Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 02:59:25.600 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57576 10 6452 1 2025-08-14 03:00:25.962 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:41592 12 10365 1 2025-08-14 03:01:26.444 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36310 10 6452 1 2025-08-14 02:58:12.757 00:05:00.791 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 02:58:12.753 00:05:00.796 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 03:02:26.852 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:55480 10 6452 1 2025-08-14 03:02:47.497 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 03:02:47.141 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 03:02:47.269 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:02:47.415 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:02:47.138 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 03:03:27.280 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42170 10 6452 1 2025-08-14 03:04:27.681 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50904 10 6452 1 2025-08-14 03:05:28.104 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:37122 12 10367 1 2025-08-14 03:06:28.579 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35268 10 6452 1 2025-08-14 03:07:28.984 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43248 10 6452 1 2025-08-14 03:07:47.298 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 03:07:47.473 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 03:07:47.209 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:07:47.599 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:07:47.683 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 03:04:12.759 00:05:00.790 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 03:04:12.756 00:05:00.795 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 03:08:29.385 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:35664 10 6452 1 2025-08-14 03:09:29.809 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44172 10 6452 1 2025-08-14 03:10:30.211 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53510 10 6452 1 2025-08-14 03:11:30.616 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54412 10 6452 1 2025-08-14 03:12:31.019 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44152 10 6452 1 2025-08-14 03:12:47.686 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 03:12:47.387 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 03:12:47.597 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 03:12:47.323 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:12:47.604 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:13:31.384 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57110 10 6452 1 2025-08-14 03:10:12.759 00:05:00.790 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 03:10:12.757 00:05:00.795 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 03:14:31.788 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36418 10 6452 1 2025-08-14 03:15:32.202 00:00:17.082 TCP 1.101.0.1:3000 -> 23.104.0.1:34880 10 6452 1 2025-08-14 03:16:39.324 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48196 10 6452 1 2025-08-14 03:17:47.669 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 03:17:47.859 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 03:17:47.667 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:17:47.401 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:17:47.483 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 03:17:39.731 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40464 10 6452 1 2025-08-14 03:18:40.105 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60632 10 6452 1 2025-08-14 03:19:40.510 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56930 10 6452 1 2025-08-14 03:16:12.762 00:05:00.788 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 03:16:12.759 00:05:00.794 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 03:20:40.911 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40022 10 6452 1 2025-08-14 03:21:41.278 00:00:10.820 TCP 1.101.0.1:3000 -> 23.104.0.1:33018 10 6452 1 2025-08-14 03:22:47.667 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 03:22:47.671 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 03:22:47.814 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 03:22:47.639 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:22:47.584 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:22:42.137 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60078 10 6452 1 2025-08-14 03:23:42.542 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37046 10 6452 1 2025-08-14 03:24:42.940 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:44458 10 6452 1 2025-08-14 03:25:43.370 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40062 10 6452 1 2025-08-14 03:22:12.764 00:05:00.789 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 03:22:12.762 00:05:00.795 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 03:26:43.736 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58956 10 6452 1 2025-08-14 03:27:47.906 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 03:27:47.950 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 03:27:47.907 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 03:27:47.929 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:27:47.824 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:27:44.109 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37528 10 6452 1 2025-08-14 03:28:44.514 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53778 10 6452 1 2025-08-14 03:29:44.918 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56116 10 6452 1 2025-08-14 03:30:45.322 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48908 10 6452 1 2025-08-14 03:31:45.701 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47834 10 6452 1 2025-08-14 03:28:12.765 00:05:00.791 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 03:28:12.762 00:05:00.796 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 03:32:47.960 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 03:32:47.939 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 03:32:47.878 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 03:32:47.823 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:32:47.878 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:32:46.112 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34456 10 6452 1 2025-08-14 03:33:46.524 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43240 10 6452 1 2025-08-14 03:34:46.924 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:48460 13 6608 1 2025-08-14 03:35:47.364 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47208 10 6452 1 2025-08-14 03:36:47.762 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36646 10 6452 1 2025-08-14 03:37:48.323 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 03:37:47.782 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:37:48.105 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:37:48.064 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 03:37:48.188 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 03:37:48.173 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42030 10 6452 1 2025-08-14 03:34:12.771 00:05:00.790 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 03:34:12.773 00:05:00.785 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 03:38:48.590 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60270 10 6452 1 2025-08-14 03:39:49.015 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59128 10 6452 1 2025-08-14 03:40:49.422 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52722 10 6452 1 2025-08-14 03:41:49.827 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:42428 10 6452 1 2025-08-14 03:42:48.206 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 03:42:48.056 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 03:42:48.236 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 03:42:47.969 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:42:48.122 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:42:50.201 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36700 10 6452 1 2025-08-14 03:43:50.608 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50938 10 6452 1 2025-08-14 03:40:12.771 00:05:00.791 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 03:40:12.774 00:05:00.786 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 03:44:51.011 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34338 10 6452 1 2025-08-14 03:45:51.374 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38232 10 6452 1 2025-08-14 03:46:51.741 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54424 10 6452 1 2025-08-14 03:47:48.242 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 03:47:48.373 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 03:47:48.095 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:47:48.242 00:00:00.051 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:47:48.325 00:00:00.051 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 03:47:52.147 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59422 10 6452 1 2025-08-14 03:48:52.510 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43896 10 6452 1 2025-08-14 03:49:52.871 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47894 10 6452 1 2025-08-14 03:46:12.774 00:05:00.790 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 03:46:12.776 00:05:00.786 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 03:50:53.276 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:43638 12 10367 1 2025-08-14 03:51:53.713 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36926 11 6492 1 2025-08-14 03:52:48.357 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 03:52:48.623 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 03:52:48.616 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 03:52:48.189 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:52:48.275 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:52:54.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34874 10 6452 1 2025-08-14 03:53:54.513 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52908 10 6452 1 2025-08-14 03:54:54.916 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60438 10 6452 1 2025-08-14 03:52:12.778 00:05:00.786 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 03:55:55.322 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50060 10 6452 1 2025-08-14 03:52:12.775 00:05:00.791 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 03:56:55.725 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45146 10 6452 1 2025-08-14 03:57:48.720 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 03:57:48.769 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 03:57:48.472 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:57:48.473 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 03:57:48.556 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 03:57:56.143 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36046 10 6452 1 Summary: total flows: 139, total bytes: 422487, total packets: 1020, avg bps: 940, avg pps: 0, avg bpp: 414 Time window: 2025-08-14 02:58:12 - 2025-08-14 03:58:06 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0036s User: 0.0015s Wall: 0.0023s flows/second: 60965.0 Runtime: 0.0023s