Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 08:59:10.371 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56738 10 6452 1 2025-08-14 09:00:10.787 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:47650 10 6452 1 2025-08-14 09:01:11.175 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59764 10 6452 1 2025-08-14 08:58:12.890 00:05:00.772 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 08:58:12.888 00:05:00.788 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 09:02:11.583 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34070 10 6452 1 2025-08-14 09:02:54.837 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 09:02:54.757 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 09:02:54.647 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:02:54.755 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:02:54.435 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 09:03:12.001 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42578 10 6452 1 2025-08-14 09:04:12.409 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40218 10 6452 1 2025-08-14 09:05:12.816 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38792 10 6452 1 2025-08-14 09:06:13.218 00:00:10.574 TCP 1.101.0.1:3000 -> 23.104.0.1:33128 11 6504 1 2025-08-14 09:07:13.834 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:60718 10 6452 1 2025-08-14 09:07:54.661 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 09:07:54.661 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 09:07:54.583 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 09:07:54.577 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:07:54.578 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:04:12.888 00:05:00.776 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 09:04:12.891 00:05:00.772 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 09:08:14.261 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38550 10 6452 1 2025-08-14 09:09:14.665 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51040 10 6452 1 2025-08-14 09:10:15.098 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:52470 10 6452 1 2025-08-14 09:11:15.468 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55368 10 6452 1 2025-08-14 09:12:15.876 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36360 10 6452 1 2025-08-14 09:12:55.061 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 09:12:54.868 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 09:12:54.867 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 09:12:55.054 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:12:54.980 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:13:16.280 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45594 10 6452 1 2025-08-14 09:10:12.890 00:05:00.775 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 09:10:12.893 00:05:00.770 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 09:14:16.681 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52130 10 6452 1 2025-08-14 09:15:17.108 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:41682 10 6452 1 2025-08-14 09:16:17.485 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54428 10 6452 1 2025-08-14 09:17:17.886 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:38520 12 6556 1 2025-08-14 09:17:54.903 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 09:17:54.845 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:17:54.821 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:17:54.918 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 09:17:54.732 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 09:18:18.317 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43836 10 6452 1 2025-08-14 09:19:18.728 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45272 10 6452 1 2025-08-14 09:16:12.895 00:05:00.768 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 09:16:12.893 00:05:00.773 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 09:20:19.139 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47698 10 6452 1 2025-08-14 09:21:19.542 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46190 10 6452 1 2025-08-14 09:22:19.950 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37482 10 6452 1 2025-08-14 09:22:54.851 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 09:22:54.926 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 09:22:54.811 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:22:54.925 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:22:55.008 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 09:23:20.365 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56188 10 6452 1 2025-08-14 09:24:20.770 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38432 10 6452 1 2025-08-14 09:25:21.183 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46538 10 6452 1 2025-08-14 09:22:12.896 00:05:00.768 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 09:22:12.894 00:05:00.773 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 09:26:21.556 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36638 10 6452 1 2025-08-14 09:27:21.956 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57954 10 6452 1 2025-08-14 09:27:56.274 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 09:27:56.129 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:27:56.277 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:27:56.280 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 09:27:56.358 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 09:28:22.371 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51002 10 6452 1 2025-08-14 09:29:22.736 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33652 10 6452 1 2025-08-14 09:30:23.146 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:48986 12 10367 1 2025-08-14 09:31:23.622 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:48466 10 6452 1 2025-08-14 09:28:12.897 00:05:00.768 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 09:28:12.894 00:05:00.773 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 09:32:23.979 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59552 10 6452 1 2025-08-14 09:32:55.306 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 09:32:55.181 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 09:32:55.188 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:32:55.275 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:32:55.357 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 09:33:24.394 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54104 10 6452 1 2025-08-14 09:34:24.794 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52708 10 6452 1 2025-08-14 09:35:25.201 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52636 10 6452 1 2025-08-14 09:36:25.603 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45830 10 6452 1 2025-08-14 09:37:26.009 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35492 10 6452 1 2025-08-14 09:37:55.358 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 09:37:55.136 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 09:37:55.224 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 09:37:55.255 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:37:55.275 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:34:12.896 00:05:00.773 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 09:34:12.898 00:05:00.769 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 09:38:26.375 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51744 10 6452 1 2025-08-14 09:39:26.781 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39400 10 6452 1 2025-08-14 09:40:27.195 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59192 10 6452 1 2025-08-14 09:41:27.558 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34520 10 6452 1 2025-08-14 09:42:27.927 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:46426 10 6452 1 2025-08-14 09:42:55.480 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 09:42:55.244 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 09:42:55.431 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 09:42:55.079 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:42:55.398 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:43:28.354 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33232 10 6452 1 2025-08-14 09:40:12.904 00:05:00.763 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 09:40:12.903 00:05:00.768 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 09:44:28.753 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38770 10 6452 1 2025-08-14 09:45:29.154 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:46978 12 10367 1 2025-08-14 09:46:29.629 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:37168 10 6452 1 2025-08-14 09:47:30.000 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46260 10 6452 1 2025-08-14 09:47:55.506 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 09:47:55.338 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 09:47:55.330 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 09:47:55.490 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:47:55.423 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:48:30.425 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39534 10 6452 1 2025-08-14 09:49:30.831 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:57418 10 6452 1 2025-08-14 09:46:12.907 00:05:00.763 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 09:46:12.904 00:05:00.769 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 09:50:31.268 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47174 10 6452 1 2025-08-14 09:51:31.672 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34562 10 6452 1 2025-08-14 09:52:32.111 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53102 10 6452 1 2025-08-14 09:52:55.657 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 09:52:55.575 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:52:55.582 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 09:52:55.394 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 09:52:55.140 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:53:32.521 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40442 10 6452 1 2025-08-14 09:54:32.930 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:46140 10 6452 1 2025-08-14 09:55:33.315 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:33700 10 6452 1 2025-08-14 09:52:12.907 00:05:00.766 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 09:52:12.909 00:05:00.762 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 09:56:33.723 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40520 10 6452 1 2025-08-14 09:57:34.128 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53876 10 6452 1 2025-08-14 09:57:55.807 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 09:57:55.568 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 09:57:55.667 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:57:55.581 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 09:57:55.663 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 09:58:34.492 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54320 10 6452 1 Summary: total flows: 140, total bytes: 424986, total packets: 1027, avg bps: 936, avg pps: 0, avg bpp: 413 Time window: 2025-08-14 08:58:12 - 2025-08-14 09:58:44 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0042s User: 0.0000s Wall: 0.0022s flows/second: 63146.9 Runtime: 0.0022s