Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 07:58:57.275 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52770 10 6452 1 2025-09-20 07:59:57.677 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59574 10 6452 1 2025-09-20 08:00:49.855 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 08:00:49.855 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 08:00:49.800 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:00:50.060 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 08:00:49.979 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:00:58.114 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58324 10 6452 1 2025-09-20 08:01:58.515 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39740 10 6452 1 2025-09-20 08:02:58.917 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45044 10 6452 1 2025-09-20 08:03:59.320 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59710 10 6452 1 2025-09-20 07:59:32.321 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 08:04:59.728 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32936 10 6452 1 2025-09-20 08:00:32.323 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 08:05:49.581 00:00:00.045 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 08:05:49.577 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 08:05:49.391 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:05:49.760 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:05:49.842 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 08:06:00.136 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48884 10 6452 1 2025-09-20 08:07:00.536 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50526 10 6452 1 2025-09-20 08:08:00.900 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57294 10 6452 1 2025-09-20 08:09:01.267 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57462 10 6452 1 2025-09-20 08:10:01.637 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54048 10 6452 1 2025-09-20 08:10:49.819 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 08:10:49.706 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 08:10:49.433 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:10:49.706 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:10:49.789 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 08:11:02.057 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33872 10 6452 1 2025-09-20 08:06:32.323 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 08:12:02.484 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43880 10 6452 1 2025-09-20 08:07:32.325 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 08:13:02.880 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55482 10 6452 1 2025-09-20 08:14:03.284 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45840 10 6452 1 2025-09-20 08:15:03.690 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35194 10 6452 1 2025-09-20 08:15:49.771 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 08:15:49.954 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 08:15:49.848 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:15:49.687 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:15:49.770 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 08:16:04.110 00:00:10.571 TCP 1.101.0.1:3000 -> 23.104.0.1:58216 10 6452 1 2025-09-20 08:17:04.724 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36698 10 6452 1 2025-09-20 08:18:05.140 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32950 10 6452 1 2025-09-20 08:13:32.325 00:06:00.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 08:19:05.541 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49196 10 6452 1 2025-09-20 08:14:32.326 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 08:20:05.948 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52178 10 6452 1 2025-09-20 08:20:49.916 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 08:20:49.914 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 08:20:49.787 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:20:49.852 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:20:49.935 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 08:21:06.355 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:56208 12 10365 1 2025-09-20 08:22:06.834 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:58378 10 6452 1 2025-09-20 08:23:07.259 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59244 10 6452 1 2025-09-20 08:24:07.660 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41446 10 6452 1 2025-09-20 08:25:08.066 00:00:10.482 TCP 1.101.0.1:3000 -> 23.104.0.1:40688 10 6452 1 2025-09-20 08:20:32.326 00:06:00.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 08:25:49.861 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 08:25:50.078 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:25:50.065 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:25:50.157 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 08:25:50.150 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 08:26:08.586 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51684 10 6452 1 2025-09-20 08:21:32.328 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 08:27:08.990 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39966 10 6452 1 2025-09-20 08:28:09.403 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60206 10 6452 1 2025-09-20 08:29:09.806 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41468 10 6452 1 2025-09-20 08:30:10.242 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42860 10 6452 1 2025-09-20 08:30:49.809 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 08:30:49.930 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:30:50.078 00:00:00.046 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 08:30:50.158 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 08:30:49.994 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:31:10.647 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:57320 10 6452 1 2025-09-20 08:32:11.021 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59904 10 6452 1 2025-09-20 08:27:32.328 00:06:00.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 08:33:11.382 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35668 10 6452 1 2025-09-20 08:28:32.330 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 08:34:11.791 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:47372 10 6452 1 2025-09-20 08:35:12.178 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34686 10 6452 1 2025-09-20 08:35:50.474 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 08:35:50.478 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:35:50.323 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:35:50.406 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 08:35:50.406 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 08:36:12.580 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50164 10 6452 1 2025-09-20 08:37:12.983 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:49944 10 6452 1 2025-09-20 08:38:13.355 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38778 10 6452 1 2025-09-20 08:39:13.758 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40352 10 6452 1 2025-09-20 08:34:32.327 00:06:00.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 08:40:14.176 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41824 10 6452 1 2025-09-20 08:35:32.330 00:06:00.043 TCP 179.21.23.21:38570 -> 179.21.23.23:179 11 705 1 2025-09-20 08:40:50.456 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 08:40:50.203 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 08:40:50.285 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 08:40:50.224 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:40:50.374 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:41:14.577 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57258 10 6452 1 2025-09-20 08:42:14.942 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44340 10 6452 1 2025-09-20 08:43:15.353 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50746 10 6452 1 2025-09-20 08:44:15.758 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36340 10 6452 1 2025-09-20 08:45:16.172 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53918 10 6452 1 2025-09-20 08:45:50.507 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 08:45:50.380 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 08:45:50.459 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:45:50.446 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:45:50.528 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 08:46:16.573 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45882 10 6452 1 2025-09-20 08:41:32.330 00:06:00.007 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-09-20 08:47:16.975 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47748 10 6452 1 2025-09-20 08:42:32.331 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 08:48:17.389 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43902 10 6452 1 2025-09-20 08:49:17.788 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46484 10 6452 1 2025-09-20 08:50:18.196 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40856 10 6452 1 2025-09-20 08:50:50.423 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 08:50:50.372 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:50:50.440 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:50:50.420 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 08:50:50.522 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 08:51:18.561 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49132 10 6452 1 2025-09-20 08:52:18.970 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:39216 10 6452 1 2025-09-20 08:53:19.339 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55706 10 6452 1 2025-09-20 08:48:32.335 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-09-20 08:54:19.746 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48130 10 6452 1 2025-09-20 08:49:32.332 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 08:55:20.174 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57726 10 6452 1 2025-09-20 08:55:50.881 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 08:55:50.756 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 08:55:50.777 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:55:50.945 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 08:55:51.028 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 08:56:20.580 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:43358 10 6452 1 2025-09-20 08:57:21.009 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57650 10 6452 1 2025-09-20 08:58:21.416 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:60188 10 6452 1 Summary: total flows: 136, total bytes: 419461, total packets: 997, avg bps: 938, avg pps: 0, avg bpp: 420 Time window: 2025-09-20 07:58:57 - 2025-09-20 08:58:31 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0034s User: 0.0011s Wall: 0.0015s flows/second: 89944.1 Runtime: 0.0015s