Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 11:58:54.471 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57782 10 6452 1 2025-09-02 11:59:54.878 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44798 10 6452 1 2025-09-02 12:00:55.284 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54968 10 6452 1 2025-09-02 12:02:07.306 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 12:02:07.309 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 12:02:07.140 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:01:55.684 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:57402 10 6452 1 2025-09-02 12:02:07.249 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:02:07.332 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 11:57:23.492 00:06:00.167 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 11:57:23.496 00:06:00.162 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 12:02:56.074 00:00:10.623 TCP 1.101.0.1:3000 -> 23.104.0.1:52688 10 6452 1 2025-09-02 12:03:56.734 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:52024 10 6452 1 2025-09-02 12:04:57.116 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:48636 10 6452 1 2025-09-02 12:05:57.495 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54666 10 6452 1 2025-09-02 12:07:07.410 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 12:07:07.182 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 12:07:07.122 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:06:57.895 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:58162 12 6556 1 2025-09-02 12:07:07.344 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:07:07.427 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 12:07:58.326 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52030 10 6452 1 2025-09-02 12:08:58.747 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60648 10 6452 1 2025-09-02 12:04:23.497 00:06:00.161 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 12:04:23.495 00:06:00.167 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 12:09:59.156 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53860 10 6452 1 2025-09-02 12:10:59.569 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60544 10 6452 1 2025-09-02 12:12:07.433 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 12:12:07.601 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 12:12:07.360 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 12:12:07.517 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:12:07.351 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:11:59.974 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41742 10 6452 1 2025-09-02 12:13:00.390 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:48248 10 6452 1 2025-09-02 12:14:00.786 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47320 10 6452 1 2025-09-02 12:15:01.189 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60732 10 6452 1 2025-09-02 12:16:01.549 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35060 10 6452 1 2025-09-02 12:11:23.498 00:06:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 12:11:23.497 00:06:00.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 12:17:07.827 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 12:17:07.472 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 12:17:07.675 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 12:17:07.374 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:17:07.744 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:17:01.959 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53528 10 6452 1 2025-09-02 12:18:02.363 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52998 10 6452 1 2025-09-02 12:19:02.771 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49780 10 6452 1 2025-09-02 12:20:03.190 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53268 10 6452 1 2025-09-02 12:21:03.587 00:00:10.655 TCP 1.101.0.1:3000 -> 23.104.0.1:47770 10 6452 1 2025-09-02 12:22:07.804 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 12:22:07.722 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 12:22:07.596 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:22:07.721 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:22:07.640 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 12:22:04.281 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57734 10 6452 1 2025-09-02 12:23:04.650 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:48464 10 6452 1 2025-09-02 12:18:23.500 00:06:00.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 12:18:23.499 00:06:00.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 12:24:05.024 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44356 10 6452 1 2025-09-02 12:25:05.429 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55804 10 6452 1 2025-09-02 12:26:05.835 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:43214 10 6452 1 2025-09-02 12:27:07.733 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 12:27:07.510 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 12:27:07.686 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:27:07.790 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:27:07.873 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 12:27:06.262 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60646 10 6452 1 2025-09-02 12:28:06.669 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33354 10 6452 1 2025-09-02 12:29:07.114 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39066 10 6452 1 2025-09-02 12:30:07.524 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39236 10 6452 1 2025-09-02 12:25:23.502 00:06:00.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 12:25:23.506 00:06:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 12:31:07.932 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:36352 10 6452 1 2025-09-02 12:32:08.020 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 12:32:07.939 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 12:32:07.871 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 12:32:07.968 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:32:07.936 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:32:08.364 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33994 10 6452 1 2025-09-02 12:33:08.734 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44160 10 6452 1 2025-09-02 12:34:09.138 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33836 10 6452 1 2025-09-02 12:35:09.503 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35092 10 6452 1 2025-09-02 12:36:09.908 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36932 10 6452 1 2025-09-02 12:37:07.905 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 12:37:07.800 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 12:37:07.732 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:37:08.064 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:37:08.147 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 12:32:23.509 00:06:00.189 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 12:37:10.319 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60854 10 6452 1 2025-09-02 12:32:23.512 00:06:00.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 12:38:10.726 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49702 10 6452 1 2025-09-02 12:39:11.137 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38394 10 6452 1 2025-09-02 12:40:11.548 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50256 10 6452 1 2025-09-02 12:41:11.948 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38440 10 6452 1 2025-09-02 12:42:08.086 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:42:07.983 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 12:42:07.898 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 12:42:08.148 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:42:08.167 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 12:42:12.351 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41570 10 6452 1 2025-09-02 12:43:12.716 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:60530 12 6556 1 2025-09-02 12:39:23.511 00:06:00.187 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 12:39:23.510 00:06:00.192 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 12:44:13.141 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34452 10 6452 1 2025-09-02 12:45:13.544 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44500 10 6452 1 2025-09-02 12:46:13.957 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52532 10 6452 1 2025-09-02 12:47:08.213 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 12:47:08.142 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 12:47:08.133 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 12:47:08.138 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:47:08.133 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:47:14.376 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59372 10 6452 1 2025-09-02 12:48:14.751 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:43008 12 10365 1 2025-09-02 12:49:15.192 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33812 10 6452 1 2025-09-02 12:50:15.594 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47230 10 6452 1 2025-09-02 12:46:23.515 00:06:00.188 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 12:46:23.513 00:06:00.193 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 12:51:15.997 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34522 10 6452 1 2025-09-02 12:52:08.238 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 12:52:08.394 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 12:52:08.366 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:52:08.401 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:52:08.484 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 12:52:16.358 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42674 10 6452 1 2025-09-02 12:53:16.765 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33976 10 6452 1 2025-09-02 12:54:17.172 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53668 10 6452 1 2025-09-02 12:55:17.574 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58332 10 6452 1 2025-09-02 12:56:17.977 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47606 10 6452 1 2025-09-02 12:57:08.988 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 12:57:08.944 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 12:57:08.572 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 12:57:08.549 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:57:08.906 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 12:57:18.382 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41258 10 6452 1 2025-09-02 12:53:23.515 00:06:00.204 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 12:53:23.513 00:06:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 12:58:18.787 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:39398 12 10365 1 Summary: total flows: 138, total bytes: 425772, total packets: 1040, avg bps: 915, avg pps: 0, avg bpp: 409 Time window: 2025-09-02 11:57:23 - 2025-09-02 12:59:23 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0043s User: 0.0000s Wall: 0.0021s flows/second: 67085.5 Runtime: 0.0021s