Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 12:59:02.692 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45270 10 6452 1 2025-08-25 13:00:03.110 00:00:10.541 TCP 1.101.0.1:3000 -> 23.104.0.1:56524 10 6452 1 2025-08-25 13:01:04.096 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32954 10 6452 1 2025-08-25 13:02:04.498 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:55722 12 10367 1 2025-08-25 12:57:19.060 00:06:00.075 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 13:03:17.061 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 13:03:17.067 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 13:03:16.967 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:03:17.130 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:03:04.983 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40730 10 6452 1 2025-08-25 13:03:17.213 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 13:04:05.349 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:41872 10 6452 1 2025-08-25 12:59:19.059 00:06:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 13:05:05.748 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57760 10 6452 1 2025-08-25 13:06:19.061 00:00:00.076 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-08-25 13:06:06.150 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:48396 10 6452 1 2025-08-25 13:07:06.620 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42086 10 6452 1 2025-08-25 13:08:17.350 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 13:08:17.280 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 13:08:17.471 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 13:08:17.400 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:08:06.988 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53596 10 6452 1 2025-08-25 13:08:17.268 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:04:19.063 00:05:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-25 13:09:07.393 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38108 10 6452 1 2025-08-25 13:10:07.796 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37998 10 6452 1 2025-08-25 13:11:08.203 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39474 10 6452 1 2025-08-25 13:07:19.062 00:04:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-25 13:12:08.606 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:33382 12 10365 1 2025-08-25 13:13:17.283 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 13:13:17.220 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:13:17.188 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:13:09.106 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34610 10 6452 1 2025-08-25 13:13:17.347 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 13:13:17.270 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 13:10:19.066 00:04:00.072 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-25 13:14:09.508 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38160 10 6452 1 2025-08-25 13:15:09.875 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34038 10 6452 1 2025-08-25 13:12:19.065 00:04:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-25 13:16:10.283 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49990 10 6452 1 2025-08-25 13:17:10.647 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55000 10 6452 1 2025-08-25 13:18:17.645 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 13:18:17.560 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 13:18:17.560 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 13:18:17.462 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:18:17.562 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:18:11.071 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42452 10 6452 1 2025-08-25 13:19:11.476 00:00:10.676 TCP 1.101.0.1:3000 -> 23.104.0.1:47154 10 6452 1 2025-08-25 13:15:19.066 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 13:20:12.189 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39412 12 6556 1 2025-08-25 13:21:12.598 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53288 10 6452 1 2025-08-25 13:17:19.065 00:06:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 13:22:13.004 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:47042 12 10365 1 2025-08-25 13:23:17.639 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 13:23:17.631 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 13:23:17.290 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 13:23:17.412 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:23:17.555 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:23:13.478 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36020 10 6452 1 2025-08-25 13:24:13.888 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:56874 12 6556 1 2025-08-25 13:25:14.315 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49344 10 6452 1 2025-08-25 13:26:14.720 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41778 10 6452 1 2025-08-25 13:22:19.069 00:06:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 13:27:15.140 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36984 10 6452 1 2025-08-25 13:28:18.095 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 13:28:17.830 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 13:28:17.682 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:28:17.939 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:28:18.020 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 13:28:15.549 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45492 10 6452 1 2025-08-25 13:24:19.065 00:06:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 13:29:15.954 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52058 10 6452 1 2025-08-25 13:30:16.370 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46852 10 6452 1 2025-08-25 13:31:16.798 00:00:10.889 TCP 1.101.0.1:3000 -> 23.104.0.1:42332 10 6452 1 2025-08-25 13:32:17.740 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59904 10 6452 1 2025-08-25 13:33:17.833 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 13:33:17.564 00:00:00.048 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:33:17.686 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:33:17.704 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 13:33:17.769 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 13:33:18.147 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55424 10 6452 1 2025-08-25 13:29:19.069 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 13:34:18.554 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56082 10 6452 1 2025-08-25 13:35:18.956 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47504 10 6452 1 2025-08-25 13:31:19.067 00:06:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 13:36:19.369 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42398 10 6452 1 2025-08-25 13:37:19.770 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45528 10 6452 1 2025-08-25 13:38:17.651 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:38:17.897 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 13:38:17.892 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 13:38:17.602 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:38:17.733 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 13:38:19.069 00:00:00.076 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-08-25 13:38:20.183 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53730 10 6452 1 2025-08-25 13:39:20.582 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58290 10 6452 1 2025-08-25 13:40:20.983 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39390 10 6452 1 2025-08-25 13:36:19.070 00:05:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-25 13:41:21.390 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:52280 12 10365 1 2025-08-25 13:42:21.861 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43722 10 6452 1 2025-08-25 13:43:18.075 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 13:43:17.970 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 13:43:17.619 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:43:18.079 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:43:18.161 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 13:39:19.069 00:04:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-25 13:43:22.272 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59606 10 6452 1 2025-08-25 13:44:22.633 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59278 10 6452 1 2025-08-25 13:45:23.037 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43220 10 6452 1 2025-08-25 13:42:19.072 00:04:00.075 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-25 13:46:23.444 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:50046 12 10574 1 2025-08-25 13:47:23.922 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50526 10 6661 1 2025-08-25 13:48:18.686 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 13:48:18.694 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 13:48:18.386 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:48:18.712 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:48:18.796 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 13:44:19.071 00:04:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-25 13:48:24.284 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37040 10 6661 1 2025-08-25 13:49:24.686 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54290 10 6661 1 2025-08-25 13:50:25.111 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44726 10 6661 1 2025-08-25 13:51:25.509 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54502 10 6661 1 2025-08-25 13:47:19.075 00:06:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-25 13:52:25.922 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:39364 13 6817 1 2025-08-25 13:53:18.247 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 13:53:18.159 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 13:53:18.217 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 13:53:18.086 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:53:18.164 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:53:26.369 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53484 10 6661 1 2025-08-25 13:49:19.072 00:06:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-25 13:54:26.775 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50894 10 6661 1 2025-08-25 13:55:27.182 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55234 10 6661 1 2025-08-25 13:56:27.588 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55596 10 6661 1 2025-08-25 13:57:28.004 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59830 10 6661 1 2025-08-25 13:58:18.819 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-25 13:58:19.082 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-25 13:58:18.895 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:58:18.919 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-25 13:58:19.003 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-25 13:58:28.370 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50206 10 6661 1 Summary: total flows: 140, total bytes: 438910, total packets: 1025, avg bps: 954, avg pps: 0, avg bpp: 428 Time window: 2025-08-25 12:57:19 - 2025-08-25 13:58:38 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0021s User: 0.0021s Wall: 0.0020s flows/second: 70172.4 Runtime: 0.0020s