Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 08:58:53.462 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:44680 12 10365 1 2025-08-03 08:59:53.940 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54938 10 6452 1 2025-08-03 09:00:54.352 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34192 10 6452 1 2025-08-03 08:56:06.904 00:06:00.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 08:57:06.903 00:06:00.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 09:01:54.754 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35664 10 6452 1 2025-08-03 09:02:36.989 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 09:02:36.910 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 09:02:36.801 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 09:02:36.649 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:02:36.907 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:02:55.156 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37500 10 6452 1 2025-08-03 09:03:55.564 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47946 10 6452 1 2025-08-03 09:04:55.971 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49212 10 6452 1 2025-08-03 09:05:56.376 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54976 10 6452 1 2025-08-03 09:06:56.739 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59030 10 6452 1 2025-08-03 09:07:37.142 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 09:07:37.118 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 09:07:36.931 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 09:07:37.075 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:07:37.058 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:03:06.907 00:06:00.085 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 09:07:57.114 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50434 10 6452 1 2025-08-03 09:04:06.904 00:06:00.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 09:08:57.520 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36550 10 6452 1 2025-08-03 09:09:57.923 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:40196 10 6452 1 2025-08-03 09:10:58.341 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50224 10 6452 1 2025-08-03 09:11:58.752 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37122 10 6452 1 2025-08-03 09:12:37.073 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 09:12:36.977 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 09:12:36.974 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 09:12:37.031 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:12:36.991 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:12:59.153 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41954 10 6452 1 2025-08-03 09:13:59.574 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48636 10 6452 1 2025-08-03 09:10:06.907 00:06:00.085 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 09:14:59.951 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51798 10 6452 1 2025-08-03 09:11:06.905 00:06:00.091 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 09:16:00.358 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35468 10 6452 1 2025-08-03 09:17:00.730 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54518 10 6452 1 2025-08-03 09:17:37.375 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 09:17:37.293 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:17:37.361 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 09:17:37.296 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 09:17:37.426 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:18:01.144 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:48706 10 6452 1 2025-08-03 09:19:01.518 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59208 10 6452 1 2025-08-03 09:20:01.922 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:50866 10 6452 1 2025-08-03 09:21:02.344 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33392 10 6452 1 2025-08-03 09:17:06.910 00:06:00.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 09:18:06.907 00:05:00.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-03 09:22:02.756 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:43932 10 6452 1 2025-08-03 09:22:37.102 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 09:22:37.345 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 09:22:37.202 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 09:22:37.357 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:22:37.020 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:23:03.189 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46864 10 6452 1 2025-08-03 09:24:03.589 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53012 10 6452 1 2025-08-03 09:25:03.990 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43340 10 6452 1 2025-08-03 09:26:04.360 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35106 10 6452 1 2025-08-03 09:27:04.726 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37054 10 6452 1 2025-08-03 09:27:38.467 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 09:27:38.667 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:27:38.692 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:27:38.647 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 09:27:38.775 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 09:24:06.909 00:05:00.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-03 09:24:06.911 00:05:00.089 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-03 09:28:05.137 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44870 10 6452 1 2025-08-03 09:29:05.537 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57100 10 6452 1 2025-08-03 09:30:05.937 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:48060 10 6452 1 2025-08-03 09:31:06.366 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35624 10 6452 1 2025-08-03 09:32:06.766 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34458 10 6452 1 2025-08-03 09:32:37.651 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 09:32:37.717 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 09:32:37.633 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 09:32:37.405 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:32:37.568 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:33:07.190 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37202 10 6452 1 2025-08-03 09:30:06.910 00:05:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-03 09:30:06.912 00:05:00.089 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-03 09:34:07.553 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60196 10 6452 1 2025-08-03 09:35:07.918 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33564 10 6452 1 2025-08-03 09:36:08.316 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33620 10 6452 1 2025-08-03 09:37:08.721 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34198 10 6452 1 2025-08-03 09:37:37.678 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 09:37:37.811 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 09:37:37.764 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 09:37:37.553 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:37:37.595 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:38:09.131 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48568 10 6452 1 2025-08-03 09:39:09.531 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40516 10 6452 1 2025-08-03 09:36:06.913 00:05:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-03 09:36:06.911 00:05:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-03 09:40:09.905 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40808 10 6452 1 2025-08-03 09:41:10.264 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33402 10 6452 1 2025-08-03 09:42:10.673 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45422 10 6452 1 2025-08-03 09:42:37.775 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 09:42:37.970 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 09:42:37.968 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 09:42:37.873 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:42:37.694 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:43:11.120 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45820 10 6452 1 2025-08-03 09:44:11.525 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59526 10 6452 1 2025-08-03 09:45:11.933 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:42606 10 6452 1 2025-08-03 09:42:06.914 00:05:00.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-03 09:42:06.912 00:05:00.117 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-03 09:46:12.358 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49044 10 6452 1 2025-08-03 09:47:12.761 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:35772 10 6452 1 2025-08-03 09:47:37.823 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 09:47:37.643 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 09:47:37.795 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 09:47:37.556 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:47:37.739 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:48:13.193 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40388 10 6452 1 2025-08-03 09:49:13.590 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38474 10 6452 1 2025-08-03 09:50:13.995 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35964 10 6452 1 2025-08-03 09:51:14.366 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59074 10 6452 1 2025-08-03 09:48:06.916 00:05:00.122 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-03 09:48:06.919 00:05:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-03 09:52:14.768 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46722 10 6452 1 2025-08-03 09:52:37.912 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 09:52:37.986 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 09:52:37.770 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:52:37.912 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:52:37.995 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 09:53:15.183 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:39930 10 6452 1 2025-08-03 09:54:15.555 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51110 10 6452 1 2025-08-03 09:55:15.913 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55300 10 6452 1 2025-08-03 09:56:16.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38922 10 6452 1 2025-08-03 09:57:16.722 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36266 10 6452 1 2025-08-03 09:57:38.142 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 09:57:37.864 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 09:57:37.965 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 09:57:38.140 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:57:38.060 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 09:54:06.923 00:05:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-03 09:54:06.921 00:05:00.119 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-03 09:58:17.136 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52392 10 6452 1 Summary: total flows: 140, total bytes: 421774, total packets: 1036, avg bps: 892, avg pps: 0, avg bpp: 407 Time window: 2025-08-03 08:56:06 - 2025-08-03 09:59:07 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0022s User: 0.0022s Wall: 0.0020s flows/second: 70952.5 Runtime: 0.0020s