Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 10:58:59.112 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:43250 11 6492 1 2025-08-14 10:59:59.517 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36910 10 6452 1 2025-08-14 11:00:59.925 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:52222 10 6452 1 2025-08-14 10:58:12.931 00:05:00.757 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 10:58:12.927 00:05:00.763 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 11:02:00.352 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37366 10 6452 1 2025-08-14 11:02:56.806 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 11:02:56.796 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 11:02:56.870 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:02:57.048 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:02:57.129 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 11:03:00.717 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49676 10 6452 1 2025-08-14 11:04:01.137 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55316 10 6452 1 2025-08-14 11:05:01.546 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40772 10 6452 1 2025-08-14 11:06:01.941 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:43802 10 6452 1 2025-08-14 11:07:02.358 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37014 10 6452 1 2025-08-14 11:07:57.181 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 11:07:56.917 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 11:07:56.928 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 11:07:57.072 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:07:57.100 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:04:12.933 00:05:00.759 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 11:08:02.760 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:35974 10 6452 1 2025-08-14 11:04:12.931 00:05:00.764 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 11:09:03.183 00:00:11.167 TCP 1.101.0.1:3000 -> 23.104.0.1:53366 10 6452 1 2025-08-14 11:10:04.392 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51044 10 6452 1 2025-08-14 11:11:04.800 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33286 10 6452 1 2025-08-14 11:12:05.203 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47468 10 6452 1 2025-08-14 11:12:57.620 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 11:12:57.582 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 11:12:56.971 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:12:57.278 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:12:57.362 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 11:13:05.610 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41334 10 6452 1 2025-08-14 11:10:12.932 00:05:00.763 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 11:10:12.935 00:05:00.758 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 11:14:06.017 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41004 10 6452 1 2025-08-14 11:15:06.424 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45998 10 6452 1 2025-08-14 11:16:06.786 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53244 10 6452 1 2025-08-14 11:17:07.191 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34156 10 6452 1 2025-08-14 11:17:57.374 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 11:17:57.290 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 11:17:57.281 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 11:17:56.980 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:17:57.293 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:18:07.554 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45880 10 6452 1 2025-08-14 11:19:07.970 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33628 10 6452 1 2025-08-14 11:16:12.933 00:05:00.763 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 11:16:12.935 00:05:00.758 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 11:20:08.384 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46102 10 6452 1 2025-08-14 11:21:08.786 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47260 10 6452 1 2025-08-14 11:22:09.193 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33028 10 6452 1 2025-08-14 11:22:57.365 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 11:22:57.379 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 11:22:57.285 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 11:22:57.389 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:22:57.282 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:23:09.593 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52388 10 6452 1 2025-08-14 11:24:09.994 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56076 10 6452 1 2025-08-14 11:25:10.399 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49350 10 6452 1 2025-08-14 11:22:12.937 00:05:00.757 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 11:22:12.934 00:05:00.763 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 11:26:10.798 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50080 10 6452 1 2025-08-14 11:27:11.207 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58436 10 6452 1 2025-08-14 11:27:57.709 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 11:27:57.551 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 11:27:57.556 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 11:27:57.695 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:27:57.626 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:28:11.612 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49660 10 6452 1 2025-08-14 11:29:12.015 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53994 10 6452 1 2025-08-14 11:30:12.424 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58674 10 6452 1 2025-08-14 11:31:12.832 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39380 10 6452 1 2025-08-14 11:28:12.940 00:05:00.755 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 11:28:12.938 00:05:00.760 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 11:32:13.250 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42898 10 6452 1 2025-08-14 11:32:57.744 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 11:32:57.672 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 11:32:57.674 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:32:57.780 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:32:57.863 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 11:33:13.614 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37228 10 6452 1 2025-08-14 11:34:14.013 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56352 10 6452 1 2025-08-14 11:35:14.411 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:56546 13 13939 1 2025-08-14 11:36:14.887 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:43392 10 6452 1 2025-08-14 11:37:15.316 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58622 10 6452 1 2025-08-14 11:37:57.618 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 11:37:57.531 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 11:37:57.693 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 11:37:57.751 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:37:57.536 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:34:12.945 00:05:00.757 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 11:34:12.942 00:05:00.762 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 11:38:15.712 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42120 10 6452 1 2025-08-14 11:39:16.122 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54822 10 6452 1 2025-08-14 11:40:16.484 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35338 10 6452 1 2025-08-14 11:41:16.888 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:36180 10 6452 1 2025-08-14 11:42:17.308 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:56092 10 6452 1 2025-08-14 11:42:57.828 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 11:42:57.667 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 11:42:57.746 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 11:42:57.769 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:42:57.745 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:43:17.750 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43036 10 6452 1 2025-08-14 11:40:12.943 00:05:00.762 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 11:40:12.945 00:05:00.757 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 11:44:18.116 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40512 10 6452 1 2025-08-14 11:45:18.481 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60238 10 6452 1 2025-08-14 11:46:18.882 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33874 10 6452 1 2025-08-14 11:47:19.290 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36896 10 6452 1 2025-08-14 11:47:58.083 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 11:47:58.080 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 11:47:58.075 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:47:57.939 00:00:00.051 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:47:58.024 00:00:00.050 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 11:48:19.663 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55738 10 6452 1 2025-08-14 11:49:20.096 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41720 10 6452 1 2025-08-14 11:46:12.948 00:05:00.757 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 11:46:12.945 00:05:00.762 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 11:50:20.503 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48374 10 6452 1 2025-08-14 11:51:20.865 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46716 10 6452 1 2025-08-14 11:52:21.243 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52502 10 6452 1 2025-08-14 11:52:58.012 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 11:52:57.966 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 11:52:57.848 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 11:52:57.764 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:52:57.923 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:53:21.606 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49166 10 6452 1 2025-08-14 11:54:22.015 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38618 10 6452 1 2025-08-14 11:55:22.417 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43814 10 6452 1 2025-08-14 11:52:12.949 00:05:00.757 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-14 11:52:12.947 00:05:00.762 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-14 11:56:22.824 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45358 10 6452 1 2025-08-14 11:57:23.191 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54806 10 6452 1 2025-08-14 11:57:58.228 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 11:57:58.082 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 11:57:58.149 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 11:57:57.984 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:57:58.146 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 11:58:23.556 00:00:11.088 TCP 1.101.0.1:3000 -> 23.104.0.1:58646 10 6452 1 Summary: total flows: 140, total bytes: 424527, total packets: 1024, avg bps: 937, avg pps: 0, avg bpp: 414 Time window: 2025-08-14 10:58:12 - 2025-08-14 11:58:34 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0019s User: 0.0028s Wall: 0.0045s flows/second: 31014.8 Runtime: 0.0045s