Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 13:59:12.558 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51460 10 6452 1 2025-08-14 14:00:12.960 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35992 10 6452 1 2025-08-14 14:01:13.366 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57176 10 6452 1 2025-08-14 14:02:13.769 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38598 10 6452 1 2025-08-14 14:03:00.575 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 14:03:00.705 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 14:03:00.778 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:03:00.576 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:03:00.658 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 13:58:13.000 00:06:00.736 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 14:03:14.180 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55510 10 6452 1 2025-08-14 13:59:13.003 00:06:00.731 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 14:04:14.584 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51828 10 6452 1 2025-08-14 14:05:14.992 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48284 10 6452 1 2025-08-14 14:06:15.398 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35790 10 6452 1 2025-08-14 14:07:15.805 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52202 10 6452 1 2025-08-14 14:08:00.627 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 14:08:00.630 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 14:08:00.544 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 14:08:00.721 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:08:00.544 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:08:16.213 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59928 10 6452 1 2025-08-14 14:09:16.631 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38634 10 6452 1 2025-08-14 14:05:13.003 00:06:00.736 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 14:10:17.039 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48276 10 6452 1 2025-08-14 14:06:13.004 00:06:00.730 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 14:11:17.442 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:47334 10 6452 1 2025-08-14 14:12:17.813 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45192 10 6452 1 2025-08-14 14:13:00.594 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 14:13:00.872 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 14:13:00.699 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:13:00.739 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:13:00.824 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 14:13:18.221 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38596 10 6452 1 2025-08-14 14:14:18.633 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53176 10 6452 1 2025-08-14 14:15:19.060 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42702 10 6452 1 2025-08-14 14:16:19.473 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52828 10 6452 1 2025-08-14 14:12:13.022 00:06:00.717 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 14:17:19.881 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54970 10 6452 1 2025-08-14 14:18:00.816 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:18:00.821 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 14:18:01.001 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 14:18:00.964 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:18:00.899 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 14:13:13.024 00:06:00.712 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 14:18:20.301 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47382 10 6452 1 2025-08-14 14:19:20.706 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:57350 10 6452 1 2025-08-14 14:20:21.082 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54504 10 6452 1 2025-08-14 14:21:21.444 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50102 10 6452 1 2025-08-14 14:22:21.851 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:34298 11 6504 1 2025-08-14 14:23:01.280 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 14:23:01.346 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 14:23:01.103 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:23:01.401 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:23:01.483 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 14:23:22.327 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57800 10 6452 1 2025-08-14 14:19:13.032 00:06:00.708 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 14:24:22.733 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49400 10 6452 1 2025-08-14 14:20:13.036 00:06:00.702 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 14:25:23.137 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49092 10 6452 1 2025-08-14 14:26:23.495 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:44438 10 6452 1 2025-08-14 14:27:23.855 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:40754 10 6452 1 2025-08-14 14:28:01.004 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 14:28:01.151 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 14:28:00.910 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:28:01.002 00:00:00.052 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:28:01.085 00:00:00.052 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 14:28:24.231 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42346 10 6452 1 2025-08-14 14:29:24.630 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45638 10 6452 1 2025-08-14 14:30:24.997 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33336 10 6452 1 2025-08-14 14:26:13.041 00:06:00.701 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 14:31:25.399 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46216 10 6452 1 2025-08-14 14:27:13.040 00:06:00.701 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 14:32:25.805 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33040 10 6452 1 2025-08-14 14:33:01.072 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 14:33:01.188 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 14:33:01.278 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 14:33:01.207 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:33:00.988 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:33:26.210 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54368 10 6452 1 2025-08-14 14:34:26.612 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52302 10 6452 1 2025-08-14 14:35:27.014 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59776 10 6452 1 2025-08-14 14:36:27.415 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38138 10 6452 1 2025-08-14 14:37:27.779 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53210 10 6452 1 2025-08-14 14:38:01.365 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 14:38:01.171 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 14:38:01.105 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:38:01.090 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:38:01.173 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 14:33:13.039 00:06:00.705 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 14:38:28.183 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53530 10 6452 1 2025-08-14 14:34:13.043 00:06:00.699 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 14:39:28.586 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60444 10 6452 1 2025-08-14 14:40:28.992 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:40240 10 6452 1 2025-08-14 14:41:29.394 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50162 10 6452 1 2025-08-14 14:42:29.803 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40162 10 6452 1 2025-08-14 14:43:01.499 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 14:43:01.318 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 14:43:01.375 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:43:01.498 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:43:01.581 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 14:43:30.218 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39316 10 6452 1 2025-08-14 14:44:30.620 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32852 10 6452 1 2025-08-14 14:40:13.043 00:06:00.708 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 14:45:31.019 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48774 10 6452 1 2025-08-14 14:41:13.045 00:06:00.703 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 14:46:31.380 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43230 10 6452 1 2025-08-14 14:47:31.741 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50262 10 6452 1 2025-08-14 14:48:01.533 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 14:48:01.454 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 14:48:01.461 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 14:48:01.204 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:48:01.452 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:48:32.108 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45902 10 6452 1 2025-08-14 14:49:32.470 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40406 10 6452 1 2025-08-14 14:50:32.868 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:53098 10 6452 1 2025-08-14 14:51:33.239 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37546 10 6452 1 2025-08-14 14:47:13.048 00:06:00.707 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-14 14:52:33.644 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56670 10 6452 1 2025-08-14 14:53:01.712 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 14:53:01.564 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 14:53:01.561 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 14:53:01.252 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:53:01.630 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:48:13.051 00:06:00.702 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-14 14:53:34.053 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39060 10 6452 1 2025-08-14 14:54:34.457 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56484 10 6452 1 2025-08-14 14:55:34.865 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60658 10 6452 1 2025-08-14 14:56:35.274 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56352 10 6452 1 2025-08-14 14:57:35.679 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34120 10 6452 1 2025-08-14 14:58:01.911 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-14 14:58:01.723 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-14 14:58:01.731 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-14 14:58:01.754 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:58:01.829 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-14 14:58:36.104 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:49388 10 6452 1 Summary: total flows: 136, total bytes: 416068, total packets: 1005, avg bps: 916, avg pps: 0, avg bpp: 413 Time window: 2025-08-14 13:58:13 - 2025-08-14 14:58:46 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0030s User: 0.0015s Wall: 0.0030s flows/second: 44620.3 Runtime: 0.0031s