Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 08:59:11.325 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47582 10 6452 1 2025-08-13 09:00:11.729 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36120 10 6452 1 2025-08-13 09:01:12.141 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:32792 10 6452 1 2025-08-13 08:58:12.404 00:05:00.787 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 08:58:12.406 00:05:00.782 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 09:02:12.557 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39152 10 6452 1 2025-08-13 09:02:25.779 00:00:00.016 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 09:02:25.693 00:00:00.019 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:02:25.595 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 09:02:25.595 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 09:02:25.467 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:03:12.959 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33326 10 6452 1 2025-08-13 09:04:13.330 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59190 10 6452 1 2025-08-13 09:05:13.734 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:54014 12 10365 1 2025-08-13 09:06:14.221 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46770 10 6452 1 2025-08-13 09:07:26.033 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 09:07:14.626 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42368 10 6452 1 2025-08-13 09:07:25.860 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 09:07:25.573 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 09:07:25.847 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:07:25.950 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:04:12.408 00:05:00.781 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 09:04:12.406 00:05:00.787 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 09:08:15.035 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:52932 11 6504 1 2025-08-13 09:09:15.500 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46456 10 6452 1 2025-08-13 09:10:15.913 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56498 12 6556 1 2025-08-13 09:11:16.319 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54050 10 6452 1 2025-08-13 09:12:26.191 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 09:12:26.106 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 09:12:26.102 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 09:12:26.107 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:12:26.109 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:12:16.720 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47736 10 6452 1 2025-08-13 09:13:17.112 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41932 10 6452 1 2025-08-13 09:10:12.410 00:05:00.795 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 09:10:12.408 00:05:00.800 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 09:14:17.516 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59954 10 6452 1 2025-08-13 09:15:17.924 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57592 10 6452 1 2025-08-13 09:16:18.287 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45692 10 6452 1 2025-08-13 09:17:25.946 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 09:17:26.082 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 09:17:25.945 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 09:17:25.669 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:17:18.690 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40336 10 6452 1 2025-08-13 09:17:25.863 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:18:19.104 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51626 10 6452 1 2025-08-13 09:19:19.507 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54886 10 6452 1 2025-08-13 09:16:12.408 00:05:00.801 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 09:16:12.411 00:05:00.795 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 09:20:19.871 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53924 10 6452 1 2025-08-13 09:21:20.280 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48626 10 6452 1 2025-08-13 09:22:26.090 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 09:22:26.153 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 09:22:25.774 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:22:26.151 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:22:26.233 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 09:22:20.684 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40362 10 6452 1 2025-08-13 09:23:21.113 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53826 10 6452 1 2025-08-13 09:24:21.515 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33604 10 6452 1 2025-08-13 09:25:21.877 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55694 10 6452 1 2025-08-13 09:22:12.410 00:05:00.801 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 09:22:12.411 00:05:00.796 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 09:26:22.284 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59594 10 6452 1 2025-08-13 09:27:26.164 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 09:27:26.328 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 09:27:26.145 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 09:27:26.145 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:27:26.082 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:27:22.687 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33386 10 6452 1 2025-08-13 09:28:23.109 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51026 10 6452 1 2025-08-13 09:29:23.512 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33116 10 6452 1 2025-08-13 09:30:23.873 00:00:10.426 TCP 1.101.0.1:3000 -> 23.104.0.1:54954 10 6452 1 2025-08-13 09:31:24.338 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33116 10 6452 1 2025-08-13 09:28:12.413 00:05:00.796 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 09:28:12.410 00:05:00.801 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 09:32:26.159 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 09:32:26.239 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 09:32:26.274 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:32:26.136 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:32:26.220 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 09:32:24.739 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60500 10 6452 1 2025-08-13 09:33:25.147 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41228 10 6452 1 2025-08-13 09:34:25.549 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37090 10 6452 1 2025-08-13 09:35:25.962 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:43178 10 6452 1 2025-08-13 09:36:26.332 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60420 10 6452 1 2025-08-13 09:37:26.282 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 09:37:26.285 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 09:37:26.319 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:37:26.364 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:37:26.448 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 09:37:26.739 00:00:10.719 TCP 1.101.0.1:3000 -> 23.104.0.1:50292 10 6452 1 2025-08-13 09:34:12.412 00:05:00.803 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 09:34:12.416 00:05:00.798 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 09:38:27.499 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43762 10 6452 1 2025-08-13 09:39:27.863 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34156 10 6452 1 2025-08-13 09:40:28.278 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56016 10 6452 1 2025-08-13 09:41:28.687 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55120 10 6452 1 2025-08-13 09:42:26.551 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 09:42:26.475 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 09:42:26.402 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 09:42:26.344 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:42:26.468 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:42:29.110 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55920 10 6452 1 2025-08-13 09:43:29.516 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33746 10 6452 1 2025-08-13 09:40:12.413 00:05:00.802 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 09:40:12.416 00:05:00.797 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 09:44:29.883 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39886 10 6452 1 2025-08-13 09:45:30.309 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42980 10 6452 1 2025-08-13 09:46:30.713 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43238 10 6452 1 2025-08-13 09:47:26.853 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 09:47:26.583 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 09:47:26.686 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 09:47:26.524 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:47:26.769 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:47:31.126 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57506 10 6452 1 2025-08-13 09:48:31.492 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37248 10 6452 1 2025-08-13 09:49:31.897 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:50872 12 6556 1 2025-08-13 09:46:12.417 00:05:00.797 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 09:46:12.414 00:05:00.802 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 09:50:32.314 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43420 10 6452 1 2025-08-13 09:51:32.678 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:58894 10 6452 1 2025-08-13 09:52:26.682 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 09:52:26.596 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 09:52:26.669 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 09:52:26.544 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:52:26.599 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:52:33.059 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39090 10 6452 1 2025-08-13 09:53:33.461 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40736 10 6452 1 2025-08-13 09:54:33.876 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56484 10 6452 1 2025-08-13 09:55:34.283 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:41932 12 10367 1 2025-08-13 09:52:12.416 00:05:00.802 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 09:52:12.419 00:05:00.797 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 09:56:34.764 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:50956 10 6452 1 2025-08-13 09:57:26.800 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 09:57:26.599 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 09:57:26.596 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 09:57:26.638 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:57:26.718 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 09:57:35.190 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49238 10 6452 1 2025-08-13 09:58:35.595 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47518 10 6452 1 Summary: total flows: 140, total bytes: 425088, total packets: 1029, avg bps: 935, avg pps: 0, avg bpp: 413 Time window: 2025-08-13 08:58:12 - 2025-08-13 09:58:45 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0030s User: 0.0010s Wall: 0.0020s flows/second: 68295.3 Runtime: 0.0021s