Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 13:59:00.544 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52604 10 6452 1 2025-09-10 14:00:00.940 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:42980 10 6452 1 2025-09-10 13:55:27.449 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 14:01:08.164 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 14:01:08.007 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 14:01:08.122 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 14:01:07.758 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:01:08.081 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:01:01.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51520 10 6452 1 2025-09-10 13:56:27.446 00:06:00.097 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 14:02:01.764 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57780 10 6452 1 2025-09-10 14:03:02.179 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53722 10 6452 1 2025-09-10 14:04:02.589 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33388 10 6452 1 2025-09-10 14:05:02.988 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42656 10 6452 1 2025-09-10 14:06:08.190 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 14:06:08.232 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 14:06:08.268 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 14:06:08.002 00:00:00.043 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:06:08.106 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:06:03.393 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48750 10 6452 1 2025-09-10 14:07:03.798 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59766 10 6452 1 2025-09-10 14:02:27.451 00:06:00.089 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 14:08:04.195 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53144 10 6452 1 2025-09-10 14:03:27.450 00:06:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 14:09:04.604 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41286 10 6452 1 2025-09-10 14:10:05.012 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54228 10 6452 1 2025-09-10 14:11:08.360 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 14:11:08.153 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 14:11:08.184 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 14:11:08.283 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:11:08.276 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:11:05.382 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34270 10 6452 1 2025-09-10 14:12:05.782 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44128 10 6452 1 2025-09-10 14:13:06.144 00:00:10.527 TCP 1.101.0.1:3000 -> 23.104.0.1:44892 10 6452 1 2025-09-10 14:14:06.708 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:46070 12 10365 1 2025-09-10 14:09:27.453 00:06:00.089 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 14:15:07.192 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49196 10 6452 1 2025-09-10 14:10:27.452 00:06:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 14:16:08.384 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 14:16:08.298 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 14:16:08.213 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 14:16:08.201 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:16:08.298 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:16:07.593 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:58470 11 6504 1 2025-09-10 14:17:08.099 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39936 10 6452 1 2025-09-10 14:18:08.498 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52972 10 6452 1 2025-09-10 14:19:08.908 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48356 12 6556 1 2025-09-10 14:20:09.316 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57244 10 6452 1 2025-09-10 14:21:08.416 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 14:21:08.509 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 14:21:08.367 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:21:08.340 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:21:08.423 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 14:21:09.726 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57902 10 6452 1 2025-09-10 14:16:27.455 00:06:00.088 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 14:22:10.133 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52342 10 6452 1 2025-09-10 14:17:27.451 00:06:00.095 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 14:23:10.534 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53104 10 6452 1 2025-09-10 14:24:10.940 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:50470 10 6452 1 2025-09-10 14:25:11.309 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43846 10 6452 1 2025-09-10 14:26:08.939 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 14:26:08.914 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 14:26:08.862 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 14:26:08.864 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:26:08.855 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:26:11.706 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38322 10 6452 1 2025-09-10 14:27:12.113 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40230 10 6452 1 2025-09-10 14:28:12.515 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34374 10 6452 1 2025-09-10 14:23:27.459 00:06:00.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 14:29:12.918 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51546 10 6452 1 2025-09-10 14:24:27.457 00:06:00.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 14:30:13.323 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32836 10 6452 1 2025-09-10 14:31:08.595 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 14:31:08.773 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 14:31:08.561 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:31:08.517 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:31:08.601 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 14:31:13.730 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37058 10 6452 1 2025-09-10 14:32:14.143 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60234 10 6452 1 2025-09-10 14:33:14.562 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36664 10 6452 1 2025-09-10 14:34:14.961 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36950 10 6452 1 2025-09-10 14:30:27.461 00:06:00.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 14:35:15.325 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52262 10 6452 1 2025-09-10 14:36:08.872 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 14:36:08.650 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 14:36:08.791 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 14:36:08.760 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:36:08.789 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:31:27.458 00:06:00.092 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 14:36:15.731 00:00:11.178 TCP 1.101.0.1:3000 -> 23.104.0.1:51518 10 6452 1 2025-09-10 14:37:16.954 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:52276 10 6452 1 2025-09-10 14:38:17.319 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44214 11 6504 1 2025-09-10 14:39:17.740 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53566 10 6452 1 2025-09-10 14:40:18.148 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60768 10 6452 1 2025-09-10 14:41:08.661 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 14:41:08.914 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 14:41:08.583 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:41:08.663 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:41:08.746 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 14:41:18.549 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37460 10 6452 1 2025-09-10 14:42:18.957 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:53332 10 6452 1 2025-09-10 14:37:27.462 00:06:00.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 14:38:27.461 00:06:00.091 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 14:43:19.330 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60068 10 6452 1 2025-09-10 14:44:19.696 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55902 10 6452 1 2025-09-10 14:45:20.116 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38278 10 6452 1 2025-09-10 14:46:09.008 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 14:46:08.928 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 14:46:08.689 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:46:09.006 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:46:09.090 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 14:46:20.519 00:00:10.905 TCP 1.101.0.1:3000 -> 23.104.0.1:37932 10 6452 1 2025-09-10 14:47:21.465 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41462 10 6452 1 2025-09-10 14:48:21.863 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44024 10 6452 1 2025-09-10 14:44:27.464 00:06:00.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 14:49:22.278 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54810 10 6452 1 2025-09-10 14:45:27.461 00:06:00.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 14:50:22.684 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39570 10 6452 1 2025-09-10 14:51:09.262 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 14:51:09.196 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 14:51:09.194 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 14:51:08.900 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:51:09.179 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:51:23.112 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35322 10 6452 1 2025-09-10 14:52:23.515 00:00:10.754 TCP 1.101.0.1:3000 -> 23.104.0.1:49284 10 6452 1 2025-09-10 14:53:24.312 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43380 10 6452 1 2025-09-10 14:54:24.714 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47370 10 6452 1 2025-09-10 14:55:25.105 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51922 10 6452 1 2025-09-10 14:56:09.243 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-10 14:56:09.360 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-10 14:56:09.361 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-10 14:56:09.147 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:56:09.162 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-10 14:51:27.467 00:06:00.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-10 14:56:25.511 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43500 10 6452 1 2025-09-10 14:52:27.466 00:06:00.091 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-10 14:57:25.917 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59832 10 6452 1 2025-09-10 14:58:26.319 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:35904 12 10367 1 Summary: total flows: 138, total bytes: 425774, total packets: 1040, avg bps: 898, avg pps: 0, avg bpp: 409 Time window: 2025-09-10 13:55:27 - 2025-09-10 14:58:36 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0046s User: 0.0000s Wall: 0.0018s flows/second: 78144.2 Runtime: 0.0018s