Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 19:59:07.868 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52228 10 6452 1 2025-09-01 20:00:08.232 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44414 10 6452 1 2025-09-01 20:01:08.630 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33706 12 6556 1 2025-09-01 20:01:48.470 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 20:01:48.384 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 20:01:48.090 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:01:48.382 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:01:48.464 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 20:02:09.041 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57872 10 6452 1 2025-09-01 20:03:09.404 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:52050 12 10365 1 2025-09-01 19:58:23.112 00:06:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 19:58:23.111 00:06:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 20:04:09.879 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:55572 10 6452 1 2025-09-01 20:05:10.293 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52682 10 6452 1 2025-09-01 20:06:10.700 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54786 10 6452 1 2025-09-01 20:06:48.229 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 20:06:48.152 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 20:06:48.207 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 20:06:48.265 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:06:48.146 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:07:11.108 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:49760 10 6452 1 2025-09-01 20:08:11.467 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45708 10 6452 1 2025-09-01 20:09:11.867 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39832 10 6452 1 2025-09-01 20:05:23.113 00:06:00.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 20:10:12.293 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50418 10 6452 1 2025-09-01 20:05:23.115 00:06:00.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 20:11:12.656 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56284 10 6452 1 2025-09-01 20:11:48.263 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 20:11:48.315 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 20:11:47.824 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:11:48.306 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:11:48.389 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 20:12:13.069 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39984 10 6452 1 2025-09-01 20:13:13.470 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34550 10 6452 1 2025-09-01 20:14:13.871 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56300 10 6452 1 2025-09-01 20:15:14.287 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49374 10 6452 1 2025-09-01 20:16:14.696 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42324 10 6452 1 2025-09-01 20:16:48.292 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:16:48.231 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 20:16:48.239 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 20:16:48.377 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:16:48.376 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 20:12:23.116 00:06:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 20:12:23.114 00:06:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 20:17:15.115 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57182 10 6452 1 2025-09-01 20:18:15.517 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51132 10 6452 1 2025-09-01 20:19:15.914 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46488 10 6452 1 2025-09-01 20:20:16.320 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34726 10 6452 1 2025-09-01 20:21:16.729 00:00:10.519 TCP 1.101.0.1:3000 -> 23.104.0.1:57498 11 6504 1 2025-09-01 20:21:48.456 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 20:21:48.540 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 20:21:48.494 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 20:21:48.320 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:21:48.374 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:22:17.288 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48676 10 6452 1 2025-09-01 20:23:17.692 00:00:10.746 TCP 1.101.0.1:3000 -> 23.104.0.1:34484 10 6452 1 2025-09-01 20:19:23.118 00:06:00.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 20:19:23.120 00:06:00.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 20:24:18.475 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60986 10 6452 1 2025-09-01 20:25:18.879 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58558 10 6452 1 2025-09-01 20:26:19.285 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57684 10 6452 1 2025-09-01 20:26:48.729 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 20:26:48.679 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 20:26:48.516 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 20:26:48.674 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:26:48.646 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:27:19.687 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49824 10 6452 1 2025-09-01 20:28:20.108 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54650 10 6452 1 2025-09-01 20:29:20.504 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36716 10 6452 1 2025-09-01 20:30:20.865 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49068 10 6452 1 2025-09-01 20:26:23.119 00:06:00.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 20:26:23.122 00:06:00.138 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 20:31:21.290 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33072 10 6452 1 2025-09-01 20:31:48.815 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 20:31:48.735 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:31:48.770 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 20:31:48.729 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 20:31:48.697 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:32:21.691 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45116 10 6452 1 2025-09-01 20:33:22.062 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53390 10 6452 1 2025-09-01 20:34:22.428 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36218 10 6452 1 2025-09-01 20:35:22.828 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52314 10 6452 1 2025-09-01 20:36:23.228 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33638 10 6452 1 2025-09-01 20:36:48.851 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 20:36:48.644 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 20:36:48.769 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:36:48.908 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:36:48.989 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 20:37:23.634 00:00:10.744 TCP 1.101.0.1:3000 -> 23.104.0.1:42726 10 6452 1 2025-09-01 20:33:23.121 00:06:00.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 20:33:23.125 00:06:00.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 20:38:24.414 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:57122 12 10367 1 2025-09-01 20:39:24.898 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37132 12 6556 1 2025-09-01 20:40:25.317 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60466 10 6452 1 2025-09-01 20:41:25.719 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:52160 10 6452 1 2025-09-01 20:41:48.835 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 20:41:48.988 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 20:41:48.850 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:41:49.000 00:00:00.034 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:41:49.081 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 20:42:26.137 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53352 10 6452 1 2025-09-01 20:43:26.542 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50170 10 6452 1 2025-09-01 20:44:26.946 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:59108 10 6452 1 2025-09-01 20:40:23.126 00:06:00.138 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 20:40:23.123 00:06:00.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 20:45:27.382 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53152 10 6452 1 2025-09-01 20:46:27.794 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53820 10 6452 1 2025-09-01 20:46:48.809 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:46:48.943 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:46:48.784 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 20:46:48.942 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 20:46:49.026 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 20:47:28.200 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38242 10 6452 1 2025-09-01 20:48:28.599 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35924 10 6452 1 2025-09-01 20:49:28.961 00:00:10.883 TCP 1.101.0.1:3000 -> 23.104.0.1:46212 10 6452 1 2025-09-01 20:50:29.884 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:32998 12 6556 1 2025-09-01 20:51:30.312 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55390 10 6452 1 2025-09-01 20:51:49.148 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 20:51:49.189 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 20:51:48.949 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 20:51:49.009 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:51:49.066 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:47:23.124 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-01 20:47:23.127 00:06:00.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-01 20:52:30.715 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50998 10 6452 1 2025-09-01 20:53:31.116 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47778 10 6452 1 2025-09-01 20:54:31.525 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40458 10 6452 1 2025-09-01 20:55:31.932 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:59498 10 6452 1 2025-09-01 20:56:32.365 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36706 10 6452 1 2025-09-01 20:56:49.595 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-01 20:56:49.338 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:56:49.501 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-01 20:56:49.551 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-01 20:56:49.583 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-01 20:57:32.770 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45132 10 6452 1 2025-09-01 20:58:33.139 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:46904 10 6452 1 Summary: total flows: 136, total bytes: 424208, total packets: 1015, avg bps: 937, avg pps: 0, avg bpp: 417 Time window: 2025-09-01 19:58:23 - 2025-09-01 20:58:43 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0020s User: 0.0020s Wall: 0.0020s flows/second: 67030.0 Runtime: 0.0020s