Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 15:58:39.933 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53554 10 6452 1 2025-09-20 15:59:40.346 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:53834 10 6452 1 2025-09-20 15:55:32.484 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 16:00:40.715 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60024 10 6452 1 2025-09-20 16:00:59.372 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 16:00:59.145 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 16:00:58.950 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 16:00:59.011 00:00:00.034 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:00:59.290 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 15:56:32.470 00:06:00.016 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 16:01:41.120 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35834 10 6452 1 2025-09-20 16:02:41.524 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35614 10 6452 1 2025-09-20 16:03:41.889 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:38052 10 6452 1 2025-09-20 16:04:42.319 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54078 10 6452 1 2025-09-20 16:05:42.724 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38778 10 6452 1 2025-09-20 16:05:59.432 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 16:05:59.302 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 16:05:59.365 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 16:05:59.175 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:05:59.350 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:06:43.135 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37964 10 6452 1 2025-09-20 16:02:32.484 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 16:07:43.534 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:53578 10 6452 1 2025-09-20 16:03:32.473 00:06:00.015 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 16:08:43.891 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:43942 12 6556 1 2025-09-20 16:09:44.310 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45768 10 6452 1 2025-09-20 16:10:59.463 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 16:10:59.463 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 16:10:59.655 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 16:10:44.711 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60822 10 6452 1 2025-09-20 16:10:59.469 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:10:59.380 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:11:45.118 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50266 10 6452 1 2025-09-20 16:12:45.523 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60916 10 6452 1 2025-09-20 16:13:45.925 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:46142 10 6452 1 2025-09-20 16:09:32.485 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 16:14:46.360 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47636 10 6452 1 2025-09-20 16:10:32.473 00:06:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 16:15:59.459 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 16:15:59.527 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 16:15:59.389 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:15:59.320 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:15:46.767 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33790 10 6452 1 2025-09-20 16:15:59.403 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 16:16:47.179 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37208 10 6452 1 2025-09-20 16:17:47.582 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47352 10 6452 1 2025-09-20 16:18:47.983 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49672 10 6452 1 2025-09-20 16:19:48.388 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50238 10 6452 1 2025-09-20 16:20:59.809 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 16:20:59.475 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 16:20:59.548 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:20:48.790 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59574 10 6452 1 2025-09-20 16:20:59.694 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:20:59.777 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 16:16:32.488 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 16:21:49.154 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54660 10 6452 1 2025-09-20 16:17:32.476 00:06:00.014 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 16:22:49.559 00:00:19.307 TCP 1.101.0.1:3000 -> 23.104.0.1:56050 10 6452 1 2025-09-20 16:23:58.920 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55584 10 6452 1 2025-09-20 16:24:59.323 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:55604 10 6452 1 2025-09-20 16:25:59.613 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 16:25:59.537 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 16:25:59.909 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 16:25:59.590 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:25:59.529 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:25:59.680 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55940 10 6452 1 2025-09-20 16:27:00.113 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42478 10 6452 1 2025-09-20 16:28:00.519 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49798 10 6452 1 2025-09-20 16:23:32.488 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 16:29:00.923 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48076 10 6452 1 2025-09-20 16:24:32.478 00:06:00.015 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 16:30:01.327 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:60868 10 6452 1 2025-09-20 16:30:59.746 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 16:30:59.679 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 16:30:59.632 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:30:59.745 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:30:59.829 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 16:31:01.686 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56248 10 6452 1 2025-09-20 16:32:02.107 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35378 10 6452 1 2025-09-20 16:33:02.507 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57100 10 6452 1 2025-09-20 16:34:02.914 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54904 10 6452 1 2025-09-20 16:35:03.316 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38452 10 6452 1 2025-09-20 16:30:32.490 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 16:35:59.822 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 16:35:59.669 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 16:35:59.625 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:35:59.871 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:35:59.955 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 16:36:03.719 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:41986 10 6452 1 2025-09-20 16:31:32.481 00:06:00.014 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 16:37:04.134 00:00:19.040 TCP 1.101.0.1:3000 -> 23.104.0.1:39392 10 6452 1 2025-09-20 16:38:13.213 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45604 10 6452 1 2025-09-20 16:39:13.615 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:50596 10 6452 1 2025-09-20 16:40:13.973 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44814 10 6452 1 2025-09-20 16:40:59.871 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 16:40:59.801 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:40:59.770 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:40:59.853 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 16:41:00.076 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 16:41:14.375 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48036 10 6452 1 2025-09-20 16:42:14.736 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49036 10 6452 1 2025-09-20 16:37:32.492 00:06:00.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 16:43:15.142 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41836 10 6452 1 2025-09-20 16:38:32.482 00:06:00.024 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 16:44:15.546 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39948 10 6452 1 2025-09-20 16:45:15.953 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:56588 10 6452 1 2025-09-20 16:45:59.893 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 16:45:59.890 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:45:59.974 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 16:46:00.096 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 16:46:00.118 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:46:16.324 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50456 10 6452 1 2025-09-20 16:47:16.692 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54692 10 6452 1 2025-09-20 16:48:17.105 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36852 10 6452 1 2025-09-20 16:49:17.469 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50496 10 6452 1 2025-09-20 16:44:32.504 00:05:59.996 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 16:50:17.881 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52808 10 6452 1 2025-09-20 16:45:32.489 00:06:00.014 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 16:50:59.967 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 16:50:59.920 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:51:00.099 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:51:00.184 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 16:51:00.184 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 16:51:18.288 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48582 10 6452 1 2025-09-20 16:52:18.693 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44756 10 6452 1 2025-09-20 16:53:19.115 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42162 10 6452 1 2025-09-20 16:54:19.517 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:43324 10 6452 1 2025-09-20 16:55:19.927 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:47594 10 6452 1 2025-09-20 16:56:00.305 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 16:56:00.371 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 16:56:00.332 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 16:56:00.230 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:56:00.223 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 16:51:32.501 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 16:56:20.359 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34546 10 6452 1 2025-09-20 16:57:20.727 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:40100 10 6452 1 2025-09-20 16:52:32.491 00:06:00.014 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 16:58:21.115 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60680 10 6452 1 Summary: total flows: 138, total bytes: 414566, total packets: 971, avg bps: 877, avg pps: 0, avg bpp: 426 Time window: 2025-09-20 15:55:32 - 2025-09-20 16:58:32 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0024s User: 0.0024s Wall: 0.0018s flows/second: 77093.0 Runtime: 0.0018s