Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 15:59:06.684 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56530 10 6452 1 2025-09-01 16:00:07.111 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34740 10 6452 1 2025-09-01 15:56:22.991 00:05:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-01 15:56:22.991 00:05:00.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-01 16:01:07.519 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33288 10 6452 1 2025-09-01 16:01:43.118 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 16:01:43.139 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:01:43.011 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:01:43.120 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 16:01:43.093 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 16:02:07.891 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:59762 12 6556 1 2025-09-01 16:03:08.313 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:39282 13 10419 1 2025-09-01 16:04:08.816 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:49430 10 6452 1 2025-09-01 16:05:09.192 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49730 10 6452 1 2025-09-01 16:06:09.550 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35248 10 6452 1 2025-09-01 16:02:22.993 00:05:00.154 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-01 16:02:22.995 00:05:00.149 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-01 16:06:43.401 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 16:06:43.359 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 16:06:43.166 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 16:06:42.918 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:06:43.320 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:07:09.956 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54932 10 6452 1 2025-09-01 16:08:10.362 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55920 10 6452 1 2025-09-01 16:09:10.720 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53472 10 6452 1 2025-09-01 16:10:11.129 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54268 10 6452 1 2025-09-01 16:11:11.492 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:58970 10 6452 1 2025-09-01 16:11:43.084 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 16:11:43.483 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 16:11:43.415 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:11:43.327 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:11:43.409 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 16:12:11.858 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53342 10 6452 1 2025-09-01 16:08:22.994 00:05:00.153 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-01 16:08:22.997 00:05:00.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-01 16:13:12.267 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59538 10 6452 1 2025-09-01 16:14:12.672 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54772 10 6452 1 2025-09-01 16:15:13.101 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54104 10 6452 1 2025-09-01 16:16:13.503 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35320 10 6452 1 2025-09-01 16:16:43.742 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 16:16:43.369 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 16:16:43.630 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:16:43.659 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:16:43.378 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 16:17:13.905 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52538 10 6452 1 2025-09-01 16:18:14.317 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37226 10 6452 1 2025-09-01 16:14:23.003 00:06:00.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 16:14:23.001 00:06:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 16:19:14.728 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59904 10 6452 1 2025-09-01 16:20:15.140 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48714 10 6452 1 2025-09-01 16:21:15.545 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47376 10 6452 1 2025-09-01 16:21:43.878 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 16:21:43.716 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 16:21:43.585 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 16:21:43.656 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:21:43.795 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:22:15.953 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42376 10 6452 1 2025-09-01 16:23:16.366 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:60590 10 6452 1 2025-09-01 16:24:16.809 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55060 10 6452 1 2025-09-01 16:25:17.216 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56766 10 6452 1 2025-09-01 16:21:23.005 00:06:00.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 16:21:23.002 00:06:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 16:26:17.577 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33216 10 6452 1 2025-09-01 16:26:43.798 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 16:26:43.832 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 16:26:43.738 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:26:43.865 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:26:43.948 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 16:27:17.983 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42138 10 6452 1 2025-09-01 16:28:18.393 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47620 10 6452 1 2025-09-01 16:29:18.803 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43178 10 6452 1 2025-09-01 16:30:19.205 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47284 10 6452 1 2025-09-01 16:31:19.577 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51910 10 6452 1 2025-09-01 16:31:43.922 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 16:31:43.723 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 16:31:43.939 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 16:31:43.861 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:31:43.839 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:32:19.979 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39540 10 6452 1 2025-09-01 16:28:23.033 00:06:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 16:28:23.037 00:06:00.126 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 16:33:20.383 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:44698 11 6504 1 2025-09-01 16:34:20.844 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:39514 10 6452 1 2025-09-01 16:35:21.275 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37638 10 6452 1 2025-09-01 16:36:21.682 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56720 10 6452 1 2025-09-01 16:36:44.019 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 16:36:43.727 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 16:36:43.826 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 16:36:43.500 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:36:43.935 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:37:22.116 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49910 10 6452 1 2025-09-01 16:38:22.516 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48546 10 6452 1 2025-09-01 16:39:22.916 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51530 10 6452 1 2025-09-01 16:35:23.039 00:06:00.133 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 16:35:23.041 00:06:00.128 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 16:40:23.325 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34944 10 6452 1 2025-09-01 16:41:23.741 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33244 10 6452 1 2025-09-01 16:41:44.275 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 16:41:43.994 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 16:41:43.838 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 16:41:43.723 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:41:44.191 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:42:24.114 00:00:15.158 TCP 1.101.0.1:3000 -> 23.104.0.1:35692 10 6452 1 2025-09-01 16:43:29.324 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45896 10 6452 1 2025-09-01 16:44:29.731 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53630 10 6452 1 2025-09-01 16:45:30.134 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49510 10 6452 1 2025-09-01 16:46:44.085 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:46:30.533 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53892 10 6452 1 2025-09-01 16:46:43.961 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 16:46:43.853 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 16:46:44.097 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:46:44.168 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 16:42:23.045 00:06:00.130 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 16:42:23.049 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 16:47:30.935 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:51818 10 6452 1 2025-09-01 16:48:31.317 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39802 10 6452 1 2025-09-01 16:49:31.718 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51994 10 6452 1 2025-09-01 16:50:32.103 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50662 10 6452 1 2025-09-01 16:51:44.634 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 16:51:44.481 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:51:32.517 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51740 10 6452 1 2025-09-01 16:51:44.439 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:51:44.573 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 16:51:44.523 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 16:52:32.914 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:35376 12 10367 1 2025-09-01 16:53:33.392 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58952 10 6452 1 2025-09-01 16:49:23.048 00:06:00.128 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 16:49:23.051 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 16:54:33.798 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38634 10 6452 1 2025-09-01 16:55:34.163 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56962 10 6452 1 2025-09-01 16:56:44.486 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 16:56:44.456 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 16:56:44.454 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 16:56:44.051 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:56:44.403 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 16:56:34.525 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40404 10 6452 1 2025-09-01 16:57:34.889 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42560 10 6452 1 2025-09-01 16:58:35.306 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51220 10 6452 1 Summary: total flows: 138, total bytes: 425038, total packets: 1028, avg bps: 908, avg pps: 0, avg bpp: 413 Time window: 2025-09-01 15:56:22 - 2025-09-01 16:58:45 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0027s User: 0.0018s Wall: 0.0021s flows/second: 65684.7 Runtime: 0.0021s