Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 12:58:54.538 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50840 10 6452 1 2025-08-09 12:59:54.940 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57340 10 6452 1 2025-08-09 12:56:10.289 00:04:00.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 13:00:34.932 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 13:00:34.889 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:00:35.011 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:00:35.045 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 13:00:35.094 00:00:00.046 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 13:00:55.348 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59602 10 6452 1 2025-08-09 12:57:10.287 00:04:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 13:01:55.716 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42864 10 6452 1 2025-08-09 13:02:56.116 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56648 10 6452 1 2025-08-09 13:02:10.288 00:01:00.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-09 13:03:56.533 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44920 10 6452 1 2025-08-09 13:01:10.290 00:04:00.209 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 13:04:56.902 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57176 10 6452 1 2025-08-09 13:05:34.824 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:05:35.132 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:05:34.768 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 13:05:35.171 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 13:05:35.215 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 13:04:10.289 00:02:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-09 13:05:57.318 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52452 10 6452 1 2025-08-09 13:06:10.291 00:01:00.209 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 13:06:57.716 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60078 10 6452 1 2025-08-09 13:07:58.121 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42944 10 6452 1 2025-08-09 13:07:10.288 00:01:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-09 13:08:58.523 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38834 10 6452 1 2025-08-09 13:09:58.931 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:60436 10 6452 1 2025-08-09 13:08:10.292 00:02:00.208 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-09 13:10:35.500 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 13:10:35.220 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 13:10:35.170 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:10:35.418 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:10:35.143 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 13:10:59.315 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56992 10 6452 1 2025-08-09 13:09:10.290 00:02:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-09 13:11:59.719 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36622 10 6452 1 2025-08-09 13:11:10.292 00:01:00.208 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 13:12:10.291 00:01:00.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-09 13:13:00.107 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34796 10 6452 1 2025-08-09 13:14:00.515 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:43768 12 10367 1 2025-08-09 13:13:10.305 00:02:00.196 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-09 13:15:00.997 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42224 10 6452 1 2025-08-09 13:15:35.296 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 13:15:35.223 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:15:35.230 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:15:35.212 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 13:15:35.313 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 13:14:10.301 00:02:00.202 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-09 13:16:01.404 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54876 10 6452 1 2025-08-09 13:16:10.305 00:01:00.196 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 13:17:01.811 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:46806 10 6452 1 2025-08-09 13:17:10.303 00:01:00.201 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-09 13:18:02.186 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54480 10 6452 1 2025-08-09 13:19:02.591 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56266 10 6452 1 2025-08-09 13:18:10.305 00:02:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-09 13:20:02.964 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:38108 10 6452 1 2025-08-09 13:20:35.730 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 13:20:35.657 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 13:20:35.490 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:20:35.647 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:20:35.858 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 13:21:03.323 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:52150 10 6452 1 2025-08-09 13:21:10.306 00:01:00.196 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 13:22:03.684 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59840 10 6452 1 2025-08-09 13:19:10.302 00:04:00.202 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 13:23:04.057 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46884 10 6452 1 2025-08-09 13:24:04.459 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45834 10 6452 1 2025-08-09 13:25:04.860 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43924 10 6452 1 2025-08-09 13:25:35.524 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 13:25:35.482 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:25:35.440 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:25:35.374 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 13:25:35.525 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 13:26:05.229 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54186 10 6452 1 2025-08-09 13:23:10.306 00:04:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 13:27:05.637 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:50818 10 6452 1 2025-08-09 13:24:10.307 00:04:00.201 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 13:28:06.010 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53312 10 6452 1 2025-08-09 13:29:06.409 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:49836 10 6452 1 2025-08-09 13:30:06.787 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60662 10 6452 1 2025-08-09 13:30:35.596 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 13:30:35.385 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:30:35.421 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:30:35.657 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 13:30:35.504 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 13:31:07.192 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39910 10 6452 1 2025-08-09 13:28:10.307 00:04:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 13:32:07.595 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34992 10 6452 1 2025-08-09 13:29:10.306 00:04:00.203 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 13:33:07.997 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57164 10 6452 1 2025-08-09 13:34:08.365 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56182 10 6452 1 2025-08-09 13:35:08.760 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:32836 10 6452 1 2025-08-09 13:35:35.693 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 13:35:35.527 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:35:35.586 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:35:35.574 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 13:35:35.669 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 13:36:09.137 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:32860 10 6452 1 2025-08-09 13:33:10.308 00:04:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-09 13:37:09.504 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40778 10 6452 1 2025-08-09 13:34:10.306 00:04:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 13:38:09.912 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60802 12 6556 1 2025-08-09 13:38:10.309 00:01:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 13:39:10.320 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:44686 12 10365 1 2025-08-09 13:39:10.308 00:01:00.203 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-09 13:40:10.802 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36458 10 6452 1 2025-08-09 13:40:35.804 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 13:40:35.748 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:40:35.804 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:40:35.886 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 13:40:36.113 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 13:41:11.211 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42314 10 6452 1 2025-08-09 13:40:10.310 00:02:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-09 13:42:11.617 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48334 10 6452 1 2025-08-09 13:41:10.307 00:02:00.203 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-09 13:43:11.978 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34518 10 6452 1 2025-08-09 13:43:10.311 00:01:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 13:44:12.339 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57378 10 6452 1 2025-08-09 13:44:10.309 00:01:00.202 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-09 13:45:12.740 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39236 10 6452 1 2025-08-09 13:45:35.818 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 13:45:35.669 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:45:35.818 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 13:45:36.194 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 13:45:36.110 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:46:13.141 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59288 10 6452 1 2025-08-09 13:45:10.311 00:02:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-09 13:47:13.545 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51356 10 6452 1 2025-08-09 13:46:10.309 00:02:00.203 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-09 13:48:13.914 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42022 10 6452 1 2025-08-09 13:48:10.312 00:01:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 13:49:14.276 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48446 10 6452 1 2025-08-09 13:49:10.309 00:01:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-09 13:50:14.640 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44116 10 6452 1 2025-08-09 13:50:35.895 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 13:50:35.738 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:50:35.812 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:50:35.992 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 13:50:36.091 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 13:51:15.053 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43390 10 6452 1 2025-08-09 13:50:10.311 00:02:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-09 13:52:15.427 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55818 10 6452 1 2025-08-09 13:53:15.836 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42832 10 6452 1 2025-08-09 13:53:10.313 00:01:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-09 13:54:16.264 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45416 10 6452 1 2025-08-09 13:51:10.309 00:04:00.203 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-09 13:55:16.628 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:49446 10 6452 1 2025-08-09 13:55:35.776 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 13:55:35.920 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:55:36.150 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 13:55:36.194 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 13:55:36.234 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 13:56:16.989 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42188 10 6452 1 2025-08-09 13:55:10.313 00:02:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-09 13:57:17.407 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56770 10 6452 1 2025-08-09 13:58:17.813 00:00:10.916 TCP 1.101.0.1:3000 -> 23.104.0.1:52760 10 6452 1 Summary: total flows: 158, total bytes: 425055, total packets: 1028, avg bps: 909, avg pps: 0, avg bpp: 413 Time window: 2025-08-09 12:56:10 - 2025-08-09 13:58:28 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0030s User: 0.0015s Wall: 0.0017s flows/second: 92452.6 Runtime: 0.0017s