Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 14:59:35.785 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53852 10 6452 1 2025-08-02 15:00:36.192 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:42342 10 6452 1 2025-08-02 15:01:36.567 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34766 10 6452 1 2025-08-02 15:02:15.313 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 15:02:15.292 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 15:02:15.363 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 15:02:14.986 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:02:15.231 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:02:36.970 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39172 10 6452 1 2025-08-02 14:58:06.487 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 15:03:37.383 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51556 10 6452 1 2025-08-02 14:59:06.485 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 15:04:37.784 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42870 10 6452 1 2025-08-02 15:05:38.190 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37676 10 6452 1 2025-08-02 15:06:38.592 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44182 10 6452 1 2025-08-02 15:07:15.921 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 15:07:15.287 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 15:07:15.899 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 15:07:15.145 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:07:15.840 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:07:38.998 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51472 10 6452 1 2025-08-02 15:08:39.402 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34182 10 6452 1 2025-08-02 15:09:39.807 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38584 10 6452 1 2025-08-02 15:05:06.489 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 15:10:40.210 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45972 10 6452 1 2025-08-02 15:06:06.488 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 15:11:40.570 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45614 10 6452 1 2025-08-02 15:12:15.330 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 15:12:15.540 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 15:12:15.065 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:12:15.427 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:12:15.510 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 15:12:40.973 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:39294 10 6452 1 2025-08-02 15:13:41.401 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52402 10 6452 1 2025-08-02 15:14:41.808 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39138 10 6452 1 2025-08-02 15:15:42.216 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51676 10 6452 1 2025-08-02 15:16:42.616 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45926 10 6452 1 2025-08-02 15:12:06.491 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 15:17:16.015 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 15:17:16.137 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 15:17:16.132 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 15:17:15.911 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:17:15.930 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:17:43.020 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37608 10 6452 1 2025-08-02 15:13:06.489 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 15:18:43.427 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43622 10 6452 1 2025-08-02 15:19:43.831 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47306 10 6452 1 2025-08-02 15:20:44.231 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46216 10 6452 1 2025-08-02 15:21:44.638 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48416 10 6452 1 2025-08-02 15:22:15.739 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 15:22:15.726 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 15:22:15.667 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 15:22:15.597 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:22:15.657 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:22:45.040 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40582 10 6452 1 2025-08-02 15:23:45.444 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35958 10 6452 1 2025-08-02 15:19:06.493 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 15:24:45.847 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:33230 10 6452 1 2025-08-02 15:20:06.489 00:06:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 15:25:46.277 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38382 10 6452 1 2025-08-02 15:26:46.681 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:45430 10 6452 1 2025-08-02 15:27:15.763 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 15:27:15.948 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 15:27:15.691 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 15:27:16.130 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:27:15.680 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:27:47.109 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45428 10 6452 1 2025-08-02 15:28:47.475 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:57178 12 10367 1 2025-08-02 15:29:47.957 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41372 10 6452 1 2025-08-02 15:30:48.360 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38268 10 6452 1 2025-08-02 15:26:06.495 00:06:00.186 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 15:31:48.780 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38200 10 6452 1 2025-08-02 15:27:06.493 00:06:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 15:32:16.079 00:00:00.046 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 15:32:15.913 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 15:32:16.112 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 15:32:15.892 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:32:15.996 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:32:49.201 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55920 12 6556 1 2025-08-02 15:33:49.597 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58990 10 6452 1 2025-08-02 15:34:50.001 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58970 10 6452 1 2025-08-02 15:35:50.361 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40206 10 6452 1 2025-08-02 15:36:50.764 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50180 10 6452 1 2025-08-02 15:37:16.088 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 15:37:16.053 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 15:37:16.008 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 15:37:15.776 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:37:16.006 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:37:51.174 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43276 10 6452 1 2025-08-02 15:33:06.495 00:06:00.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 15:38:51.576 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:42370 10 6452 1 2025-08-02 15:34:06.492 00:06:00.183 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 15:39:51.936 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:51242 10 6452 1 2025-08-02 15:40:52.366 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33372 10 6452 1 2025-08-02 15:41:52.773 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33010 10 6452 1 2025-08-02 15:42:15.885 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 15:42:16.143 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 15:42:15.911 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:42:16.139 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:42:16.222 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 15:42:53.190 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45672 10 6452 1 2025-08-02 15:43:53.596 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41354 10 6452 1 2025-08-02 15:44:54.002 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57300 10 6452 1 2025-08-02 15:40:06.497 00:06:00.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 15:45:54.399 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40526 10 6452 1 2025-08-02 15:41:06.494 00:06:00.183 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 15:46:54.801 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44176 10 6452 1 2025-08-02 15:47:16.442 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 15:47:16.281 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 15:47:16.280 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 15:47:16.093 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:47:16.361 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:47:55.220 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38866 10 6452 1 2025-08-02 15:48:55.624 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34724 10 6452 1 2025-08-02 15:49:56.028 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42056 10 6452 1 2025-08-02 15:50:56.433 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46656 10 6452 1 2025-08-02 15:47:06.497 00:06:00.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-02 15:51:56.843 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:38572 10 6452 1 2025-08-02 15:52:16.618 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 15:52:16.596 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 15:52:16.533 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 15:52:16.568 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:52:16.536 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:48:06.496 00:06:00.182 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-02 15:52:57.233 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59540 10 6452 1 2025-08-02 15:53:57.638 00:00:10.493 TCP 1.101.0.1:3000 -> 23.104.0.1:37010 12 10367 1 2025-08-02 15:54:58.169 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43202 10 6452 1 2025-08-02 15:55:58.528 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56990 10 6452 1 2025-08-02 15:56:58.932 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:48952 10 6452 1 2025-08-02 15:57:16.312 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-02 15:57:16.489 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-02 15:57:16.067 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:57:16.556 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-02 15:57:16.639 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-02 15:57:59.356 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38804 10 6452 1 Summary: total flows: 135, total bytes: 417498, total packets: 1000, avg bps: 926, avg pps: 0, avg bpp: 417 Time window: 2025-08-02 14:58:06 - 2025-08-02 15:58:09 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0017s User: 0.0026s Wall: 0.0018s flows/second: 75126.8 Runtime: 0.0018s