Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 13:58:54.290 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40110 10 6452 1 2025-08-03 13:55:06.996 00:05:00.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-03 13:59:54.654 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57166 10 6452 1 2025-08-03 14:00:55.088 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35870 10 6452 1 2025-08-03 14:01:55.458 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58992 10 6452 1 2025-08-03 14:02:43.016 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 14:02:42.825 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 14:02:43.058 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 14:02:42.643 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:02:42.932 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:02:55.857 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48074 10 6452 1 2025-08-03 14:00:06.997 00:05:00.116 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-03 14:03:56.278 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60706 10 6452 1 2025-08-03 14:04:56.637 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37040 10 6452 1 2025-08-03 14:01:07.002 00:06:00.108 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 14:05:57.042 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47188 10 6452 1 2025-08-03 14:06:57.445 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44368 10 6452 1 2025-08-03 14:07:43.092 00:00:00.041 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 14:07:43.157 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 14:07:42.998 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 14:07:43.050 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:07:43.011 00:00:00.041 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:07:57.852 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60852 10 6452 1 2025-08-03 14:08:58.263 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58650 10 6452 1 2025-08-03 14:09:58.681 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57834 10 6452 1 2025-08-03 14:06:07.002 00:06:00.113 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 14:10:59.111 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33456 10 6452 1 2025-08-03 14:11:59.507 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58544 10 6452 1 2025-08-03 14:12:43.041 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 14:12:42.948 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 14:12:43.077 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 14:12:43.068 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:12:42.948 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:08:07.004 00:06:00.107 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 14:12:59.910 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41694 10 6452 1 2025-08-03 14:14:00.276 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34218 10 6452 1 2025-08-03 14:15:00.677 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49610 10 6452 1 2025-08-03 14:16:01.111 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45602 10 6452 1 2025-08-03 14:17:01.510 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51426 10 6452 1 2025-08-03 14:17:43.390 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 14:17:43.241 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 14:17:43.308 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 14:17:43.266 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:17:43.308 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:13:07.002 00:06:00.113 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 14:18:01.916 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49490 10 6452 1 2025-08-03 14:19:02.320 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55790 10 6452 1 2025-08-03 14:15:07.031 00:06:00.081 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 14:20:02.732 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34534 10 6452 1 2025-08-03 14:21:03.156 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60340 10 6452 1 2025-08-03 14:22:03.522 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55698 10 6452 1 2025-08-03 14:22:43.264 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 14:22:43.344 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 14:22:43.037 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 14:22:43.099 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:22:43.181 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:23:03.888 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60046 10 6452 1 2025-08-03 14:24:04.302 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41938 10 6452 1 2025-08-03 14:20:07.031 00:06:00.084 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 14:25:04.708 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38096 10 6452 1 2025-08-03 14:26:05.116 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60040 10 6452 1 2025-08-03 14:22:07.036 00:06:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 14:27:05.481 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38200 12 6556 1 2025-08-03 14:27:44.064 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 14:27:43.743 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 14:27:43.555 00:00:00.037 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:27:44.211 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:27:44.295 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 14:28:05.878 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:57314 10 6452 1 2025-08-03 14:29:06.298 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45176 10 6452 1 2025-08-03 14:30:06.715 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:45222 10 6452 1 2025-08-03 14:31:07.145 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43508 10 6452 1 2025-08-03 14:27:07.040 00:06:00.078 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 14:32:07.549 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34114 10 6452 1 2025-08-03 14:32:43.566 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 14:32:43.628 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 14:32:43.492 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 14:32:43.515 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:32:43.484 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:33:07.957 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46066 10 6452 1 2025-08-03 14:29:07.043 00:06:00.072 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 14:34:08.363 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36732 10 6452 1 2025-08-03 14:35:08.763 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:37386 10 6452 1 2025-08-03 14:36:09.192 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55244 10 6452 1 2025-08-03 14:37:09.590 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57856 10 6452 1 2025-08-03 14:37:43.659 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 14:37:43.786 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 14:37:43.751 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 14:37:43.532 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:37:43.576 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:38:09.998 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39430 10 6452 1 2025-08-03 14:34:07.040 00:06:00.078 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 14:39:10.402 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47648 10 6452 1 2025-08-03 14:40:10.814 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59434 10 6452 1 2025-08-03 14:36:07.043 00:06:00.073 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 14:41:11.216 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60202 10 6452 1 2025-08-03 14:42:11.620 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50200 10 6452 1 2025-08-03 14:42:43.965 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 14:42:43.758 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 14:42:43.706 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 14:42:43.639 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:42:43.882 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:43:11.987 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52670 10 6452 1 2025-08-03 14:44:12.390 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42156 10 6452 1 2025-08-03 14:45:12.794 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:59082 10 6452 1 2025-08-03 14:41:07.040 00:06:00.078 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 14:46:13.252 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40956 10 6452 1 2025-08-03 14:47:13.656 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58846 10 6452 1 2025-08-03 14:47:43.896 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 14:47:43.952 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 14:47:43.722 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 14:47:43.637 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:47:43.812 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:43:07.044 00:06:00.074 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 14:48:14.062 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41518 10 6452 1 2025-08-03 14:49:14.465 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51594 10 6452 1 2025-08-03 14:50:14.893 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:35328 10 6452 1 2025-08-03 14:51:15.279 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43600 10 6452 1 2025-08-03 14:52:15.684 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49546 10 6452 1 2025-08-03 14:52:43.851 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 14:52:43.936 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 14:52:43.758 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:52:43.933 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:52:44.017 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 14:48:07.042 00:06:00.078 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-03 14:53:16.133 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38714 10 6452 1 2025-08-03 14:54:16.545 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44008 10 6452 1 2025-08-03 14:50:07.045 00:06:00.074 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-03 14:55:16.944 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33298 10 6452 1 2025-08-03 14:56:17.362 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55072 10 6452 1 2025-08-03 14:57:17.763 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53092 10 6452 1 2025-08-03 14:57:44.281 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-03 14:57:44.156 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-03 14:57:44.075 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:57:44.199 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-03 14:57:44.203 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-03 14:58:18.176 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33742 10 6452 1 Summary: total flows: 137, total bytes: 416735, total packets: 1016, avg bps: 876, avg pps: 0, avg bpp: 410 Time window: 2025-08-03 13:55:06 - 2025-08-03 14:58:28 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0033s User: 0.0008s Wall: 0.0030s flows/second: 46113.4 Runtime: 0.0030s