Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 19:59:33.138 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39776 10 6452 1 2025-08-13 20:00:33.542 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:53922 11 6504 1 2025-08-13 20:01:33.997 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42178 10 6452 1 2025-08-13 19:58:12.620 00:05:00.812 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 19:58:12.618 00:05:00.817 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 20:02:38.845 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 20:02:38.758 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 20:02:38.907 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 20:02:38.782 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:02:38.762 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:02:34.401 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55134 10 6452 1 2025-08-13 20:03:34.764 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:41818 10 6452 1 2025-08-13 20:04:35.146 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36804 10 6452 1 2025-08-13 20:05:35.549 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48242 10 6452 1 2025-08-13 20:06:35.917 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:46752 10 6452 1 2025-08-13 20:07:39.433 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 20:07:39.511 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 20:07:39.090 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:07:39.637 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:07:39.719 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 20:07:36.390 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40098 10 6452 1 2025-08-13 20:04:12.620 00:05:00.816 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 20:04:12.623 00:05:00.811 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 20:08:36.791 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:37674 10 6452 1 2025-08-13 20:09:37.215 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50946 10 6452 1 2025-08-13 20:10:37.584 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48958 10 6452 1 2025-08-13 20:11:37.981 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42544 10 6452 1 2025-08-13 20:12:39.183 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 20:12:39.103 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 20:12:38.702 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:12:39.001 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:12:39.083 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 20:12:38.390 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56860 10 6452 1 2025-08-13 20:13:38.796 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45534 10 6452 1 2025-08-13 20:10:12.623 00:05:00.812 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 20:10:12.622 00:05:00.817 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 20:14:39.200 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47480 10 6452 1 2025-08-13 20:15:39.601 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41676 10 6452 1 2025-08-13 20:16:40.005 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:53322 10 6452 1 2025-08-13 20:17:39.174 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 20:17:39.163 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 20:17:39.283 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:17:39.080 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:17:39.163 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 20:17:40.401 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58360 10 6452 1 2025-08-13 20:18:40.805 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50348 10 6452 1 2025-08-13 20:19:41.205 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33394 10 6452 1 2025-08-13 20:16:12.625 00:05:00.814 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 20:16:12.626 00:05:00.809 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 20:20:41.608 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54954 10 6452 1 2025-08-13 20:21:42.014 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44206 10 6452 1 2025-08-13 20:22:39.385 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 20:22:39.304 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:22:39.208 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 20:22:39.209 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 20:22:39.055 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:22:42.419 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:49114 10 6452 1 2025-08-13 20:23:42.789 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46528 10 6452 1 2025-08-13 20:24:43.194 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51276 10 6452 1 2025-08-13 20:25:43.602 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:39158 12 10365 1 2025-08-13 20:22:12.627 00:05:00.810 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 20:22:12.624 00:05:00.816 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 20:26:44.106 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47002 10 6452 1 2025-08-13 20:27:39.657 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 20:27:39.259 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 20:27:39.471 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 20:27:39.590 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:27:39.575 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:27:44.508 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41812 10 6452 1 2025-08-13 20:28:44.913 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42128 10 6452 1 2025-08-13 20:29:45.315 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51392 10 6452 1 2025-08-13 20:30:45.717 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:39256 14 10471 1 2025-08-13 20:31:46.206 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40590 10 6452 1 2025-08-13 20:28:12.627 00:05:00.814 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 20:28:12.628 00:05:00.810 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 20:32:39.677 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 20:32:39.602 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 20:32:39.696 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:32:39.664 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:32:39.748 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 20:32:46.608 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41060 12 6556 1 2025-08-13 20:33:47.011 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49792 10 6452 1 2025-08-13 20:34:47.430 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58316 10 6452 1 2025-08-13 20:35:47.836 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:46690 10 6452 1 2025-08-13 20:36:48.266 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60846 10 6452 1 2025-08-13 20:37:39.852 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 20:37:39.770 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:37:39.641 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 20:37:39.724 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 20:37:39.749 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:37:48.673 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56300 10 6452 1 2025-08-13 20:34:12.628 00:05:00.815 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 20:34:12.630 00:05:00.810 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 20:38:49.112 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33070 10 6452 1 2025-08-13 20:39:49.517 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43490 10 6452 1 2025-08-13 20:40:49.924 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57294 10 6452 1 2025-08-13 20:41:50.286 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:43226 10 6452 1 2025-08-13 20:42:39.932 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 20:42:39.605 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 20:42:39.529 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:42:39.761 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:42:39.843 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 20:42:50.675 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37480 10 6452 1 2025-08-13 20:43:51.103 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59134 10 6452 1 2025-08-13 20:40:12.629 00:05:00.814 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 20:40:12.632 00:05:00.810 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 20:44:51.463 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38456 10 6452 1 2025-08-13 20:45:51.866 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44460 10 6452 1 2025-08-13 20:46:52.274 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40304 10 6452 1 2025-08-13 20:47:39.895 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 20:47:39.740 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 20:47:39.814 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 20:47:39.838 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:47:39.812 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:47:52.639 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:54866 10 6452 1 2025-08-13 20:48:53.008 00:00:10.567 TCP 1.101.0.1:3000 -> 23.104.0.1:40382 10 6452 1 2025-08-13 20:49:53.612 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35204 10 6452 1 2025-08-13 20:46:12.633 00:05:00.809 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 20:46:12.630 00:05:00.814 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 20:50:54.015 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:37986 10 6452 1 2025-08-13 20:51:54.386 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59570 10 6452 1 2025-08-13 20:52:39.830 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 20:52:39.676 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 20:52:39.592 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:52:39.677 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:52:39.759 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 20:52:54.783 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56952 10 6452 1 2025-08-13 20:53:55.149 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52582 10 6452 1 2025-08-13 20:54:55.561 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43654 10 6452 1 2025-08-13 20:52:12.636 00:05:00.808 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 20:55:55.969 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38410 10 6452 1 2025-08-13 20:52:12.633 00:05:00.813 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 20:56:56.377 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:35336 10 6452 1 2025-08-13 20:57:39.902 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 20:57:39.963 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 20:57:39.703 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:57:39.965 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 20:57:40.046 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 20:57:56.792 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49332 10 6452 1 Summary: total flows: 139, total bytes: 418636, total packets: 1019, avg bps: 931, avg pps: 0, avg bpp: 410 Time window: 2025-08-13 19:58:12 - 2025-08-13 20:58:07 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0011s User: 0.0021s Wall: 0.0013s flows/second: 104895.3 Runtime: 0.0013s