Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 13:59:21.272 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49190 10 6452 1 2025-08-13 14:00:21.682 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35620 10 6452 1 2025-08-13 14:01:22.118 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53492 10 6452 1 2025-08-13 13:58:12.496 00:05:00.819 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 13:58:12.492 00:05:00.824 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 14:02:31.572 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 14:02:31.567 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 14:02:31.415 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:02:31.663 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:02:22.490 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:38004 10 6452 1 2025-08-13 14:02:31.747 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 14:03:22.852 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:51464 10 6452 1 2025-08-13 14:04:23.288 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:49318 10 6452 1 2025-08-13 14:05:23.718 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47544 10 6452 1 2025-08-13 14:06:24.119 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:54726 10 6452 1 2025-08-13 14:07:32.005 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 14:07:24.479 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59466 10 6452 1 2025-08-13 14:07:32.094 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 14:07:32.072 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:07:31.942 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:07:32.026 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 14:04:12.494 00:05:00.824 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 14:04:12.497 00:05:00.819 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 14:08:24.880 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38738 10 6452 1 2025-08-13 14:09:25.241 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42920 10 6452 1 2025-08-13 14:10:25.610 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:43102 12 10367 1 2025-08-13 14:11:26.110 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53924 10 6452 1 2025-08-13 14:12:31.993 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 14:12:31.908 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 14:12:31.968 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 14:12:31.973 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:12:31.910 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:12:26.515 00:00:10.811 TCP 1.101.0.1:3000 -> 23.104.0.1:35168 10 6452 1 2025-08-13 14:13:27.367 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52664 10 6452 1 2025-08-13 14:10:12.501 00:05:00.815 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 14:10:12.499 00:05:00.821 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 14:14:27.733 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53644 10 6452 1 2025-08-13 14:15:28.137 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54082 10 6452 1 2025-08-13 14:16:28.546 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37050 10 6452 1 2025-08-13 14:17:31.890 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 14:17:31.808 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 14:17:32.077 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 14:17:31.738 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:17:31.808 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:17:28.944 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49656 10 6452 1 2025-08-13 14:18:29.351 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59842 10 6452 1 2025-08-13 14:19:29.715 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:54192 10 6452 1 2025-08-13 14:16:12.503 00:05:00.815 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 14:16:12.501 00:05:00.820 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 14:20:30.105 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60332 10 6452 1 2025-08-13 14:21:30.502 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60016 10 6452 1 2025-08-13 14:22:32.185 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 14:22:32.010 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 14:22:32.097 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 14:22:32.028 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:22:32.103 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:22:30.904 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:57102 10 6452 1 2025-08-13 14:23:31.275 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47184 12 6556 1 2025-08-13 14:24:31.676 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51954 10 6452 1 2025-08-13 14:25:32.040 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34562 10 6452 1 2025-08-13 14:22:12.501 00:05:00.820 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 14:22:12.503 00:05:00.815 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 14:26:32.447 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57564 10 6452 1 2025-08-13 14:27:32.155 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 14:27:31.966 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 14:27:32.110 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:27:32.314 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:27:32.396 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 14:27:32.856 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54140 10 6452 1 2025-08-13 14:28:33.273 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54258 10 6452 1 2025-08-13 14:29:33.675 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37500 10 6452 1 2025-08-13 14:30:34.115 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36856 10 6452 1 2025-08-13 14:31:34.477 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52364 10 6452 1 2025-08-13 14:28:12.507 00:05:00.816 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 14:28:12.504 00:05:00.822 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 14:32:32.109 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 14:32:32.644 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 14:32:32.244 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:32:32.568 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:32:32.652 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 14:32:34.887 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:41998 12 6556 1 2025-08-13 14:33:35.313 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60048 10 6452 1 2025-08-13 14:34:35.698 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42950 10 6452 1 2025-08-13 14:35:36.118 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36968 10 6452 1 2025-08-13 14:36:36.533 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35570 10 6452 1 2025-08-13 14:37:32.362 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 14:37:32.250 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 14:37:32.215 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:37:32.348 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:37:32.443 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 14:37:36.940 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58060 10 6452 1 2025-08-13 14:34:12.508 00:05:00.816 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 14:34:12.505 00:05:00.821 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 14:38:37.362 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37452 10 6452 1 2025-08-13 14:39:37.768 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58418 10 6452 1 2025-08-13 14:40:38.180 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34362 10 6452 1 2025-08-13 14:41:38.546 00:00:11.064 TCP 1.101.0.1:3000 -> 23.104.0.1:34050 10 6452 1 2025-08-13 14:42:32.453 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 14:42:32.356 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 14:42:32.389 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:42:32.713 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:42:32.796 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 14:42:39.648 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:58124 10 6452 1 2025-08-13 14:43:40.019 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55942 10 6452 1 2025-08-13 14:40:12.509 00:05:00.820 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 14:40:12.507 00:05:00.825 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 14:44:40.422 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:60360 10 6452 1 2025-08-13 14:45:40.782 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35572 10 6452 1 2025-08-13 14:46:41.188 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55026 10 6452 1 2025-08-13 14:47:32.673 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 14:47:32.488 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 14:47:32.678 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 14:47:32.501 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:47:32.591 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:47:41.589 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40988 10 6452 1 2025-08-13 14:48:41.993 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:58324 10 6452 1 2025-08-13 14:49:42.410 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:42996 12 10367 1 2025-08-13 14:46:12.512 00:05:00.821 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 14:46:12.514 00:05:00.817 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 14:50:42.890 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37016 10 6452 1 2025-08-13 14:51:43.305 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45106 10 6452 1 2025-08-13 14:52:32.656 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 14:52:32.879 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 14:52:32.683 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 14:52:32.512 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:52:32.574 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:52:43.707 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:55762 10 6452 1 2025-08-13 14:53:44.093 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44572 10 6452 1 2025-08-13 14:54:44.500 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36796 10 6452 1 2025-08-13 14:55:44.862 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:56184 10 6452 1 2025-08-13 14:52:12.514 00:05:00.819 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 14:52:12.516 00:05:00.815 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 14:56:45.235 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:47648 10 6452 1 2025-08-13 14:57:32.867 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:57:32.964 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 14:57:33.125 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 14:57:32.741 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 14:57:32.950 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 14:57:45.607 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:45548 10 6452 1 Summary: total flows: 139, total bytes: 418586, total packets: 1018, avg bps: 934, avg pps: 0, avg bpp: 411 Time window: 2025-08-13 13:58:12 - 2025-08-13 14:57:56 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0031s User: 0.0015s Wall: 0.0027s flows/second: 51177.0 Runtime: 0.0027s