Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 11:59:10.574 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50470 10 6452 1 2025-09-10 12:00:10.939 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:56692 10 6452 1 2025-09-10 12:01:05.595 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 12:01:05.648 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 12:01:05.617 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:01:05.645 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:01:05.728 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 12:01:11.357 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59780 10 6452 1 2025-09-10 11:56:27.413 00:06:00.085 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 12:02:11.758 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:43630 10 6452 1 2025-09-10 11:57:27.411 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 12:03:12.191 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:33970 10 6452 1 2025-09-10 12:04:12.619 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56012 10 6452 1 2025-09-10 12:05:13.026 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50616 10 6452 1 2025-09-10 12:06:05.630 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 12:06:05.769 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 12:06:05.546 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:06:05.771 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:06:05.855 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 12:06:13.425 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33898 10 6452 1 2025-09-10 12:07:13.840 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:33512 10 6452 1 2025-09-10 12:08:14.228 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46234 10 6452 1 2025-09-10 12:03:27.415 00:06:00.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 12:09:14.630 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45144 10 6452 1 2025-09-10 12:04:27.413 00:06:00.091 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 12:10:14.997 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43138 10 6452 1 2025-09-10 12:11:05.934 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 12:11:05.935 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 12:11:05.940 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 12:11:05.806 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:11:05.852 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:11:15.402 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51182 10 6452 1 2025-09-10 12:12:15.805 00:00:10.934 TCP 1.101.0.1:3000 -> 23.104.0.1:33758 10 6452 1 2025-09-10 12:13:16.776 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39054 10 6452 1 2025-09-10 12:14:17.187 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36590 10 6452 1 2025-09-10 12:10:27.418 00:06:00.088 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 12:15:17.592 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59210 10 6452 1 2025-09-10 12:16:06.243 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 12:16:05.948 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 12:16:05.953 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 12:16:05.829 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:16:06.161 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:11:27.416 00:06:00.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 12:16:18.008 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33778 10 6452 1 2025-09-10 12:17:18.409 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56236 10 6452 1 2025-09-10 12:18:18.813 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55848 10 6452 1 2025-09-10 12:19:19.213 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57632 10 6452 1 2025-09-10 12:20:19.614 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55418 10 6452 1 2025-09-10 12:21:06.241 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 12:21:06.246 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 12:21:06.155 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:21:06.331 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:21:06.413 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 12:21:20.020 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36388 10 6452 1 2025-09-10 12:17:27.420 00:06:00.088 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 12:22:20.428 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38800 10 6452 1 2025-09-10 12:18:27.418 00:06:00.092 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 12:23:20.832 00:00:10.466 TCP 1.101.0.1:3000 -> 23.104.0.1:43670 12 10365 1 2025-09-10 12:24:21.340 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55236 10 6452 1 2025-09-10 12:25:21.697 00:00:10.787 TCP 1.101.0.1:3000 -> 23.104.0.1:58736 10 6452 1 2025-09-10 12:26:06.070 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 12:26:06.144 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 12:26:06.005 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 12:26:05.953 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:26:05.987 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:26:22.527 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37690 10 6452 1 2025-09-10 12:27:22.931 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:40358 10 6452 1 2025-09-10 12:28:23.362 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39092 10 6452 1 2025-09-10 12:24:27.422 00:06:00.088 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 12:29:23.725 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58034 10 6452 1 2025-09-10 12:25:27.420 00:06:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 12:30:24.159 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50512 10 6452 1 2025-09-10 12:31:06.039 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 12:31:06.181 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 12:31:06.304 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 12:31:06.106 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:31:05.955 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:31:24.561 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51974 10 6452 1 2025-09-10 12:32:24.927 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51162 10 6452 1 2025-09-10 12:33:25.351 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42732 10 6452 1 2025-09-10 12:34:25.715 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35836 10 6452 1 2025-09-10 12:35:26.114 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53266 10 6452 1 2025-09-10 12:36:06.281 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 12:36:06.181 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 12:36:06.313 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:36:06.274 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:36:06.357 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 12:31:27.423 00:06:00.090 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 12:36:26.479 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50954 10 6452 1 2025-09-10 12:32:27.421 00:06:00.095 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 12:37:26.882 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38216 10 6452 1 2025-09-10 12:38:27.306 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:52180 10 6452 1 2025-09-10 12:39:27.668 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:60318 10 6452 1 2025-09-10 12:40:28.059 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48398 10 6452 1 2025-09-10 12:41:06.615 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 12:41:06.487 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 12:41:06.535 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 12:41:06.180 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:41:06.533 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:41:28.466 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47810 10 6452 1 2025-09-10 12:42:28.883 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36244 10 6452 1 2025-09-10 12:38:27.428 00:06:00.091 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 12:43:29.285 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42722 10 6452 1 2025-09-10 12:39:27.424 00:06:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 12:44:29.648 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46264 10 6452 1 2025-09-10 12:45:30.062 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38908 10 6452 1 2025-09-10 12:46:06.357 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 12:46:06.604 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 12:46:06.453 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:46:06.679 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:46:06.763 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 12:46:30.465 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33832 10 6452 1 2025-09-10 12:47:30.872 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49322 10 6452 1 2025-09-10 12:48:31.282 00:00:10.756 TCP 1.101.0.1:3000 -> 23.104.0.1:45956 12 10365 1 2025-09-10 12:49:32.107 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48878 10 6452 1 2025-09-10 12:45:27.430 00:06:00.090 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 12:50:32.510 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41452 10 6452 1 2025-09-10 12:51:06.486 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 12:51:06.706 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 12:51:06.599 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:51:06.587 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:51:06.668 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 12:46:27.426 00:06:00.095 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 12:51:32.915 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51178 10 6452 1 2025-09-10 12:52:33.319 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49542 10 6452 1 2025-09-10 12:53:33.721 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45738 10 6452 1 2025-09-10 12:54:34.138 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59078 10 6452 1 2025-09-10 12:55:34.498 00:00:10.432 TCP 1.101.0.1:3000 -> 23.104.0.1:55184 11 6504 1 2025-09-10 12:56:06.860 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 12:56:06.772 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 12:56:06.724 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:56:06.989 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 12:56:07.072 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 12:56:34.970 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38538 10 6452 1 2025-09-10 12:52:27.431 00:06:00.090 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 12:57:35.372 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58628 10 6452 1 2025-09-10 12:53:27.431 00:06:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 12:58:35.732 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43726 10 6452 1 Summary: total flows: 138, total bytes: 425616, total packets: 1037, avg bps: 900, avg pps: 0, avg bpp: 410 Time window: 2025-09-10 11:56:27 - 2025-09-10 12:59:27 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0026s User: 0.0017s Wall: 0.0016s flows/second: 88517.2 Runtime: 0.0016s