Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 14:59:24.839 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35272 10 6452 1 2025-08-04 15:00:25.257 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33540 10 6452 1 2025-08-04 15:01:25.617 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:50848 10 6452 1 2025-08-04 14:57:07.556 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 15:02:25.983 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57412 10 6452 1 2025-08-04 15:03:13.116 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 15:03:12.950 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 15:03:12.666 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:03:12.954 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:03:13.036 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 15:03:26.388 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38838 10 6452 1 2025-08-04 14:59:07.557 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 15:04:26.800 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59468 10 6452 1 2025-08-04 15:05:27.207 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48640 10 6452 1 2025-08-04 15:06:27.572 00:00:10.892 TCP 1.101.0.1:3000 -> 23.104.0.1:38844 10 6452 1 2025-08-04 15:07:28.504 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46006 10 6452 1 2025-08-04 15:08:13.260 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 15:08:13.198 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 15:08:13.074 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:08:13.010 00:00:00.042 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:08:13.091 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 15:08:28.910 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40762 10 6452 1 2025-08-04 15:04:07.557 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 15:09:29.316 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52612 10 6452 1 2025-08-04 15:10:29.711 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:50470 10 6452 1 2025-08-04 15:06:07.557 00:06:00.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 15:11:30.131 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51896 10 6452 1 2025-08-04 15:12:30.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33392 10 6452 1 2025-08-04 15:13:13.896 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 15:13:13.750 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 15:13:13.761 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 15:13:13.431 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:13:13.813 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:13:30.939 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56124 10 6452 1 2025-08-04 15:14:31.358 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:47932 10 6452 1 2025-08-04 15:15:31.724 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56932 10 6452 1 2025-08-04 15:11:07.560 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 15:16:32.136 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39332 10 6452 1 2025-08-04 15:17:32.531 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50728 10 6452 1 2025-08-04 15:13:07.560 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 15:18:13.377 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 15:18:13.265 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:18:13.315 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:18:13.377 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 15:18:13.398 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 15:18:32.944 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35620 10 6452 1 2025-08-04 15:19:33.358 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50282 11 6504 1 2025-08-04 15:20:33.776 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60542 10 6452 1 2025-08-04 15:21:34.184 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43388 10 6452 1 2025-08-04 15:22:34.593 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50178 10 6452 1 2025-08-04 15:18:07.561 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-04 15:23:13.573 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 15:23:13.473 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 15:23:13.444 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:23:13.465 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:23:13.548 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 15:23:34.993 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52968 10 6452 1 2025-08-04 15:24:35.398 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:55236 10 6452 1 2025-08-04 15:20:07.562 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 15:25:35.798 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42648 10 6452 1 2025-08-04 15:26:36.197 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47310 10 6452 1 2025-08-04 15:27:36.560 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49534 10 6452 1 2025-08-04 15:28:13.463 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 15:28:13.473 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 15:28:13.406 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:28:13.692 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:28:13.775 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 15:28:36.958 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34462 10 6452 1 2025-08-04 15:29:37.376 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60364 10 6452 1 2025-08-04 15:25:07.564 00:06:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 11 705 1 2025-08-04 15:30:37.779 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:39870 10 6452 1 2025-08-04 15:31:38.189 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35838 10 6452 1 2025-08-04 15:27:07.563 00:06:00.012 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 15:32:38.548 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41292 10 6452 1 2025-08-04 15:33:13.666 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 15:33:13.587 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 15:33:13.636 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:33:13.807 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:33:13.890 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 15:33:38.952 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49468 10 6452 1 2025-08-04 15:34:39.371 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60334 10 6452 1 2025-08-04 15:35:39.772 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52204 10 6452 1 2025-08-04 15:36:40.181 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:34416 10 6452 1 2025-08-04 15:32:07.572 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-04 15:37:40.543 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57828 10 6452 1 2025-08-04 15:38:13.764 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 15:38:13.496 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 15:38:13.679 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 15:38:13.692 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:38:13.682 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:38:40.941 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43766 10 6452 1 2025-08-04 15:34:07.565 00:06:00.015 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 15:39:41.360 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41234 10 6452 1 2025-08-04 15:40:41.759 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51260 10 6452 1 2025-08-04 15:41:42.179 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57848 10 6452 1 2025-08-04 15:42:42.586 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36738 10 6452 1 2025-08-04 15:43:13.909 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 15:43:13.907 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 15:43:13.580 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:43:13.831 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:43:13.914 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 15:43:42.983 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51766 11 6492 1 2025-08-04 15:39:07.578 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-04 15:44:43.342 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59254 10 6452 1 2025-08-04 15:45:43.747 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38966 10 6452 1 2025-08-04 15:41:07.565 00:06:00.017 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 15:46:44.146 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46220 10 6452 1 2025-08-04 15:47:44.504 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55386 10 6452 1 2025-08-04 15:48:14.173 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 15:48:13.920 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 15:48:13.997 00:00:00.040 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 15:48:13.571 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:48:14.090 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:48:44.906 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34272 12 6556 1 2025-08-04 15:49:45.320 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41570 10 6452 1 2025-08-04 15:50:45.728 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41636 10 6452 1 2025-08-04 15:46:07.580 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-04 15:51:46.143 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34096 10 6452 1 2025-08-04 15:52:46.551 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46034 10 6452 1 2025-08-04 15:48:07.569 00:06:00.015 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-04 15:53:14.057 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-04 15:53:13.973 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 15:53:14.075 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 15:53:13.851 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:53:13.975 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:53:46.953 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59416 10 6452 1 2025-08-04 15:54:47.362 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48450 10 6452 1 2025-08-04 15:55:47.764 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:44014 10 6452 1 2025-08-04 15:56:48.182 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44666 10 6452 1 2025-08-04 15:57:48.587 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39332 10 6452 1 2025-08-04 15:53:07.582 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-08-04 15:58:14.272 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-04 15:58:14.261 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-04 15:58:14.254 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:58:14.259 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-04 15:58:14.342 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 136, total bytes: 409009, total packets: 981, avg bps: 879, avg pps: 0, avg bpp: 416 Time window: 2025-08-04 14:57:07 - 2025-08-04 15:59:07 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0023s User: 0.0015s Wall: 0.0023s flows/second: 59624.3 Runtime: 0.0023s