Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 03:58:55.277 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:35408 10 6452 1 2025-08-15 03:59:55.648 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54386 10 6452 1 2025-08-15 04:00:56.057 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:32872 12 6556 1 2025-08-15 03:57:13.406 00:05:00.633 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 04:01:56.467 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36226 10 6452 1 2025-08-15 03:58:13.409 00:05:00.627 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 04:02:56.827 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51800 10 6452 1 2025-08-15 04:03:17.599 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 04:03:17.704 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:03:17.601 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:03:17.601 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 04:03:17.685 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 04:03:57.235 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38580 10 6452 1 2025-08-15 04:04:57.635 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60488 10 6452 1 2025-08-15 04:05:57.998 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54194 10 6452 1 2025-08-15 04:06:58.363 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:47686 10 6452 1 2025-08-15 04:03:13.407 00:05:00.636 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 04:07:58.721 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39450 10 6452 1 2025-08-15 04:04:13.409 00:05:00.630 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 04:08:17.683 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 04:08:17.239 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 04:08:17.560 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:08:17.602 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:08:17.559 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 04:08:59.136 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40970 10 6452 1 2025-08-15 04:09:59.540 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52116 10 6452 1 2025-08-15 04:10:59.945 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:37230 10 6452 1 2025-08-15 04:12:00.345 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56938 10 6452 1 2025-08-15 04:09:13.408 00:05:00.636 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 04:13:00.753 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:60542 10 6452 1 2025-08-15 04:13:17.649 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 04:13:17.637 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:13:17.479 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:13:17.481 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 04:13:17.562 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 04:10:13.410 00:05:00.632 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 04:14:01.182 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41460 10 6452 1 2025-08-15 04:15:01.587 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39336 10 6452 1 2025-08-15 04:16:01.991 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44538 10 6452 1 2025-08-15 04:17:02.398 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48598 10 6452 1 2025-08-15 04:18:02.806 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45640 10 6452 1 2025-08-15 04:18:17.505 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 04:18:17.545 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:18:17.521 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:18:17.898 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 04:18:17.602 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 04:19:03.174 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42392 10 6452 1 2025-08-15 04:15:13.411 00:05:00.636 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 04:20:03.574 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53324 10 6452 1 2025-08-15 04:16:13.413 00:05:00.630 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 04:21:03.983 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48196 10 6452 1 2025-08-15 04:22:04.391 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58670 10 6452 1 2025-08-15 04:23:04.796 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:36250 10 6452 1 2025-08-15 04:23:17.927 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 04:23:17.775 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:23:17.873 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:23:17.739 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 04:23:17.957 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 04:24:05.179 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57728 10 6452 1 2025-08-15 04:25:05.581 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37398 10 6452 1 2025-08-15 04:21:13.417 00:05:00.630 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 04:22:13.420 00:05:00.626 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 04:26:05.979 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:34330 11 6504 1 2025-08-15 04:27:06.431 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50536 10 6452 1 2025-08-15 04:28:17.892 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 04:28:17.817 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:28:17.880 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:28:17.932 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 04:28:06.839 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:34082 10 6452 1 2025-08-15 04:28:17.962 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 04:29:07.268 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60520 10 6452 1 2025-08-15 04:30:07.670 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33464 10 6452 1 2025-08-15 04:27:13.420 00:05:00.630 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 04:31:08.107 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56784 10 6452 1 2025-08-15 04:28:13.423 00:05:00.625 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 04:32:08.511 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39694 10 6452 1 2025-08-15 04:33:18.430 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 04:33:18.003 00:00:00.055 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 04:33:08.916 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51742 10 6452 1 2025-08-15 04:33:18.097 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:33:18.347 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:33:17.837 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 04:34:09.326 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59932 10 6452 1 2025-08-15 04:35:09.738 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55734 10 6452 1 2025-08-15 04:36:10.111 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56522 10 6452 1 2025-08-15 04:33:13.421 00:05:00.630 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 04:37:10.514 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50678 10 6452 1 2025-08-15 04:34:13.424 00:05:00.624 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 04:38:18.088 00:00:00.049 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 04:38:18.193 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 04:38:18.133 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:38:18.005 00:00:00.049 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:38:17.976 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 04:38:10.925 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35724 10 6452 1 2025-08-15 04:39:11.343 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40918 10 6452 1 2025-08-15 04:40:11.745 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50730 10 6452 1 2025-08-15 04:41:12.148 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54976 10 6452 1 2025-08-15 04:42:12.549 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:35996 10 6452 1 2025-08-15 04:39:13.422 00:05:00.629 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 04:43:18.240 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 04:43:18.159 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 04:43:17.896 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:43:18.157 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:43:18.092 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 04:43:13.040 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33868 10 6452 1 2025-08-15 04:40:13.425 00:05:00.624 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 04:44:13.436 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41906 10 6452 1 2025-08-15 04:45:13.850 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:48314 11 6504 1 2025-08-15 04:46:14.292 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54922 10 6452 1 2025-08-15 04:47:14.703 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:48462 10 6452 1 2025-08-15 04:48:18.331 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 04:48:18.187 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:48:18.252 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:48:18.334 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 04:48:18.334 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 04:48:15.101 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37600 12 6556 1 2025-08-15 04:45:13.424 00:05:00.628 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 04:49:15.520 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48234 10 6452 1 2025-08-15 04:46:13.427 00:05:00.624 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 04:50:15.881 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:41024 12 10365 1 2025-08-15 04:51:16.321 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54858 10 6452 1 2025-08-15 04:52:16.738 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36096 10 6452 1 2025-08-15 04:53:18.507 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 04:53:18.397 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:53:18.377 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:53:18.379 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 04:53:18.461 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 04:53:17.143 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33446 10 6452 1 2025-08-15 04:54:17.545 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56198 10 6452 1 2025-08-15 04:51:13.425 00:05:00.629 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-15 04:55:17.951 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57148 10 6452 1 2025-08-15 04:52:13.428 00:05:00.625 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-15 04:56:18.363 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50554 10 6452 1 2025-08-15 04:57:18.770 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:42384 10 6452 1 2025-08-15 04:58:18.570 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-15 04:58:18.631 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:58:18.524 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 04:58:18.448 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-15 04:58:18.606 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 04:58:19.139 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42290 10 6452 1 Summary: total flows: 140, total bytes: 421225, total packets: 1028, avg bps: 916, avg pps: 0, avg bpp: 409 Time window: 2025-08-15 03:57:13 - 2025-08-15 04:58:29 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0040s User: 0.0000s Wall: 0.0018s flows/second: 78251.9 Runtime: 0.0018s