Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 00:58:56.026 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39110 10 6452 1 2025-08-25 00:59:56.431 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54982 10 6452 1 2025-08-25 01:00:56.833 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58762 10 6452 1 2025-08-25 01:01:57.196 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:33512 12 10365 1 2025-08-25 01:03:02.507 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 01:03:02.716 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 01:03:02.688 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:03:02.593 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:03:02.677 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 01:02:57.636 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42286 10 6452 1 2025-08-25 00:58:18.778 00:06:00.046 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 00:58:18.780 00:06:00.041 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 01:03:58.038 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46408 10 6452 1 2025-08-25 01:04:58.402 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56252 10 6452 1 2025-08-25 01:05:58.805 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53292 10 6452 1 2025-08-25 01:06:59.209 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50100 10 6452 1 2025-08-25 01:08:02.922 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 01:08:02.832 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 01:08:02.585 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 01:08:02.541 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:08:02.839 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:07:59.608 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51076 10 6452 1 2025-08-25 01:09:00.019 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:39936 10 6452 1 2025-08-25 01:10:00.423 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50394 10 6452 1 2025-08-25 01:05:18.781 00:06:00.049 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 01:05:18.782 00:06:00.044 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-08-25 01:11:00.834 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40148 10 6452 1 2025-08-25 01:12:01.244 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42700 10 6452 1 2025-08-25 01:13:02.764 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 01:13:02.768 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 01:13:02.794 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:13:02.777 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:13:02.859 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 01:13:01.647 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49494 10 6452 1 2025-08-25 01:14:02.057 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59586 10 6452 1 2025-08-25 01:15:02.423 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:51624 10 6452 1 2025-08-25 01:16:02.781 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57164 10 6452 1 2025-08-25 01:17:03.204 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53908 10 6452 1 2025-08-25 01:12:18.782 00:06:00.046 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 01:12:18.782 00:06:00.051 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 01:18:02.575 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:18:03.098 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:18:02.922 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 01:18:03.065 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 01:18:03.190 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 01:18:03.604 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53582 10 6452 1 2025-08-25 01:19:04.011 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:53680 10 6452 1 2025-08-25 01:20:04.381 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54032 10 6452 1 2025-08-25 01:21:04.789 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48368 10 6452 1 2025-08-25 01:22:05.197 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46358 10 6452 1 2025-08-25 01:23:03.200 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 01:23:02.938 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 01:23:03.162 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 01:23:02.961 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:23:03.118 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:23:05.623 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56276 10 6452 1 2025-08-25 01:19:18.782 00:06:00.052 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 01:24:06.026 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46090 10 6452 1 2025-08-25 01:19:18.783 00:06:00.047 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 01:25:06.441 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:57118 11 6504 1 2025-08-25 01:26:06.900 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47168 10 6452 1 2025-08-25 01:27:07.313 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50846 10 6452 1 2025-08-25 01:28:03.304 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 01:28:03.237 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 01:28:02.721 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:28:03.306 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:28:03.389 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 01:28:07.679 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49876 10 6452 1 2025-08-25 01:29:08.112 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38502 10 6452 1 2025-08-25 01:30:08.476 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47014 10 6452 1 2025-08-25 01:26:18.782 00:06:00.051 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 01:26:18.785 00:06:00.046 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 01:31:08.872 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44262 10 6452 1 2025-08-25 01:32:09.277 00:00:10.518 TCP 1.101.0.1:3000 -> 23.104.0.1:42174 14 14282 1 2025-08-25 01:33:03.292 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 01:33:03.412 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 01:33:03.335 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 01:33:03.131 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:33:03.210 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:33:09.831 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:54544 10 6452 1 2025-08-25 01:34:10.192 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34908 10 6452 1 2025-08-25 01:35:10.593 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52224 10 6452 1 2025-08-25 01:36:10.957 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38720 10 6452 1 2025-08-25 01:37:11.362 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:45702 12 10367 1 2025-08-25 01:38:03.152 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 01:38:03.589 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 01:38:03.495 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:38:03.438 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:38:03.522 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 01:33:18.786 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 01:33:18.783 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 01:38:11.845 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:41842 10 6452 1 2025-08-25 01:39:12.221 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49182 10 6452 1 2025-08-25 01:40:12.632 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:49114 10 6452 1 2025-08-25 01:41:12.990 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57950 10 6452 1 2025-08-25 01:42:13.398 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34582 10 6452 1 2025-08-25 01:43:03.572 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:43:03.538 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 01:43:03.473 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 01:43:03.239 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:43:03.655 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 01:43:13.799 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38052 10 6452 1 2025-08-25 01:44:14.201 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55550 10 6452 1 2025-08-25 01:40:18.785 00:06:00.054 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 01:40:18.786 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 01:45:14.609 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52332 10 6452 1 2025-08-25 01:46:14.974 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:33084 10 6452 1 2025-08-25 01:47:15.401 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:35718 10 6452 1 2025-08-25 01:48:03.717 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 01:48:03.702 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 01:48:03.625 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 01:48:03.464 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:48:03.635 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:48:15.756 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46156 10 6452 1 2025-08-25 01:49:16.160 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46322 10 6452 1 2025-08-25 01:50:16.538 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52516 10 6452 1 2025-08-25 01:51:16.913 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55536 10 6452 1 2025-08-25 01:47:18.789 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 01:47:18.788 00:06:00.052 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 01:52:17.326 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47304 10 6452 1 2025-08-25 01:53:03.833 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 01:53:03.711 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 01:53:03.751 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 01:53:03.628 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:53:03.750 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:53:17.728 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38252 10 6452 1 2025-08-25 01:54:18.138 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44570 10 6452 1 2025-08-25 01:55:18.538 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:35910 10 6452 1 2025-08-25 01:56:18.937 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57498 10 6452 1 2025-08-25 01:57:19.356 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54696 10 6452 1 2025-08-25 01:58:03.828 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 01:58:03.838 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 01:58:03.837 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 01:58:03.716 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:58:03.746 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 01:58:19.758 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:54530 10 6452 1 Summary: total flows: 136, total bytes: 431674, total packets: 1012, avg bps: 956, avg pps: 0, avg bpp: 426 Time window: 2025-08-25 00:58:18 - 2025-08-25 01:58:30 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0029s User: 0.0019s Wall: 0.0021s flows/second: 65483.3 Runtime: 0.0021s