Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-22 20:58:48.955 00:00:10.765 TCP 1.101.0.1:3000 -> 23.104.0.1:40298 10 6452 1 2025-08-22 20:59:49.763 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:49112 10 6452 1 2025-08-22 21:00:50.183 00:00:10.889 TCP 1.101.0.1:3000 -> 23.104.0.1:43852 10 6452 1 2025-08-22 21:01:59.937 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 21:02:00.040 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:01:51.112 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47446 10 6452 1 2025-08-22 21:02:00.011 00:00:00.038 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:02:00.011 00:00:00.042 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 21:02:00.094 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 20:57:17.570 00:06:00.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 21:02:51.523 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52228 10 6452 1 2025-08-22 21:03:51.921 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59612 10 6452 1 2025-08-22 20:59:17.572 00:06:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 21:04:52.326 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34378 10 6452 1 2025-08-22 21:05:52.732 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44768 10 6452 1 2025-08-22 21:06:59.911 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 21:06:59.931 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:07:00.211 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 21:07:00.268 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:06:53.137 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59214 10 6452 1 2025-08-22 21:07:00.351 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 21:07:53.548 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42182 10 6452 1 2025-08-22 21:08:53.919 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41152 10 6452 1 2025-08-22 21:04:17.571 00:06:00.106 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 21:09:54.329 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60640 10 6452 1 2025-08-22 21:10:54.696 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:53738 12 10367 1 2025-08-22 21:06:17.575 00:06:00.100 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 21:12:01.575 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 21:12:01.597 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:12:01.372 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:12:01.479 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 21:12:01.456 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 21:11:55.185 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:48404 10 6452 1 2025-08-22 21:12:55.559 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37768 10 6452 1 2025-08-22 21:13:55.959 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43782 10 6452 1 2025-08-22 21:14:56.358 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38582 10 6452 1 2025-08-22 21:15:56.725 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42054 10 6452 1 2025-08-22 21:11:17.575 00:06:00.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 21:17:00.571 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 21:17:00.535 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 21:17:00.542 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 21:17:00.504 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:17:00.488 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:16:57.133 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43454 10 6452 1 2025-08-22 21:17:57.495 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57222 10 6452 1 2025-08-22 21:13:17.577 00:06:00.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 21:18:57.900 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:55686 10 6452 1 2025-08-22 21:19:58.272 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:40746 10 6452 1 2025-08-22 21:20:58.641 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34328 10 6452 1 2025-08-22 21:22:00.487 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 21:22:00.498 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 21:22:00.498 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:22:00.593 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:22:00.676 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 21:21:59.050 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35264 10 6452 1 2025-08-22 21:22:59.456 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36724 10 6452 1 2025-08-22 21:18:17.575 00:06:00.106 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 21:23:59.856 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:49370 10 6452 1 2025-08-22 21:25:00.229 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55934 10 6452 1 2025-08-22 21:20:17.579 00:06:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 21:26:00.592 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40656 10 6452 1 2025-08-22 21:27:00.704 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 21:27:00.690 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 21:27:00.590 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:27:00.691 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:27:00.775 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 21:27:00.997 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48536 10 6452 1 2025-08-22 21:28:01.403 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45586 10 6452 1 2025-08-22 21:29:01.804 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35822 10 6452 1 2025-08-22 21:30:02.213 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39418 10 6452 1 2025-08-22 21:25:17.577 00:06:00.106 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 21:31:02.614 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:47782 10 6452 1 2025-08-22 21:32:00.806 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 21:32:00.722 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 21:32:00.795 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:32:00.724 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:32:00.718 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 21:32:02.970 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33846 10 6452 1 2025-08-22 21:27:17.581 00:06:00.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 21:33:03.375 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46478 10 6452 1 2025-08-22 21:34:03.780 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33956 10 6452 1 2025-08-22 21:35:04.149 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46976 10 6452 1 2025-08-22 21:36:04.554 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47376 10 6452 1 2025-08-22 21:37:01.169 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 21:37:01.228 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 21:37:00.757 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:37:01.223 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:37:01.306 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 21:32:17.578 00:06:00.106 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 21:37:04.957 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33742 10 6452 1 2025-08-22 21:38:05.376 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57042 10 6452 1 2025-08-22 21:39:05.781 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53348 10 6452 1 2025-08-22 21:34:17.582 00:06:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 21:40:06.163 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51708 10 6452 1 2025-08-22 21:41:06.590 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58230 10 6452 1 2025-08-22 21:42:01.181 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 21:42:01.146 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 21:42:01.116 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:42:01.097 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:42:00.854 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 21:42:07.006 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33662 10 6452 1 2025-08-22 21:43:07.408 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42794 10 6452 1 2025-08-22 21:39:17.585 00:06:00.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 21:44:07.817 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32814 10 6452 1 2025-08-22 21:45:08.222 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60752 10 6452 1 2025-08-22 21:46:08.586 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55376 10 6452 1 2025-08-22 21:41:17.589 00:06:00.098 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 21:47:00.848 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 21:47:00.935 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 21:47:00.864 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:47:01.051 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:47:01.134 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 21:47:08.986 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51914 10 6452 1 2025-08-22 21:48:09.393 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37334 10 6452 1 2025-08-22 21:49:09.753 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39554 10 6452 1 2025-08-22 21:50:10.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54484 10 6452 1 2025-08-22 21:46:17.587 00:06:00.103 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 21:51:10.518 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38894 10 6452 1 2025-08-22 21:52:01.035 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 21:52:01.049 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 21:52:00.765 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:52:01.218 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:52:01.300 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 21:52:10.882 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56078 10 6452 1 2025-08-22 21:48:17.591 00:06:00.097 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-22 21:53:11.288 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37146 10 6452 1 2025-08-22 21:54:11.661 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43110 10 6452 1 2025-08-22 21:55:12.027 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:48972 10 6452 1 2025-08-22 21:56:12.425 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34378 10 6452 1 2025-08-22 21:57:01.497 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-22 21:57:01.646 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-22 21:57:01.229 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:57:01.646 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-22 21:57:01.730 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-22 21:57:12.832 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49226 10 6452 1 2025-08-22 21:53:17.591 00:06:00.101 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-22 21:58:13.236 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33684 10 6452 1 Summary: total flows: 137, total bytes: 420792, total packets: 1020, avg bps: 904, avg pps: 0, avg bpp: 412 Time window: 2025-08-22 20:57:17 - 2025-08-22 21:59:17 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0034s User: 0.0009s Wall: 0.0026s flows/second: 53309.2 Runtime: 0.0026s