Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 11:59:39.872 00:00:10.675 TCP 1.101.0.1:3000 -> 23.104.0.1:60520 10 6452 1 2025-09-20 12:00:54.308 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 12:00:54.314 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:00:40.587 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57760 10 6452 1 2025-09-20 12:00:54.227 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 12:00:54.086 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:00:54.225 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:01:40.995 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:38156 10 6452 1 2025-09-20 11:57:32.400 00:06:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 11 705 1 2025-09-20 12:02:41.455 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43290 10 6452 1 2025-09-20 11:58:32.395 00:06:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 12:03:41.818 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:58758 10 6452 1 2025-09-20 12:04:42.270 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46290 10 6452 1 2025-09-20 12:05:54.258 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:05:54.394 00:00:00.040 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 12:05:54.103 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:05:42.671 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37058 10 6452 1 2025-09-20 12:05:54.854 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:05:54.938 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 12:06:43.103 00:00:10.782 TCP 1.101.0.1:3000 -> 23.104.0.1:52908 10 6452 1 2025-09-20 12:07:43.925 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:58626 10 6452 1 2025-09-20 12:08:44.348 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:46654 10 6452 1 2025-09-20 12:04:32.400 00:06:00.008 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 12:09:44.747 00:00:10.694 TCP 1.101.0.1:3000 -> 23.104.0.1:35202 10 6452 1 2025-09-20 12:05:32.398 00:06:00.049 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 757 1 2025-09-20 12:10:54.444 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:10:54.671 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 12:10:54.341 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:10:54.541 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:10:54.623 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 12:10:45.482 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:53224 10 6452 1 2025-09-20 12:11:45.857 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40080 10 6452 1 2025-09-20 12:12:46.270 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:42144 10 6452 1 2025-09-20 12:13:46.636 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59908 10 6452 1 2025-09-20 12:14:47.042 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49598 10 6452 1 2025-09-20 12:15:54.557 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:15:54.622 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 12:15:54.543 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:15:54.622 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:15:54.705 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 12:15:47.444 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43676 10 6452 1 2025-09-20 12:11:32.402 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 12:16:47.847 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:50510 10 6452 1 2025-09-20 12:12:32.405 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 12:17:48.281 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49014 10 6452 1 2025-09-20 12:18:48.643 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37994 10 6452 1 2025-09-20 12:19:49.006 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58156 10 6452 1 2025-09-20 12:20:54.809 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:20:54.827 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 12:20:54.576 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:20:54.587 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:20:54.671 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 12:20:49.407 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33932 10 6452 1 2025-09-20 12:21:49.807 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49210 10 6452 1 2025-09-20 12:22:50.217 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59938 10 6452 1 2025-09-20 12:18:32.404 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 12:23:50.620 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54436 10 6452 1 2025-09-20 12:19:32.405 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 12:24:51.021 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51366 10 6452 1 2025-09-20 12:25:54.876 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 12:25:54.858 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:25:54.735 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 12:25:54.665 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:25:54.794 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:25:51.381 00:00:10.489 TCP 1.101.0.1:3000 -> 23.104.0.1:57834 10 6452 1 2025-09-20 12:26:51.912 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55990 10 6452 1 2025-09-20 12:27:52.317 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42918 10 6452 1 2025-09-20 12:28:52.719 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39244 10 6452 1 2025-09-20 12:29:53.110 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39490 10 6452 1 2025-09-20 12:25:32.406 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 12:30:54.757 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:30:54.952 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 12:30:54.880 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:30:54.955 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:30:55.038 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 12:30:53.519 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38376 10 6452 1 2025-09-20 12:26:32.408 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 12:31:53.926 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:33974 10 6452 1 2025-09-20 12:32:54.350 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42766 10 6452 1 2025-09-20 12:33:54.714 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55394 10 6452 1 2025-09-20 12:34:55.120 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56758 10 6452 1 2025-09-20 12:35:55.153 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 12:35:55.001 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:35:55.239 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:35:55.237 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:35:55.321 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 12:35:55.531 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37072 10 6452 1 2025-09-20 12:36:55.945 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34280 10 6452 1 2025-09-20 12:32:32.409 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 12:37:56.352 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32966 10 6452 1 2025-09-20 12:33:32.409 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 12:38:56.752 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39376 10 6452 1 2025-09-20 12:39:57.155 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43590 10 6452 1 2025-09-20 12:40:54.944 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 12:40:55.182 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:40:55.204 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:40:55.148 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:40:55.230 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 12:40:57.551 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50002 10 6452 1 2025-09-20 12:41:57.954 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51262 10 6452 1 2025-09-20 12:42:58.358 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42178 10 6452 1 2025-09-20 12:43:58.720 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47982 10 6452 1 2025-09-20 12:39:32.411 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 12:44:59.108 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48046 10 6452 1 2025-09-20 12:40:32.412 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 12:45:55.080 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:45:55.238 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 12:45:55.249 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:45:55.175 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:45:55.259 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 12:45:59.512 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43690 10 6452 1 2025-09-20 12:46:59.913 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58836 10 6452 1 2025-09-20 12:48:00.319 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36538 10 6452 1 2025-09-20 12:49:00.676 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33174 10 6452 1 2025-09-20 12:50:01.040 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49174 10 6452 1 2025-09-20 12:50:55.362 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 12:50:55.196 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:50:55.400 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 12:50:55.293 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:50:55.279 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:51:01.444 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41328 10 6452 1 2025-09-20 12:46:32.413 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 12:52:01.847 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:60248 10 6452 1 2025-09-20 12:47:32.413 00:06:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 12:53:02.274 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36594 10 6452 1 2025-09-20 12:54:02.674 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46802 10 6452 1 2025-09-20 12:55:03.106 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:51894 10 6452 1 2025-09-20 12:55:55.376 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 12:55:55.435 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 12:55:55.079 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:55:55.587 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 12:55:55.670 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 12:56:03.529 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54248 10 6452 1 2025-09-20 12:57:03.927 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:55296 10 6452 1 2025-09-20 12:58:04.353 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33392 10 6452 1 2025-09-20 12:53:32.416 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 757 1 Summary: total flows: 136, total bytes: 410061, total packets: 1001, avg bps: 881, avg pps: 0, avg bpp: 409 Time window: 2025-09-20 11:57:32 - 2025-09-20 12:59:32 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0028s User: 0.0028s Wall: 0.0019s flows/second: 72260.6 Runtime: 0.0019s