Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 10:58:53.595 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47134 10 6452 1 2025-09-12 10:59:53.964 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35448 10 6452 1 2025-09-12 11:00:54.372 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45444 10 6452 1 2025-09-12 11:02:02.119 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 11:02:02.170 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 11:02:02.333 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 11:02:02.258 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:02:02.039 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:01:54.768 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50284 10 6452 1 2025-09-12 10:57:28.473 00:06:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 11:02:55.187 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34320 10 6452 1 2025-09-12 11:03:55.590 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:32774 10 6452 1 2025-09-12 10:59:28.476 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 11:04:55.961 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45808 10 6452 1 2025-09-12 11:05:56.366 00:00:20.504 TCP 1.101.0.1:3000 -> 23.104.0.1:35012 10 6452 1 2025-09-12 11:07:02.257 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 11:07:02.184 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 11:07:02.170 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 11:07:01.975 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:07:02.176 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:07:06.916 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49848 10 6452 1 2025-09-12 11:08:07.327 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36742 10 6452 1 2025-09-12 11:09:07.693 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59648 10 6452 1 2025-09-12 11:04:28.473 00:06:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 11:10:08.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40878 10 6452 1 2025-09-12 11:11:08.518 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55942 10 6452 1 2025-09-12 11:06:28.480 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-09-12 11:12:02.620 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 11:12:02.537 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 11:12:02.161 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 11:12:02.435 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:12:02.537 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:12:08.881 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60184 12 6556 1 2025-09-12 11:13:09.291 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44806 10 6452 1 2025-09-12 11:14:09.695 00:00:10.582 TCP 1.101.0.1:3000 -> 23.104.0.1:35358 12 10367 1 2025-09-12 11:15:10.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38604 10 6452 1 2025-09-12 11:16:10.724 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53806 10 6452 1 2025-09-12 11:11:28.476 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 11:17:02.539 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 11:17:02.457 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 11:17:02.297 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:17:02.369 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:17:02.452 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 11:17:11.138 00:00:10.501 TCP 1.101.0.1:3000 -> 23.104.0.1:36966 10 6452 1 2025-09-12 11:18:11.677 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57778 10 6452 1 2025-09-12 11:13:28.480 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 11:19:12.109 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35218 10 6452 1 2025-09-12 11:20:12.511 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35790 10 6452 1 2025-09-12 11:21:12.876 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49116 10 6452 1 2025-09-12 11:22:02.978 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:22:02.941 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 11:22:02.724 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 11:22:02.573 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:22:03.060 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 11:22:13.284 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39852 10 6452 1 2025-09-12 11:23:13.694 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33494 10 6452 1 2025-09-12 11:18:28.478 00:06:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 11:24:14.112 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44946 10 6452 1 2025-09-12 11:25:14.521 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38632 10 6452 1 2025-09-12 11:20:28.481 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-09-12 11:26:14.931 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:38750 10 6452 1 2025-09-12 11:27:02.720 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 11:27:02.717 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 11:27:02.735 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:27:02.653 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:27:02.736 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 11:27:15.365 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47272 10 6452 1 2025-09-12 11:28:15.766 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:43832 10 6452 1 2025-09-12 11:29:16.141 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37658 10 6452 1 2025-09-12 11:25:28.482 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 11:30:16.552 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60196 10 6452 1 2025-09-12 11:31:16.958 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38476 10 6452 1 2025-09-12 11:32:02.833 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 11:32:02.773 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 11:32:02.704 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:32:02.682 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:32:02.765 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 11:27:28.483 00:06:00.007 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-12 11:32:17.324 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:38732 10 6452 1 2025-09-12 11:33:17.734 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60390 10 6452 1 2025-09-12 11:34:18.171 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40566 10 6452 1 2025-09-12 11:35:18.576 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58370 10 6452 1 2025-09-12 11:36:18.982 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56768 10 6452 1 2025-09-12 11:37:02.854 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 11:37:02.844 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 11:37:02.619 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:37:02.853 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:37:02.935 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 11:32:28.487 00:06:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 9 601 1 2025-09-12 11:37:19.391 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:51558 10 6452 1 2025-09-12 11:38:19.804 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59388 10 6452 1 2025-09-12 11:34:28.485 00:06:00.008 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-09-12 11:39:20.216 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48866 10 6452 1 2025-09-12 11:40:20.623 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:49618 11 6504 1 2025-09-12 11:41:21.117 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39400 10 6452 1 2025-09-12 11:42:03.442 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 11:42:03.401 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 11:42:03.360 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 11:42:03.322 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:42:03.358 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:42:21.521 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55444 10 6452 1 2025-09-12 11:43:21.924 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55550 10 6452 1 2025-09-12 11:39:28.489 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 11:44:22.336 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56868 10 6452 1 2025-09-12 11:45:22.737 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35574 10 6452 1 2025-09-12 11:41:28.492 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-09-12 11:46:23.143 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38836 10 6452 1 2025-09-12 11:47:03.187 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 11:47:03.204 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 11:47:03.169 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 11:47:02.958 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:47:03.104 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:47:23.554 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37360 10 6452 1 2025-09-12 11:48:23.957 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56432 10 6452 1 2025-09-12 11:49:24.365 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44904 10 6452 1 2025-09-12 11:50:24.766 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49186 10 6452 1 2025-09-12 11:46:28.490 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 11:51:25.185 00:00:10.930 TCP 1.101.0.1:3000 -> 23.104.0.1:59880 10 6452 1 2025-09-12 11:52:03.136 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 11:52:03.197 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 11:52:03.079 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:52:03.198 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:52:03.283 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 11:52:26.153 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35748 10 6452 1 2025-09-12 11:48:28.494 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-09-12 11:53:26.515 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34222 10 6452 1 2025-09-12 11:54:26.919 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48788 10 6452 1 2025-09-12 11:55:27.324 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:53890 10 6452 1 2025-09-12 11:56:27.719 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40790 10 6452 1 2025-09-12 11:57:03.303 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 11:57:03.123 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 11:57:03.399 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 11:57:03.166 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:57:03.219 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 11:57:28.136 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51510 10 6452 1 2025-09-12 11:53:28.491 00:06:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 11:58:28.544 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:56644 12 10367 1 Summary: total flows: 137, total bytes: 422991, total packets: 989, avg bps: 909, avg pps: 0, avg bpp: 427 Time window: 2025-09-12 10:57:28 - 2025-09-12 11:59:28 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0041s User: 0.0000s Wall: 0.0014s flows/second: 96949.5 Runtime: 0.0014s