Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 15:58:40.589 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37670 10 6452 1 2025-09-11 15:59:41.004 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:53718 10 6452 1 2025-09-11 16:00:41.369 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:33352 10 6452 1 2025-09-11 15:56:28.050 00:06:00.044 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 16:01:39.389 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 16:01:39.202 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 16:01:39.320 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 16:01:39.365 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:01:39.307 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:01:41.767 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:47376 10 6452 1 2025-09-11 16:02:42.183 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37444 10 6452 1 2025-09-11 15:58:28.091 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-11 16:03:42.547 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51048 10 6452 1 2025-09-11 16:04:42.914 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36612 10 6452 1 2025-09-11 16:05:43.321 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43104 10 6452 1 2025-09-11 16:06:39.634 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 16:06:39.561 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 16:06:39.384 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 16:06:39.574 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:06:39.552 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:06:43.679 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57578 10 6452 1 2025-09-11 16:07:44.108 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35204 10 6452 1 2025-09-11 16:03:28.051 00:06:00.045 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 16:08:44.511 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57000 10 6452 1 2025-09-11 16:09:44.910 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:33004 10 6452 1 2025-09-11 16:05:28.093 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-11 16:10:45.292 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45836 10 6452 1 2025-09-11 16:11:39.515 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 16:11:39.880 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 16:11:39.523 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:11:39.798 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:11:39.880 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 16:11:45.707 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45966 10 6452 1 2025-09-11 16:12:46.119 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49370 10 6452 1 2025-09-11 16:13:46.529 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36156 10 6452 1 2025-09-11 16:14:46.940 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:35482 10 6452 1 2025-09-11 16:10:28.051 00:06:00.046 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 16:15:47.322 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41250 10 6452 1 2025-09-11 16:16:39.718 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 16:16:39.736 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 16:16:39.499 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 16:16:39.474 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:16:39.637 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:16:47.729 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45916 10 6452 1 2025-09-11 16:12:28.094 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-11 16:17:48.142 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:58408 10 6452 1 2025-09-11 16:18:48.522 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47664 10 6452 1 2025-09-11 16:19:48.932 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:54856 10 6452 1 2025-09-11 16:20:49.370 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38158 10 6452 1 2025-09-11 16:21:39.776 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 16:21:39.610 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 16:21:39.554 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:21:39.817 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:21:39.900 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 16:21:49.777 00:00:10.564 TCP 1.101.0.1:3000 -> 23.104.0.1:48708 10 6452 1 2025-09-11 16:17:28.054 00:06:00.047 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 16:22:50.377 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56018 10 6452 1 2025-09-11 16:23:50.789 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:59940 12 10367 1 2025-09-11 16:19:28.096 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-11 16:24:51.265 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40896 10 6452 1 2025-09-11 16:25:51.665 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52084 10 6452 1 2025-09-11 16:26:39.768 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 16:26:39.711 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 16:26:39.975 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 16:26:39.521 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:26:39.685 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:26:52.102 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48352 10 6452 1 2025-09-11 16:27:52.505 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:33208 10 6452 1 2025-09-11 16:28:52.883 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52702 10 6452 1 2025-09-11 16:24:28.060 00:06:00.053 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 16:29:53.250 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53002 10 6452 1 2025-09-11 16:30:53.651 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38672 10 6452 1 2025-09-11 16:26:28.100 00:06:00.011 TCP 179.21.23.23:179 -> 179.21.23.21:38570 11 705 1 2025-09-11 16:31:39.677 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 16:31:39.972 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 16:31:39.925 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:31:39.973 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:31:40.055 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 16:31:54.072 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53108 10 6452 1 2025-09-11 16:32:54.479 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34082 10 6452 1 2025-09-11 16:33:54.933 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:35900 10 6452 1 2025-09-11 16:34:55.357 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39050 10 6452 1 2025-09-11 16:35:55.720 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:58054 10 6452 1 2025-09-11 16:31:28.062 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 16:36:39.880 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 16:36:39.742 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:36:39.796 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:36:40.072 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 16:36:40.070 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 16:36:56.126 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43636 10 6452 1 2025-09-11 16:37:56.528 00:00:12.208 TCP 1.101.0.1:3000 -> 23.104.0.1:32796 10 6452 1 2025-09-11 16:33:28.065 00:06:00.046 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 16:38:58.777 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58520 10 6452 1 2025-09-11 16:39:59.193 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36218 10 6452 1 2025-09-11 16:40:59.599 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60342 10 6452 1 2025-09-11 16:41:40.731 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 16:41:40.150 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 16:41:40.105 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:41:40.462 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:41:40.546 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 16:42:00.006 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54146 10 6452 1 2025-09-11 16:43:00.407 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41602 10 6452 1 2025-09-11 16:38:28.065 00:06:00.055 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 16:44:00.812 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43586 10 6452 1 2025-09-11 16:45:01.216 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60664 10 6452 1 2025-09-11 16:40:28.068 00:06:00.050 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 16:46:01.613 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42116 10 6452 1 2025-09-11 16:46:40.343 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 16:46:40.096 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 16:46:40.096 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 16:46:40.264 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:46:40.259 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:47:01.978 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50538 10 6452 1 2025-09-11 16:48:02.383 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49006 10 6452 1 2025-09-11 16:49:02.787 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57012 10 6452 1 2025-09-11 16:50:03.189 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48254 10 6452 1 2025-09-11 16:45:28.066 00:06:00.057 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 16:51:03.590 00:00:10.672 TCP 1.101.0.1:3000 -> 23.104.0.1:48130 10 6452 1 2025-09-11 16:51:40.357 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 16:51:40.045 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:51:40.191 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:51:40.350 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 16:51:40.274 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 16:52:04.301 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60620 10 6452 1 2025-09-11 16:47:28.068 00:06:00.052 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-11 16:53:04.700 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44930 10 6452 1 2025-09-11 16:54:05.107 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38496 10 6452 1 2025-09-11 16:55:05.515 00:00:10.478 TCP 1.101.0.1:3000 -> 23.104.0.1:37496 10 6452 1 2025-09-11 16:56:06.032 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56298 10 6452 1 2025-09-11 16:56:40.480 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-11 16:56:40.144 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-11 16:56:40.330 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-11 16:56:40.410 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:56:40.397 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-11 16:57:06.438 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48418 10 6452 1 2025-09-11 16:52:28.067 00:06:00.057 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-11 16:58:06.837 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:60836 10 6452 1 Summary: total flows: 137, total bytes: 419180, total packets: 989, avg bps: 901, avg pps: 0, avg bpp: 423 Time window: 2025-09-11 15:56:28 - 2025-09-11 16:58:28 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0029s User: 0.0019s Wall: 0.0013s flows/second: 105145.4 Runtime: 0.0013s