Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 12:59:36.141 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:35986 10 6452 1 2025-09-10 13:00:36.499 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52594 10 6452 1 2025-09-10 13:01:06.966 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 13:01:06.883 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 13:01:06.813 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 13:01:06.920 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:01:06.883 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:01:36.907 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35870 12 6556 1 2025-09-10 13:02:37.321 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60484 10 6452 1 2025-09-10 13:03:37.683 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:37032 10 6452 1 2025-09-10 12:59:27.433 00:06:00.091 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 13:04:38.063 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54380 10 6452 1 2025-09-10 13:00:27.429 00:06:00.097 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 13:05:38.466 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42988 10 6452 1 2025-09-10 13:06:07.257 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 13:06:07.076 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 13:06:07.072 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 13:06:06.950 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:06:07.175 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:06:38.867 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60372 10 6452 1 2025-09-10 13:07:39.271 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39966 10 6452 1 2025-09-10 13:08:39.631 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60792 10 6452 1 2025-09-10 13:09:40.042 00:00:10.504 TCP 1.101.0.1:3000 -> 23.104.0.1:40886 10 6452 1 2025-09-10 13:10:40.601 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33158 10 6452 1 2025-09-10 13:11:06.987 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 13:11:06.984 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 13:11:06.977 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 13:11:06.924 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:11:06.905 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:06:27.435 00:06:00.089 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 13:11:41.006 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44096 10 6452 1 2025-09-10 13:07:27.432 00:06:00.095 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 13:12:41.368 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40284 10 6452 1 2025-09-10 13:13:41.785 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50150 10 6452 1 2025-09-10 13:14:42.186 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58272 10 6452 1 2025-09-10 13:15:42.603 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36776 10 6452 1 2025-09-10 13:16:07.434 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 13:16:07.353 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 13:16:07.225 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 13:16:07.226 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:16:07.351 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:16:43.007 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53252 10 6452 1 2025-09-10 13:17:43.433 00:00:10.788 TCP 1.101.0.1:3000 -> 23.104.0.1:42712 10 6452 1 2025-09-10 13:13:27.438 00:06:00.088 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 13:18:44.259 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54548 10 6452 1 2025-09-10 13:14:27.435 00:06:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 13:19:44.660 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35108 10 6452 1 2025-09-10 13:20:45.098 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60540 10 6452 1 2025-09-10 13:21:07.147 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 13:21:07.276 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 13:21:07.292 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:21:07.278 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:21:07.361 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 13:21:45.497 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51480 10 6452 1 2025-09-10 13:22:45.908 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42266 10 6452 1 2025-09-10 13:23:46.308 00:00:10.662 TCP 1.101.0.1:3000 -> 23.104.0.1:42012 10 6452 1 2025-09-10 13:24:47.007 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39964 10 6452 1 2025-09-10 13:20:27.440 00:06:00.088 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 13:25:47.408 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36098 10 6452 1 2025-09-10 13:26:07.405 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 13:26:07.414 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 13:26:07.078 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:26:07.322 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:26:07.412 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 13:21:27.437 00:06:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 13:26:47.815 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43692 10 6452 1 2025-09-10 13:27:48.218 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48634 10 6452 1 2025-09-10 13:28:48.618 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52316 10 6452 1 2025-09-10 13:29:49.022 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43152 10 6452 1 2025-09-10 13:30:49.386 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:48014 10 6452 1 2025-09-10 13:31:07.376 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 13:31:07.487 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 13:31:07.191 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:31:07.377 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:31:07.461 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 13:31:49.794 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:33960 10 6452 1 2025-09-10 13:27:27.442 00:06:00.088 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 13:32:50.177 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41100 10 6452 1 2025-09-10 13:28:27.439 00:06:00.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 13:33:50.542 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34136 10 6452 1 2025-09-10 13:34:50.949 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40116 10 6452 1 2025-09-10 13:35:51.364 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:54628 11 6504 1 2025-09-10 13:36:07.501 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 13:36:07.420 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:36:07.479 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 13:36:07.428 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 13:36:07.235 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:36:51.819 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:54870 10 6452 1 2025-09-10 13:37:52.189 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37396 10 6452 1 2025-09-10 13:38:52.581 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59298 10 6452 1 2025-09-10 13:34:27.442 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 13:39:52.985 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56718 10 6452 1 2025-09-10 13:35:27.440 00:06:00.099 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 13:40:53.399 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60238 10 6452 1 2025-09-10 13:41:07.959 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 13:41:07.806 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 13:41:07.880 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 13:41:07.738 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:41:07.877 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:41:53.815 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34680 10 6452 1 2025-09-10 13:42:54.220 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39172 10 6452 1 2025-09-10 13:43:54.628 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34878 10 6452 1 2025-09-10 13:44:55.025 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55750 10 6452 1 2025-09-10 13:46:07.684 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 13:46:07.679 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 13:46:07.791 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:45:55.427 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54280 10 6452 1 2025-09-10 13:46:07.812 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:46:07.894 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 13:41:27.446 00:06:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 13:46:55.789 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43002 10 6452 1 2025-09-10 13:42:27.441 00:06:00.099 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 13:47:56.191 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46882 10 6452 1 2025-09-10 13:48:56.592 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33414 10 6452 1 2025-09-10 13:49:56.996 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35754 10 6452 1 2025-09-10 13:51:08.190 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 13:51:07.925 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 13:50:57.359 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51646 10 6452 1 2025-09-10 13:51:07.797 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:51:08.108 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:51:07.925 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 13:51:57.719 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47636 10 6452 1 2025-09-10 13:52:58.129 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39270 10 6452 1 2025-09-10 13:48:27.445 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 13:53:58.494 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55282 10 6452 1 2025-09-10 13:49:27.443 00:06:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 13:54:58.896 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56480 12 6556 1 2025-09-10 13:56:07.981 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 13:56:07.828 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 13:55:59.313 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59800 10 6452 1 2025-09-10 13:56:07.832 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 13:56:07.966 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:56:07.899 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 13:56:59.714 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49294 10 6452 1 2025-09-10 13:58:00.133 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34434 10 6452 1 Summary: total flows: 135, total bytes: 409824, total packets: 999, avg bps: 930, avg pps: 0, avg bpp: 410 Time window: 2025-09-10 12:59:27 - 2025-09-10 13:58:10 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0027s User: 0.0018s Wall: 0.0018s flows/second: 73613.0 Runtime: 0.0019s