Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-21 12:55:16.841 00:05:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 12:59:31.289 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56854 10 6452 1 2025-08-21 12:56:16.843 00:05:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 13:00:31.653 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:33000 14 10469 1 2025-08-21 13:01:21.678 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 13:01:21.637 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 13:01:21.498 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:01:21.719 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:01:21.802 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 13:01:32.141 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39678 10 6452 1 2025-08-21 13:02:32.500 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47388 10 6452 1 2025-08-21 13:03:32.865 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53198 10 6452 1 2025-08-21 13:04:33.277 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39834 10 6452 1 2025-08-21 13:01:16.843 00:05:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 13:05:33.681 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:38084 10 6452 1 2025-08-21 13:06:21.562 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 13:06:21.634 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 13:06:21.465 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:06:21.764 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:02:16.846 00:05:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 13:06:21.847 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 13:06:34.106 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38094 10 6452 1 2025-08-21 13:07:34.513 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33368 10 6452 1 2025-08-21 13:08:34.922 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43936 10 6452 1 2025-08-21 13:09:35.329 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52448 10 6452 1 2025-08-21 13:10:35.731 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43278 10 6452 1 2025-08-21 13:07:16.848 00:05:00.200 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 13:11:22.078 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 13:11:22.084 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 13:11:22.001 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:11:21.784 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:11:21.867 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 13:11:36.144 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45008 10 6452 1 2025-08-21 13:08:16.851 00:05:00.196 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 13:12:36.552 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43232 10 6452 1 2025-08-21 13:13:36.917 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58050 10 6452 1 2025-08-21 13:14:37.318 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36662 10 6452 1 2025-08-21 13:15:37.722 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51054 10 6452 1 2025-08-21 13:16:21.631 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 13:16:21.851 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 13:16:21.866 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:16:21.977 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:16:22.059 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 13:16:38.112 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:59478 10 6452 1 2025-08-21 13:13:16.848 00:05:00.201 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 13:17:38.471 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40926 10 6452 1 2025-08-21 13:14:16.852 00:05:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 13:18:38.874 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46644 10 6452 1 2025-08-21 13:19:39.277 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36330 10 6452 1 2025-08-21 13:20:39.685 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49592 10 6452 1 2025-08-21 13:21:21.941 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 13:21:22.052 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 13:21:22.070 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:21:21.930 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:21:22.013 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 13:21:40.119 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43766 10 6452 1 2025-08-21 13:22:40.531 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49362 10 6452 1 2025-08-21 13:19:16.850 00:05:00.202 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 13:23:40.962 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60866 10 6452 1 2025-08-21 13:20:16.852 00:05:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 13:24:41.374 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52380 10 6452 1 2025-08-21 13:25:41.775 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42344 10 6452 1 2025-08-21 13:26:22.113 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 13:26:21.935 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 13:26:21.889 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:26:22.162 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:26:22.245 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 13:26:42.189 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46318 10 6452 1 2025-08-21 13:27:42.555 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53388 10 6452 1 2025-08-21 13:28:42.918 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60662 10 6452 1 2025-08-21 13:25:16.851 00:05:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 13:29:43.320 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:43582 10 6452 1 2025-08-21 13:26:16.855 00:05:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 13:30:43.694 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39658 10 6452 1 2025-08-21 13:31:22.316 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 13:31:22.256 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 13:31:22.212 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:31:22.083 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:31:22.165 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 13:31:44.107 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59448 10 6452 1 2025-08-21 13:32:44.509 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43558 10 6452 1 2025-08-21 13:33:44.916 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59568 10 6452 1 2025-08-21 13:34:45.318 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52928 10 6452 1 2025-08-21 13:31:16.853 00:05:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 13:35:45.717 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53314 10 6452 1 2025-08-21 13:32:16.856 00:05:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 13:36:22.123 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 13:36:22.294 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 13:36:21.948 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:36:22.231 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:36:22.314 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 13:36:46.126 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54706 10 6452 1 2025-08-21 13:37:46.529 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51326 10 6452 1 2025-08-21 13:38:46.889 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:60334 12 6556 1 2025-08-21 13:39:47.356 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57624 10 6452 1 2025-08-21 13:40:47.721 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51048 10 6452 1 2025-08-21 13:37:16.854 00:05:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 13:41:22.301 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 13:41:22.300 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 13:41:22.273 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:41:22.217 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:41:22.300 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 13:41:48.134 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49842 10 6452 1 2025-08-21 13:38:16.857 00:05:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 13:42:48.536 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56830 10 6452 1 2025-08-21 13:43:48.937 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:60366 10 6452 1 2025-08-21 13:44:49.317 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:50184 10 6452 1 2025-08-21 13:45:49.691 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49552 10 6452 1 2025-08-21 13:46:22.860 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 13:46:22.712 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 13:46:22.551 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:46:22.771 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:46:22.853 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 13:46:50.063 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38750 10 6452 1 2025-08-21 13:43:16.856 00:05:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 13:47:50.470 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38438 10 6452 1 2025-08-21 13:44:16.859 00:05:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 13:48:50.898 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38464 10 6452 1 2025-08-21 13:49:51.302 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41508 10 6452 1 2025-08-21 13:50:51.704 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43048 10 6452 1 2025-08-21 13:51:22.574 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 13:51:22.508 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 13:51:22.545 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:51:22.613 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:51:22.696 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 13:51:52.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49812 10 6452 1 2025-08-21 13:52:52.513 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53452 10 6452 1 2025-08-21 13:49:16.860 00:05:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-21 13:53:52.915 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53982 10 6452 1 2025-08-21 13:50:16.861 00:05:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-21 13:54:53.320 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34722 10 6452 1 2025-08-21 13:55:53.720 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37672 10 6452 1 2025-08-21 13:56:22.978 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-21 13:56:23.063 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-21 13:56:23.110 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:56:23.061 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-21 13:56:23.145 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-21 13:56:54.137 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:57498 10 6452 1 2025-08-21 13:57:54.495 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50800 10 6452 1 Summary: total flows: 139, total bytes: 414669, total packets: 1016, avg bps: 880, avg pps: 0, avg bpp: 408 Time window: 2025-08-21 12:55:16 - 2025-08-21 13:58:04 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0025s User: 0.0017s Wall: 0.0021s flows/second: 67673.6 Runtime: 0.0021s