Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 23:59:07.896 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35988 12 6556 1 2025-09-11 23:54:28.200 00:06:00.055 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-12 00:00:08.311 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34634 10 6452 1 2025-09-12 00:01:08.715 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39110 10 6452 1 2025-09-12 00:01:49.001 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 00:01:49.060 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 00:01:49.177 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 00:01:48.936 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:01:48.918 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:02:09.123 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44224 10 6452 1 2025-09-12 00:03:09.524 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60116 10 6452 1 2025-09-12 00:04:09.930 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:40632 10 6452 1 2025-09-11 23:59:28.199 00:06:00.060 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 00:05:10.357 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59210 10 6452 1 2025-09-12 00:06:10.727 00:00:10.592 TCP 1.101.0.1:3000 -> 23.104.0.1:42960 10 6452 1 2025-09-12 00:01:28.202 00:06:00.055 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 757 1 2025-09-12 00:06:49.009 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 00:06:49.089 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 00:06:48.947 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:06:49.011 00:00:00.041 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:06:49.093 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 00:07:11.358 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39384 10 6452 1 2025-09-12 00:08:11.770 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45574 12 6556 1 2025-09-12 00:09:12.180 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:54892 12 10367 1 2025-09-12 00:10:12.674 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33438 10 6452 1 2025-09-12 00:11:13.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60284 10 6452 1 2025-09-12 00:06:28.217 00:06:00.044 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 00:11:49.447 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 00:11:49.309 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 00:11:49.249 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 00:11:49.087 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:11:49.364 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:12:13.516 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57604 10 6452 1 2025-09-12 00:13:13.918 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54034 10 6452 1 2025-09-12 00:08:28.257 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 00:14:14.324 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56928 10 6452 1 2025-09-12 00:15:14.728 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50176 10 6452 1 2025-09-12 00:16:15.148 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35256 10 6452 1 2025-09-12 00:16:49.251 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 00:16:49.167 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 00:16:49.256 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 00:16:49.266 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:16:49.168 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:17:15.551 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52034 10 6452 1 2025-09-12 00:13:28.218 00:06:00.044 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 00:18:15.954 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46586 10 6452 1 2025-09-12 00:19:16.369 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44990 10 6452 1 2025-09-12 00:15:28.258 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 00:20:16.781 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41196 10 6452 1 2025-09-12 00:21:17.189 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41202 10 6452 1 2025-09-12 00:21:49.465 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 00:21:49.287 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 00:21:49.387 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 00:21:49.397 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:21:49.383 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:22:17.548 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48522 10 6452 1 2025-09-12 00:23:17.945 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:33358 12 10367 1 2025-09-12 00:24:18.437 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52662 10 6452 1 2025-09-12 00:25:18.846 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:40724 10 6452 1 2025-09-12 00:20:28.218 00:06:00.044 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 00:26:19.276 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37524 10 6452 1 2025-09-12 00:26:49.438 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 00:26:49.383 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 00:26:49.468 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:26:49.438 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:26:49.521 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 00:22:28.260 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 00:27:19.679 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54048 10 6452 1 2025-09-12 00:28:20.111 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52542 10 6452 1 2025-09-12 00:29:20.520 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58706 10 6452 1 2025-09-12 00:30:20.920 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38390 10 6452 1 2025-09-12 00:31:21.325 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40138 10 6452 1 2025-09-12 00:31:49.402 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 00:31:49.319 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 00:31:49.650 00:00:00.019 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 00:31:49.707 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:31:49.321 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:27:28.220 00:06:00.043 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 00:32:21.695 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57744 10 6452 1 2025-09-12 00:33:22.067 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52208 12 6556 1 2025-09-12 00:29:28.260 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 00:34:22.479 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42284 10 6452 1 2025-09-12 00:35:22.841 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:50128 10 6452 1 2025-09-12 00:36:23.285 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47198 10 6452 1 2025-09-12 00:36:49.480 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 00:36:49.500 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 00:36:49.720 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 00:36:49.231 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:36:49.398 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:37:23.698 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37468 10 6452 1 2025-09-12 00:38:24.076 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44800 10 6452 1 2025-09-12 00:34:28.221 00:06:00.043 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 00:39:24.434 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45806 10 6452 1 2025-09-12 00:40:24.847 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:37840 10 6452 1 2025-09-12 00:36:28.264 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 00:41:25.233 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56594 10 6452 1 2025-09-12 00:41:49.650 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 00:41:49.449 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 00:41:49.834 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 00:41:49.630 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:41:49.567 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:42:25.639 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41284 10 6452 1 2025-09-12 00:43:26.040 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35806 10 6452 1 2025-09-12 00:44:26.441 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43622 10 6452 1 2025-09-12 00:45:26.807 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60292 10 6452 1 2025-09-12 00:41:28.224 00:06:00.043 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 00:46:27.212 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47934 10 6452 1 2025-09-12 00:46:49.865 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 00:46:49.877 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:46:49.655 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:46:49.736 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 00:46:50.208 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 00:47:27.572 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46322 10 6452 1 2025-09-12 00:43:28.265 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 00:48:27.980 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:49344 12 10365 1 2025-09-12 00:49:28.462 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59946 10 6452 1 2025-09-12 00:50:28.866 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55104 10 6452 1 2025-09-12 00:51:29.273 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:40562 10 6452 1 2025-09-12 00:51:49.928 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 00:51:49.780 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:51:50.068 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 00:51:49.981 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 00:51:49.986 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:52:29.628 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47100 10 6452 1 2025-09-12 00:48:28.226 00:06:00.044 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 00:53:30.031 00:00:10.450 TCP 1.101.0.1:3000 -> 23.104.0.1:41958 10 6452 1 2025-09-12 00:54:30.528 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55094 10 6452 1 2025-09-12 00:50:28.267 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 00:55:30.935 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:52874 13 6608 1 2025-09-12 00:56:31.403 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55382 10 6452 1 2025-09-12 00:56:49.728 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:56:49.993 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 00:56:50.082 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 00:56:50.120 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 00:56:50.204 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 00:57:31.815 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33992 10 6452 1 2025-09-12 00:58:32.218 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44318 10 6452 1 Summary: total flows: 137, total bytes: 426436, total packets: 982, avg bps: 885, avg pps: 0, avg bpp: 434 Time window: 2025-09-11 23:54:28 - 2025-09-12 00:58:42 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0016s User: 0.0032s Wall: 0.0026s flows/second: 52285.7 Runtime: 0.0026s