Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 15:58:41.430 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50718 10 6452 1 2025-09-18 15:59:41.837 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:42664 10 6452 1 2025-09-18 16:00:01.427 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:00:01.311 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:00:01.285 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:00:01.427 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:00:01.511 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:00:42.266 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45336 10 6452 1 2025-09-18 15:56:31.458 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:01:42.674 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43266 10 6452 1 2025-09-18 16:02:43.038 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36882 10 6452 1 2025-09-18 15:58:31.455 00:06:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:03:43.444 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48306 11 6504 1 2025-09-18 16:04:43.855 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:60952 10 6452 1 2025-09-18 16:05:01.603 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:05:01.778 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:05:01.562 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:05:01.666 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:05:01.748 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:05:44.232 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45152 10 6452 1 2025-09-18 16:06:44.595 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41058 10 6452 1 2025-09-18 16:07:44.997 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34544 10 6452 1 2025-09-18 16:03:31.464 00:06:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:08:45.405 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47106 10 6452 1 2025-09-18 16:09:45.817 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43596 10 6452 1 2025-09-18 16:10:01.446 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:10:01.465 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:10:01.467 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:10:01.693 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:10:01.775 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:05:31.465 00:06:00.072 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:10:46.219 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:39942 12 10365 1 2025-09-18 16:11:46.673 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35792 10 6452 1 2025-09-18 16:12:47.105 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:53458 10 6452 1 2025-09-18 16:13:47.480 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38178 10 6452 1 2025-09-18 16:14:47.892 00:00:10.971 TCP 1.101.0.1:3000 -> 23.104.0.1:35974 10 6452 1 2025-09-18 16:15:01.501 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:15:01.404 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:15:01.382 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:15:01.290 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:15:01.419 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:10:31.468 00:06:00.066 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:15:48.905 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56156 10 6452 1 2025-09-18 16:16:49.313 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41422 10 6452 1 2025-09-18 16:12:31.467 00:06:00.071 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:17:49.729 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46288 10 6452 1 2025-09-18 16:18:50.107 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56986 10 6452 1 2025-09-18 16:20:01.594 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:20:01.876 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:20:01.647 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:19:50.472 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:44076 10 6452 1 2025-09-18 16:20:01.804 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:20:01.887 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:20:50.828 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:48612 12 10365 1 2025-09-18 16:21:51.334 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36332 10 6452 1 2025-09-18 16:17:31.470 00:06:00.066 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:22:51.735 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60488 10 6452 1 2025-09-18 16:23:52.137 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60188 10 6452 1 2025-09-18 16:19:31.468 00:06:00.071 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:25:01.862 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:25:02.054 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:25:01.723 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:24:52.551 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34384 10 6452 1 2025-09-18 16:25:01.919 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:25:02.003 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:25:52.960 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56434 10 6452 1 2025-09-18 16:26:53.366 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48690 10 6452 1 2025-09-18 16:27:53.772 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44380 10 6452 1 2025-09-18 16:28:54.182 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57438 10 6452 1 2025-09-18 16:24:31.474 00:06:00.062 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:30:02.004 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:30:02.115 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:30:01.900 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:30:02.004 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:30:02.086 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:29:54.583 00:00:10.703 TCP 1.101.0.1:3000 -> 23.104.0.1:48012 10 6452 1 2025-09-18 16:30:55.320 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47344 10 6452 1 2025-09-18 16:26:31.472 00:06:00.067 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:31:55.675 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36858 10 6452 1 2025-09-18 16:32:56.038 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47746 10 6452 1 2025-09-18 16:33:56.435 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33574 10 6452 1 2025-09-18 16:35:01.898 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:35:01.985 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:35:02.070 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:35:01.900 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:35:01.984 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:34:56.834 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:48304 10 6452 1 2025-09-18 16:35:57.259 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53008 10 6452 1 2025-09-18 16:31:31.479 00:06:00.059 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:36:57.672 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47960 10 6452 1 2025-09-18 16:37:58.105 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59880 10 6452 1 2025-09-18 16:33:31.478 00:06:00.063 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:38:58.512 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:55312 10 6452 1 2025-09-18 16:40:02.359 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:40:02.343 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:40:02.181 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:40:02.276 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:40:02.381 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:39:58.902 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49362 10 6452 1 2025-09-18 16:40:59.308 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55490 10 6452 1 2025-09-18 16:41:59.764 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57130 10 6452 1 2025-09-18 16:43:00.126 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55416 10 6452 1 2025-09-18 16:38:31.481 00:06:00.057 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:44:00.528 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44034 10 6452 1 2025-09-18 16:45:02.340 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:45:02.192 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:45:02.329 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:45:02.347 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:45:02.431 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:45:00.892 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44840 12 6556 1 2025-09-18 16:40:31.480 00:06:00.061 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:46:01.310 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59402 10 6452 1 2025-09-18 16:47:01.725 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45916 10 6452 1 2025-09-18 16:48:02.136 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55566 10 6452 1 2025-09-18 16:49:02.533 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37980 10 6452 1 2025-09-18 16:50:02.634 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:50:02.709 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:50:02.627 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:50:02.633 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:50:02.792 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:50:02.933 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:52924 10 6452 1 2025-09-18 16:45:31.488 00:06:00.053 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:51:03.391 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40272 10 6452 1 2025-09-18 16:52:03.795 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45608 10 6452 1 2025-09-18 16:47:31.486 00:06:00.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-18 16:53:04.206 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54256 10 6452 1 2025-09-18 16:54:04.567 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48684 10 6452 1 2025-09-18 16:55:02.604 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-18 16:55:02.594 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-18 16:55:02.655 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-18 16:55:02.432 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:55:02.521 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-18 16:55:04.970 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34706 10 6452 1 2025-09-18 16:56:05.379 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:60714 12 10367 1 2025-09-18 16:57:05.813 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34154 10 6452 1 2025-09-18 16:52:31.490 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-18 16:58:06.219 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53714 10 6452 1 Summary: total flows: 137, total bytes: 428774, total packets: 1027, avg bps: 922, avg pps: 0, avg bpp: 417 Time window: 2025-09-18 15:56:31 - 2025-09-18 16:58:31 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0045s User: 0.0000s Wall: 0.0023s flows/second: 59645.0 Runtime: 0.0023s