Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 19:58:43.923 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54890 12 6556 1 2025-09-20 19:54:32.540 00:06:00.021 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 19:59:44.337 00:00:10.594 TCP 1.101.0.1:3000 -> 23.104.0.1:39546 10 6452 1 2025-09-20 20:00:44.983 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51232 10 6452 1 2025-09-20 20:01:04.055 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 20:01:04.183 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 20:01:03.976 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 20:01:03.728 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:01:03.973 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:01:45.389 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44700 10 6452 1 2025-09-20 20:02:45.801 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40872 10 6452 1 2025-09-20 20:03:46.206 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36032 10 6452 1 2025-09-20 20:04:46.570 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:33388 10 6452 1 2025-09-20 20:00:32.558 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 20:05:46.930 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:53364 10 6452 1 2025-09-20 20:06:04.300 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 20:06:03.991 00:00:00.050 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 20:06:03.982 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 20:06:04.057 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:06:04.217 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:01:32.540 00:06:00.021 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 20:06:47.304 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38576 10 6452 1 2025-09-20 20:07:47.706 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50026 10 6452 1 2025-09-20 20:08:48.111 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39378 10 6452 1 2025-09-20 20:09:48.513 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48330 10 6452 1 2025-09-20 20:10:48.920 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54612 10 6452 1 2025-09-20 20:11:04.247 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 20:11:04.332 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 20:11:04.333 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 20:11:04.174 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:11:04.165 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:11:49.321 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43086 10 6452 1 2025-09-20 20:07:32.559 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 20:12:49.720 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54296 10 6452 1 2025-09-20 20:08:32.541 00:06:00.023 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 20:13:50.132 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50388 10 6452 1 2025-09-20 20:14:50.536 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60600 10 6452 1 2025-09-20 20:16:04.422 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 20:16:04.288 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 20:16:04.329 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:16:04.157 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:15:50.940 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52688 10 6452 1 2025-09-20 20:16:04.240 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 20:16:51.349 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34822 10 6452 1 2025-09-20 20:17:51.750 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35988 10 6452 1 2025-09-20 20:18:52.151 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43376 10 6452 1 2025-09-20 20:14:32.561 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 20:19:52.553 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37696 10 6452 1 2025-09-20 20:15:32.545 00:06:00.020 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 20:21:04.529 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 20:21:04.493 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 20:21:04.507 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:21:04.367 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:20:52.950 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35086 10 6452 1 2025-09-20 20:21:04.451 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 20:21:53.356 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51956 10 6452 1 2025-09-20 20:22:53.716 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60670 10 6452 1 2025-09-20 20:23:54.127 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39144 10 6452 1 2025-09-20 20:24:54.487 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58484 10 6452 1 2025-09-20 20:26:04.470 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 20:26:04.076 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:26:04.527 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:26:04.559 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 20:26:04.610 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 20:25:54.895 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:37728 12 6556 1 2025-09-20 20:21:32.562 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 20:26:55.317 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57758 10 6452 1 2025-09-20 20:22:32.545 00:06:00.022 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 20:27:55.680 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56878 10 6452 1 2025-09-20 20:28:56.115 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58486 10 6452 1 2025-09-20 20:29:56.517 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46572 10 6452 1 2025-09-20 20:31:04.639 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 20:31:04.676 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 20:31:04.536 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:31:04.713 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:31:04.795 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 20:30:56.948 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49572 10 6452 1 2025-09-20 20:31:57.372 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34410 10 6452 1 2025-09-20 20:32:57.773 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37376 10 6452 1 2025-09-20 20:28:32.563 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 20:33:58.178 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45284 10 6452 1 2025-09-20 20:29:32.552 00:06:00.016 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 20:34:58.587 00:00:10.676 TCP 1.101.0.1:3000 -> 23.104.0.1:43572 10 6452 1 2025-09-20 20:36:04.647 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 20:36:04.780 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:36:04.565 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:36:04.563 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 20:36:04.666 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 20:35:59.300 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46166 10 6452 1 2025-09-20 20:36:59.658 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40804 10 6452 1 2025-09-20 20:38:00.066 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53972 10 6452 1 2025-09-20 20:39:00.469 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34566 10 6452 1 2025-09-20 20:40:00.833 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34126 10 6452 1 2025-09-20 20:35:32.566 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 20:41:04.803 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 20:41:04.714 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 20:41:04.791 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 20:41:04.549 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:41:04.721 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:41:01.236 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51260 10 6452 1 2025-09-20 20:36:32.555 00:06:00.015 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 20:42:01.646 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40486 10 6452 1 2025-09-20 20:43:02.010 00:00:10.858 TCP 1.101.0.1:3000 -> 23.104.0.1:34516 10 6452 1 2025-09-20 20:44:02.907 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39446 10 6452 1 2025-09-20 20:45:03.317 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:35262 10 6452 1 2025-09-20 20:46:04.963 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 20:46:04.958 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:46:05.117 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 20:46:05.067 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:46:05.038 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 20:46:03.685 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:56530 10 6452 1 2025-09-20 20:47:04.130 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35940 10 6452 1 2025-09-20 20:42:32.567 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 20:48:04.496 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36670 10 6452 1 2025-09-20 20:43:32.556 00:06:00.015 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 20:49:04.901 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51398 12 6556 1 2025-09-20 20:50:05.308 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60206 10 6452 1 2025-09-20 20:51:05.085 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 20:51:04.945 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 20:51:04.935 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:51:05.004 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 20:51:05.004 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:51:05.713 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:34180 10 6452 1 2025-09-20 20:52:06.138 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47170 10 6452 1 2025-09-20 20:53:06.544 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39484 10 6452 1 2025-09-20 20:54:06.952 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:41508 10 6452 1 2025-09-20 20:49:32.569 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 20:55:07.328 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53486 10 6452 1 2025-09-20 20:50:32.558 00:06:00.016 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 20:56:05.514 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 20:56:05.431 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:56:05.478 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 20:56:05.622 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 20:56:05.145 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 20:56:07.692 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57810 10 6452 1 2025-09-20 20:57:08.115 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54928 10 6452 1 2025-09-20 20:58:08.528 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:43380 10 6452 1 Summary: total flows: 137, total bytes: 414277, total packets: 968, avg bps: 866, avg pps: 0, avg bpp: 427 Time window: 2025-09-20 19:54:32 - 2025-09-20 20:58:18 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0039s User: 0.0010s Wall: 0.0017s flows/second: 80209.3 Runtime: 0.0017s