Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 20:59:08.923 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50782 10 6452 1 2025-09-20 21:00:09.337 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55140 10 6452 1 2025-09-20 21:01:05.366 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 21:01:05.209 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 21:01:05.402 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 21:01:05.172 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:01:05.284 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:01:09.751 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:44836 10 6452 1 2025-09-20 20:56:32.571 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 21:02:10.122 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51688 10 6452 1 2025-09-20 20:57:32.558 00:06:00.018 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 21:03:10.527 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48014 10 6452 1 2025-09-20 21:04:10.935 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52840 10 6452 1 2025-09-20 21:05:11.350 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40446 10 6452 1 2025-09-20 21:06:05.322 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 21:06:05.378 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 21:06:05.444 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 21:06:05.354 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:06:05.240 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:06:11.755 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54734 10 6452 1 2025-09-20 21:07:12.155 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32892 10 6452 1 2025-09-20 21:08:12.559 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59002 10 6452 1 2025-09-20 21:03:32.575 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 21:09:12.965 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37578 10 6452 1 2025-09-20 21:04:32.561 00:06:00.018 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 21:10:13.329 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:32982 10 6452 1 2025-09-20 21:11:05.617 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 21:11:05.373 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 21:11:05.462 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 21:11:05.287 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:11:05.533 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:11:13.692 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54676 10 6452 1 2025-09-20 21:12:14.055 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36080 10 6452 1 2025-09-20 21:13:14.458 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51964 10 6452 1 2025-09-20 21:14:14.856 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:60838 10 6452 1 2025-09-20 21:15:15.277 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44028 10 6452 1 2025-09-20 21:10:32.575 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 21:16:05.581 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 21:16:05.494 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 21:16:05.503 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 21:16:05.380 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:16:05.498 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:16:15.673 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44540 10 6452 1 2025-09-20 21:11:32.567 00:06:00.014 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 21:17:16.118 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48908 10 6452 1 2025-09-20 21:18:16.538 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59294 10 6452 1 2025-09-20 21:19:16.895 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48048 10 6452 1 2025-09-20 21:20:17.314 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39834 10 6452 1 2025-09-20 21:21:05.652 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 21:21:05.651 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 21:21:05.421 00:00:00.019 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:21:05.654 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:21:05.738 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 21:21:17.726 00:00:10.898 TCP 1.101.0.1:3000 -> 23.104.0.1:40612 10 6452 1 2025-09-20 21:22:18.664 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54908 10 6452 1 2025-09-20 21:17:32.579 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 21:23:19.089 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60462 10 6452 1 2025-09-20 21:18:32.569 00:06:00.013 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 21:24:19.496 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56718 10 6452 1 2025-09-20 21:25:19.898 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39216 12 6556 1 2025-09-20 21:26:05.858 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 21:26:05.771 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 21:26:05.862 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 21:26:05.674 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:26:05.777 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:26:20.306 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35954 10 6452 1 2025-09-20 21:27:20.708 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42336 10 6452 1 2025-09-20 21:28:21.119 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38994 10 6452 1 2025-09-20 21:29:21.521 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53158 10 6452 1 2025-09-20 21:24:32.581 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 21:25:32.572 00:06:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 21:30:21.888 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:38240 12 6556 1 2025-09-20 21:31:06.210 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 21:31:06.087 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 21:31:05.944 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 21:31:05.932 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:31:06.128 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:31:22.306 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57878 10 6452 1 2025-09-20 21:32:22.710 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37706 11 6492 1 2025-09-20 21:33:23.115 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60854 10 6452 1 2025-09-20 21:34:23.532 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44266 10 6452 1 2025-09-20 21:35:23.937 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:41722 10 6452 1 2025-09-20 21:36:05.841 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 21:36:05.671 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 21:36:05.670 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 21:36:05.989 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:36:05.758 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:36:24.361 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:57002 12 10367 1 2025-09-20 21:31:32.585 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 21:32:32.572 00:06:00.018 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 21:37:24.842 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:49224 10 6452 1 2025-09-20 21:38:25.270 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59038 10 6452 1 2025-09-20 21:39:25.632 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33364 10 6452 1 2025-09-20 21:40:25.991 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38854 10 6452 1 2025-09-20 21:41:05.873 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:41:05.875 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 21:41:05.939 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 21:41:05.722 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:41:05.955 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 21:41:26.396 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51120 10 6452 1 2025-09-20 21:42:26.759 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:56468 10 6452 1 2025-09-20 21:38:32.587 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 21:43:27.149 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49778 10 6452 1 2025-09-20 21:39:32.574 00:06:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 21:44:27.553 00:00:10.640 TCP 1.101.0.1:3000 -> 23.104.0.1:44752 11 6504 1 2025-09-20 21:45:28.231 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52874 10 6452 1 2025-09-20 21:46:06.191 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 21:46:06.353 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 21:46:05.938 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 21:46:06.100 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:46:06.108 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:46:28.631 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59688 10 6452 1 2025-09-20 21:47:28.992 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37990 10 6452 1 2025-09-20 21:48:29.391 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41600 10 6452 1 2025-09-20 21:49:29.801 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59668 10 6452 1 2025-09-20 21:45:32.590 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 21:50:30.212 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46770 10 6452 1 2025-09-20 21:51:05.990 00:00:00.051 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 21:51:05.981 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 21:51:06.068 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:51:06.300 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:51:06.383 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 21:46:32.577 00:06:00.019 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 21:51:30.616 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33554 10 6452 1 2025-09-20 21:52:31.021 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36390 10 6452 1 2025-09-20 21:53:31.384 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56584 10 6452 1 2025-09-20 21:54:31.784 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57200 10 6452 1 2025-09-20 21:55:32.189 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46418 10 6452 1 2025-09-20 21:56:06.060 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-20 21:56:06.039 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-20 21:56:06.275 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:56:06.342 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-20 21:56:06.424 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-20 21:56:32.593 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33364 10 6452 1 2025-09-20 21:52:32.593 00:06:00.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-20 21:57:32.956 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38074 10 6452 1 2025-09-20 21:53:32.578 00:06:00.024 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-20 21:58:33.357 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54598 10 6452 1 Summary: total flows: 138, total bytes: 418677, total packets: 977, avg bps: 886, avg pps: 0, avg bpp: 428 Time window: 2025-09-20 20:56:32 - 2025-09-20 21:59:32 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0017s User: 0.0034s Wall: 0.0024s flows/second: 58454.2 Runtime: 0.0024s