Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 01:54:12.270 00:06:00.704 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-13 01:59:19.594 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43032 10 6452 1 2025-08-13 02:00:19.992 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56358 10 6452 1 2025-08-13 02:01:20.395 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35640 10 6452 1 2025-08-13 02:02:17.308 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 02:02:17.219 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:02:17.396 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:02:17.396 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 02:02:17.488 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 02:02:20.801 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:35414 10 6452 1 2025-08-13 01:58:12.268 00:06:00.709 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-13 02:03:21.182 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42308 10 6452 1 2025-08-13 02:04:21.586 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47690 10 6452 1 2025-08-13 02:05:21.992 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33724 10 6452 1 2025-08-13 02:01:12.271 00:06:00.704 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-13 02:06:22.410 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60874 10 6452 1 2025-08-13 02:07:17.283 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 02:07:17.446 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 02:07:17.144 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:07:17.201 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:07:17.306 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 02:07:22.818 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39744 10 6452 1 2025-08-13 02:08:23.226 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38814 10 6452 1 2025-08-13 02:09:23.627 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55870 10 6452 1 2025-08-13 02:05:12.269 00:06:00.709 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-13 02:10:23.996 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49460 10 6452 1 2025-08-13 02:11:24.397 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44528 10 6452 1 2025-08-13 02:12:17.553 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 02:12:17.272 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 02:12:17.482 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:12:17.471 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:12:17.477 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 02:12:24.808 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40282 10 6452 1 2025-08-13 02:08:12.271 00:06:00.706 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-13 02:13:25.215 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43694 10 6452 1 2025-08-13 02:14:25.620 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50254 10 6452 1 2025-08-13 02:15:26.032 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43574 10 6452 1 2025-08-13 02:16:26.437 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52314 10 6452 1 2025-08-13 02:12:12.270 00:06:00.712 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-13 02:17:17.725 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 02:17:17.419 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 02:17:17.456 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:17:17.644 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:17:17.648 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 02:17:26.797 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38334 10 6452 1 2025-08-13 02:18:27.202 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47178 10 6452 1 2025-08-13 02:19:27.601 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53028 10 6452 1 2025-08-13 02:15:12.274 00:06:00.709 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-13 02:20:28.005 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:58124 10 6452 1 2025-08-13 02:21:28.407 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45148 10 6452 1 2025-08-13 02:22:17.664 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 02:22:17.709 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 02:22:17.709 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:22:17.582 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:22:17.711 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 02:22:28.769 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56800 10 6452 1 2025-08-13 02:23:29.176 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43502 10 6452 1 2025-08-13 02:19:12.272 00:06:00.715 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-13 02:24:29.580 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54544 10 6452 1 2025-08-13 02:25:29.981 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47272 10 6452 1 2025-08-13 02:26:30.381 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35806 10 6452 1 2025-08-13 02:22:12.276 00:06:00.709 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-13 02:27:17.822 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 02:27:17.891 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 02:27:17.643 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:27:17.740 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:27:17.745 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 02:27:30.785 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46496 10 6452 1 2025-08-13 02:28:31.187 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46552 10 6452 1 2025-08-13 02:29:31.592 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35490 10 6452 1 2025-08-13 02:30:32.000 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:45410 10 6452 1 2025-08-13 02:26:12.274 00:06:00.715 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-13 02:31:32.427 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60946 10 6452 1 2025-08-13 02:32:17.817 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 02:32:17.624 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:32:17.928 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:32:17.651 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 02:32:18.012 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 02:32:32.824 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38198 10 6452 1 2025-08-13 02:33:33.191 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45494 10 6452 1 2025-08-13 02:29:12.278 00:06:00.710 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-13 02:34:33.592 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45258 10 6452 1 2025-08-13 02:35:33.995 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43704 10 6452 1 2025-08-13 02:36:34.398 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45632 10 6452 1 2025-08-13 02:37:17.650 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 02:37:17.875 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:37:17.963 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:37:17.746 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 02:37:18.045 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 02:37:34.825 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59306 10 6452 1 2025-08-13 02:33:12.276 00:06:00.717 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-13 02:38:35.188 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53744 10 6452 1 2025-08-13 02:39:35.586 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53486 10 6452 1 2025-08-13 02:40:35.991 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41830 10 6452 1 2025-08-13 02:36:12.279 00:06:00.714 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-13 02:41:36.400 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41622 10 6452 1 2025-08-13 02:42:18.213 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 02:42:17.912 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:42:18.321 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:42:18.199 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 02:42:18.403 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 02:42:36.805 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43442 10 6452 1 2025-08-13 02:43:37.208 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58306 10 6452 1 2025-08-13 02:44:37.616 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40086 10 6452 1 2025-08-13 02:40:12.278 00:06:00.718 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-13 02:45:38.019 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:55822 10 6452 1 2025-08-13 02:46:38.419 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55388 10 6452 1 2025-08-13 02:47:18.190 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 02:47:18.212 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 02:47:18.123 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:47:18.099 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:47:18.210 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 02:47:38.822 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43554 10 6452 1 2025-08-13 02:43:12.280 00:06:00.713 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-13 02:48:39.184 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53576 10 6452 1 2025-08-13 02:49:39.581 00:00:10.429 TCP 1.101.0.1:3000 -> 23.104.0.1:54842 11 6504 1 2025-08-13 02:50:40.035 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57618 10 6452 1 2025-08-13 02:51:40.438 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59226 10 6452 1 2025-08-13 02:47:12.279 00:06:00.718 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-13 02:52:18.341 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 02:52:18.390 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:52:18.271 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:52:18.292 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 02:52:18.354 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 02:52:40.847 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48360 10 6452 1 2025-08-13 02:53:41.220 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:33896 12 6556 1 2025-08-13 02:54:41.619 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:59394 12 10365 1 2025-08-13 02:50:12.281 00:06:00.713 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-13 02:55:42.109 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44796 10 6452 1 2025-08-13 02:56:42.514 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54982 10 6452 1 2025-08-13 02:57:18.308 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 02:57:18.320 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:57:18.300 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 02:57:18.495 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 02:57:18.382 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 02:57:42.928 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49944 10 6452 1 Summary: total flows: 136, total bytes: 414494, total packets: 1013, avg bps: 867, avg pps: 0, avg bpp: 409 Time window: 2025-08-13 01:54:12 - 2025-08-13 02:57:53 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0018s User: 0.0027s Wall: 0.0033s flows/second: 40646.0 Runtime: 0.0034s