Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 18:58:52.984 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41424 10 6452 1 2025-09-08 18:59:53.382 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33664 10 6452 1 2025-09-08 19:00:16.189 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 19:00:16.007 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 19:00:16.110 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 19:00:16.015 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:00:16.108 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:00:53.784 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:44422 10 6452 1 2025-09-08 19:01:54.190 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47974 10 6452 1 2025-09-08 19:02:54.596 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:33876 10 6452 1 2025-09-08 19:03:54.959 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48128 10 6452 1 2025-09-08 18:59:26.552 00:06:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 19:04:55.363 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52962 10 6452 1 2025-09-08 19:05:16.361 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 19:05:16.517 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 19:05:16.154 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 19:05:16.310 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:05:16.277 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:00:26.549 00:06:00.122 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 19:05:55.768 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:33358 10 6452 1 2025-09-08 19:06:56.142 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34046 10 6452 1 2025-09-08 19:07:56.542 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:38992 10 6452 1 2025-09-08 19:08:56.978 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33404 10 6452 1 2025-09-08 19:09:57.382 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48742 10 6452 1 2025-09-08 19:10:16.990 00:00:00.050 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 19:10:17.112 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 19:10:16.985 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:10:16.987 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:10:17.071 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 19:10:57.785 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50560 10 6452 1 2025-09-08 19:06:26.552 00:06:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 19:11:58.149 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49940 10 6452 1 2025-09-08 19:07:26.551 00:06:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 19:12:58.548 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49778 10 6452 1 2025-09-08 19:13:58.954 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55026 10 6452 1 2025-09-08 19:14:59.362 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57864 10 6452 1 2025-09-08 19:15:16.363 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 19:15:16.615 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 19:15:16.610 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 19:15:16.422 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:15:16.281 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:15:59.765 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:33962 10 6452 1 2025-09-08 19:17:00.193 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40810 10 6452 1 2025-09-08 19:18:00.598 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48140 10 6452 1 2025-09-08 19:13:26.554 00:06:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 19:19:01.004 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57090 10 6452 1 2025-09-08 19:14:26.553 00:06:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 19:20:16.771 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 19:20:01.416 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54784 10 6452 1 2025-09-08 19:20:16.522 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 19:20:16.590 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 19:20:16.553 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:20:16.689 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:21:01.823 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:41986 10 6452 1 2025-09-08 19:22:02.189 00:00:10.869 TCP 1.101.0.1:3000 -> 23.104.0.1:59978 10 6452 1 2025-09-08 19:23:03.112 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41128 10 6452 1 2025-09-08 19:24:03.512 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43628 10 6452 1 2025-09-08 19:25:03.920 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36572 10 6452 1 2025-09-08 19:25:16.560 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 19:25:16.746 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 19:25:16.743 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:25:16.668 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:25:16.751 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 19:20:26.557 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 19:26:04.328 00:00:10.617 TCP 1.101.0.1:3000 -> 23.104.0.1:45552 10 6452 1 2025-09-08 19:21:26.555 00:06:00.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 19:27:04.982 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36056 10 6452 1 2025-09-08 19:28:05.392 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38272 10 6452 1 2025-09-08 19:29:05.803 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38772 10 6452 1 2025-09-08 19:30:16.870 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 19:30:06.205 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39236 10 6452 1 2025-09-08 19:30:16.937 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 19:30:16.787 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 19:30:16.733 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:30:16.787 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:31:06.607 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49268 10 6452 1 2025-09-08 19:32:06.974 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45200 10 6452 1 2025-09-08 19:27:26.559 00:06:00.126 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 19:33:07.391 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34498 10 6452 1 2025-09-08 19:28:26.556 00:06:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 19:34:07.797 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49586 10 6452 1 2025-09-08 19:35:16.970 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 19:35:08.203 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53404 10 6452 1 2025-09-08 19:35:16.811 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 19:35:16.651 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:35:16.720 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:35:16.803 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 19:36:08.606 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35826 10 6452 1 2025-09-08 19:37:09.011 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33680 10 6452 1 2025-09-08 19:38:09.417 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59842 10 6452 1 2025-09-08 19:39:09.820 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45204 10 6452 1 2025-09-08 19:34:26.559 00:06:00.128 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 19:40:17.074 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 19:40:17.069 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 19:40:16.974 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:40:16.991 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:40:16.989 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 19:40:10.229 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49954 10 6452 1 2025-09-08 19:35:26.558 00:06:00.133 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 19:41:10.642 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33476 10 6452 1 2025-09-08 19:42:11.064 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:56510 10 6452 1 2025-09-08 19:43:11.422 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59034 10 6452 1 2025-09-08 19:44:11.831 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45778 10 6452 1 2025-09-08 19:45:17.202 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 19:45:17.155 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 19:45:17.177 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:45:17.241 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:45:17.323 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 19:45:12.193 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:46338 10 6452 1 2025-09-08 19:46:12.564 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56744 10 6452 1 2025-09-08 19:41:26.562 00:06:00.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 19:47:12.968 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34130 10 6452 1 2025-09-08 19:42:26.560 00:06:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 19:48:13.375 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:58218 10 6452 1 2025-09-08 19:49:13.827 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37418 10 6452 1 2025-09-08 19:50:17.238 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 19:50:17.286 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 19:50:17.581 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 19:50:17.204 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:50:17.154 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:50:14.189 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59338 10 6452 1 2025-09-08 19:51:14.594 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47730 10 6452 1 2025-09-08 19:52:15.002 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58238 10 6452 1 2025-09-08 19:48:26.565 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 19:53:15.399 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38794 10 6452 1 2025-09-08 19:49:26.565 00:06:00.128 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 19:54:15.802 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57716 10 6452 1 2025-09-08 19:55:17.503 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 19:55:17.347 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 19:55:17.209 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:55:17.031 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 19:55:17.114 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 19:55:16.219 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53508 10 6452 1 2025-09-08 19:56:16.625 00:00:10.858 TCP 1.101.0.1:3000 -> 23.104.0.1:58744 10 6452 1 2025-09-08 19:57:17.515 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56742 10 6452 1 2025-09-08 19:58:17.919 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40298 10 6452 1 Summary: total flows: 136, total bytes: 416016, total packets: 1004, avg bps: 930, avg pps: 0, avg bpp: 414 Time window: 2025-09-08 18:58:52 - 2025-09-08 19:58:28 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0019s User: 0.0019s Wall: 0.0021s flows/second: 65671.8 Runtime: 0.0021s