Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 20:58:47.539 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:34798 12 10367 1 2025-08-03 20:54:07.162 00:06:00.061 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 20:59:47.982 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36218 10 6452 1 2025-08-03 21:00:48.346 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36216 10 6452 1 2025-08-03 21:01:48.746 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55596 10 6452 1 2025-08-03 21:02:51.213 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 21:02:51.580 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 21:02:51.472 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:02:51.473 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:02:51.556 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 21:02:49.149 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34402 10 6452 1 2025-08-03 21:03:49.556 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57762 10 6452 1 2025-08-03 20:59:07.162 00:06:00.063 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 21:04:49.957 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42582 10 6452 1 2025-08-03 21:05:50.369 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:55616 10 6452 1 2025-08-03 21:01:07.166 00:06:00.058 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 21:06:50.726 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41722 10 6452 1 2025-08-03 21:07:51.588 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 21:07:51.428 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 21:07:51.504 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 21:07:51.283 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:07:51.505 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:07:51.134 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34252 10 6452 1 2025-08-03 21:08:51.532 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33532 10 6452 1 2025-08-03 21:09:51.934 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:59190 10 6452 1 2025-08-03 21:10:52.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55634 10 6452 1 2025-08-03 21:06:07.167 00:06:00.063 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 21:11:52.719 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42494 10 6452 1 2025-08-03 21:12:51.595 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 21:12:51.683 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 21:12:51.511 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:12:51.451 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:12:51.533 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 21:12:53.144 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53966 10 6452 1 2025-08-03 21:08:07.168 00:06:00.060 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 21:13:53.553 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60920 10 6452 1 2025-08-03 21:14:53.960 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45092 10 6452 1 2025-08-03 21:15:54.329 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35652 10 6452 1 2025-08-03 21:16:54.728 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51040 10 6452 1 2025-08-03 21:17:51.968 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 21:17:52.102 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 21:17:51.898 00:00:00.015 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:17:51.958 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:17:52.041 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 21:13:07.167 00:06:00.064 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 21:17:55.133 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38036 10 6452 1 2025-08-03 21:18:55.541 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53960 10 6452 1 2025-08-03 21:19:55.947 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60662 10 6452 1 2025-08-03 21:15:07.170 00:06:00.058 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 21:20:56.355 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50992 10 6452 1 2025-08-03 21:21:56.724 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59830 10 6452 1 2025-08-03 21:22:51.808 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 21:22:51.815 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 21:22:51.871 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:22:51.858 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:22:51.942 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 21:22:57.133 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44846 10 6452 1 2025-08-03 21:23:57.530 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44386 10 6452 1 2025-08-03 21:20:07.168 00:06:00.064 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 21:24:57.939 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32922 10 6452 1 2025-08-03 21:25:58.356 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41100 10 6452 1 2025-08-03 21:26:58.722 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45966 10 6452 1 2025-08-03 21:22:07.175 00:06:00.055 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 21:27:52.091 00:00:00.049 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 21:27:51.956 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 21:27:51.958 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 21:27:51.726 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:27:52.008 00:00:00.048 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:27:59.186 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49974 10 6452 1 2025-08-03 21:28:59.584 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:41508 12 10367 1 2025-08-03 21:30:00.097 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45078 10 6452 1 2025-08-03 21:31:00.502 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56210 10 6452 1 2025-08-03 21:27:07.172 00:06:00.061 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 21:32:00.906 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53420 12 6556 1 2025-08-03 21:32:52.106 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 21:32:52.107 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 21:32:51.767 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:32:51.946 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:32:52.031 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 21:33:01.327 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54134 10 6452 1 2025-08-03 21:29:07.176 00:06:00.055 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 21:34:01.732 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50190 10 6452 1 2025-08-03 21:35:02.131 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51166 10 6452 1 2025-08-03 21:36:02.529 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54970 10 6452 1 2025-08-03 21:37:02.932 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:54786 10 6452 1 2025-08-03 21:37:52.199 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 21:37:52.109 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 21:37:52.125 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:37:52.159 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:37:52.241 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 21:38:03.363 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42300 10 6452 1 2025-08-03 21:34:07.175 00:06:00.059 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 21:39:03.763 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40946 10 6452 1 2025-08-03 21:40:04.186 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35740 10 6452 1 2025-08-03 21:36:07.180 00:06:00.054 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 21:41:04.590 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34214 10 6452 1 2025-08-03 21:42:04.994 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60798 10 6452 1 2025-08-03 21:42:52.267 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:42:52.203 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 21:42:52.210 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 21:42:51.926 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:42:52.351 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 21:43:05.394 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34882 10 6452 1 2025-08-03 21:44:05.796 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38256 10 6452 1 2025-08-03 21:45:06.200 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45398 10 6452 1 2025-08-03 21:41:07.176 00:06:00.059 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 21:46:06.562 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48278 10 6452 1 2025-08-03 21:47:06.964 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55350 10 6452 1 2025-08-03 21:47:52.235 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 21:47:52.371 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 21:47:52.385 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:47:52.230 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:47:52.312 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 21:43:07.180 00:06:00.055 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 21:48:07.371 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:47132 11 6504 1 2025-08-03 21:49:07.827 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47676 10 6452 1 2025-08-03 21:50:08.236 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40684 10 6452 1 2025-08-03 21:51:08.643 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60470 10 6452 1 2025-08-03 21:52:09.066 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56218 10 6452 1 2025-08-03 21:52:52.349 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 21:52:52.448 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 21:52:52.306 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:52:52.357 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:52:52.439 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 21:48:07.177 00:06:00.063 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 21:53:09.468 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42920 10 6452 1 2025-08-03 21:54:09.869 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44096 10 6452 1 2025-08-03 21:50:07.182 00:06:00.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 21:55:10.298 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51470 10 6452 1 2025-08-03 21:56:10.712 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:49078 10 6452 1 2025-08-03 21:57:11.152 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53152 10 6452 1 2025-08-03 21:57:52.603 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 21:57:52.612 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 21:57:52.568 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 21:57:52.532 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:57:52.520 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 21:58:11.554 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43206 10 6452 1 Summary: total flows: 137, total bytes: 424863, total packets: 1025, avg bps: 881, avg pps: 0, avg bpp: 414 Time window: 2025-08-03 20:54:07 - 2025-08-03 21:58:21 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0025s User: 0.0017s Wall: 0.0020s flows/second: 69432.1 Runtime: 0.0020s