Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 02:58:46.464 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44942 10 6452 1 2025-08-02 02:59:46.873 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55022 10 6452 1 2025-08-02 03:00:47.280 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39428 10 6452 1 2025-08-02 03:01:47.683 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34280 10 6452 1 2025-08-02 03:02:00.857 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 03:02:00.628 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 03:02:00.644 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:02:00.864 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:02:00.947 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 02:57:06.235 00:06:00.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 03:02:48.115 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41836 10 6452 1 2025-08-02 02:58:06.232 00:06:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 03:03:48.528 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46786 10 6452 1 2025-08-02 03:04:48.927 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:44688 10 6452 1 2025-08-02 03:05:49.355 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52094 10 6452 1 2025-08-02 03:07:00.950 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 03:07:00.904 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 03:07:00.869 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 03:07:00.838 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:07:00.867 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:06:49.759 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:33286 10 6452 1 2025-08-02 03:07:50.138 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54924 10 6452 1 2025-08-02 03:08:50.507 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56838 10 6452 1 2025-08-02 03:04:06.239 00:06:00.208 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 03:09:50.914 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42602 10 6452 1 2025-08-02 03:05:06.235 00:06:00.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 03:10:51.322 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45150 10 6452 1 2025-08-02 03:12:00.937 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 03:11:51.755 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:60960 10 6452 1 2025-08-02 03:12:00.933 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 03:12:00.743 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:12:00.839 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:12:00.923 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 03:12:52.126 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:35086 10 6452 1 2025-08-02 03:13:52.482 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60548 10 6452 1 2025-08-02 03:14:52.888 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:55154 10 6452 1 2025-08-02 03:15:53.292 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:47720 10 6452 1 2025-08-02 03:11:06.245 00:06:00.207 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 03:17:01.298 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 03:17:01.096 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 03:17:01.160 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 03:17:00.983 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:16:53.648 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50178 10 6452 1 2025-08-02 03:17:01.214 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:12:06.244 00:06:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 03:17:54.071 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:33916 10 6452 1 2025-08-02 03:18:54.452 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55274 10 6452 1 2025-08-02 03:19:54.818 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56378 10 6452 1 2025-08-02 03:20:55.228 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48852 10 6452 1 2025-08-02 03:22:01.629 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 03:22:01.365 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 03:22:01.346 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 03:22:01.460 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:22:01.544 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:21:55.641 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38492 10 6452 1 2025-08-02 03:18:06.246 00:06:00.207 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 03:22:56.054 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48922 10 6452 1 2025-08-02 03:23:56.416 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55604 10 6452 1 2025-08-02 03:19:06.243 00:06:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 03:24:56.821 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37072 10 6452 1 2025-08-02 03:25:57.230 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52226 10 6452 1 2025-08-02 03:27:01.424 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 03:27:01.267 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 03:27:01.275 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 03:27:01.198 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:27:01.342 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:26:57.629 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32880 10 6452 1 2025-08-02 03:27:58.033 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44570 10 6452 1 2025-08-02 03:28:58.437 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52020 10 6452 1 2025-08-02 03:25:06.247 00:06:00.208 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 03:29:58.846 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:57780 10 6452 1 2025-08-02 03:30:59.291 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38786 10 6452 1 2025-08-02 03:26:06.245 00:06:00.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 03:32:01.499 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 03:32:01.392 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 03:32:01.404 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:32:01.461 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:32:01.545 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 03:31:59.655 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55532 10 6452 1 2025-08-02 03:33:00.072 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46998 10 6452 1 2025-08-02 03:34:00.479 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35962 10 6452 1 2025-08-02 03:35:00.887 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57982 10 6452 1 2025-08-02 03:36:01.310 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36954 10 6452 1 2025-08-02 03:37:01.502 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 03:37:01.598 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 03:37:01.595 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 03:37:01.440 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:37:01.418 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:32:06.251 00:06:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 03:37:01.727 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58668 10 6452 1 2025-08-02 03:33:06.249 00:06:00.210 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 03:38:02.149 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48146 10 6452 1 2025-08-02 03:39:02.517 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45954 10 6452 1 2025-08-02 03:40:02.923 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47850 10 6452 1 2025-08-02 03:41:03.347 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43488 10 6452 1 2025-08-02 03:42:01.582 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 03:42:01.736 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 03:42:01.426 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:42:01.767 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:42:01.850 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 03:42:03.747 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42322 10 6452 1 2025-08-02 03:43:04.114 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51288 10 6452 1 2025-08-02 03:39:06.252 00:06:00.205 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 03:44:04.518 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:58040 12 10367 1 2025-08-02 03:40:06.249 00:06:00.210 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 03:45:05.001 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39734 10 6452 1 2025-08-02 03:46:05.408 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59562 10 6452 1 2025-08-02 03:47:01.763 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 03:47:01.763 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 03:47:01.858 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:47:01.736 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:47:01.819 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 03:47:05.817 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49450 10 6452 1 2025-08-02 03:48:06.231 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59736 10 6452 1 2025-08-02 03:49:06.639 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45212 10 6452 1 2025-08-02 03:50:07.040 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51038 10 6452 1 2025-08-02 03:46:06.258 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 03:51:07.448 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54384 10 6452 1 2025-08-02 03:52:01.931 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 03:52:01.618 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 03:52:01.972 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 03:52:01.476 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:52:01.848 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:47:06.255 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 03:52:07.813 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41284 10 6452 1 2025-08-02 03:53:08.219 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42802 10 6452 1 2025-08-02 03:54:08.632 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60894 10 6452 1 2025-08-02 03:55:08.995 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44632 10 6452 1 2025-08-02 03:56:09.400 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41664 10 6452 1 2025-08-02 03:57:02.065 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 03:57:02.060 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 03:57:02.170 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:57:02.079 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 03:57:02.161 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 03:57:09.808 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38240 10 6452 1 2025-08-02 03:53:06.261 00:06:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 03:58:10.216 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42350 10 6452 1 Summary: total flows: 137, total bytes: 420792, total packets: 1020, avg bps: 904, avg pps: 0, avg bpp: 412 Time window: 2025-08-02 02:57:06 - 2025-08-02 03:59:06 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0027s User: 0.0014s Wall: 0.0030s flows/second: 45633.7 Runtime: 0.0030s