Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 05:59:25.749 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:55648 10 6452 1 2025-09-08 05:59:53.387 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 05:59:53.500 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 05:59:53.313 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 05:59:53.422 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:59:53.306 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:55:26.280 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 06:00:26.187 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54558 10 6452 1 2025-09-08 05:56:26.277 00:06:00.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 06:01:26.589 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:52208 10 6452 1 2025-09-08 06:02:26.946 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50444 10 6452 1 2025-09-08 06:03:27.359 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48446 10 6452 1 2025-09-08 06:04:27.763 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44808 10 6452 1 2025-09-08 06:04:53.422 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 06:04:53.405 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 06:04:53.380 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:04:53.405 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:04:53.488 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 06:05:28.176 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50230 10 6452 1 2025-09-08 06:06:28.583 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48588 10 6452 1 2025-09-08 06:02:26.281 00:06:00.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 06:07:28.993 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43470 10 6452 1 2025-09-08 06:03:26.279 00:06:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 06:08:29.398 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41912 10 6452 1 2025-09-08 06:09:29.801 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36806 10 6452 1 2025-09-08 06:09:53.544 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 06:09:53.242 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 06:09:53.083 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:09:53.240 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:09:53.322 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 06:10:30.206 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39198 10 6452 1 2025-09-08 06:11:30.568 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50204 10 6452 1 2025-09-08 06:12:30.974 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35466 10 6452 1 2025-09-08 06:13:31.402 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53178 10 6452 1 2025-09-08 06:09:26.287 00:06:00.125 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 06:14:31.809 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37920 10 6452 1 2025-09-08 06:14:53.771 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 06:14:53.566 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 06:14:53.612 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 06:14:53.309 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:14:53.688 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:10:26.283 00:06:00.130 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 06:15:32.220 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41088 10 6452 1 2025-09-08 06:16:32.624 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44238 10 6452 1 2025-09-08 06:17:33.029 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36564 10 6452 1 2025-09-08 06:18:33.453 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38608 10 6452 1 2025-09-08 06:19:33.854 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56642 10 6452 1 2025-09-08 06:19:53.664 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 06:19:53.729 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 06:19:53.500 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:19:53.804 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:19:53.887 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 06:20:34.274 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:43638 10 6452 1 2025-09-08 06:16:26.289 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 06:21:34.678 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37236 10 6452 1 2025-09-08 06:17:26.285 00:06:00.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 06:22:35.105 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50362 10 6452 1 2025-09-08 06:23:35.469 00:00:10.963 TCP 1.101.0.1:3000 -> 23.104.0.1:46606 10 6452 1 2025-09-08 06:24:36.467 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51234 10 6452 1 2025-09-08 06:24:54.002 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 06:24:53.929 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 06:24:54.171 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 06:24:53.749 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:24:53.918 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:25:36.873 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48446 10 6452 1 2025-09-08 06:26:37.274 00:00:10.769 TCP 1.101.0.1:3000 -> 23.104.0.1:39700 10 6452 1 2025-09-08 06:27:38.107 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50044 10 6452 1 2025-09-08 06:23:26.289 00:06:00.126 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 06:28:38.508 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38394 10 6452 1 2025-09-08 06:24:26.288 00:06:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 06:29:38.913 00:00:10.699 TCP 1.101.0.1:3000 -> 23.104.0.1:32842 12 6556 1 2025-09-08 06:29:53.746 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 06:29:53.663 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:29:53.820 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 06:29:53.552 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 06:29:53.689 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:30:39.653 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36118 10 6452 1 2025-09-08 06:31:40.063 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58384 10 6452 1 2025-09-08 06:32:40.466 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59138 10 6452 1 2025-09-08 06:33:40.873 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46378 10 6452 1 2025-09-08 06:34:54.086 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 06:34:41.238 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36862 10 6452 1 2025-09-08 06:34:54.033 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 06:34:53.756 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:34:53.808 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:34:53.893 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 06:30:26.293 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 06:35:41.641 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:56518 10 6452 1 2025-09-08 06:31:26.291 00:06:00.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 06:36:42.008 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32940 10 6452 1 2025-09-08 06:37:42.410 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:38300 10 6452 1 2025-09-08 06:38:42.824 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42434 10 6452 1 2025-09-08 06:39:54.086 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 06:39:43.227 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50252 10 6452 1 2025-09-08 06:39:53.948 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 06:39:53.713 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:39:54.137 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:39:54.219 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 06:40:43.633 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57204 10 6452 1 2025-09-08 06:41:44.052 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47926 10 6452 1 2025-09-08 06:37:26.294 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 06:42:44.476 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53760 10 6452 1 2025-09-08 06:38:26.293 00:06:00.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 06:43:44.844 00:00:10.426 TCP 1.101.0.1:3000 -> 23.104.0.1:52104 10 6452 1 2025-09-08 06:44:54.070 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 06:44:53.996 00:00:00.038 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 06:44:54.122 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 06:44:53.916 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:44:53.988 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:44:45.308 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42006 10 6452 1 2025-09-08 06:45:45.707 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46310 10 6452 1 2025-09-08 06:46:46.115 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58124 10 6452 1 2025-09-08 06:47:46.518 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46844 10 6452 1 2025-09-08 06:48:46.919 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43710 10 6452 1 2025-09-08 06:44:26.297 00:06:00.126 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 06:49:54.537 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 06:49:54.375 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 06:49:54.460 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 06:49:54.216 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:49:54.455 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:49:47.329 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38368 10 6452 1 2025-09-08 06:45:26.295 00:06:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 06:50:47.732 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53690 10 6452 1 2025-09-08 06:51:48.147 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:41748 10 6452 1 2025-09-08 06:52:48.548 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60348 10 6452 1 2025-09-08 06:53:48.951 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55086 10 6452 1 2025-09-08 06:54:54.359 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 06:54:54.067 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 06:54:54.286 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 06:54:54.184 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:54:54.276 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 06:54:49.362 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53372 10 6452 1 2025-09-08 06:55:49.760 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:42144 10 6452 1 2025-09-08 06:51:26.298 00:06:00.128 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 06:56:50.141 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:36674 10 6452 1 2025-09-08 06:52:26.297 00:06:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 06:57:50.627 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56564 10 6452 1 Summary: total flows: 137, total bytes: 411390, total packets: 1024, avg bps: 870, avg pps: 0, avg bpp: 401 Time window: 2025-09-08 05:55:26 - 2025-09-08 06:58:26 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0052s User: 0.0000s Wall: 0.0038s flows/second: 36416.7 Runtime: 0.0038s