Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 13:59:17.937 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:33560 10 6452 1 2025-09-01 13:55:22.943 00:06:00.048 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 13:55:22.940 00:06:00.054 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 14:00:18.366 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35732 10 6452 1 2025-09-01 14:01:18.733 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52688 10 6452 1 2025-09-01 14:01:40.806 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 14:01:40.802 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 14:01:40.625 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 14:01:40.504 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:01:40.724 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:02:19.143 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49256 10 6452 1 2025-09-01 14:03:19.550 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46804 10 6452 1 2025-09-01 14:04:19.956 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44488 10 6452 1 2025-09-01 14:05:20.371 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55754 10 6452 1 2025-09-01 14:02:22.941 00:05:00.063 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-01 14:02:22.944 00:05:00.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-01 14:06:20.773 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49794 10 6452 1 2025-09-01 14:06:40.681 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 14:06:40.899 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 14:06:40.874 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:06:40.768 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:06:40.852 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 14:07:21.186 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:41932 10 6452 1 2025-09-01 14:08:21.596 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55764 10 6452 1 2025-09-01 14:09:21.997 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56448 10 6452 1 2025-09-01 14:10:22.396 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49052 10 6452 1 2025-09-01 14:11:22.803 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46704 10 6452 1 2025-09-01 14:11:40.906 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 14:11:40.956 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 14:11:40.981 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:11:40.850 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:11:40.933 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 14:08:22.945 00:05:00.088 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-01 14:08:22.942 00:05:00.092 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-01 14:12:23.209 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45022 10 6452 1 2025-09-01 14:13:23.570 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54940 10 6452 1 2025-09-01 14:14:23.974 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56478 10 6452 1 2025-09-01 14:15:24.386 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34748 10 6452 1 2025-09-01 14:16:24.759 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:47604 10 6452 1 2025-09-01 14:16:41.250 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 14:16:41.188 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 14:16:41.153 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:16:41.310 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:16:41.393 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 14:17:25.178 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:59424 12 10367 1 2025-09-01 14:14:22.945 00:05:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-01 14:14:22.949 00:05:00.089 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-01 14:18:25.660 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51986 10 6452 1 2025-09-01 14:19:26.092 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59762 10 6452 1 2025-09-01 14:20:26.497 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51186 10 6452 1 2025-09-01 14:21:26.901 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42548 10 6452 1 2025-09-01 14:21:41.218 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 14:21:41.164 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 14:21:41.034 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:21:40.976 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:21:41.060 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 14:22:27.308 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46218 10 6452 1 2025-09-01 14:23:27.668 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56330 10 6452 1 2025-09-01 14:20:22.946 00:05:00.118 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-01 14:20:22.949 00:05:00.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-01 14:24:28.092 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34398 10 6452 1 2025-09-01 14:25:28.462 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36570 10 6452 1 2025-09-01 14:26:28.824 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60234 10 6452 1 2025-09-01 14:26:42.105 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 14:26:42.099 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 14:26:41.831 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:26:42.100 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:26:42.183 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 14:27:29.227 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41768 10 6452 1 2025-09-01 14:28:29.629 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42836 10 6452 1 2025-09-01 14:29:30.036 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60214 10 6452 1 2025-09-01 14:26:22.952 00:05:00.118 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-01 14:26:22.950 00:05:00.124 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-01 14:30:30.446 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42464 10 6452 1 2025-09-01 14:31:41.284 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 14:31:41.289 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 14:31:30.853 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:35846 10 6452 1 2025-09-01 14:31:41.283 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 14:31:41.314 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:31:41.201 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:32:31.280 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48916 10 6452 1 2025-09-01 14:33:31.686 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60046 10 6452 1 2025-09-01 14:34:32.107 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56010 10 6452 1 2025-09-01 14:35:32.506 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33492 10 6452 1 2025-09-01 14:32:22.954 00:05:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-01 14:32:22.958 00:05:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-01 14:36:41.474 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 14:36:41.478 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 14:36:41.398 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:36:32.906 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59024 12 6556 1 2025-09-01 14:36:41.474 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:36:41.556 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 14:37:33.312 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:51410 10 6452 1 2025-09-01 14:38:33.694 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53900 10 6452 1 2025-09-01 14:39:34.105 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46264 10 6452 1 2025-09-01 14:40:34.469 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55700 10 6452 1 2025-09-01 14:41:41.296 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 14:41:41.600 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 14:41:41.626 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:41:41.294 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:41:41.377 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 14:41:34.829 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45334 10 6452 1 2025-09-01 14:38:22.957 00:05:00.119 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-01 14:38:22.959 00:05:00.114 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-01 14:42:35.192 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33934 10 6452 1 2025-09-01 14:43:35.592 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:48844 11 6504 1 2025-09-01 14:44:36.069 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56184 10 6452 1 2025-09-01 14:45:36.475 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49340 10 6452 1 2025-09-01 14:46:41.929 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 14:46:41.847 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:46:41.759 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 14:46:41.674 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 14:46:41.638 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:46:36.872 00:00:11.021 TCP 1.101.0.1:3000 -> 23.104.0.1:49640 10 6452 1 2025-09-01 14:47:37.936 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54704 10 6452 1 2025-09-01 14:44:22.960 00:05:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-01 14:44:22.958 00:05:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-01 14:48:38.338 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50606 10 6452 1 2025-09-01 14:49:38.740 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36568 10 6452 1 2025-09-01 14:50:39.150 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35106 10 6452 1 2025-09-01 14:51:41.787 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:51:41.871 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 14:51:41.865 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 14:51:41.591 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:51:41.869 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 14:51:39.507 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40404 10 6452 1 2025-09-01 14:52:39.912 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57760 10 6452 1 2025-09-01 14:53:40.312 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32846 10 6452 1 2025-09-01 14:50:22.963 00:05:00.137 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-01 14:50:22.958 00:05:00.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-01 14:54:40.716 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42594 10 6452 1 2025-09-01 14:55:41.122 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37790 10 6452 1 2025-09-01 14:56:41.869 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 14:56:41.867 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 14:56:41.737 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:56:41.986 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 14:56:42.070 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 14:56:41.532 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60232 10 6452 1 2025-09-01 14:57:41.933 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:51930 10 6452 1 Summary: total flows: 139, total bytes: 414865, total packets: 1019, avg bps: 885, avg pps: 0, avg bpp: 407 Time window: 2025-09-01 13:55:22 - 2025-09-01 14:57:52 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0029s User: 0.0019s Wall: 0.0027s flows/second: 50656.7 Runtime: 0.0028s