Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 20:58:57.194 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49160 10 6452 1 2025-08-13 20:59:57.596 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58624 10 6452 1 2025-08-13 21:00:57.959 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56434 10 6452 1 2025-08-13 21:01:58.373 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38952 10 6452 1 2025-08-13 20:58:12.636 00:05:00.815 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 20:58:12.639 00:05:00.810 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 21:02:39.962 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 21:02:40.147 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 21:02:40.068 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 21:02:40.133 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:02:40.064 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:02:58.779 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35494 10 6452 1 2025-08-13 21:03:59.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50472 10 6452 1 2025-08-13 21:04:59.591 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58690 10 6452 1 2025-08-13 21:05:59.994 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56284 10 6452 1 2025-08-13 21:07:00.356 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36300 10 6452 1 2025-08-13 21:07:40.261 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 21:07:40.098 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 21:07:40.167 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 21:07:40.129 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:07:40.179 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:04:12.638 00:05:00.815 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 21:08:00.711 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34732 10 6452 1 2025-08-13 21:04:12.640 00:05:00.810 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 21:09:01.127 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57822 10 6452 1 2025-08-13 21:10:01.488 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51014 10 6452 1 2025-08-13 21:11:01.856 00:00:10.460 TCP 1.101.0.1:3000 -> 23.104.0.1:55092 12 10367 1 2025-08-13 21:12:02.359 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38642 10 6452 1 2025-08-13 21:12:40.358 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 21:12:40.294 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 21:12:40.290 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:12:40.289 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:12:40.371 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 21:13:02.765 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59058 10 6452 1 2025-08-13 21:10:12.642 00:05:00.810 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 21:10:12.639 00:05:00.815 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 21:14:03.179 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35856 10 6452 1 2025-08-13 21:15:03.583 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40786 10 6452 1 2025-08-13 21:16:03.985 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38306 10 6452 1 2025-08-13 21:17:04.385 00:00:10.556 TCP 1.101.0.1:3000 -> 23.104.0.1:60158 10 6452 1 2025-08-13 21:17:40.459 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 21:17:40.261 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 21:17:40.391 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:17:40.387 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:17:40.469 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 21:18:04.982 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51104 10 6452 1 2025-08-13 21:19:05.387 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36568 10 6452 1 2025-08-13 21:16:12.644 00:05:00.808 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 21:16:12.642 00:05:00.813 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 21:20:05.796 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:35612 10 6452 1 2025-08-13 21:21:06.178 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35934 10 6452 1 2025-08-13 21:22:06.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50424 10 6452 1 2025-08-13 21:22:40.543 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:22:40.295 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 21:22:40.505 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 21:22:40.338 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:22:40.626 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 21:23:06.944 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60418 10 6452 1 2025-08-13 21:24:07.363 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35792 10 6452 1 2025-08-13 21:25:07.766 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:53160 12 10365 1 2025-08-13 21:22:12.647 00:05:00.807 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 21:22:12.644 00:05:00.812 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 21:26:08.263 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60168 10 6452 1 2025-08-13 21:27:08.709 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59010 10 6452 1 2025-08-13 21:27:40.577 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 21:27:40.836 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 21:27:40.836 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 21:27:40.381 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:27:40.493 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:28:09.118 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:44294 11 6504 1 2025-08-13 21:29:09.584 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42558 10 6452 1 2025-08-13 21:30:09.989 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46112 10 6452 1 2025-08-13 21:31:10.389 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43142 10 6452 1 2025-08-13 21:28:12.647 00:05:00.808 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 21:28:12.645 00:05:00.813 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 21:32:10.748 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46536 10 6452 1 2025-08-13 21:32:40.701 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:32:40.810 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 21:32:40.768 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 21:32:40.758 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:32:40.784 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 21:33:11.152 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43848 10 6452 1 2025-08-13 21:34:11.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56524 10 6452 1 2025-08-13 21:35:11.919 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33952 10 6452 1 2025-08-13 21:36:12.333 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39046 10 6452 1 2025-08-13 21:37:12.736 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55670 10 6452 1 2025-08-13 21:37:40.900 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 21:37:40.862 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 21:37:40.779 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:37:40.818 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:37:40.813 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 21:34:12.649 00:05:00.809 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 21:34:12.647 00:05:00.814 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 21:38:13.140 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35650 10 6452 1 2025-08-13 21:39:13.543 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57560 10 6452 1 2025-08-13 21:40:13.954 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35854 10 6452 1 2025-08-13 21:41:14.369 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51820 10 6452 1 2025-08-13 21:42:14.762 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:47212 10 6452 1 2025-08-13 21:42:40.750 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 21:42:40.837 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 21:42:40.777 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:42:40.972 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:42:41.054 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 21:43:15.181 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37644 10 6452 1 2025-08-13 21:40:12.649 00:05:00.809 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 21:40:12.647 00:05:00.815 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 21:44:15.583 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38798 10 6452 1 2025-08-13 21:45:15.995 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39112 10 6452 1 2025-08-13 21:46:16.398 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37966 10 6452 1 2025-08-13 21:47:16.806 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:51296 10 6452 1 2025-08-13 21:47:40.907 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 21:47:41.087 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 21:47:40.715 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:47:40.910 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:47:40.993 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 21:48:17.174 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50454 10 6452 1 2025-08-13 21:49:17.576 00:00:10.581 TCP 1.101.0.1:3000 -> 23.104.0.1:34750 10 6452 1 2025-08-13 21:46:12.647 00:05:00.815 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 21:46:12.650 00:05:00.810 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 21:50:18.190 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41576 10 6452 1 2025-08-13 21:51:18.556 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54164 10 6452 1 2025-08-13 21:52:18.961 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57304 10 6452 1 2025-08-13 21:52:41.128 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 21:52:41.277 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 21:52:41.349 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:52:41.273 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:52:41.366 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 21:53:19.368 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39120 10 6452 1 2025-08-13 21:54:19.766 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:40032 10 6452 1 2025-08-13 21:55:20.191 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49434 10 6452 1 2025-08-13 21:52:12.651 00:05:00.811 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-13 21:52:12.648 00:05:00.816 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 21:56:20.596 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52644 10 6452 1 2025-08-13 21:57:20.992 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57946 10 6452 1 2025-08-13 21:57:41.613 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-13 21:57:41.442 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-13 21:57:41.586 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:57:41.549 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-13 21:57:41.631 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-13 21:58:21.397 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:60418 10 6452 1 Summary: total flows: 140, total bytes: 424880, total packets: 1025, avg bps: 939, avg pps: 0, avg bpp: 414 Time window: 2025-08-13 20:58:12 - 2025-08-13 21:58:31 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0025s User: 0.0017s Wall: 0.0018s flows/second: 77600.4 Runtime: 0.0018s