Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 16:58:50.767 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53920 10 6452 1 2025-08-25 16:59:51.139 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51990 10 6452 1 2025-08-25 16:56:19.122 00:04:00.082 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-25 17:00:51.539 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38616 10 6452 1 2025-08-25 17:01:51.940 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36584 10 6452 1 2025-08-25 17:02:52.349 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37730 10 6452 1 2025-08-25 16:59:19.125 00:04:00.078 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-25 17:03:22.224 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 17:03:22.075 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:03:22.225 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:03:22.276 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 17:03:22.309 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 17:03:52.761 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50354 10 6452 1 2025-08-25 17:04:53.183 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59796 10 6452 1 2025-08-25 17:01:19.124 00:04:00.081 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-25 17:05:53.586 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34510 10 6452 1 2025-08-25 17:06:53.990 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57320 10 6452 1 2025-08-25 17:07:54.404 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38706 10 6452 1 2025-08-25 17:04:19.127 00:04:00.076 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-25 17:08:22.486 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 17:08:22.194 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 17:08:22.299 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 17:08:22.162 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:08:22.404 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:08:54.766 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51318 10 6452 1 2025-08-25 17:09:55.187 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50944 10 6452 1 2025-08-25 17:06:19.127 00:04:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-25 17:10:55.550 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39656 10 6452 1 2025-08-25 17:11:55.910 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57224 12 6556 1 2025-08-25 17:12:56.314 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38000 10 6452 1 2025-08-25 17:13:22.308 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 17:13:22.189 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 17:13:22.137 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:13:22.190 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:13:22.275 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 17:13:56.723 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35650 10 6452 1 2025-08-25 17:09:19.129 00:06:00.076 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 17:14:57.129 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42772 10 6452 1 2025-08-25 17:15:57.531 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41490 10 6452 1 2025-08-25 17:11:19.127 00:06:00.081 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 17:16:57.933 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44938 10 6452 1 2025-08-25 17:17:58.344 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57304 10 6452 1 2025-08-25 17:18:22.372 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:18:22.321 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 17:18:22.238 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 17:18:22.324 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:18:22.454 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 17:18:58.742 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45928 10 6452 1 2025-08-25 17:19:59.112 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51094 10 6452 1 2025-08-25 17:20:59.532 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57600 10 6452 1 2025-08-25 17:16:19.131 00:06:00.075 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 17:21:59.933 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37072 10 6452 1 2025-08-25 17:18:19.130 00:04:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-25 17:23:00.344 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45994 10 6452 1 2025-08-25 17:23:22.450 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 17:23:22.393 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 17:23:22.251 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:23:22.451 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:23:22.533 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 17:24:00.748 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54536 10 6452 1 2025-08-25 17:25:01.155 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47454 10 6452 1 2025-08-25 17:23:19.133 00:02:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-25 17:26:01.563 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56120 10 6452 1 2025-08-25 17:27:01.966 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:58770 12 10365 1 2025-08-25 17:23:19.131 00:04:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-25 17:28:02.401 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53882 10 6452 1 2025-08-25 17:28:22.510 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 17:28:22.496 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 17:28:22.550 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:28:22.509 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:28:22.591 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 17:29:02.819 00:00:10.651 TCP 1.101.0.1:3000 -> 23.104.0.1:40484 10 6452 1 2025-08-25 17:30:03.510 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52328 10 6452 1 2025-08-25 17:26:19.133 00:04:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-25 17:31:03.911 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58528 10 6452 1 2025-08-25 17:32:04.311 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34842 10 6452 1 2025-08-25 17:28:19.132 00:04:00.081 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-25 17:33:04.673 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35314 10 6452 1 2025-08-25 17:33:22.537 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 17:33:22.518 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 17:33:22.542 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:33:22.453 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:33:22.385 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 17:34:05.101 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39304 10 6452 1 2025-08-25 17:31:19.135 00:04:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-25 17:35:05.501 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42280 10 6452 1 2025-08-25 17:36:05.865 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34640 10 6452 1 2025-08-25 17:37:06.272 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40660 10 6452 1 2025-08-25 17:33:19.132 00:04:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-25 17:38:06.675 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46908 10 6452 1 2025-08-25 17:38:22.876 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 17:38:22.683 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 17:38:22.739 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 17:38:22.647 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:38:22.793 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:39:07.038 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:57686 10 6452 1 2025-08-25 17:36:19.135 00:04:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-25 17:40:07.398 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40676 10 6452 1 2025-08-25 17:41:07.795 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57086 10 6452 1 2025-08-25 17:42:08.214 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:37466 12 10365 1 2025-08-25 17:38:19.134 00:04:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-25 17:43:08.697 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60812 10 6452 1 2025-08-25 17:43:22.885 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 17:43:22.964 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 17:43:22.675 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:43:22.777 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:43:22.859 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 17:44:09.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42386 12 6556 1 2025-08-25 17:45:09.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40858 10 6452 1 2025-08-25 17:41:19.137 00:06:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 17:46:09.927 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:44724 10 6452 1 2025-08-25 17:47:10.307 00:00:10.916 TCP 1.101.0.1:3000 -> 23.104.0.1:44820 10 6452 1 2025-08-25 17:43:19.135 00:06:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 17:48:22.738 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 17:48:22.826 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:48:22.876 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:48:11.262 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48156 10 6452 1 2025-08-25 17:48:22.815 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 17:48:22.960 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 17:49:11.666 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44406 10 6452 1 2025-08-25 17:50:12.095 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:48588 10 6452 1 2025-08-25 17:51:12.450 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45184 10 6452 1 2025-08-25 17:52:12.852 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:41222 10 6452 1 2025-08-25 17:48:19.138 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 17:53:22.690 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 17:53:22.792 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 17:53:23.010 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:53:13.276 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50538 10 6452 1 2025-08-25 17:53:22.774 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:53:22.857 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 17:50:19.137 00:04:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-25 17:54:13.681 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46340 10 6452 1 2025-08-25 17:55:14.048 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49340 10 6452 1 2025-08-25 17:56:14.449 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35586 10 6452 1 2025-08-25 17:55:19.142 00:02:00.072 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-25 17:57:14.812 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60850 10 6452 1 2025-08-25 17:58:23.193 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 17:58:23.195 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 17:58:22.797 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:58:22.978 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 17:58:23.062 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 17:58:15.221 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:39014 10 6452 1 Summary: total flows: 142, total bytes: 424788, total packets: 1024, avg bps: 911, avg pps: 0, avg bpp: 414 Time window: 2025-08-25 16:56:19 - 2025-08-25 17:58:25 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0031s User: 0.0021s Wall: 0.0031s flows/second: 45381.8 Runtime: 0.0031s