Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-07 13:58:46.209 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53416 10 6452 1 2025-08-07 13:59:38.583 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 13:59:38.344 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 13:59:38.346 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 13:59:38.076 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:59:38.501 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 13:59:46.624 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45704 10 6452 1 2025-08-07 14:00:46.994 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35654 10 6452 1 2025-08-07 14:01:47.407 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48938 10 6452 1 2025-08-07 13:57:09.077 00:06:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 14:02:47.805 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54930 10 6452 1 2025-08-07 13:59:09.080 00:04:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 14:03:48.209 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:40016 10 6452 1 2025-08-07 14:04:38.604 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 14:04:38.601 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 14:04:38.197 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:04:38.703 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:04:38.786 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:04:48.577 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59410 10 6452 1 2025-08-07 14:05:48.988 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58850 10 6452 1 2025-08-07 14:06:49.391 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36876 10 6452 1 2025-08-07 14:07:49.799 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59198 10 6452 1 2025-08-07 14:04:09.083 00:04:00.086 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 14:08:50.204 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53148 10 6452 1 2025-08-07 14:04:09.080 00:06:00.091 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 14:09:38.500 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 14:09:38.724 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 14:09:38.694 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:09:38.730 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:09:38.812 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:09:50.605 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47756 10 6452 1 2025-08-07 14:10:51.004 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34782 10 6452 1 2025-08-07 14:11:51.416 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:55074 10 6452 1 2025-08-07 14:12:51.832 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:44818 10 6452 1 2025-08-07 14:13:52.264 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52730 10 6452 1 2025-08-07 14:09:09.082 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 14:14:39.028 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 14:14:38.938 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 14:14:39.136 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:14:38.943 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:14:39.025 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:14:52.673 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48148 10 6452 1 2025-08-07 14:15:53.101 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55534 10 6452 1 2025-08-07 14:11:09.081 00:06:00.091 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 14:16:53.504 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35796 10 6452 1 2025-08-07 14:17:53.903 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34350 10 6452 1 2025-08-07 14:18:09.081 00:00:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-08-07 14:18:54.307 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:34112 12 10365 1 2025-08-07 14:19:38.955 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:19:38.653 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 14:19:38.868 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 14:19:38.784 00:00:00.012 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:19:38.872 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:19:54.780 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60900 10 6452 1 2025-08-07 14:20:55.186 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55440 10 6452 1 2025-08-07 14:16:09.084 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 14:21:55.588 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35938 10 6452 1 2025-08-07 14:19:09.082 00:04:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 14:22:55.995 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57036 10 6452 1 2025-08-07 14:23:56.402 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53466 10 6452 1 2025-08-07 14:24:38.813 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 14:24:38.788 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 14:24:38.831 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:24:39.126 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:24:39.208 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:24:56.799 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35106 10 6452 1 2025-08-07 14:25:57.201 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59462 10 6452 1 2025-08-07 14:26:57.606 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39736 10 6452 1 2025-08-07 14:24:09.082 00:04:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 14:23:09.084 00:06:00.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 14:27:57.974 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44154 10 6452 1 2025-08-07 14:28:58.385 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52132 10 6452 1 2025-08-07 14:29:38.975 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:29:38.907 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 14:29:39.126 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:29:38.893 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:29:39.005 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 14:29:58.769 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:37156 10 6452 1 2025-08-07 14:30:09.088 00:00:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-08-07 14:30:59.136 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38396 10 6452 1 2025-08-07 14:31:59.505 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35328 10 6452 1 2025-08-07 14:32:59.910 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42694 10 6452 1 2025-08-07 14:29:09.085 00:06:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 14:34:00.269 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37894 10 6452 1 2025-08-07 14:34:39.058 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 14:34:39.403 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 14:34:39.137 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:34:39.427 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:34:39.511 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:31:09.089 00:04:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 14:35:00.678 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47248 10 6452 1 2025-08-07 14:36:01.108 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45768 10 6452 1 2025-08-07 14:37:01.472 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49766 10 6452 1 2025-08-07 14:38:01.879 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38270 10 6452 1 2025-08-07 14:39:02.283 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37664 10 6452 1 2025-08-07 14:39:39.334 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:39:39.164 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 14:39:39.087 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 14:39:39.132 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:39:39.251 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:36:09.087 00:04:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-07 14:40:02.684 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51912 10 6452 1 2025-08-07 14:36:09.085 00:06:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 14:41:03.102 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57372 10 6452 1 2025-08-07 14:42:03.470 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51360 10 6452 1 2025-08-07 14:43:03.840 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:59924 10 6452 1 2025-08-07 14:44:04.272 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:54072 12 10367 1 2025-08-07 14:44:39.345 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 14:44:39.416 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 14:44:39.221 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:44:39.335 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:44:39.418 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:45:04.746 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41100 10 6452 1 2025-08-07 14:41:09.090 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 14:46:05.151 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46370 10 6452 1 2025-08-07 14:47:05.554 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59702 10 6452 1 2025-08-07 14:43:09.086 00:06:00.095 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-07 14:48:05.919 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57966 10 6452 1 2025-08-07 14:49:06.324 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41818 10 6452 1 2025-08-07 14:49:39.347 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:49:39.368 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 14:49:39.434 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 14:49:39.286 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:49:39.265 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:50:09.088 00:00:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-08-07 14:50:06.734 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39454 10 6452 1 2025-08-07 14:51:07.142 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53010 10 6452 1 2025-08-07 14:52:07.550 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47820 10 6452 1 2025-08-07 14:48:09.089 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-07 14:53:07.909 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46060 10 6452 1 2025-08-07 14:54:08.270 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48880 10 6452 1 2025-08-07 14:54:39.664 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 14:54:39.670 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 14:54:39.510 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 14:54:39.314 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:54:39.581 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 14:51:09.086 00:04:00.095 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-07 14:55:08.676 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50408 10 6452 1 2025-08-07 14:56:09.052 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34336 10 6452 1 2025-08-07 14:57:09.480 00:00:10.632 TCP 1.101.0.1:3000 -> 23.104.0.1:52684 10 6452 1 2025-08-07 14:58:10.144 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41736 10 6452 1 Summary: total flows: 141, total bytes: 424213, total packets: 1014, avg bps: 924, avg pps: 0, avg bpp: 418 Time window: 2025-08-07 13:57:09 - 2025-08-07 14:58:20 Total flows processed: 141, passed: 141, Blocks skipped: 0, Bytes read: 14728 Sys: 0.0037s User: 0.0009s Wall: 0.0028s flows/second: 50956.1 Runtime: 0.0028s