Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-19 18:58:53.526 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37492 10 6452 1 2025-09-19 18:59:53.927 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:41798 10 6452 1 2025-09-19 19:00:34.015 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 18:55:32.041 00:06:00.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 19:00:33.932 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 19:00:34.145 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 19:00:33.849 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:00:33.932 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:00:54.351 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38502 10 6452 1 2025-09-19 18:56:32.045 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 19:01:54.756 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54976 10 6452 1 2025-09-19 19:02:55.170 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35516 10 6452 1 2025-09-19 19:03:55.576 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:35352 10 6452 1 2025-09-19 19:04:55.945 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46002 10 6452 1 2025-09-19 19:05:33.920 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:05:34.074 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 19:05:34.077 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 19:05:33.960 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:05:34.004 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 19:05:56.361 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43060 10 6452 1 2025-09-19 19:06:56.789 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54964 10 6452 1 2025-09-19 19:02:32.043 00:06:00.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 19:07:57.192 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33896 10 6452 1 2025-09-19 19:03:32.046 00:06:00.053 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 19:08:57.595 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:33354 10 6452 1 2025-09-19 19:09:57.962 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58314 10 6452 1 2025-09-19 19:10:34.193 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 19:10:34.192 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 19:10:33.956 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:10:34.272 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:10:34.355 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 19:10:58.323 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:44098 12 10367 1 2025-09-19 19:11:58.801 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54260 10 6452 1 2025-09-19 19:12:59.201 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50350 10 6452 1 2025-09-19 19:13:59.604 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50894 10 6452 1 2025-09-19 19:09:32.047 00:06:00.055 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 19:15:00.008 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44200 10 6452 1 2025-09-19 19:15:34.241 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 19:10:32.050 00:06:00.050 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 19:15:34.061 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 19:15:34.154 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:15:34.436 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:15:34.518 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 19:16:00.412 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50634 10 6452 1 2025-09-19 19:17:00.819 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56654 10 6452 1 2025-09-19 19:18:01.185 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33650 10 6452 1 2025-09-19 19:19:01.588 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57024 10 6452 1 2025-09-19 19:20:01.988 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45276 10 6452 1 2025-09-19 19:20:34.571 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 19:20:34.372 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 19:20:34.381 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:20:34.484 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:20:34.566 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 19:21:02.384 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44834 10 6452 1 2025-09-19 19:16:32.049 00:06:00.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 19:22:02.789 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34176 10 6452 1 2025-09-19 19:17:32.052 00:06:00.049 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 19:23:03.197 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39528 10 6452 1 2025-09-19 19:24:03.560 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49326 10 6452 1 2025-09-19 19:25:03.965 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39158 10 6452 1 2025-09-19 19:25:34.481 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 19:25:34.257 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 19:25:34.205 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:25:34.424 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:25:34.506 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 19:26:04.368 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:59066 12 10367 1 2025-09-19 19:27:04.801 00:00:10.584 TCP 1.101.0.1:3000 -> 23.104.0.1:44130 10 6452 1 2025-09-19 19:28:05.422 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39040 10 6452 1 2025-09-19 19:23:32.050 00:06:00.055 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 19:29:05.828 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34488 10 6452 1 2025-09-19 19:24:32.054 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 19:30:06.189 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51374 10 6452 1 2025-09-19 19:30:34.409 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:30:34.424 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 19:30:34.663 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 19:30:34.558 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:30:34.490 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 19:31:06.595 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55190 10 6452 1 2025-09-19 19:32:06.997 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48454 10 6452 1 2025-09-19 19:33:07.409 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55818 10 6452 1 2025-09-19 19:34:07.840 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:35746 10 6452 1 2025-09-19 19:35:08.256 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49156 10 6452 1 2025-09-19 19:35:34.585 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 19:35:34.487 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:35:34.706 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:35:34.720 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 19:35:34.788 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 19:30:32.054 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 19:36:08.661 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:38944 10 6452 1 2025-09-19 19:31:32.057 00:06:00.047 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 19:37:09.021 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42574 10 6452 1 2025-09-19 19:38:09.430 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53672 10 6452 1 2025-09-19 19:39:09.842 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:41464 10 6452 1 2025-09-19 19:40:10.219 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41758 10 6452 1 2025-09-19 19:40:34.870 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 19:40:34.823 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 19:40:34.746 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:40:34.643 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:40:34.726 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 19:41:10.619 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49792 10 6452 1 2025-09-19 19:42:10.979 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44544 10 6452 1 2025-09-19 19:37:32.058 00:06:00.051 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 19:43:11.377 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45976 10 6452 1 2025-09-19 19:38:32.061 00:06:00.046 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 19:44:11.748 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34258 10 6452 1 2025-09-19 19:45:12.142 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42748 10 6452 1 2025-09-19 19:45:34.825 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 19:45:34.955 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 19:45:34.713 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:45:34.892 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:45:34.975 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 19:46:12.547 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43630 10 6452 1 2025-09-19 19:47:12.949 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45568 10 6452 1 2025-09-19 19:48:13.354 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53212 10 6452 1 2025-09-19 19:49:13.758 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:42790 10 6452 1 2025-09-19 19:44:32.058 00:06:00.052 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 19:50:14.135 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45154 10 6452 1 2025-09-19 19:45:32.061 00:06:00.047 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 19:50:35.147 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 19:50:35.193 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 19:50:35.011 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:50:35.276 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:50:35.359 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 19:51:14.536 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54186 10 6452 1 2025-09-19 19:52:14.936 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:57350 10 6452 1 2025-09-19 19:53:15.320 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:55502 10 6452 1 2025-09-19 19:54:15.681 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47912 10 6452 1 2025-09-19 19:55:16.109 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:38270 10 6452 1 2025-09-19 19:55:34.730 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-19 19:55:34.944 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-19 19:55:35.250 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-19 19:55:35.063 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:55:35.168 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-19 19:56:16.478 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44910 10 6452 1 2025-09-19 19:51:32.061 00:06:00.050 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-19 19:57:16.842 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:59312 10 6452 1 2025-09-19 19:52:32.064 00:06:00.045 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-19 19:58:17.261 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40202 10 6452 1 Summary: total flows: 138, total bytes: 425568, total packets: 1036, avg bps: 900, avg pps: 0, avg bpp: 410 Time window: 2025-09-19 18:55:32 - 2025-09-19 19:58:32 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0031s User: 0.0020s Wall: 0.0018s flows/second: 75484.3 Runtime: 0.0018s