Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-06 15:58:49.689 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57410 10 6452 1 2025-09-06 15:59:07.600 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 15:59:07.546 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 15:59:07.316 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 15:59:07.479 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 15:59:07.560 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 15:59:50.123 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49390 10 6452 1 2025-09-06 16:00:50.525 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52434 10 6452 1 2025-09-06 15:56:25.548 00:06:00.137 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 16:01:50.928 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:52734 10 6452 1 2025-09-06 16:02:51.354 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35866 10 6452 1 2025-09-06 16:04:07.986 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 16:03:51.759 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:45674 10 6452 1 2025-09-06 16:04:07.734 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 16:04:07.630 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 16:04:07.641 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:04:07.905 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 15:59:25.546 00:06:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 16:04:52.130 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53806 10 6452 1 2025-09-06 16:05:52.494 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58772 10 6452 1 2025-09-06 16:06:52.860 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:49052 10 6452 1 2025-09-06 16:07:53.233 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51198 10 6452 1 2025-09-06 16:03:25.549 00:06:00.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 16:08:53.636 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56454 10 6452 1 2025-09-06 16:09:07.734 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 16:09:07.667 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 16:09:07.650 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:09:07.795 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:09:07.878 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 16:09:54.059 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:44098 11 6504 1 2025-09-06 16:10:54.516 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52070 10 6452 1 2025-09-06 16:06:25.547 00:06:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 16:11:54.930 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:56292 10 6452 1 2025-09-06 16:12:55.312 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55156 10 6452 1 2025-09-06 16:14:07.964 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 16:14:07.879 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 16:14:07.943 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 16:14:07.783 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:14:07.882 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:13:55.672 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38002 10 6452 1 2025-09-06 16:14:56.105 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59336 10 6452 1 2025-09-06 16:10:25.551 00:06:00.137 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 16:15:56.509 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44964 10 6452 1 2025-09-06 16:16:56.909 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46658 10 6452 1 2025-09-06 16:17:57.318 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34640 10 6452 1 2025-09-06 16:13:25.550 00:06:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 16:19:07.990 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 16:19:07.819 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 16:19:07.755 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:18:57.719 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53388 10 6452 1 2025-09-06 16:19:07.820 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:19:07.903 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 16:19:58.134 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59894 10 6452 1 2025-09-06 16:20:58.491 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55354 10 6452 1 2025-09-06 16:21:58.907 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55280 10 6452 1 2025-09-06 16:17:25.553 00:06:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 16:22:59.322 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46766 10 6452 1 2025-09-06 16:24:08.000 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 16:24:08.002 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 16:24:07.945 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 16:24:07.851 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:24:07.916 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:23:59.726 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57954 10 6452 1 2025-09-06 16:25:00.138 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:53408 10 6452 1 2025-09-06 16:20:25.552 00:06:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 16:26:00.520 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57376 10 6452 1 2025-09-06 16:27:00.921 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48030 10 6452 1 2025-09-06 16:28:01.333 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42606 10 6452 1 2025-09-06 16:29:08.230 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 16:29:07.875 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 16:29:08.129 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:29:08.176 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:29:08.258 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 16:29:01.738 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52322 10 6452 1 2025-09-06 16:24:25.554 00:06:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 16:30:02.160 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53128 10 6452 1 2025-09-06 16:31:02.570 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46820 10 6452 1 2025-09-06 16:32:02.969 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:37028 10 6452 1 2025-09-06 16:27:25.555 00:06:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 16:33:03.391 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44354 10 6452 1 2025-09-06 16:34:08.195 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 16:34:08.299 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 16:34:07.920 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:34:08.194 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:34:08.277 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 16:34:03.794 00:00:10.783 TCP 1.101.0.1:3000 -> 23.104.0.1:59880 10 6452 1 2025-09-06 16:35:04.609 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49998 10 6452 1 2025-09-06 16:36:05.026 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57438 10 6452 1 2025-09-06 16:31:25.557 00:06:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 16:37:05.428 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40568 10 6452 1 2025-09-06 16:38:05.833 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60790 10 6452 1 2025-09-06 16:39:08.399 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 16:39:08.563 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 16:39:08.396 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:39:08.751 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:39:08.835 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 16:39:06.235 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40558 10 6452 1 2025-09-06 16:34:25.556 00:06:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 16:40:06.635 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56964 10 6452 1 2025-09-06 16:41:07.005 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60188 10 6452 1 2025-09-06 16:42:07.365 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:60498 10 6452 1 2025-09-06 16:43:07.862 00:00:10.459 TCP 1.101.0.1:3000 -> 23.104.0.1:60116 13 10417 1 2025-09-06 16:38:25.559 00:06:00.138 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 16:44:08.452 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 16:44:08.362 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 16:44:08.312 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:44:08.504 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:44:08.588 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 16:44:08.360 00:00:10.799 TCP 1.101.0.1:3000 -> 23.104.0.1:38940 10 6452 1 2025-09-06 16:45:09.198 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38080 10 6452 1 2025-09-06 16:46:09.598 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:56662 10 6452 1 2025-09-06 16:41:25.558 00:06:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 16:47:09.961 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49484 10 6452 1 2025-09-06 16:48:10.360 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53100 10 6452 1 2025-09-06 16:49:08.719 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 16:49:08.579 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 16:49:08.462 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:49:08.835 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:49:08.918 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 16:49:10.780 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56202 10 6452 1 2025-09-06 16:50:11.183 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57574 10 6452 1 2025-09-06 16:45:25.563 00:06:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 16:51:11.548 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33562 10 6452 1 2025-09-06 16:52:11.973 00:00:10.545 TCP 1.101.0.1:3000 -> 23.104.0.1:58340 10 6452 1 2025-09-06 16:53:12.555 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50778 10 6452 1 2025-09-06 16:48:25.560 00:06:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-06 16:54:08.753 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 16:54:08.734 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 16:54:08.604 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 16:54:08.536 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:54:08.670 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 16:54:12.953 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49460 10 6452 1 2025-09-06 16:55:13.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44474 10 6452 1 2025-09-06 16:56:13.757 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:45518 10 6452 1 2025-09-06 16:57:14.185 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33700 10 6452 1 2025-09-06 16:52:25.565 00:06:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-06 16:58:14.585 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:49654 10 6452 1 Summary: total flows: 137, total bytes: 420894, total packets: 1022, avg bps: 905, avg pps: 0, avg bpp: 411 Time window: 2025-09-06 15:56:25 - 2025-09-06 16:58:25 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0035s User: 0.0017s Wall: 0.0020s flows/second: 68982.0 Runtime: 0.0020s