Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 04:58:42.508 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38332 10 6452 1 2025-08-25 04:59:42.875 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56610 10 6452 1 2025-08-25 05:00:43.235 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39008 10 6452 1 2025-08-25 04:56:18.851 00:06:00.072 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 04:56:18.849 00:06:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 05:01:43.640 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38856 10 6452 1 2025-08-25 05:02:44.051 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59190 10 6452 1 2025-08-25 05:03:07.587 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 05:03:07.505 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:03:07.507 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 05:03:07.410 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 05:03:07.362 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:03:44.460 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33234 10 6452 1 2025-08-25 05:04:44.819 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56342 10 6452 1 2025-08-25 05:05:45.224 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43124 10 6452 1 2025-08-25 05:06:45.588 00:00:10.653 TCP 1.101.0.1:3000 -> 23.104.0.1:57518 10 6452 1 2025-08-25 05:07:46.280 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37702 10 6452 1 2025-08-25 05:08:07.625 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 05:08:07.406 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 05:08:07.350 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:08:07.574 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:08:07.656 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 05:03:18.850 00:06:00.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 05:03:18.852 00:06:00.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 05:08:46.647 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37582 10 6452 1 2025-08-25 05:09:47.056 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44064 10 6452 1 2025-08-25 05:10:47.456 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58450 10 6452 1 2025-08-25 05:11:47.860 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46620 10 6452 1 2025-08-25 05:12:48.270 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 10 6452 1 2025-08-25 05:13:07.798 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 05:13:07.588 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 05:13:07.797 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:13:07.686 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:13:07.771 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 05:13:48.701 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43788 10 6452 1 2025-08-25 05:14:49.106 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56702 10 6452 1 2025-08-25 05:10:18.853 00:06:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 05:10:18.855 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 05:15:49.512 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39094 10 6452 1 2025-08-25 05:16:49.911 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50634 10 6452 1 2025-08-25 05:17:50.324 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47894 10 6452 1 2025-08-25 05:18:08.304 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 05:18:08.340 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 05:18:08.101 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 05:18:08.110 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:18:08.221 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:18:50.724 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59836 10 6452 1 2025-08-25 05:19:51.131 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45728 10 6452 1 2025-08-25 05:20:51.490 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34456 10 6452 1 2025-08-25 05:21:51.894 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:41662 10 6452 1 2025-08-25 05:17:18.857 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 05:17:18.856 00:06:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 05:22:52.270 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60830 10 6452 1 2025-08-25 05:23:07.599 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 05:23:07.601 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 05:23:07.842 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:23:07.691 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:23:07.774 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 05:23:52.673 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46444 10 6452 1 2025-08-25 05:24:53.107 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37988 10 6452 1 2025-08-25 05:25:53.507 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53802 10 6452 1 2025-08-25 05:26:53.915 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36396 10 6452 1 2025-08-25 05:27:54.275 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43520 10 6452 1 2025-08-25 05:28:07.912 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 05:28:07.909 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 05:28:07.857 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:28:08.083 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:28:08.165 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 05:28:54.682 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45452 10 6452 1 2025-08-25 05:24:18.858 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 05:24:18.855 00:06:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 05:29:55.110 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41870 10 6452 1 2025-08-25 05:30:55.513 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45194 10 6452 1 2025-08-25 05:31:55.918 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:36734 12 6556 1 2025-08-25 05:33:08.257 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 05:32:56.344 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41594 10 6452 1 2025-08-25 05:33:07.956 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 05:33:08.181 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:33:08.176 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:33:07.846 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 05:33:56.745 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53274 10 6452 1 2025-08-25 05:34:57.118 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53904 10 6452 1 2025-08-25 05:35:57.539 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55722 10 6452 1 2025-08-25 05:31:18.859 00:06:00.078 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 05:31:18.855 00:06:00.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 05:36:57.906 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:44734 12 10365 1 2025-08-25 05:38:08.233 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 05:38:07.896 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 05:38:08.142 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 05:38:08.179 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:37:58.389 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40792 10 6452 1 2025-08-25 05:38:08.149 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:38:58.792 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53010 10 6452 1 2025-08-25 05:39:59.205 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45000 10 6452 1 2025-08-25 05:40:59.616 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56392 10 6452 1 2025-08-25 05:42:00.020 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51818 10 6452 1 2025-08-25 05:43:08.353 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:43:08.545 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 05:43:08.253 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 05:43:08.467 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:43:08.437 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 05:43:00.418 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35950 10 6452 1 2025-08-25 05:38:18.858 00:06:00.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 05:38:18.860 00:06:00.080 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 05:44:00.830 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:38872 10 6452 1 2025-08-25 05:45:01.325 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39310 10 6452 1 2025-08-25 05:46:01.728 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:41440 10 6452 1 2025-08-25 05:47:02.145 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50816 10 6452 1 2025-08-25 05:48:08.572 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 05:48:08.370 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:48:08.658 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:48:08.485 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 05:48:08.742 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 05:48:02.550 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:32774 10 6452 1 2025-08-25 05:49:02.965 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53826 10 6452 1 2025-08-25 05:50:03.373 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33366 10 6452 1 2025-08-25 05:45:18.859 00:06:00.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 05:45:18.862 00:06:00.079 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 05:51:03.771 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39596 10 6452 1 2025-08-25 05:52:04.177 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33984 10 6452 1 2025-08-25 05:53:08.414 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 05:53:08.148 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:53:08.483 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:53:08.326 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 05:53:08.565 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 05:53:04.589 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:57336 10 6452 1 2025-08-25 05:54:04.953 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33160 10 6452 1 2025-08-25 05:55:05.364 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40838 10 6452 1 2025-08-25 05:56:05.765 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47206 10 6452 1 2025-08-25 05:52:18.863 00:06:00.079 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 05:57:06.171 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:50982 12 10365 1 2025-08-25 05:52:18.862 00:06:00.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 05:58:08.633 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 05:58:08.432 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:58:08.500 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 05:58:08.575 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 05:58:08.583 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 05:58:06.651 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43312 10 6452 1 Summary: total flows: 138, total bytes: 425668, total packets: 1038, avg bps: 915, avg pps: 0, avg bpp: 410 Time window: 2025-08-25 04:56:18 - 2025-08-25 05:58:18 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0042s User: 0.0010s Wall: 0.0025s flows/second: 55934.9 Runtime: 0.0025s