Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 05:59:38.000 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56572 10 6452 1 2025-09-12 06:00:38.401 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50520 10 6452 1 2025-09-12 05:56:28.348 00:06:00.036 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 06:01:38.810 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46830 10 6452 1 2025-09-12 06:01:56.232 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 06:01:56.096 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 06:01:55.951 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 06:01:56.169 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:01:56.150 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:02:39.214 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57182 10 6452 1 2025-09-12 05:58:28.379 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 06:03:39.615 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55014 10 6452 1 2025-09-12 06:04:40.023 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48906 10 6452 1 2025-09-12 06:05:40.427 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:38178 10 6452 1 2025-09-12 06:06:40.836 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34996 10 6452 1 2025-09-12 06:06:56.360 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 06:06:56.355 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 06:06:56.246 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:06:56.350 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:06:56.436 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 06:07:41.238 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34804 12 6556 1 2025-09-12 06:03:28.351 00:06:00.033 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 06:08:41.652 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58154 10 6452 1 2025-09-12 06:09:42.070 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:36146 10 6452 1 2025-09-12 06:05:28.380 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 06:10:42.468 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42666 10 6452 1 2025-09-12 06:11:56.366 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 06:11:42.827 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52382 10 6452 1 2025-09-12 06:11:56.283 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 06:11:56.188 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 06:11:56.239 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:11:56.283 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:12:43.200 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50962 10 6452 1 2025-09-12 06:13:43.610 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41888 10 6452 1 2025-09-12 06:14:44.016 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54640 10 6452 1 2025-09-12 06:10:28.374 00:06:00.012 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 06:15:44.380 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37660 10 6452 1 2025-09-12 06:16:56.676 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 06:16:56.287 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 06:16:56.457 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 06:16:56.474 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:16:44.782 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44392 10 6452 1 2025-09-12 06:16:56.592 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:12:28.381 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-09-12 06:17:45.186 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59114 10 6452 1 2025-09-12 06:18:45.548 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43258 10 6452 1 2025-09-12 06:19:45.951 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56046 10 6452 1 2025-09-12 06:20:46.379 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34098 10 6452 1 2025-09-12 06:21:56.642 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 06:21:56.626 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 06:21:46.785 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55208 10 6452 1 2025-09-12 06:21:56.666 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 06:21:56.586 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:21:56.558 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:17:28.379 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 06:22:47.189 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47774 10 6452 1 2025-09-12 06:23:47.599 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59448 10 6452 1 2025-09-12 06:19:28.383 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 06:24:48.010 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:36928 10 6452 1 2025-09-12 06:25:48.400 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49518 10 6452 1 2025-09-12 06:26:56.864 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 06:26:56.554 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 06:26:56.644 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 06:26:56.713 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:26:56.781 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:26:48.802 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:46194 10 6452 1 2025-09-12 06:27:49.188 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47220 10 6452 1 2025-09-12 06:28:49.591 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42598 10 6452 1 2025-09-12 06:24:28.380 00:06:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 06:29:49.990 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36664 10 6452 1 2025-09-12 06:30:50.398 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36316 10 6452 1 2025-09-12 06:26:28.386 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 653 1 2025-09-12 06:31:56.753 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 06:31:56.903 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 06:31:56.897 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 06:31:56.753 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:31:56.670 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:31:50.804 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37112 10 6452 1 2025-09-12 06:32:51.208 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60092 10 6452 1 2025-09-12 06:33:51.614 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44690 10 6452 1 2025-09-12 06:34:52.034 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39372 10 6452 1 2025-09-12 06:35:52.392 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34938 10 6452 1 2025-09-12 06:31:28.384 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 06:36:56.933 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 06:36:56.846 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 06:36:56.794 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:36:56.763 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:36:56.845 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 06:36:52.795 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45642 10 6452 1 2025-09-12 06:37:53.211 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53214 10 6452 1 2025-09-12 06:33:28.387 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 06:38:53.621 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40094 10 6452 1 2025-09-12 06:39:53.983 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60532 10 6452 1 2025-09-12 06:40:54.395 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33590 10 6452 1 2025-09-12 06:41:56.977 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 06:41:56.597 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 06:41:56.859 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:41:56.943 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:41:57.026 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 06:41:54.797 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49936 10 6452 1 2025-09-12 06:42:55.203 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53688 10 6452 1 2025-09-12 06:38:28.385 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 06:43:55.609 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49240 10 6452 1 2025-09-12 06:44:55.971 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47216 10 6452 1 2025-09-12 06:40:28.389 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-09-12 06:45:56.386 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40720 10 6452 1 2025-09-12 06:46:57.053 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 06:46:57.083 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 06:46:56.966 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 06:46:57.095 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:46:56.969 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:46:56.788 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33038 10 6452 1 2025-09-12 06:47:57.189 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54362 10 6452 1 2025-09-12 06:48:57.551 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54718 10 6452 1 2025-09-12 06:49:57.970 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:55274 10 6452 1 2025-09-12 06:45:28.386 00:06:00.010 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 06:50:58.344 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:60884 10 6452 1 2025-09-12 06:51:57.166 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 06:51:57.231 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 06:51:57.180 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:51:57.228 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:51:57.310 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 06:51:58.739 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57840 10 6452 1 2025-09-12 06:47:28.392 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 06:52:59.159 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56032 10 6452 1 2025-09-12 06:53:59.524 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52388 10 6452 1 2025-09-12 06:54:59.931 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56256 10 6452 1 2025-09-12 06:56:00.332 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57972 10 6452 1 2025-09-12 06:56:57.406 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 06:56:57.276 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 06:56:57.264 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 06:56:57.064 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:56:57.324 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 06:57:00.737 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52366 10 6452 1 2025-09-12 06:52:28.386 00:06:00.010 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 06:58:01.109 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57958 10 6452 1 Summary: total flows: 136, total bytes: 407981, total packets: 961, avg bps: 877, avg pps: 0, avg bpp: 424 Time window: 2025-09-12 05:56:28 - 2025-09-12 06:58:28 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0018s User: 0.0028s Wall: 0.0021s flows/second: 65702.1 Runtime: 0.0021s