Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 04:58:56.343 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39034 10 6452 1 2025-08-12 04:55:11.775 00:05:00.662 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 04:59:56.744 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37052 10 6452 1 2025-08-12 05:00:57.147 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56218 10 6452 1 2025-08-12 04:57:11.779 00:05:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 05:01:51.951 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 05:01:51.757 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 05:01:51.981 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 05:01:51.790 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:01:51.863 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:01:57.554 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55056 10 6452 1 2025-08-12 05:02:57.959 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49794 10 6452 1 2025-08-12 05:03:58.367 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53518 10 6452 1 2025-08-12 05:04:58.730 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52080 10 6452 1 2025-08-12 05:01:11.778 00:05:00.660 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 05:05:59.115 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34002 10 6452 1 2025-08-12 05:06:52.426 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:06:52.118 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 05:06:52.262 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 05:06:52.172 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:06:52.508 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 05:06:59.476 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38064 10 6452 1 2025-08-12 05:03:11.785 00:05:00.655 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 05:07:59.880 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60482 10 6452 1 2025-08-12 05:09:00.284 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40862 10 6452 1 2025-08-12 05:10:00.683 00:00:11.731 TCP 1.101.0.1:3000 -> 23.104.0.1:54284 10 6452 1 2025-08-12 05:07:11.781 00:05:00.669 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 05:11:02.450 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41608 10 6452 1 2025-08-12 05:11:52.072 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 05:11:52.194 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 05:11:51.902 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:11:52.195 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:11:52.278 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 05:12:02.847 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:39640 10 6452 1 2025-08-12 05:09:11.785 00:05:00.663 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 05:13:03.268 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46030 10 6452 1 2025-08-12 05:14:03.633 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38488 10 6452 1 2025-08-12 05:15:04.059 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:48690 12 10367 1 2025-08-12 05:16:04.546 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58466 10 6452 1 2025-08-12 05:16:52.126 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 05:16:52.287 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 05:16:51.906 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:16:52.377 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:16:52.460 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 05:13:11.784 00:05:00.667 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 05:17:04.948 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:49638 10 6452 1 2025-08-12 05:18:05.441 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45286 10 6452 1 2025-08-12 05:15:11.787 00:05:00.662 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 05:19:05.844 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:59746 10 6452 1 2025-08-12 05:20:06.266 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42018 10 6452 1 2025-08-12 05:21:06.667 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34166 10 6452 1 2025-08-12 05:21:52.394 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 05:21:52.374 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 05:21:52.443 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:21:52.312 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:21:52.223 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 05:22:07.095 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51882 10 6452 1 2025-08-12 05:19:11.785 00:05:00.668 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 05:23:07.505 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38492 10 6452 1 2025-08-12 05:24:07.910 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34212 10 6452 1 2025-08-12 05:21:11.789 00:05:00.664 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 05:25:08.331 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38076 10 6452 1 2025-08-12 05:26:08.732 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41386 10 6452 1 2025-08-12 05:26:52.565 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 05:26:52.472 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 05:26:52.528 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 05:26:52.435 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:26:52.476 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:27:09.153 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53498 10 6452 1 2025-08-12 05:28:09.557 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38530 10 6452 1 2025-08-12 05:25:11.786 00:05:00.672 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 05:29:09.956 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56360 10 6452 1 2025-08-12 05:30:10.372 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37430 10 6452 1 2025-08-12 05:27:11.790 00:05:00.666 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 05:31:10.796 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:44466 10 6452 1 2025-08-12 05:31:52.625 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 05:31:52.737 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 05:31:52.602 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 05:31:52.362 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:31:52.543 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:32:11.177 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46424 10 6452 1 2025-08-12 05:33:11.588 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54920 10 6452 1 2025-08-12 05:34:11.990 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50976 10 6452 1 2025-08-12 05:31:11.788 00:05:00.672 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 05:35:12.391 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37758 10 6452 1 2025-08-12 05:36:12.757 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:35410 10 6452 1 2025-08-12 05:36:52.639 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 05:36:52.808 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 05:36:52.879 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 05:36:52.425 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:36:52.555 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:33:11.791 00:05:00.666 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 05:37:13.182 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49244 10 6452 1 2025-08-12 05:38:13.582 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39472 10 6452 1 2025-08-12 05:39:13.989 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37124 10 6452 1 2025-08-12 05:40:14.407 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57784 10 6452 1 2025-08-12 05:37:11.788 00:05:00.672 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 05:41:14.811 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46510 10 6452 1 2025-08-12 05:41:52.949 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 05:41:52.868 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 05:41:52.750 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 05:41:52.657 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:41:52.866 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:42:15.177 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46508 10 6452 1 2025-08-12 05:39:11.792 00:05:00.668 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 05:43:15.587 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47404 10 6452 1 2025-08-12 05:44:15.956 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49860 10 6452 1 2025-08-12 05:45:16.364 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33800 10 6452 1 2025-08-12 05:46:16.769 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53656 10 6452 1 2025-08-12 05:46:52.851 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 05:46:52.761 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 05:46:52.816 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:46:52.845 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:46:52.929 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 05:43:11.792 00:05:00.673 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 05:47:17.189 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46924 10 6452 1 2025-08-12 05:48:17.597 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:41984 10 6452 1 2025-08-12 05:45:11.793 00:05:00.671 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 05:49:18.003 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37608 10 6452 1 2025-08-12 05:50:18.404 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34670 10 6452 1 2025-08-12 05:51:18.807 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:47888 10 6452 1 2025-08-12 05:51:52.952 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 05:51:52.866 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 05:51:52.772 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 05:51:52.981 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:51:52.869 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:52:19.181 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51062 10 6452 1 2025-08-12 05:49:11.792 00:05:00.676 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-12 05:53:19.545 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42630 10 6452 1 2025-08-12 05:54:19.944 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55744 10 6452 1 2025-08-12 05:51:11.795 00:05:00.673 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-12 05:55:20.356 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36836 10 6452 1 2025-08-12 05:56:20.762 00:00:22.663 TCP 1.101.0.1:3000 -> 23.104.0.1:40238 10 6452 1 2025-08-12 05:56:53.201 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-12 05:56:53.012 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-12 05:56:53.165 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-12 05:56:52.871 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:56:53.119 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-12 05:57:33.462 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57604 10 6452 1 2025-08-12 05:58:33.862 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:56026 10 6452 1 Summary: total flows: 140, total bytes: 420915, total packets: 1022, avg bps: 883, avg pps: 0, avg bpp: 411 Time window: 2025-08-12 04:55:11 - 2025-08-12 05:58:44 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0030s User: 0.0008s Wall: 0.0014s flows/second: 102945.8 Runtime: 0.0014s