Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 01:54:16.111 00:06:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 01:59:37.111 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42880 10 6452 1 2025-08-20 02:00:39.487 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 02:00:39.228 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:00:39.491 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:00:39.152 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 02:00:39.575 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 02:00:37.519 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55948 10 6452 1 2025-08-20 01:56:16.108 00:06:00.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 02:01:37.922 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55566 10 6452 1 2025-08-20 02:02:38.345 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57926 10 6452 1 2025-08-20 02:03:38.748 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42968 10 6452 1 2025-08-20 02:04:39.118 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43328 10 6452 1 2025-08-20 02:05:39.800 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 02:05:39.658 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:05:39.793 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:05:39.730 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 02:05:39.877 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 02:05:39.535 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33680 10 6452 1 2025-08-20 02:01:16.112 00:06:00.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 02:06:39.941 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:55802 10 6452 1 2025-08-20 02:07:40.364 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60652 10 6452 1 2025-08-20 02:03:16.109 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 02:08:40.771 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:49284 10 6452 1 2025-08-20 02:09:41.138 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45116 10 6452 1 2025-08-20 02:10:39.627 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 02:10:39.784 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:10:39.768 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:10:39.631 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 02:10:39.851 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 02:10:41.547 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:34106 12 10365 1 2025-08-20 02:11:42.026 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53114 10 6452 1 2025-08-20 02:12:42.446 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54372 10 6452 1 2025-08-20 02:08:16.114 00:06:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 02:13:42.851 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34968 10 6452 1 2025-08-20 02:14:43.269 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39120 10 6452 1 2025-08-20 02:10:16.112 00:06:00.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 02:15:39.717 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 02:15:39.760 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:15:39.798 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:15:39.744 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 02:15:39.880 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 02:15:43.633 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48202 10 6452 1 2025-08-20 02:16:43.996 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38654 10 6452 1 2025-08-20 02:17:44.364 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:51430 10 6452 1 2025-08-20 02:18:44.761 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:34166 10 6452 1 2025-08-20 02:19:45.188 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35594 10 6452 1 2025-08-20 02:15:16.116 00:06:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 02:20:39.957 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 02:20:39.737 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 02:20:39.537 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:20:39.874 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:20:39.708 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 02:20:45.597 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43720 10 6452 1 2025-08-20 02:21:45.965 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:36368 10 6452 1 2025-08-20 02:17:16.114 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 02:22:46.329 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54276 10 6452 1 2025-08-20 02:23:46.737 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42828 10 6452 1 2025-08-20 02:24:47.112 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42494 10 6452 1 2025-08-20 02:25:40.010 00:00:00.042 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 02:25:39.928 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:25:39.969 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:25:40.157 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 02:25:40.052 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 02:25:47.511 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44714 10 6452 1 2025-08-20 02:26:47.917 00:00:10.714 TCP 1.101.0.1:3000 -> 23.104.0.1:57190 10 6452 1 2025-08-20 02:22:16.118 00:06:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 02:27:48.664 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48322 10 6452 1 2025-08-20 02:28:49.097 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47764 10 6452 1 2025-08-20 02:24:16.116 00:06:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 02:29:49.457 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43330 10 6452 1 2025-08-20 02:30:40.059 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 02:30:40.160 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:30:40.106 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:30:40.059 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 02:30:40.188 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 02:30:49.862 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:40462 10 6452 1 2025-08-20 02:31:50.243 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34944 10 6452 1 2025-08-20 02:32:50.665 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:41452 10 6452 1 2025-08-20 02:33:51.030 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46572 10 6452 1 2025-08-20 02:29:16.122 00:06:00.246 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 02:34:51.398 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34736 10 6452 1 2025-08-20 02:35:40.278 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 02:35:40.162 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 02:35:40.180 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:35:40.194 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:35:40.108 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 02:35:51.760 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47890 10 6452 1 2025-08-20 02:31:16.119 00:06:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 02:36:52.166 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39404 10 6452 1 2025-08-20 02:37:52.526 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:40980 10 6452 1 2025-08-20 02:38:52.883 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34690 10 6452 1 2025-08-20 02:39:53.283 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45946 10 6452 1 2025-08-20 02:40:40.397 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 02:40:40.151 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:40:39.943 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:40:40.114 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 02:40:40.025 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 02:40:53.657 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44992 10 6452 1 2025-08-20 02:36:16.124 00:06:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 02:41:54.062 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38160 10 6452 1 2025-08-20 02:42:54.468 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39876 10 6452 1 2025-08-20 02:38:16.123 00:06:00.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 02:43:54.868 00:00:10.583 TCP 1.101.0.1:3000 -> 23.104.0.1:56534 10 6452 1 2025-08-20 02:44:55.491 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59056 10 6452 1 2025-08-20 02:45:40.150 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 02:45:40.271 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:45:40.362 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:45:40.146 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 02:45:40.444 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 02:45:55.895 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:51580 10 6452 1 2025-08-20 02:46:56.317 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59056 10 6452 1 2025-08-20 02:47:56.729 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33072 10 6452 1 2025-08-20 02:43:16.130 00:06:00.243 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 02:48:57.138 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41916 10 6452 1 2025-08-20 02:49:57.539 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59182 10 6452 1 2025-08-20 02:45:16.128 00:06:00.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 02:50:40.114 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:50:40.559 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:50:40.455 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 02:50:40.525 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 02:50:40.642 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 02:50:57.940 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51428 10 6452 1 2025-08-20 02:51:58.350 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58462 10 6452 1 2025-08-20 02:52:58.759 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:49092 10 6452 1 2025-08-20 02:53:59.181 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41224 10 6452 1 2025-08-20 02:54:59.584 00:00:10.679 TCP 1.101.0.1:3000 -> 23.104.0.1:49218 10 6452 1 2025-08-20 02:50:16.132 00:06:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-20 02:55:40.377 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-20 02:55:40.410 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-20 02:55:40.452 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:55:40.295 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-20 02:55:40.673 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-20 02:56:00.304 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51082 10 6452 1 2025-08-20 02:57:00.671 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41910 10 6452 1 2025-08-20 02:52:16.128 00:06:00.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-20 02:58:01.100 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:56698 10 6452 1 Summary: total flows: 137, total bytes: 415199, total packets: 1024, avg bps: 864, avg pps: 0, avg bpp: 405 Time window: 2025-08-20 01:54:16 - 2025-08-20 02:58:16 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0033s User: 0.0011s Wall: 0.0021s flows/second: 66568.5 Runtime: 0.0021s