Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 17:59:07.015 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:36062 12 10365 1 2025-09-12 18:00:07.508 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60630 10 6452 1 2025-09-12 18:01:07.874 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43478 10 6452 1 2025-09-12 18:02:11.141 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 18:02:10.965 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 18:02:11.067 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 18:02:10.656 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:02:11.060 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:02:08.291 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46594 10 6452 1 2025-09-12 17:57:28.643 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-12 18:03:08.699 00:00:10.877 TCP 1.101.0.1:3000 -> 23.104.0.1:59894 10 6452 1 2025-09-12 18:04:09.614 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55016 10 6452 1 2025-09-12 17:59:28.637 00:06:00.010 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-12 18:05:09.978 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46906 10 6452 1 2025-09-12 18:06:10.384 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58166 10 6452 1 2025-09-12 18:07:10.900 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 18:07:10.950 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 18:07:10.678 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:07:10.897 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:07:10.979 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 18:07:10.792 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42210 10 6452 1 2025-09-12 18:08:11.205 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54108 10 6452 1 2025-09-12 18:09:11.617 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38134 10 6452 1 2025-09-12 18:04:28.644 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-12 18:10:11.981 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:57546 10 6452 1 2025-09-12 18:11:12.404 00:00:13.635 TCP 1.101.0.1:3000 -> 23.104.0.1:54886 11 6504 1 2025-09-12 18:06:28.641 00:06:00.010 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-12 18:12:10.753 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 18:12:10.755 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 18:12:10.702 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:12:10.881 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:12:10.964 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 18:12:16.117 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40814 10 6452 1 2025-09-12 18:13:16.525 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60876 10 6452 1 2025-09-12 18:14:16.946 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:53692 10 6452 1 2025-09-12 18:15:17.317 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52498 10 6452 1 2025-09-12 18:11:28.647 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-12 18:16:17.726 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43866 10 6452 1 2025-09-12 18:17:11.086 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 18:17:10.943 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 18:17:10.959 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:17:10.868 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:17:10.951 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 18:17:18.143 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34690 10 6452 1 2025-09-12 18:13:28.641 00:06:00.013 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-12 18:18:18.555 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53392 10 6452 1 2025-09-12 18:19:18.959 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58202 10 6452 1 2025-09-12 18:20:19.366 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34300 10 6452 1 2025-09-12 18:21:19.776 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40052 10 6452 1 2025-09-12 18:22:10.872 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 18:22:10.970 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 18:22:10.792 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 18:22:10.985 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:22:10.789 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:22:20.186 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42346 10 6452 1 2025-09-12 18:18:28.650 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-12 18:23:20.583 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37620 10 6452 1 2025-09-12 18:24:20.998 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42720 10 6452 1 2025-09-12 18:20:28.641 00:06:00.012 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-12 18:25:21.405 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53044 10 6452 1 2025-09-12 18:26:21.806 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48554 10 6452 1 2025-09-12 18:27:11.144 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 18:27:11.133 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 18:27:11.058 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 18:27:11.105 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:27:11.061 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:27:22.212 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35766 10 6452 1 2025-09-12 18:28:22.577 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47032 10 6452 1 2025-09-12 18:29:22.980 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42370 10 6452 1 2025-09-12 18:25:28.651 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-12 18:30:23.345 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45428 10 6452 1 2025-09-12 18:31:23.704 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44460 10 6452 1 2025-09-12 18:32:11.752 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 18:32:11.669 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:32:11.584 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 18:32:11.598 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 18:32:11.624 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:27:28.644 00:06:00.011 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-12 18:32:24.114 00:00:11.754 TCP 1.101.0.1:3000 -> 23.104.0.1:57846 10 6452 1 2025-09-12 18:33:25.914 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48714 10 6452 1 2025-09-12 18:34:26.318 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33120 10 6452 1 2025-09-12 18:35:26.721 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33184 10 6452 1 2025-09-12 18:36:27.134 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39836 10 6452 1 2025-09-12 18:37:11.617 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 18:37:11.610 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 18:37:11.534 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 18:37:11.560 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:37:11.536 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:32:28.653 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-12 18:37:27.540 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47524 10 6452 1 2025-09-12 18:38:27.943 00:00:10.457 TCP 1.101.0.1:3000 -> 23.104.0.1:36318 12 10365 1 2025-09-12 18:34:28.648 00:06:00.010 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-12 18:39:28.437 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48262 10 6452 1 2025-09-12 18:40:28.842 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:56670 10 6452 1 2025-09-12 18:41:29.279 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:51536 10 6452 1 2025-09-12 18:42:11.496 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 18:42:11.489 00:00:00.013 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 18:42:11.534 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 18:42:11.270 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:42:11.410 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:42:29.645 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42690 10 6452 1 2025-09-12 18:43:30.069 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:41572 10 6452 1 2025-09-12 18:39:28.654 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-12 18:44:30.434 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58120 10 6452 1 2025-09-12 18:45:30.836 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:52072 10 6452 1 2025-09-12 18:41:28.648 00:06:00.011 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-12 18:46:31.229 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38072 10 6452 1 2025-09-12 18:47:11.517 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 18:47:11.330 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 18:47:11.326 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:47:11.575 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:47:11.657 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 18:47:31.590 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45274 10 6452 1 2025-09-12 18:48:31.995 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35836 10 6452 1 2025-09-12 18:49:32.401 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45148 10 6452 1 2025-09-12 18:50:32.804 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57144 10 6452 1 2025-09-12 18:46:28.656 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-12 18:51:33.213 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41306 10 6452 1 2025-09-12 18:52:11.823 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 18:52:11.871 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 18:52:11.665 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:52:11.977 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:52:12.061 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 18:52:33.613 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54442 10 6452 1 2025-09-12 18:48:28.652 00:06:00.010 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-12 18:53:34.027 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56548 10 6452 1 2025-09-12 18:54:34.437 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41974 10 6452 1 2025-09-12 18:55:34.851 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:41402 10 6452 1 2025-09-12 18:56:35.230 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58450 10 6452 1 2025-09-12 18:57:11.665 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 18:57:11.789 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 18:57:11.538 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:57:11.744 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 18:57:11.827 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 18:57:35.634 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52650 10 6452 1 2025-09-12 18:53:28.659 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-12 18:58:36.073 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35210 10 6452 1 Summary: total flows: 137, total bytes: 421479, total packets: 960, avg bps: 906, avg pps: 0, avg bpp: 439 Time window: 2025-09-12 17:57:28 - 2025-09-12 18:59:28 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0036s User: 0.0012s Wall: 0.0021s flows/second: 63867.9 Runtime: 0.0022s