Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-22 13:58:46.640 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33368 10 6452 1 2025-08-22 13:59:47.094 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52976 10 6452 1 2025-08-22 14:00:47.503 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33396 10 6452 1 2025-08-22 14:01:51.889 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 14:01:51.726 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 14:01:51.722 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 14:01:51.678 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:01:51.805 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:01:47.912 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39552 10 6452 1 2025-08-22 13:57:17.423 00:06:00.086 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 14:02:48.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45956 10 6452 1 2025-08-22 14:03:48.720 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57600 10 6452 1 2025-08-22 13:59:17.426 00:06:00.081 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 14:04:49.133 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60992 10 6452 1 2025-08-22 14:05:49.530 00:00:10.558 TCP 1.101.0.1:3000 -> 23.104.0.1:59210 10 6452 1 2025-08-22 14:06:51.707 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 14:06:51.637 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:06:51.846 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:06:51.711 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 14:06:51.929 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 14:06:50.127 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49490 10 6452 1 2025-08-22 14:07:50.532 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33186 10 6452 1 2025-08-22 14:08:50.934 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:59294 10 6452 1 2025-08-22 14:04:17.426 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 14:09:51.367 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49288 10 6452 1 2025-08-22 14:10:51.771 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36078 10 6452 1 2025-08-22 14:06:17.428 00:06:00.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 14:11:51.843 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 14:11:51.746 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 14:11:51.759 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 14:11:51.777 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:11:51.759 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:11:52.185 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35690 10 6452 1 2025-08-22 14:12:52.545 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41716 10 6452 1 2025-08-22 14:13:52.956 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45766 10 6452 1 2025-08-22 14:14:53.357 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56230 10 6452 1 2025-08-22 14:15:53.773 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45956 10 6452 1 2025-08-22 14:11:17.428 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 14:16:51.901 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 14:16:52.053 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 14:16:51.984 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:16:51.897 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:16:51.980 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 14:16:54.183 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41484 10 6452 1 2025-08-22 14:17:54.586 00:00:12.799 TCP 1.101.0.1:3000 -> 23.104.0.1:44440 10 6452 1 2025-08-22 14:13:17.430 00:06:00.082 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 14:18:57.444 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53236 10 6452 1 2025-08-22 14:19:57.845 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:33100 10 6452 1 2025-08-22 14:20:58.272 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55736 10 6452 1 2025-08-22 14:21:52.221 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 14:21:52.382 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 14:21:52.127 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:21:52.231 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:21:52.314 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 14:21:58.677 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:34432 10 6452 1 2025-08-22 14:22:59.039 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52126 10 6452 1 2025-08-22 14:18:17.427 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 14:23:59.443 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56328 10 6452 1 2025-08-22 14:24:59.849 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:45754 10 6452 1 2025-08-22 14:20:17.431 00:06:00.082 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 14:26:00.273 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:59422 10 6452 1 2025-08-22 14:26:52.284 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 14:26:52.283 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 14:26:52.063 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:26:52.222 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:26:52.305 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 14:27:00.685 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41002 10 6452 1 2025-08-22 14:28:01.113 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57596 10 6452 1 2025-08-22 14:29:01.524 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:37804 10 6452 1 2025-08-22 14:30:01.905 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48608 10 6452 1 2025-08-22 14:25:17.430 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 14:31:02.311 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49736 10 6452 1 2025-08-22 14:31:52.260 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 14:31:52.351 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 14:31:52.014 00:00:00.036 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:31:52.192 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:31:52.275 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 14:32:02.719 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46776 10 6452 1 2025-08-22 14:27:17.434 00:06:00.081 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 14:33:03.134 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49116 10 6452 1 2025-08-22 14:34:03.498 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:40174 11 6504 1 2025-08-22 14:35:03.949 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44530 10 6452 1 2025-08-22 14:36:04.361 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:39816 12 10365 1 2025-08-22 14:36:52.489 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 14:36:52.462 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 14:36:52.335 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 14:36:52.430 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:36:52.406 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:32:17.436 00:06:00.083 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 14:37:04.840 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49988 10 6452 1 2025-08-22 14:38:05.210 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:51954 10 6452 1 2025-08-22 14:34:17.439 00:06:00.077 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 14:39:05.601 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36904 10 6452 1 2025-08-22 14:40:06.006 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56288 10 6452 1 2025-08-22 14:41:06.416 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55014 10 6452 1 2025-08-22 14:41:52.655 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 14:41:52.774 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 14:41:52.642 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 14:41:52.612 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:41:52.572 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:42:06.823 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58224 10 6452 1 2025-08-22 14:43:07.228 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47386 10 6452 1 2025-08-22 14:39:17.438 00:06:00.082 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 14:44:07.590 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42608 10 6452 1 2025-08-22 14:45:07.987 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59648 10 6452 1 2025-08-22 14:46:08.349 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39000 10 6452 1 2025-08-22 14:41:17.441 00:06:00.077 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 14:46:53.439 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 14:46:53.357 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 14:46:53.291 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:46:53.213 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:46:53.297 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 14:47:08.754 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54436 10 6452 1 2025-08-22 14:48:09.160 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47834 10 6452 1 2025-08-22 14:49:09.525 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50402 10 6452 1 2025-08-22 14:50:09.927 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:33528 10 6452 1 2025-08-22 14:46:17.439 00:06:00.082 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 14:51:10.300 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47416 10 6452 1 2025-08-22 14:51:52.797 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 14:51:52.628 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 14:51:52.469 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:51:52.793 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:51:52.875 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 14:52:10.711 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34634 10 6452 1 2025-08-22 14:48:17.442 00:06:00.076 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 14:53:11.122 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55100 10 6452 1 2025-08-22 14:54:11.532 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34230 10 6452 1 2025-08-22 14:55:11.939 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:35908 10 6452 1 2025-08-22 14:56:12.315 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36096 10 6452 1 2025-08-22 14:56:52.727 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 14:56:52.627 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:56:52.798 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 14:56:52.731 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 14:56:52.880 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 14:57:12.716 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36360 10 6452 1 2025-08-22 14:53:17.442 00:06:00.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 14:58:13.120 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58592 10 6452 1 Summary: total flows: 137, total bytes: 420842, total packets: 1021, avg bps: 905, avg pps: 0, avg bpp: 412 Time window: 2025-08-22 13:57:17 - 2025-08-22 14:59:17 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0010s User: 0.0019s Wall: 0.0016s flows/second: 83544.6 Runtime: 0.0017s