Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 17:59:09.812 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48392 10 6452 1 2025-08-01 18:00:10.216 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55656 10 6452 1 2025-08-01 18:01:10.580 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49920 10 6452 1 2025-08-01 18:01:49.822 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 18:01:49.886 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:01:49.739 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:01:49.980 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 18:01:49.979 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 18:02:10.980 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41076 10 6452 1 2025-08-01 17:58:06.050 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 18:03:11.396 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:54558 10 6452 1 2025-08-01 17:59:06.048 00:06:00.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 18:04:11.777 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42946 10 6452 1 2025-08-01 18:05:12.162 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48988 10 6452 1 2025-08-01 18:06:12.565 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48710 10 6452 1 2025-08-01 18:06:50.144 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 18:06:49.771 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:06:50.064 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 18:06:50.067 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 18:06:50.062 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:07:12.963 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37500 10 6452 1 2025-08-01 18:08:13.370 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54278 10 6452 1 2025-08-01 18:09:13.771 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50704 10 6452 1 2025-08-01 18:05:06.053 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 18:10:14.174 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35768 10 6452 1 2025-08-01 18:06:06.049 00:06:00.236 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 18:11:14.539 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56436 10 6452 1 2025-08-01 18:11:50.188 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 18:11:50.191 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 18:11:49.996 00:00:00.047 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:11:50.190 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:11:50.272 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 18:12:14.942 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:55474 11 6504 1 2025-08-01 18:13:15.375 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56176 10 6452 1 2025-08-01 18:14:15.777 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33766 10 6452 1 2025-08-01 18:15:16.179 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46674 10 6452 1 2025-08-01 18:16:16.577 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35528 10 6452 1 2025-08-01 18:16:50.446 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 18:16:50.142 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 18:16:50.419 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 18:16:50.294 00:00:00.035 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:16:50.364 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:12:06.056 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 18:17:16.977 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56456 10 6452 1 2025-08-01 18:13:06.054 00:06:00.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 18:18:17.402 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:39332 10 6452 1 2025-08-01 18:19:17.811 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50748 10 6452 1 2025-08-01 18:20:18.212 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35636 10 6452 1 2025-08-01 18:21:18.619 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33454 10 6452 1 2025-08-01 18:21:50.481 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 18:21:50.467 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 18:21:50.454 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 18:21:50.347 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:21:50.398 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:22:19.024 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48568 10 6452 1 2025-08-01 18:23:19.417 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34472 10 6452 1 2025-08-01 18:19:06.059 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 18:24:19.780 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45444 10 6452 1 2025-08-01 18:20:06.058 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 18:25:20.186 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60008 10 6452 1 2025-08-01 18:26:20.549 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49444 10 6452 1 2025-08-01 18:26:51.721 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 18:26:51.810 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 18:26:51.642 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:26:51.640 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:26:51.724 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 18:27:20.955 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:49038 10 6452 1 2025-08-01 18:28:21.428 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41218 10 6452 1 2025-08-01 18:29:21.842 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:46942 10 6452 1 2025-08-01 18:30:22.267 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41294 10 6452 1 2025-08-01 18:26:06.062 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 18:31:22.671 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57288 10 6452 1 2025-08-01 18:31:50.572 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 18:31:50.494 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 18:31:50.517 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:31:50.573 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:31:50.655 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 18:27:06.059 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 18:32:23.037 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48826 10 6452 1 2025-08-01 18:33:23.407 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57642 10 6452 1 2025-08-01 18:34:23.816 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:33244 11 6504 1 2025-08-01 18:35:24.272 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59394 10 6452 1 2025-08-01 18:36:24.682 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47642 10 6452 1 2025-08-01 18:36:50.692 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 18:36:50.734 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 18:36:50.572 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:36:50.737 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:36:50.819 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 18:37:25.116 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52602 10 6452 1 2025-08-01 18:33:06.073 00:06:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 18:38:25.529 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52728 10 6452 1 2025-08-01 18:34:06.069 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 18:39:25.892 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35646 10 6452 1 2025-08-01 18:40:26.307 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49518 10 6452 1 2025-08-01 18:41:26.712 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:53394 10 6452 1 2025-08-01 18:41:50.898 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:41:50.891 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 18:41:50.894 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 18:41:50.542 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:41:50.980 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 18:42:27.136 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49462 10 6452 1 2025-08-01 18:43:27.501 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54270 10 6452 1 2025-08-01 18:44:27.912 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35542 10 6452 1 2025-08-01 18:40:06.074 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 18:45:28.313 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47998 10 6452 1 2025-08-01 18:41:06.070 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 18:46:28.723 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39262 10 6452 1 2025-08-01 18:46:50.797 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 18:46:50.911 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 18:46:50.758 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:46:50.709 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:46:50.791 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 18:47:29.140 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50272 10 6452 1 2025-08-01 18:48:29.496 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42814 10 6452 1 2025-08-01 18:49:29.900 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48690 10 6452 1 2025-08-01 18:50:30.264 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59468 10 6452 1 2025-08-01 18:51:30.637 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34894 10 6452 1 2025-08-01 18:51:51.045 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 18:51:50.899 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 18:51:50.899 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 18:51:50.724 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:51:50.964 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:47:06.076 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-01 18:52:31.038 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45012 10 6452 1 2025-08-01 18:48:06.074 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-01 18:53:31.440 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33488 10 6452 1 2025-08-01 18:54:31.847 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:33692 10 6452 1 2025-08-01 18:55:32.272 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42790 10 6452 1 2025-08-01 18:56:32.679 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:46450 10 6452 1 2025-08-01 18:56:51.182 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-01 18:56:51.111 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-01 18:56:51.221 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-01 18:56:50.972 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:56:51.099 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-01 18:57:33.073 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46446 10 6452 1 2025-08-01 18:58:33.476 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42988 10 6452 1 Summary: total flows: 136, total bytes: 416120, total packets: 1006, avg bps: 915, avg pps: 0, avg bpp: 413 Time window: 2025-08-01 17:58:06 - 2025-08-01 18:58:43 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0043s User: 0.0000s Wall: 0.0023s flows/second: 58517.2 Runtime: 0.0023s