Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 08:54:22.804 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 08:59:11.028 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40166 10 6452 1 2025-09-01 08:54:22.807 00:06:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 09:00:11.433 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:51838 10 6452 1 2025-09-01 09:01:11.794 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40466 10 6452 1 2025-09-01 09:01:34.897 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 09:01:34.817 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 09:01:34.821 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:01:34.815 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:01:34.627 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 09:02:12.195 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39648 10 6452 1 2025-09-01 09:03:12.589 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46664 10 6452 1 2025-09-01 09:04:12.951 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:32838 10 6452 1 2025-09-01 09:05:13.317 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52222 10 6452 1 2025-09-01 09:01:22.815 00:06:00.038 TCP 179.21.23.23:179 -> 179.21.23.21:38570 8 549 1 2025-09-01 09:06:13.679 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50008 10 6452 1 2025-09-01 09:01:22.813 00:06:00.044 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 09:06:34.891 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 09:06:34.920 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 09:06:34.814 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 09:06:34.878 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:06:34.808 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:07:14.113 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38200 10 6452 1 2025-09-01 09:08:14.475 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48852 10 6452 1 2025-09-01 09:09:14.882 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42110 10 6452 1 2025-09-01 09:10:15.288 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41990 10 6452 1 2025-09-01 09:11:15.692 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54566 10 6452 1 2025-09-01 09:11:34.779 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 09:11:34.708 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:11:35.187 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 09:11:35.062 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:11:35.144 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 09:12:16.106 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49170 10 6452 1 2025-09-01 09:08:22.853 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-01 09:08:22.817 00:06:00.040 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 09:13:16.509 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:60220 12 10367 1 2025-09-01 09:14:16.984 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50314 10 6452 1 2025-09-01 09:15:17.377 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53186 10 6452 1 2025-09-01 09:16:17.775 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48824 10 6452 1 2025-09-01 09:16:35.125 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:16:34.997 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 09:16:35.216 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 09:16:35.242 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:16:35.207 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 09:17:18.133 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36214 10 6452 1 2025-09-01 09:18:18.539 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41400 10 6452 1 2025-09-01 09:19:18.941 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:40228 10 6452 1 2025-09-01 09:15:22.819 00:06:00.042 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 09:15:22.857 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-01 09:20:19.323 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41270 10 6452 1 2025-09-01 09:21:19.727 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40288 10 6452 1 2025-09-01 09:21:35.388 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 09:21:35.391 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 09:21:35.261 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:21:35.246 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:21:35.329 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 09:22:20.144 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33066 10 6452 1 2025-09-01 09:23:20.544 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52604 10 6452 1 2025-09-01 09:24:20.942 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:51042 10 6452 1 2025-09-01 09:25:21.318 00:00:10.958 TCP 1.101.0.1:3000 -> 23.104.0.1:42804 10 6452 1 2025-09-01 09:26:36.277 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 09:26:22.321 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52518 10 6452 1 2025-09-01 09:26:36.193 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 09:26:35.879 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 09:26:35.986 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:26:36.194 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:22:22.859 00:06:00.009 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-01 09:22:22.825 00:06:00.046 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 09:27:22.724 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:60932 10 6452 1 2025-09-01 09:28:23.112 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46292 10 6452 1 2025-09-01 09:29:23.475 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55602 10 6452 1 2025-09-01 09:30:23.881 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:34832 10 6452 1 2025-09-01 09:31:35.930 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 09:31:24.309 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43166 10 6452 1 2025-09-01 09:31:35.851 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 09:31:35.683 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 09:31:35.463 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:31:35.849 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:32:24.729 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:34228 12 10367 1 2025-09-01 09:33:25.175 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50894 10 6452 1 2025-09-01 09:29:22.869 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-01 09:29:22.828 00:06:00.045 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 09:34:25.585 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50640 10 6452 1 2025-09-01 09:35:25.985 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52184 10 6452 1 2025-09-01 09:36:35.802 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 09:36:35.943 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 09:36:35.893 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 09:36:35.844 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:36:26.351 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48438 10 6452 1 2025-09-01 09:36:35.719 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:37:26.757 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42776 10 6452 1 2025-09-01 09:38:27.171 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43864 10 6452 1 2025-09-01 09:39:27.579 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50708 10 6452 1 2025-09-01 09:40:27.989 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56986 10 6452 1 2025-09-01 09:36:22.831 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 09:36:22.871 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 757 1 2025-09-01 09:41:35.588 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 09:41:35.495 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 09:41:28.393 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59378 10 6452 1 2025-09-01 09:41:35.672 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 09:41:35.368 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:41:35.506 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:42:28.801 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:60774 12 10367 1 2025-09-01 09:43:29.286 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51742 10 6452 1 2025-09-01 09:44:29.646 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41650 10 6452 1 2025-09-01 09:45:30.054 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35044 10 6452 1 2025-09-01 09:46:35.733 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 09:46:35.606 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 09:46:35.754 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:46:35.670 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:46:35.754 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 09:46:30.461 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39992 10 6452 1 2025-09-01 09:47:30.825 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34682 10 6452 1 2025-09-01 09:43:22.834 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 09:43:22.836 00:06:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 09:48:31.227 00:00:10.744 TCP 1.101.0.1:3000 -> 23.104.0.1:45846 10 6452 1 2025-09-01 09:49:32.013 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36054 10 6452 1 2025-09-01 09:50:32.415 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46402 10 6452 1 2025-09-01 09:51:35.970 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 09:51:35.783 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 09:51:35.825 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 09:51:35.658 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:51:35.886 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:51:32.776 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56886 10 6452 1 2025-09-01 09:52:33.206 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34716 10 6452 1 2025-09-01 09:53:33.606 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54288 10 6452 1 2025-09-01 09:54:34.024 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57242 10 6452 1 2025-09-01 09:50:22.836 00:06:00.049 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 09:50:22.838 00:06:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 653 1 2025-09-01 09:55:34.431 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44138 12 6556 1 2025-09-01 09:56:35.982 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 09:56:35.914 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 09:56:35.773 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:56:35.900 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 09:56:35.902 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 09:56:34.837 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:60902 10 6452 1 2025-09-01 09:57:35.229 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60820 10 6452 1 2025-09-01 09:58:35.636 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50502 10 6452 1 Summary: total flows: 138, total bytes: 427507, total packets: 1000, avg bps: 885, avg pps: 0, avg bpp: 427 Time window: 2025-09-01 08:54:22 - 2025-09-01 09:58:46 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0045s User: 0.0000s Wall: 0.0023s flows/second: 60985.6 Runtime: 0.0023s