Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 17:58:56.052 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51426 10 6452 1 2025-08-09 17:59:56.460 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42502 10 6452 1 2025-08-09 18:00:41.018 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 18:00:40.850 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 18:00:40.933 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 18:00:40.957 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:00:40.935 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:00:56.863 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60356 10 6452 1 2025-08-09 18:01:57.275 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43844 10 6452 1 2025-08-09 18:02:57.689 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45164 10 6452 1 2025-08-09 18:03:58.107 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52598 10 6452 1 2025-08-09 17:59:10.421 00:06:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 18:04:58.513 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55016 10 6452 1 2025-08-09 18:00:10.418 00:06:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 18:05:41.011 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 18:05:40.920 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 18:05:41.048 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 18:05:40.753 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:05:40.926 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:05:58.923 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:45678 10 6452 1 2025-08-09 18:06:59.344 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:33192 10 6452 1 2025-08-09 18:07:59.772 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48430 10 6452 1 2025-08-09 18:09:00.140 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55300 10 6452 1 2025-08-09 18:10:00.505 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49322 10 6452 1 2025-08-09 18:10:41.142 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 18:10:40.914 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 18:10:41.263 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:10:41.243 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:10:41.327 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 18:06:10.429 00:06:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 18:11:00.910 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41782 10 6452 1 2025-08-09 18:07:10.425 00:06:00.241 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 18:12:01.311 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37034 10 6452 1 2025-08-09 18:13:01.712 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56348 10 6452 1 2025-08-09 18:14:02.119 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57700 10 6452 1 2025-08-09 18:15:02.524 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53042 10 6452 1 2025-08-09 18:15:41.445 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 18:15:41.264 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 18:15:41.362 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 18:15:41.475 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:15:41.362 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:16:02.926 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:45172 10 6452 1 2025-08-09 18:17:03.350 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36654 10 6452 1 2025-08-09 18:18:03.767 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:55040 10 6452 1 2025-08-09 18:13:10.430 00:06:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 18:14:10.428 00:06:00.240 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 18:19:04.179 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:52966 12 10367 1 2025-08-09 18:20:04.618 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48022 10 6452 1 2025-08-09 18:20:41.511 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 18:20:41.367 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 18:20:41.240 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 18:20:41.365 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:20:41.429 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:21:05.019 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33388 10 6452 1 2025-08-09 18:22:05.391 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60238 10 6452 1 2025-08-09 18:23:05.797 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41230 10 6452 1 2025-08-09 18:24:06.224 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55094 10 6452 1 2025-08-09 18:20:10.432 00:06:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 18:25:06.583 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40646 12 6556 1 2025-08-09 18:25:41.498 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 18:25:41.302 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:25:41.575 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:25:41.403 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 18:25:41.656 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 18:21:10.429 00:06:00.240 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 18:26:06.986 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50042 10 6452 1 2025-08-09 18:27:07.388 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38358 10 6452 1 2025-08-09 18:28:07.790 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:57370 10 6452 1 2025-08-09 18:29:08.174 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44130 10 6452 1 2025-08-09 18:30:08.588 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47424 10 6452 1 2025-08-09 18:30:41.699 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 18:30:41.451 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 18:30:41.461 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:30:41.534 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:30:41.616 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 18:31:08.963 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:44372 10 6452 1 2025-08-09 18:27:10.436 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 18:32:09.418 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36536 10 6452 1 2025-08-09 18:28:10.433 00:06:00.237 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 18:33:09.822 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38640 10 6452 1 2025-08-09 18:34:10.229 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51956 10 6452 1 2025-08-09 18:35:10.630 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41562 10 6452 1 2025-08-09 18:35:41.576 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:35:41.734 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 18:35:41.569 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 18:35:41.757 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:35:41.658 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 18:36:11.035 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50696 10 6452 1 2025-08-09 18:37:11.445 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39814 10 6452 1 2025-08-09 18:38:11.848 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:56558 10 6452 1 2025-08-09 18:34:10.438 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 18:39:12.274 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36334 10 6452 1 2025-08-09 18:35:10.437 00:06:00.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 18:40:12.689 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35458 10 6452 1 2025-08-09 18:40:41.975 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 18:40:41.955 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 18:40:41.898 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 18:40:41.759 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:40:41.892 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:41:13.118 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58358 10 6452 1 2025-08-09 18:42:13.481 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49766 10 6452 1 2025-08-09 18:43:13.891 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:33342 12 6556 1 2025-08-09 18:44:14.316 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38070 10 6452 1 2025-08-09 18:45:14.717 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:37242 10 6452 1 2025-08-09 18:45:42.050 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 18:45:41.974 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 18:45:41.904 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 18:45:41.984 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:45:41.969 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:41:10.439 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 18:46:15.100 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35236 10 6452 1 2025-08-09 18:42:10.437 00:06:00.236 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 18:47:15.459 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56914 10 6452 1 2025-08-09 18:48:15.858 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52882 11 6492 1 2025-08-09 18:49:16.267 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39528 10 6452 1 2025-08-09 18:50:16.671 00:00:10.667 TCP 1.101.0.1:3000 -> 23.104.0.1:44628 10 6452 1 2025-08-09 18:50:42.307 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 18:50:42.233 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 18:50:41.988 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 18:50:42.263 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:50:42.224 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:51:17.379 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33062 10 6452 1 2025-08-09 18:52:17.779 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38954 10 6452 1 2025-08-09 18:48:10.444 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-09 18:53:18.197 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38060 10 6452 1 2025-08-09 18:49:10.444 00:06:00.233 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-09 18:54:18.559 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52430 10 6452 1 2025-08-09 18:55:18.963 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54480 10 6452 1 2025-08-09 18:55:42.698 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-09 18:55:41.832 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:55:42.616 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-09 18:55:42.619 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-09 18:55:42.578 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-09 18:56:19.370 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:41524 10 6452 1 2025-08-09 18:57:19.841 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:58340 10 6452 1 2025-08-09 18:58:20.228 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45762 10 6452 1 Summary: total flows: 136, total bytes: 420179, total packets: 1011, avg bps: 940, avg pps: 0, avg bpp: 415 Time window: 2025-08-09 17:58:56 - 2025-08-09 18:58:30 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0026s User: 0.0020s Wall: 0.0023s flows/second: 59413.1 Runtime: 0.0023s