Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 01:58:56.994 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48432 10 6452 1 2025-09-12 01:59:57.403 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35858 10 6452 1 2025-09-12 02:00:57.806 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:39686 10 6452 1 2025-09-12 02:01:51.464 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 02:01:51.314 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 02:01:51.216 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:01:51.304 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:01:51.385 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 02:01:58.175 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35978 10 6452 1 2025-09-12 02:02:58.538 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46954 10 6452 1 2025-09-12 01:58:28.259 00:06:00.029 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 02:03:58.948 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42874 10 6452 1 2025-09-12 02:04:59.356 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42544 10 6452 1 2025-09-12 02:00:28.285 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 02:05:59.763 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:49146 10 6452 1 2025-09-12 02:06:51.265 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 02:06:51.464 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 02:06:51.218 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:06:51.264 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:06:51.345 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 02:07:00.189 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45300 10 6452 1 2025-09-12 02:08:00.596 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48730 10 6452 1 2025-09-12 02:09:01.013 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:51590 10 6452 1 2025-09-12 02:10:01.369 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41030 10 6452 1 2025-09-12 02:05:28.260 00:06:00.030 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 02:11:01.780 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42244 10 6452 1 2025-09-12 02:11:51.330 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 02:11:51.239 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 02:11:51.357 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 02:11:51.257 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:11:51.246 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:12:02.189 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58024 10 6452 1 2025-09-12 02:07:28.286 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 02:13:02.596 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46784 10 6452 1 2025-09-12 02:14:03.003 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60290 10 6452 1 2025-09-12 02:15:03.366 00:00:11.051 TCP 1.101.0.1:3000 -> 23.104.0.1:45432 10 6452 1 2025-09-12 02:16:04.457 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38234 10 6452 1 2025-09-12 02:16:51.686 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 02:16:51.540 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 02:16:51.537 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 02:16:51.567 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:16:51.604 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:17:04.820 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:47416 10 6452 1 2025-09-12 02:12:28.263 00:06:00.032 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 02:18:05.212 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53296 10 6452 1 2025-09-12 02:19:05.617 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48626 10 6452 1 2025-09-12 02:14:28.290 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 02:20:06.023 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60122 10 6452 1 2025-09-12 02:21:06.428 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34668 10 6452 1 2025-09-12 02:21:51.748 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 02:21:51.941 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 02:21:51.772 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 02:21:51.449 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:21:51.667 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:22:06.833 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43892 10 6452 1 2025-09-12 02:23:07.239 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49720 10 6452 1 2025-09-12 02:24:07.640 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35696 10 6452 1 2025-09-12 02:19:28.269 00:06:00.026 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 02:25:08.005 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40188 10 6452 1 2025-09-12 02:26:08.399 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42586 10 6452 1 2025-09-12 02:21:28.292 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 02:26:52.248 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 02:26:51.936 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 02:26:51.834 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:26:52.173 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:26:52.256 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 02:27:08.801 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34796 10 6452 1 2025-09-12 02:28:09.212 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51310 10 6452 1 2025-09-12 02:29:09.610 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50728 10 6452 1 2025-09-12 02:30:10.016 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58626 10 6452 1 2025-09-12 02:31:10.416 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50106 10 6452 1 2025-09-12 02:26:28.271 00:06:00.028 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 02:31:51.869 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 02:31:51.776 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 02:31:51.783 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:31:52.105 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:31:52.188 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 02:32:10.826 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58530 10 6452 1 2025-09-12 02:33:11.232 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36276 10 6452 1 2025-09-12 02:28:28.293 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 02:34:11.646 00:00:10.667 TCP 1.101.0.1:3000 -> 23.104.0.1:33898 10 6452 1 2025-09-12 02:35:12.354 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50684 10 6452 1 2025-09-12 02:36:12.750 00:00:10.584 TCP 1.101.0.1:3000 -> 23.104.0.1:55838 10 6452 1 2025-09-12 02:36:51.898 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 02:36:51.862 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:36:52.089 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:36:51.908 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 02:36:52.173 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 02:37:13.375 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39466 10 6452 1 2025-09-12 02:38:13.776 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39378 10 6452 1 2025-09-12 02:33:28.273 00:06:00.028 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 02:39:14.190 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43148 10 6452 1 2025-09-12 02:40:14.593 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49900 10 6452 1 2025-09-12 02:35:28.298 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 02:41:14.994 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50970 12 6556 1 2025-09-12 02:41:52.380 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 02:41:52.134 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 02:41:52.450 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 02:41:52.306 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:41:52.297 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:42:15.401 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58092 10 6452 1 2025-09-12 02:43:15.805 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36352 10 6452 1 2025-09-12 02:44:16.209 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:48838 12 10367 1 2025-09-12 02:40:28.278 00:06:00.026 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 02:45:16.692 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36342 10 6452 1 2025-09-12 02:46:17.113 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50222 10 6452 1 2025-09-12 02:46:52.303 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 02:46:52.294 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 02:46:52.036 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:46:52.225 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:46:52.307 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 02:42:28.298 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 02:47:17.519 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60394 10 6452 1 2025-09-12 02:48:17.924 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58252 10 6452 1 2025-09-12 02:49:18.330 00:00:10.661 TCP 1.101.0.1:3000 -> 23.104.0.1:56058 10 6452 1 2025-09-12 02:50:19.034 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57950 10 6452 1 2025-09-12 02:51:19.445 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56798 10 6452 1 2025-09-12 02:51:52.551 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 02:51:52.213 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 02:51:52.249 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:51:52.549 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:51:52.633 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 02:47:28.281 00:06:00.024 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 02:52:19.807 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50758 10 6452 1 2025-09-12 02:53:20.209 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55232 10 6452 1 2025-09-12 02:49:28.302 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 02:54:20.609 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55806 10 6452 1 2025-09-12 02:55:21.021 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37374 10 6452 1 2025-09-12 02:56:21.425 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49758 10 6452 1 2025-09-12 02:56:52.560 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 02:56:52.609 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 02:56:52.474 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:56:52.557 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 02:56:52.639 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 02:57:21.829 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56434 10 6452 1 2025-09-12 02:58:22.235 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54578 10 6452 1 Summary: total flows: 136, total bytes: 417123, total packets: 952, avg bps: 925, avg pps: 0, avg bpp: 438 Time window: 2025-09-12 01:58:28 - 2025-09-12 02:58:32 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0028s User: 0.0021s Wall: 0.0024s flows/second: 57647.8 Runtime: 0.0024s