Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 23:59:09.891 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50172 10 6452 1 2025-08-14 00:00:10.309 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42014 10 6452 1 2025-08-14 00:01:10.747 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49656 10 6452 1 2025-08-13 23:58:12.679 00:05:00.824 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-13 23:58:12.681 00:05:00.819 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 00:02:11.148 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47366 10 6452 1 2025-08-14 00:02:43.887 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 00:02:43.791 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 00:02:43.736 00:00:00.016 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 00:02:43.605 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:02:43.805 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:03:11.561 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41992 10 6452 1 2025-08-14 00:04:11.962 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34030 10 6452 1 2025-08-14 00:05:12.365 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:46304 10 6452 1 2025-08-14 00:06:12.725 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38604 10 6452 1 2025-08-14 00:07:13.142 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51418 10 6452 1 2025-08-14 00:07:43.930 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 00:07:43.899 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 00:07:43.903 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 00:07:43.615 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:07:43.847 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:04:12.683 00:05:00.819 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 00:04:12.681 00:05:00.824 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 00:08:13.542 00:00:10.462 TCP 1.101.0.1:3000 -> 23.104.0.1:50430 10 6452 1 2025-08-14 00:09:14.039 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38646 10 6452 1 2025-08-14 00:10:14.440 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36850 10 6452 1 2025-08-14 00:11:14.845 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:55560 10 6452 1 2025-08-14 00:12:15.274 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33646 10 6452 1 2025-08-14 00:12:43.697 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 00:12:43.704 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 00:12:43.885 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 00:12:43.753 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:12:43.615 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:13:15.679 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:36902 10 6452 1 2025-08-14 00:10:12.682 00:05:00.829 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 00:10:12.684 00:05:00.824 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 00:14:16.061 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51748 10 6452 1 2025-08-14 00:15:16.465 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40794 10 6452 1 2025-08-14 00:16:16.874 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43306 10 6452 1 2025-08-14 00:17:17.240 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:56618 10 6452 1 2025-08-14 00:17:44.230 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 00:17:44.199 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 00:17:43.828 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:17:44.061 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:17:44.143 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 00:18:17.607 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35606 10 6452 1 2025-08-14 00:19:18.020 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48692 10 6452 1 2025-08-14 00:16:12.686 00:05:00.823 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 00:16:12.683 00:05:00.828 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 00:20:18.418 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59222 10 6452 1 2025-08-14 00:21:18.835 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59760 10 6452 1 2025-08-14 00:22:19.248 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33052 10 6452 1 2025-08-14 00:22:44.515 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 00:22:44.388 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 00:22:43.993 00:00:00.054 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:22:44.584 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:22:44.668 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 00:23:19.657 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39246 10 6452 1 2025-08-14 00:24:20.027 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44864 10 6452 1 2025-08-14 00:25:20.437 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33304 10 6452 1 2025-08-14 00:22:12.691 00:05:00.822 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 00:22:12.694 00:05:00.817 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 00:26:20.838 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:39970 10 6452 1 2025-08-14 00:27:21.239 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:56434 10 6452 1 2025-08-14 00:27:44.317 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 00:27:44.160 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 00:27:44.068 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:27:44.082 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:27:44.163 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 00:28:21.629 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52440 10 6452 1 2025-08-14 00:29:22.033 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46020 10 6452 1 2025-08-14 00:30:22.442 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40586 10 6452 1 2025-08-14 00:31:22.847 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:50734 10 6452 1 2025-08-14 00:28:12.693 00:05:00.822 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 00:28:12.697 00:05:00.816 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 00:32:23.273 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55070 10 6452 1 2025-08-14 00:32:44.229 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 00:32:44.221 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 00:32:44.281 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 00:32:44.213 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:32:44.146 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:33:23.676 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33674 10 6452 1 2025-08-14 00:34:24.109 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46738 10 6452 1 2025-08-14 00:35:24.514 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54952 10 6452 1 2025-08-14 00:36:24.916 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51900 10 6452 1 2025-08-14 00:37:25.318 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47160 10 6452 1 2025-08-14 00:37:44.446 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 00:37:44.381 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 00:37:44.306 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:37:44.225 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:37:44.309 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 00:34:12.698 00:05:00.817 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 00:34:12.695 00:05:00.822 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 00:38:25.713 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36328 10 6452 1 2025-08-14 00:39:26.120 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39802 10 6452 1 2025-08-14 00:40:26.520 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 12 10365 1 2025-08-14 00:41:26.968 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:55914 10 6452 1 2025-08-14 00:42:27.351 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44536 10 6452 1 2025-08-14 00:42:44.679 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 00:42:44.932 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 00:42:44.603 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:42:44.593 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:42:44.675 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 00:43:27.754 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36418 10 6452 1 2025-08-14 00:40:12.698 00:05:00.822 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 00:40:12.700 00:05:00.816 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 00:44:28.118 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43784 10 6452 1 2025-08-14 00:45:28.521 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59748 10 6452 1 2025-08-14 00:46:28.886 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:35046 11 6504 1 2025-08-14 00:47:29.320 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58442 10 6452 1 2025-08-14 00:47:44.596 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 00:47:44.432 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 00:47:44.668 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:47:44.604 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:47:44.687 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 00:48:29.753 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:36600 10 6452 1 2025-08-14 00:49:30.166 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59454 10 6452 1 2025-08-14 00:46:12.705 00:05:00.814 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 00:46:12.702 00:05:00.819 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 00:50:30.568 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 10 6452 1 2025-08-14 00:51:30.972 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:55918 10 6452 1 2025-08-14 00:52:44.668 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 00:52:31.396 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44486 10 6452 1 2025-08-14 00:52:44.725 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 00:52:44.463 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:52:44.730 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:52:44.812 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 00:53:31.800 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:51692 10 6452 1 2025-08-14 00:54:32.185 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44762 10 6452 1 2025-08-14 00:55:32.552 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47668 10 6452 1 2025-08-14 00:52:12.708 00:05:00.813 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 00:52:12.705 00:05:00.818 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 00:56:32.951 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37328 10 6452 1 2025-08-14 00:57:45.087 00:00:00.041 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 00:57:44.956 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 00:57:44.782 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 00:57:44.967 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:57:33.355 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42850 10 6452 1 2025-08-14 00:57:45.005 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 00:58:33.720 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:45760 10 6452 1 Summary: total flows: 140, total bytes: 420965, total packets: 1023, avg bps: 927, avg pps: 0, avg bpp: 411 Time window: 2025-08-13 23:58:12 - 2025-08-14 00:58:44 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0030s User: 0.0010s Wall: 0.0014s flows/second: 99779.5 Runtime: 0.0014s