Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 19:59:12.781 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50036 10 6452 1 2025-09-02 20:00:13.186 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44144 10 6452 1 2025-09-02 20:01:13.547 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44644 10 6452 1 2025-09-02 20:02:17.004 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:02:16.798 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:02:16.594 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:02:16.813 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:02:16.920 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:02:13.944 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:47526 10 6452 1 2025-09-02 20:03:14.324 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:49386 10 6452 1 2025-09-02 20:04:14.749 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42264 10 6452 1 2025-09-02 20:00:23.680 00:06:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:00:23.682 00:06:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:05:15.121 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:39872 10 6452 1 2025-09-02 20:06:15.488 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34116 10 6452 1 2025-09-02 20:07:17.348 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:07:17.530 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:07:17.328 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:07:17.182 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:07:17.265 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:07:15.896 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36496 10 6452 1 2025-09-02 20:08:16.316 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59778 10 6452 1 2025-09-02 20:09:16.718 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53060 10 6452 1 2025-09-02 20:10:17.136 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49610 10 6452 1 2025-09-02 20:11:17.536 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38784 10 6452 1 2025-09-02 20:12:17.174 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:07:23.684 00:06:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:12:17.098 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:12:17.146 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:12:16.864 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:12:17.091 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:07:23.681 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:12:17.940 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:53820 10 6452 1 2025-09-02 20:13:18.321 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59534 10 6452 1 2025-09-02 20:14:18.738 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37816 10 6452 1 2025-09-02 20:15:19.113 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39818 10 6452 1 2025-09-02 20:16:19.518 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38436 10 6452 1 2025-09-02 20:17:17.579 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:17:17.343 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:17:17.273 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:17:16.984 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:17:17.496 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:17:19.921 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:59322 10 6452 1 2025-09-02 20:18:20.356 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38604 10 6452 1 2025-09-02 20:14:23.685 00:06:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:14:23.683 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:19:20.756 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:60336 10 6452 1 2025-09-02 20:20:21.185 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57876 10 6452 1 2025-09-02 20:21:21.589 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47078 10 6452 1 2025-09-02 20:22:17.329 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:22:17.688 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:22:17.126 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:22:17.458 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:22:17.540 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:22:21.952 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58298 10 6452 1 2025-09-02 20:23:22.366 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54918 10 6452 1 2025-09-02 20:24:22.773 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52686 10 6452 1 2025-09-02 20:25:23.144 00:00:10.890 TCP 1.101.0.1:3000 -> 23.104.0.1:58274 10 6452 1 2025-09-02 20:21:23.685 00:06:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:21:23.688 00:06:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:26:24.100 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59432 10 6452 1 2025-09-02 20:27:17.623 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:27:17.390 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:27:17.603 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:27:17.550 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:27:17.541 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:27:24.502 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55636 10 6452 1 2025-09-02 20:28:24.934 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47754 10 6452 1 2025-09-02 20:29:25.357 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60566 10 6452 1 2025-09-02 20:30:25.718 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37738 10 6452 1 2025-09-02 20:31:26.110 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:51726 11 6504 1 2025-09-02 20:32:17.431 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:32:17.595 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:32:17.248 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:32:17.426 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:32:17.509 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:32:26.568 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56276 10 6452 1 2025-09-02 20:28:23.689 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:28:23.691 00:06:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:33:26.941 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:39822 10 6452 1 2025-09-02 20:34:27.362 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39158 10 6452 1 2025-09-02 20:35:27.725 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49554 10 6452 1 2025-09-02 20:36:28.138 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59084 10 6452 1 2025-09-02 20:37:17.669 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:37:17.610 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:37:17.641 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:37:17.719 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:37:17.802 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:37:28.518 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:49124 10 6452 1 2025-09-02 20:38:28.958 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:58332 12 10367 1 2025-09-02 20:39:29.444 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:44398 10 6452 1 2025-09-02 20:35:23.696 00:06:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:35:23.693 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:40:29.811 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41682 10 6452 1 2025-09-02 20:41:30.213 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45976 10 6452 1 2025-09-02 20:42:17.900 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:42:17.818 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:42:17.859 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:42:17.491 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:42:17.961 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:42:30.613 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33802 10 6452 1 2025-09-02 20:43:31.023 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:53970 12 10367 1 2025-09-02 20:44:31.454 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51654 10 6452 1 2025-09-02 20:45:31.815 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52130 10 6452 1 2025-09-02 20:46:32.218 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35936 10 6452 1 2025-09-02 20:47:17.754 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:47:17.876 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:47:17.690 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:47:17.756 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:47:17.839 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:42:23.697 00:06:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:42:23.700 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:47:32.583 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34654 10 6452 1 2025-09-02 20:48:32.946 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47880 10 6452 1 2025-09-02 20:49:33.365 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57402 10 6452 1 2025-09-02 20:50:33.762 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:58592 10 6452 1 2025-09-02 20:51:34.185 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38730 10 6452 1 2025-09-02 20:52:17.769 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:52:17.842 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:52:17.843 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:52:17.533 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:52:17.687 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:52:34.594 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33894 10 6452 1 2025-09-02 20:53:35.000 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:34940 10 6452 1 2025-09-02 20:49:23.702 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-02 20:49:23.699 00:06:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-02 20:54:35.384 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36764 10 6452 1 2025-09-02 20:55:35.788 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45250 10 6452 1 2025-09-02 20:56:36.196 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:38252 10 6452 1 2025-09-02 20:57:18.182 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-02 20:57:18.185 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-02 20:57:17.838 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:57:18.062 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-02 20:57:18.146 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-02 20:57:36.592 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43998 10 6452 1 2025-09-02 20:58:36.996 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59326 10 6452 1 Summary: total flows: 136, total bytes: 423898, total packets: 1009, avg bps: 948, avg pps: 0, avg bpp: 420 Time window: 2025-09-02 19:59:12 - 2025-09-02 20:58:47 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0048s User: 0.0000s Wall: 0.0020s flows/second: 67426.2 Runtime: 0.0020s