Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-18 01:54:15.000 00:06:00.025 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-08-18 01:59:20.140 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39042 10 6452 1 2025-08-18 01:59:41.831 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 01:59:41.743 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 01:59:41.682 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 01:59:41.522 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 01:59:41.765 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 02:00:20.547 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52322 10 6452 1 2025-08-18 01:56:15.389 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-08-18 02:01:20.948 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:51178 10 6452 1 2025-08-18 02:02:21.322 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47570 10 6452 1 2025-08-18 02:03:21.727 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56540 10 6452 1 2025-08-18 02:04:22.144 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57800 10 6452 1 2025-08-18 02:04:41.880 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 02:04:41.582 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:04:41.876 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:04:41.879 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 02:04:41.958 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 02:00:15.391 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-08-18 02:05:22.547 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56350 10 6452 1 2025-08-18 02:06:22.953 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45122 10 6452 1 2025-08-18 02:07:23.360 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46244 10 6452 1 2025-08-18 02:03:15.035 00:06:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 02:08:23.725 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:47124 10 6452 1 2025-08-18 02:09:24.108 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46076 10 6452 1 2025-08-18 02:09:41.759 00:00:00.038 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 02:09:41.495 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:09:41.863 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:09:41.763 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 02:09:41.946 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 02:10:24.513 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41286 10 6452 1 2025-08-18 02:11:24.887 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44912 10 6452 1 2025-08-18 02:07:15.040 00:06:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 02:12:25.290 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50554 10 6452 1 2025-08-18 02:13:25.693 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45366 10 6452 1 2025-08-18 02:10:15.045 00:04:00.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-18 02:14:26.103 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40796 10 6452 1 2025-08-18 02:14:41.976 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 02:14:41.894 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:14:41.892 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 02:14:42.144 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 02:14:41.605 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:15:26.466 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59130 10 6452 1 2025-08-18 02:16:26.874 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34748 10 6452 1 2025-08-18 02:17:27.287 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38846 10 6452 1 2025-08-18 02:14:15.042 00:04:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-18 02:18:27.693 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50958 10 6452 1 2025-08-18 02:19:28.111 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52012 10 6452 1 2025-08-18 02:19:42.192 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 02:19:42.060 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 02:19:41.998 00:00:00.054 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:19:42.110 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:19:41.957 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 02:15:15.046 00:06:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 02:20:28.469 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56982 10 6452 1 2025-08-18 02:21:28.828 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60468 10 6452 1 2025-08-18 02:22:29.229 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57462 10 6452 1 2025-08-18 02:23:29.635 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48762 10 6452 1 2025-08-18 02:19:15.045 00:06:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 02:24:30.041 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50136 10 6452 1 2025-08-18 02:24:41.935 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 02:24:42.137 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 02:24:42.107 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:24:41.853 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:24:42.245 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 02:25:30.404 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54794 10 6452 1 2025-08-18 02:26:30.812 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:46242 10 6452 1 2025-08-18 02:22:15.049 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 790 1 2025-08-18 02:27:31.214 00:00:10.477 TCP 1.101.0.1:3000 -> 23.104.0.1:59090 10 6452 1 2025-08-18 02:28:31.746 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43990 10 6452 1 2025-08-18 02:29:42.342 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 02:29:42.296 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 02:29:41.954 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:29:32.115 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:60180 10 6452 1 2025-08-18 02:29:42.259 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:29:42.212 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 02:30:32.480 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56496 10 6452 1 2025-08-18 02:26:15.046 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-08-18 02:31:32.887 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:42960 10 6452 1 2025-08-18 02:32:33.309 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44264 10 6452 1 2025-08-18 02:28:15.400 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-08-18 02:33:33.709 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40856 10 6452 1 2025-08-18 02:34:42.456 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 02:34:34.114 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35476 10 6452 1 2025-08-18 02:34:42.627 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 02:34:42.291 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:34:42.374 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:34:42.623 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 02:35:34.514 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41596 12 6556 1 2025-08-18 02:36:34.932 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:58046 10 6452 1 2025-08-18 02:32:15.401 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-08-18 02:37:35.311 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44876 10 6452 1 2025-08-18 02:38:35.714 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33136 10 6452 1 2025-08-18 02:39:42.490 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 02:39:42.516 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 02:39:42.028 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:39:42.408 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:39:42.301 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 02:39:36.118 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49160 10 6452 1 2025-08-18 02:35:15.051 00:06:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 02:40:36.522 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:42628 12 10367 1 2025-08-18 02:41:37.014 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57364 10 6452 1 2025-08-18 02:42:37.416 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51784 10 6452 1 2025-08-18 02:43:37.815 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54450 10 6452 1 2025-08-18 02:39:15.049 00:06:00.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-18 02:44:42.974 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 02:44:42.734 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:44:42.693 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:44:42.908 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 02:44:42.778 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 02:44:38.223 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45270 10 6452 1 2025-08-18 02:45:38.585 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:53702 10 6452 1 2025-08-18 02:42:15.057 00:04:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-18 02:46:39.011 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53696 10 6452 1 2025-08-18 02:47:39.425 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48320 10 6452 1 2025-08-18 02:48:39.836 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:40914 10 6452 1 2025-08-18 02:49:42.717 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 02:49:42.506 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:49:42.716 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:49:42.823 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 02:49:42.800 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 02:49:40.226 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33944 10 6452 1 2025-08-18 02:46:15.055 00:04:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-18 02:50:40.628 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:57448 12 10367 1 2025-08-18 02:47:15.058 00:04:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-18 02:51:41.095 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54200 10 6452 1 2025-08-18 02:52:41.495 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44318 10 6452 1 2025-08-18 02:53:41.904 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48918 10 6452 1 2025-08-18 02:54:42.936 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-18 02:54:42.640 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-18 02:54:42.483 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:54:42.854 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-18 02:54:42.802 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-18 02:54:42.274 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59426 10 6452 1 2025-08-18 02:51:15.056 00:04:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-18 02:55:42.674 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44024 10 6452 1 2025-08-18 02:56:43.104 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54292 10 6452 1 2025-08-18 02:52:15.060 00:06:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-18 02:57:43.519 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58978 10 6452 1 Summary: total flows: 139, total bytes: 419045, total packets: 1025, avg bps: 872, avg pps: 0, avg bpp: 408 Time window: 2025-08-18 01:54:15 - 2025-08-18 02:58:15 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0032s User: 0.0008s Wall: 0.0013s flows/second: 106272.0 Runtime: 0.0013s