Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 12:59:04.717 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:52832 10 6452 1 2025-09-20 12:54:32.414 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:00:05.156 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50026 10 6452 1 2025-09-20 13:00:55.413 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:00:55.603 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:00:55.566 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:00:55.601 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:00:55.685 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:01:05.562 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46110 10 6452 1 2025-09-20 13:02:05.967 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39260 10 6452 1 2025-09-20 13:03:06.335 00:00:10.816 TCP 1.101.0.1:3000 -> 23.104.0.1:42244 10 6452 1 2025-09-20 13:04:07.194 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59818 10 6452 1 2025-09-20 13:05:07.557 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47768 10 6452 1 2025-09-20 13:00:32.419 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 13:05:55.655 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:05:55.693 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:05:55.561 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:05:55.414 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:05:55.572 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:06:07.960 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53176 10 6452 1 2025-09-20 13:01:32.415 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:07:08.362 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:49650 10 6452 1 2025-09-20 13:08:08.766 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54324 10 6452 1 2025-09-20 13:09:09.177 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59880 10 6452 1 2025-09-20 13:10:09.586 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60698 10 6452 1 2025-09-20 13:10:55.676 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:10:55.737 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:10:55.664 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:10:55.755 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:10:55.593 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:11:09.991 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58462 10 6452 1 2025-09-20 13:12:10.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55476 10 6452 1 2025-09-20 13:07:32.420 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 13:13:10.756 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:58500 10 6452 1 2025-09-20 13:08:32.418 00:06:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:14:11.182 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45786 10 6452 1 2025-09-20 13:15:11.584 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56370 10 6452 1 2025-09-20 13:15:56.015 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:15:56.270 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:15:56.248 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:15:56.144 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:15:56.228 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:16:11.985 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:42480 10 6452 1 2025-09-20 13:17:12.401 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42096 10 6452 1 2025-09-20 13:18:12.803 00:00:11.339 TCP 1.101.0.1:3000 -> 23.104.0.1:54676 10 6452 1 2025-09-20 13:19:14.181 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54820 10 6452 1 2025-09-20 13:14:32.422 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 757 1 2025-09-20 13:20:14.584 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60172 10 6452 1 2025-09-20 13:15:32.418 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:20:55.850 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:20:55.780 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:20:55.551 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:20:55.863 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:20:55.946 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:21:14.984 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55384 10 6452 1 2025-09-20 13:22:15.353 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53832 10 6452 1 2025-09-20 13:23:15.759 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:54762 10 6452 1 2025-09-20 13:24:16.130 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35052 10 6452 1 2025-09-20 13:25:16.535 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36610 10 6452 1 2025-09-20 13:25:56.182 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:25:56.093 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:25:55.961 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:25:55.969 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:25:56.097 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:26:16.937 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:37766 10 6452 1 2025-09-20 13:21:32.424 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 13:27:17.356 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59734 10 6452 1 2025-09-20 13:22:32.422 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:28:17.761 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51862 10 6452 1 2025-09-20 13:29:18.178 00:00:10.705 TCP 1.101.0.1:3000 -> 23.104.0.1:35434 10 6452 1 2025-09-20 13:30:18.920 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:39454 10 6452 1 2025-09-20 13:30:56.315 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:30:55.983 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:30:56.183 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:30:56.125 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:30:56.208 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:31:19.292 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38468 10 6452 1 2025-09-20 13:32:19.696 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34686 10 6452 1 2025-09-20 13:33:20.116 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49010 11 6492 1 2025-09-20 13:28:32.424 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 13:29:32.424 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:34:20.522 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:33150 11 6504 1 2025-09-20 13:35:20.990 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54304 10 6452 1 2025-09-20 13:35:56.324 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:35:56.144 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:35:56.058 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:35:56.243 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:35:56.326 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:36:21.354 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37324 10 6452 1 2025-09-20 13:37:21.752 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55296 10 6452 1 2025-09-20 13:38:22.156 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38304 10 6452 1 2025-09-20 13:39:22.558 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42608 10 6452 1 2025-09-20 13:40:22.960 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49058 10 6452 1 2025-09-20 13:35:32.425 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-20 13:40:56.369 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:40:56.280 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:40:56.464 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:40:56.353 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:40:56.287 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:41:23.370 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:51926 12 10367 1 2025-09-20 13:36:32.424 00:06:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:42:23.808 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:35126 10 6452 1 2025-09-20 13:43:24.184 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38044 10 6452 1 2025-09-20 13:44:24.547 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50348 10 6452 1 2025-09-20 13:45:24.946 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56916 10 6452 1 2025-09-20 13:45:56.421 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:45:56.523 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:45:56.194 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:45:56.517 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:45:56.600 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:46:25.357 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47542 10 6452 1 2025-09-20 13:42:32.428 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 757 1 2025-09-20 13:47:25.724 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46546 10 6452 1 2025-09-20 13:43:32.426 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:48:26.129 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41270 10 6452 1 2025-09-20 13:49:26.488 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37074 10 6452 1 2025-09-20 13:50:26.892 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:37612 10 6452 1 2025-09-20 13:50:56.582 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:50:56.463 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:50:56.389 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:50:56.532 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:50:56.615 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:51:27.311 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:45682 12 10365 1 2025-09-20 13:52:27.794 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42880 10 6452 1 2025-09-20 13:53:28.162 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:45322 10 6452 1 2025-09-20 13:49:32.432 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-09-20 13:54:28.666 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51944 10 6452 1 2025-09-20 13:50:32.427 00:06:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 13:55:29.032 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46924 10 6452 1 2025-09-20 13:55:56.789 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 13:55:56.755 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 13:55:56.661 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:55:56.759 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 13:55:56.841 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 13:56:29.434 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37686 10 6452 1 2025-09-20 13:57:29.841 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:52870 10 6452 1 2025-09-20 13:58:30.279 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47598 10 6452 1 Summary: total flows: 137, total bytes: 423601, total packets: 1001, avg bps: 880, avg pps: 0, avg bpp: 423 Time window: 2025-09-20 12:54:32 - 2025-09-20 13:58:40 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0054s User: 0.0000s Wall: 0.0023s flows/second: 59956.1 Runtime: 0.0023s