Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 03:54:23.305 00:06:00.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 03:54:23.308 00:06:00.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 03:59:25.711 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53198 10 6452 1 2025-09-02 04:00:26.147 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:33034 10 6452 1 2025-09-02 04:01:26.513 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51244 10 6452 1 2025-09-02 04:01:57.747 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 04:01:57.632 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 04:01:57.652 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:01:57.634 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:01:57.716 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 04:02:26.918 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43226 10 6452 1 2025-09-02 04:03:27.331 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47242 10 6452 1 2025-09-02 04:04:27.742 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37296 10 6452 1 2025-09-02 04:05:28.150 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34402 10 6452 1 2025-09-02 04:01:23.307 00:06:00.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 04:01:23.311 00:06:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 04:06:28.558 00:00:10.744 TCP 1.101.0.1:3000 -> 23.104.0.1:46578 10 6452 1 2025-09-02 04:06:57.807 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 04:06:57.911 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 04:06:57.733 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 04:06:57.692 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:06:57.724 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:07:29.339 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43128 10 6452 1 2025-09-02 04:08:29.743 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58362 10 6452 1 2025-09-02 04:09:30.147 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53050 10 6452 1 2025-09-02 04:10:30.559 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:57320 10 6452 1 2025-09-02 04:11:30.915 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50786 10 6452 1 2025-09-02 04:11:57.975 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 04:11:57.886 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 04:11:57.971 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 04:11:57.627 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:11:57.892 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:12:31.280 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56494 10 6452 1 2025-09-02 04:08:23.314 00:06:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 04:08:23.311 00:06:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 04:13:31.678 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57810 10 6452 1 2025-09-02 04:14:32.116 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:47972 10 6452 1 2025-09-02 04:15:32.472 00:00:10.969 TCP 1.101.0.1:3000 -> 23.104.0.1:42476 10 6452 1 2025-09-02 04:16:33.481 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60696 10 6452 1 2025-09-02 04:16:58.221 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 04:16:58.139 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:16:58.284 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 04:16:58.186 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 04:16:57.930 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:17:33.843 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:46026 10 6452 1 2025-09-02 04:18:34.275 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:36034 10 6452 1 2025-09-02 04:19:34.637 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43958 10 6452 1 2025-09-02 04:15:23.317 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 04:15:23.319 00:06:00.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 04:20:35.069 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60094 10 6452 1 2025-09-02 04:21:35.477 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41540 10 6452 1 2025-09-02 04:21:58.591 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 04:21:58.542 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 04:21:58.306 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:21:58.370 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:21:58.454 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 04:22:35.884 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43166 10 6452 1 2025-09-02 04:23:36.283 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43076 10 6452 1 2025-09-02 04:24:36.654 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54166 10 6452 1 2025-09-02 04:25:37.075 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38974 10 6452 1 2025-09-02 04:26:37.475 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36638 10 6452 1 2025-09-02 04:26:57.966 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 04:26:58.144 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 04:26:58.098 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:26:58.156 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:26:58.241 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 04:22:23.320 00:06:00.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 04:22:23.317 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 04:27:37.884 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:48614 12 6556 1 2025-09-02 04:28:38.322 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60584 10 6452 1 2025-09-02 04:29:38.686 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:59598 10 6452 1 2025-09-02 04:30:39.125 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45176 10 6452 1 2025-09-02 04:31:39.538 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41686 10 6452 1 2025-09-02 04:31:58.305 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 04:31:58.221 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 04:31:58.224 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 04:31:58.312 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:31:58.222 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:32:39.944 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59044 10 6452 1 2025-09-02 04:33:40.359 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38448 10 6452 1 2025-09-02 04:29:23.340 00:06:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 04:29:23.342 00:06:00.132 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 04:34:40.763 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:46476 10 6452 1 2025-09-02 04:35:41.187 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45130 10 6452 1 2025-09-02 04:36:41.592 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55480 10 6452 1 2025-09-02 04:36:58.726 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 04:36:58.126 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 04:36:58.124 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 04:36:58.238 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:36:58.644 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:37:42.005 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59490 10 6452 1 2025-09-02 04:38:42.406 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60436 10 6452 1 2025-09-02 04:39:42.819 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40046 10 6452 1 2025-09-02 04:40:43.226 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33784 10 6452 1 2025-09-02 04:36:23.341 00:06:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 04:36:23.344 00:06:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 04:41:43.634 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41112 10 6452 1 2025-09-02 04:41:58.298 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 04:41:58.216 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:41:58.534 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 04:41:58.421 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 04:41:58.516 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:42:44.038 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60388 10 6452 1 2025-09-02 04:43:44.441 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40314 10 6452 1 2025-09-02 04:44:44.844 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:51532 10 6452 1 2025-09-02 04:45:45.233 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52672 10 6452 1 2025-09-02 04:46:58.538 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 04:46:58.604 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 04:46:58.469 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:46:45.642 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42114 10 6452 1 2025-09-02 04:46:58.539 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:46:58.621 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 04:47:46.002 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:51240 12 10367 1 2025-09-02 04:43:23.342 00:06:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 04:43:23.344 00:06:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 04:48:46.499 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46166 10 6452 1 2025-09-02 04:49:46.900 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:56272 10 6452 1 2025-09-02 04:50:47.279 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60388 10 6452 1 2025-09-02 04:51:58.847 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 04:51:47.694 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:40402 10 6452 1 2025-09-02 04:51:58.764 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:51:58.651 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 04:51:58.647 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 04:51:58.640 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:52:48.140 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60274 10 6452 1 2025-09-02 04:53:48.548 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53566 10 6452 1 2025-09-02 04:54:48.951 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45834 10 6452 1 2025-09-02 04:50:23.352 00:06:00.130 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 04:50:23.350 00:06:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 04:55:49.365 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40218 10 6452 1 2025-09-02 04:56:58.974 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 04:56:58.892 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:56:58.853 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 04:56:58.856 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 04:56:58.427 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 04:56:49.766 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:50668 10 6452 1 2025-09-02 04:57:50.144 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50462 10 6452 1 Summary: total flows: 137, total bytes: 415305, total packets: 1026, avg bps: 870, avg pps: 0, avg bpp: 404 Time window: 2025-09-02 03:54:23 - 2025-09-02 04:58:00 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0039s User: 0.0013s Wall: 0.0025s flows/second: 54845.8 Runtime: 0.0025s