Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 05:58:43.919 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51802 10 6452 1 2025-08-24 05:59:44.283 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58166 10 6452 1 2025-08-24 06:00:44.645 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35920 10 6452 1 2025-08-24 06:01:45.004 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34174 10 6452 1 2025-08-24 05:57:18.379 00:06:00.013 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 05:57:18.388 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-08-24 06:02:39.855 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 06:02:39.969 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 06:02:39.930 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:02:39.927 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:02:40.010 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 06:02:45.363 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43226 10 6452 1 2025-08-24 06:03:45.771 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48386 10 6452 1 2025-08-24 06:04:46.172 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:60890 10 6452 1 2025-08-24 06:05:46.540 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57218 10 6452 1 2025-08-24 06:06:46.941 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51408 10 6452 1 2025-08-24 06:07:39.897 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 06:07:39.829 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:07:40.083 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 06:07:39.982 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:07:40.067 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 06:07:47.309 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42212 10 6452 1 2025-08-24 06:08:47.718 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:35818 10 6452 1 2025-08-24 06:04:18.382 00:06:00.011 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 06:04:18.391 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-08-24 06:09:48.120 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41458 10 6452 1 2025-08-24 06:10:48.527 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35404 10 6452 1 2025-08-24 06:11:48.941 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39716 10 6452 1 2025-08-24 06:12:39.908 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:12:40.137 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 06:12:40.186 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 06:12:40.139 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:12:40.222 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 06:12:49.366 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47142 10 6452 1 2025-08-24 06:13:49.788 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39690 10 6452 1 2025-08-24 06:14:50.191 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47030 10 6452 1 2025-08-24 06:15:50.595 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59536 10 6452 1 2025-08-24 06:11:18.390 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 06:11:18.390 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 06:16:50.995 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58020 10 6452 1 2025-08-24 06:17:39.953 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 06:17:40.165 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 06:17:40.185 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:17:40.260 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:17:40.342 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 06:17:51.362 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34598 10 6452 1 2025-08-24 06:18:51.763 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:36876 10 6452 1 2025-08-24 06:19:52.182 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44546 10 6452 1 2025-08-24 06:20:52.544 00:00:10.971 TCP 1.101.0.1:3000 -> 23.104.0.1:42362 10 6452 1 2025-08-24 06:21:53.551 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50380 10 6452 1 2025-08-24 06:22:39.948 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:22:40.231 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 06:22:40.311 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:22:40.254 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 06:22:40.393 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 06:22:53.947 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39734 10 6452 1 2025-08-24 06:18:18.392 00:06:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 06:18:18.394 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-08-24 06:23:54.358 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44186 10 6452 1 2025-08-24 06:24:54.761 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40782 10 6452 1 2025-08-24 06:25:55.170 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47734 10 6452 1 2025-08-24 06:26:55.574 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:46092 12 10367 1 2025-08-24 06:27:40.336 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:27:40.418 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 06:27:40.340 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 06:27:40.049 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:27:40.418 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 06:27:56.054 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39960 10 6452 1 2025-08-24 06:28:56.460 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52322 10 6452 1 2025-08-24 06:29:56.862 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40840 10 6452 1 2025-08-24 06:25:18.394 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 06:25:18.397 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 11 705 1 2025-08-24 06:30:57.280 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48156 10 6452 1 2025-08-24 06:31:57.682 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:51122 10 6452 1 2025-08-24 06:32:40.440 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 06:32:40.363 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:32:40.508 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:32:40.507 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 06:32:40.591 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 06:32:58.052 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40386 10 6452 1 2025-08-24 06:33:58.450 00:00:21.899 TCP 1.101.0.1:3000 -> 23.104.0.1:59856 10 6452 1 2025-08-24 06:35:10.397 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52756 10 6452 1 2025-08-24 06:36:10.813 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59894 10 6452 1 2025-08-24 06:32:18.398 00:06:00.044 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 653 1 2025-08-24 06:32:18.395 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 06:37:11.220 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:45132 10 6452 1 2025-08-24 06:37:40.483 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 06:37:40.674 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 06:37:40.715 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 06:37:40.467 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:37:40.400 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:38:11.619 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:33092 10 6452 1 2025-08-24 06:39:11.975 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51654 10 6452 1 2025-08-24 06:40:12.385 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:46212 10 6452 1 2025-08-24 06:41:12.750 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42326 10 6452 1 2025-08-24 06:42:13.152 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43790 10 6452 1 2025-08-24 06:42:40.794 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 06:42:40.830 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 06:42:40.666 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:42:40.752 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:42:40.836 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 06:43:13.555 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54164 10 6452 1 2025-08-24 06:39:18.399 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 06:39:18.401 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 06:44:13.914 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57680 11 6504 1 2025-08-24 06:45:14.326 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57124 10 6452 1 2025-08-24 06:46:14.735 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:38788 12 10367 1 2025-08-24 06:47:15.179 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38114 10 6452 1 2025-08-24 06:47:40.845 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:47:40.954 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 06:47:40.780 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 06:47:40.605 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:47:40.929 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 06:48:15.584 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55214 10 6452 1 2025-08-24 06:49:15.989 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34214 10 6452 1 2025-08-24 06:50:16.397 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:39028 10 6452 1 2025-08-24 06:46:18.399 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 06:46:18.400 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 06:51:16.760 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51096 10 6452 1 2025-08-24 06:52:17.177 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40140 10 6452 1 2025-08-24 06:52:40.787 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 06:52:40.683 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 06:52:40.810 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:52:40.907 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:52:40.990 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 06:53:17.575 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47822 10 6452 1 2025-08-24 06:54:17.973 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57988 10 6452 1 2025-08-24 06:55:18.378 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37860 10 6452 1 2025-08-24 06:56:18.779 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:51510 10 6452 1 2025-08-24 06:57:19.183 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57742 10 6452 1 2025-08-24 06:57:41.021 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-24 06:57:40.836 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-24 06:57:40.628 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:57:40.938 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-24 06:57:41.213 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-24 06:53:18.402 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-24 06:53:18.404 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-24 06:58:19.589 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41780 10 6452 1 Summary: total flows: 138, total bytes: 424580, total packets: 1017, avg bps: 913, avg pps: 0, avg bpp: 417 Time window: 2025-08-24 05:57:18 - 2025-08-24 06:59:18 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0040s User: 0.0008s Wall: 0.0022s flows/second: 61687.5 Runtime: 0.0023s