Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 01:58:49.120 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34952 10 6452 1 2025-08-04 01:59:49.522 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34324 10 6452 1 2025-08-04 01:55:07.251 00:06:00.061 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 02:00:49.926 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:54442 10 6452 1 2025-08-04 02:01:50.319 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40466 10 6452 1 2025-08-04 02:02:57.567 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 02:02:57.342 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 02:02:57.393 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 02:02:57.268 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:02:57.485 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:02:50.723 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35092 10 6452 1 2025-08-04 02:03:51.106 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59862 10 6452 1 2025-08-04 02:04:51.522 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50876 10 6452 1 2025-08-04 02:00:07.255 00:06:00.063 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 02:05:51.885 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:49984 10 6452 1 2025-08-04 02:06:52.309 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42068 10 6452 1 2025-08-04 02:02:07.257 00:06:00.055 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 02:07:57.364 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 02:07:57.678 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 02:07:57.614 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:07:57.607 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:07:57.702 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 02:07:52.716 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36392 10 6452 1 2025-08-04 02:08:53.120 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33918 10 6452 1 2025-08-04 02:09:53.485 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43966 10 6452 1 2025-08-04 02:10:53.883 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:34860 12 6556 1 2025-08-04 02:11:54.313 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60838 10 6452 1 2025-08-04 02:07:07.264 00:06:00.052 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 02:12:58.663 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 02:12:58.664 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 02:12:58.755 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 02:12:58.646 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:12:58.581 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:12:54.721 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56494 10 6452 1 2025-08-04 02:09:07.268 00:06:00.046 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 02:13:55.127 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53940 10 6452 1 2025-08-04 02:14:55.489 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37440 10 6452 1 2025-08-04 02:15:55.883 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44586 12 6556 1 2025-08-04 02:16:56.290 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48248 10 6452 1 2025-08-04 02:17:57.686 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 02:17:57.784 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 02:17:57.631 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:17:57.782 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:17:57.865 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 02:17:56.686 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46876 10 6452 1 2025-08-04 02:18:57.110 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53894 10 6452 1 2025-08-04 02:14:07.267 00:06:00.052 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 02:19:57.510 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42488 10 6452 1 2025-08-04 02:16:07.271 00:06:00.047 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 02:20:57.873 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54586 10 6452 1 2025-08-04 02:21:58.282 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50066 10 6452 1 2025-08-04 02:22:57.984 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 02:22:57.774 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 02:22:57.766 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 02:22:57.656 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:22:57.900 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:22:58.688 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33234 10 6452 1 2025-08-04 02:23:59.110 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58466 10 6452 1 2025-08-04 02:24:59.472 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58220 10 6452 1 2025-08-04 02:21:07.269 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 02:25:59.881 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53568 10 6452 1 2025-08-04 02:27:00.242 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53988 10 6452 1 2025-08-04 02:27:57.942 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 02:27:57.761 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 02:27:57.759 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 02:27:57.808 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:27:57.859 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:23:07.275 00:06:00.045 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 02:28:00.655 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:56330 10 6452 1 2025-08-04 02:29:01.057 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50600 10 6452 1 2025-08-04 02:30:01.465 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49524 10 6452 1 2025-08-04 02:31:01.872 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41178 10 6452 1 2025-08-04 02:32:02.284 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43058 10 6452 1 2025-08-04 02:32:58.101 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 02:32:58.101 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 02:32:58.128 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:32:58.102 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:32:58.185 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 02:28:07.273 00:06:00.049 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 02:33:02.682 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49454 10 6452 1 2025-08-04 02:34:03.109 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40644 10 6452 1 2025-08-04 02:30:07.278 00:06:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 02:35:03.517 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52208 10 6452 1 2025-08-04 02:36:03.932 00:00:10.688 TCP 1.101.0.1:3000 -> 23.104.0.1:41362 10 6452 1 2025-08-04 02:37:04.649 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47304 10 6452 1 2025-08-04 02:37:58.260 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 02:37:58.131 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 02:37:57.907 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 02:37:57.919 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:37:58.177 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:38:05.068 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39168 10 6452 1 2025-08-04 02:39:05.472 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53226 10 6452 1 2025-08-04 02:35:07.275 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 02:40:05.870 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40752 10 6452 1 2025-08-04 02:41:06.277 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59728 10 6452 1 2025-08-04 02:37:07.279 00:06:00.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 11 705 1 2025-08-04 02:42:06.676 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43272 10 6452 1 2025-08-04 02:42:58.604 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 02:42:58.507 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 02:42:58.328 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 02:42:58.073 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:42:58.503 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:43:07.105 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43104 10 6452 1 2025-08-04 02:44:07.508 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46178 10 6452 1 2025-08-04 02:45:07.908 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51728 10 6452 1 2025-08-04 02:46:08.317 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33506 10 6452 1 2025-08-04 02:42:07.279 00:06:00.045 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 02:47:08.721 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:35642 10 6452 1 2025-08-04 02:47:58.493 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 02:47:58.321 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 02:47:58.237 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 02:47:58.164 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:47:58.399 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:48:09.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54926 10 6452 1 2025-08-04 02:44:07.321 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-04 02:49:09.515 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42262 10 6452 1 2025-08-04 02:50:09.886 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:59534 12 6556 1 2025-08-04 02:51:10.308 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47574 10 6452 1 2025-08-04 02:52:10.668 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56408 10 6452 1 2025-08-04 02:52:58.768 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:52:58.927 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 02:52:58.769 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 02:52:58.087 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:52:58.850 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 02:53:11.103 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53014 10 6452 1 2025-08-04 02:49:07.287 00:06:00.040 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 02:54:11.508 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:54170 12 10365 1 2025-08-04 02:55:12.001 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:48732 11 6504 1 2025-08-04 02:51:07.324 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-04 02:56:12.426 00:00:12.986 TCP 1.101.0.1:3000 -> 23.104.0.1:40882 10 6452 1 2025-08-04 02:57:15.484 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48530 10 6452 1 2025-08-04 02:57:58.607 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 02:57:58.618 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 02:57:58.552 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:57:58.524 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 02:57:58.577 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 02:58:15.883 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55128 10 6452 1 Summary: total flows: 137, total bytes: 420270, total packets: 1010, avg bps: 885, avg pps: 0, avg bpp: 416 Time window: 2025-08-04 01:55:07 - 2025-08-04 02:58:26 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0022s User: 0.0022s Wall: 0.0021s flows/second: 65768.5 Runtime: 0.0021s