Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 13:58:43.487 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39502 10 6452 1 2025-09-02 13:59:43.893 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46172 12 6556 1 2025-09-02 14:00:44.313 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41890 10 6452 1 2025-09-02 13:56:23.532 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 13:56:23.534 00:06:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 14:01:44.673 00:00:10.739 TCP 1.101.0.1:3000 -> 23.104.0.1:52772 10 6452 1 2025-09-02 14:02:09.786 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 14:02:09.733 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 14:02:09.617 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:02:09.787 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:02:09.869 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 14:02:45.451 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39960 10 6452 1 2025-09-02 14:03:45.858 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59558 10 6452 1 2025-09-02 14:04:46.273 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51794 10 6452 1 2025-09-02 14:05:46.677 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39242 10 6452 1 2025-09-02 14:06:47.115 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60836 10 6452 1 2025-09-02 14:07:09.760 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 14:07:09.968 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 14:07:09.685 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:07:10.141 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 14:07:10.059 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:07:47.526 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47902 11 6492 1 2025-09-02 14:03:23.532 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 14:03:23.535 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 14:08:47.933 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:37146 10 6452 1 2025-09-02 14:09:48.350 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54670 10 6452 1 2025-09-02 14:10:48.715 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:51434 10 6452 1 2025-09-02 14:11:49.136 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33030 10 6452 1 2025-09-02 14:12:09.821 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 14:12:09.655 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 14:12:09.904 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 14:12:09.787 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:12:09.738 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:12:49.540 00:00:11.037 TCP 1.101.0.1:3000 -> 23.104.0.1:53706 13 10419 1 2025-09-02 14:13:50.613 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:48786 10 6452 1 2025-09-02 14:14:51.011 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48474 10 6452 1 2025-09-02 14:10:23.539 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 14:10:23.535 00:06:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 14:15:51.418 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37466 10 6452 1 2025-09-02 14:16:51.779 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38710 10 6452 1 2025-09-02 14:17:10.143 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 14:17:10.143 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 14:17:10.141 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 14:17:09.992 00:00:00.048 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:17:10.060 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:17:52.185 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45552 10 6452 1 2025-09-02 14:18:52.590 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41744 10 6452 1 2025-09-02 14:19:52.998 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43816 10 6452 1 2025-09-02 14:20:53.402 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55990 10 6452 1 2025-09-02 14:21:53.808 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37030 10 6452 1 2025-09-02 14:22:09.745 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:22:10.468 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 14:22:10.387 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:22:10.287 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 14:22:10.350 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 14:17:23.537 00:06:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 14:17:23.540 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 14:22:54.218 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37028 10 6452 1 2025-09-02 14:23:54.579 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40046 10 6452 1 2025-09-02 14:24:54.978 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:38388 10 6452 1 2025-09-02 14:25:55.397 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37176 10 6452 1 2025-09-02 14:27:09.876 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:26:55.756 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51278 10 6452 1 2025-09-02 14:27:09.918 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:27:10.001 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 14:27:10.164 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 14:27:10.240 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 14:27:56.172 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47810 10 6452 1 2025-09-02 14:28:56.535 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45654 10 6452 1 2025-09-02 14:24:23.546 00:06:00.203 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 14:24:23.547 00:06:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 14:29:56.956 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39362 10 6452 1 2025-09-02 14:30:57.366 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37682 10 6452 1 2025-09-02 14:31:57.728 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43174 10 6452 1 2025-09-02 14:32:10.183 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 14:32:10.281 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 14:32:10.097 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:32:10.184 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:32:10.266 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 14:32:58.106 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58348 10 6452 1 2025-09-02 14:33:58.504 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59162 10 6452 1 2025-09-02 14:34:58.917 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34650 10 6452 1 2025-09-02 14:35:59.321 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53292 10 6452 1 2025-09-02 14:31:23.548 00:06:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 14:31:23.545 00:06:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 14:37:10.361 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 14:37:10.356 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 14:37:10.184 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:36:59.727 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:36202 10 6452 1 2025-09-02 14:37:10.442 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:37:10.526 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 14:38:00.150 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54210 10 6452 1 2025-09-02 14:39:00.557 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56186 10 6452 1 2025-09-02 14:40:00.975 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41368 10 6452 1 2025-09-02 14:41:01.391 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55394 10 6452 1 2025-09-02 14:42:10.717 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 14:42:10.472 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 14:42:10.561 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 14:42:10.528 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:42:10.634 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:42:01.799 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51614 10 6452 1 2025-09-02 14:43:02.201 00:00:10.509 TCP 1.101.0.1:3000 -> 23.104.0.1:57596 14 10469 1 2025-09-02 14:38:23.549 00:06:00.203 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 14:38:23.552 00:06:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 14:44:02.755 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40254 10 6452 1 2025-09-02 14:45:03.115 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41962 10 6452 1 2025-09-02 14:46:03.518 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39446 10 6452 1 2025-09-02 14:47:03.885 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47998 10 6452 1 2025-09-02 14:47:10.442 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 14:47:10.662 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 14:47:10.480 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:47:10.545 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:47:10.627 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 14:48:04.310 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49574 10 6452 1 2025-09-02 14:49:04.717 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:43480 10 6452 1 2025-09-02 14:45:23.555 00:06:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 14:50:05.136 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37208 10 6452 1 2025-09-02 14:45:23.551 00:06:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 14:51:05.537 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59050 10 6452 1 2025-09-02 14:52:10.878 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 14:52:10.767 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 14:52:10.712 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:52:10.870 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:52:10.958 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 14:52:05.902 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45350 10 6452 1 2025-09-02 14:53:06.272 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33258 10 6452 1 2025-09-02 14:54:06.673 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44484 10 6452 1 2025-09-02 14:55:07.101 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:58596 10 6452 1 2025-09-02 14:56:07.463 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47102 10 6452 1 2025-09-02 14:57:10.746 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 14:57:10.820 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 14:57:10.748 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:57:10.763 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 14:57:10.845 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 14:52:23.555 00:06:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 14:57:07.868 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57970 10 6452 1 2025-09-02 14:52:23.554 00:06:00.202 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 14:58:08.278 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42268 10 6452 1 Summary: total flows: 138, total bytes: 425866, total packets: 1042, avg bps: 915, avg pps: 0, avg bpp: 408 Time window: 2025-09-02 13:56:23 - 2025-09-02 14:58:23 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0042s User: 0.0000s Wall: 0.0022s flows/second: 62615.1 Runtime: 0.0022s