1 2025-08-20 11:43:16.312 00:06:00.239 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 11:48:46.415 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49540 10 6452 1 2025-08-20 11:44:16.316 00:06:00.234 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 11:49:46.779 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:36698 10 6452 1 2025-08-20 11:50:51.331 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 11:50:51.191 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 11:50:51.205 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:50:51.360 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:50:51.444 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 11:50:47.150 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44068 10 6452 1 2025-08-20 11:51:47.560 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56360 10 6452 1 2025-08-20 11:52:47.962 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56178 10 6452 1 2025-08-20 11:53:48.376 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33354 10 6452 1 2025-08-20 11:54:48.790 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:32832 10 6452 1 2025-08-20 11:50:16.314 00:06:00.239 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 11:55:51.566 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 11:55:51.474 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 11:55:51.483 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 11:55:51.031 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:55:51.482 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 11:55:49.186 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57152 10 6452 1 2025-08-20 11:51:16.315 00:06:00.234 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 11:56:49.590 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52572 10 6452 1 2025-08-20 11:57:49.998 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54764 10 6452 1 Summary: total flows: 137, total bytes: 419272, total packets: 1029, avg bps: 877, avg pps: 0, avg bpp: 407 Time window: 2025-08-20 10:54:16 - 2025-08-20 11:58:00 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0036s User: 0.0009s Wall: 0.0034s flows/second: 40747.4 Runtime: 0.0034s