Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-21 11:58:45.269 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44374 10 6661 1 2025-09-21 11:59:45.671 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56876 10 6661 1 2025-09-21 12:00:46.100 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44880 10 6661 1 2025-09-21 12:01:23.243 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:01:23.257 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 12:01:23.317 00:00:00.050 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 12:01:22.892 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:01:23.326 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 12:01:46.503 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56462 10 6661 1 2025-09-21 12:02:46.903 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40240 10 6661 1 2025-09-21 12:03:47.273 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52216 10 6661 1 2025-09-21 11:59:32.879 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 12:04:47.674 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50434 10 6661 1 2025-09-21 12:00:32.867 00:06:00.015 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 12:05:48.130 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53532 10 6661 1 2025-09-21 12:06:23.501 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 12:06:23.373 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 12:06:23.339 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:06:23.429 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:06:23.510 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 12:06:48.531 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36358 10 6661 1 2025-09-21 12:07:48.938 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:53204 10 6661 1 2025-09-21 12:08:49.362 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48708 10 6661 1 2025-09-21 12:09:49.766 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60930 10 6661 1 2025-09-21 12:10:50.175 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55968 10 6661 1 2025-09-21 12:11:23.328 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 12:11:23.495 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 12:11:23.350 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 12:11:23.314 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:11:23.246 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:06:32.880 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 12:11:50.588 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43306 10 6661 1 2025-09-21 12:07:32.868 00:06:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 12:12:50.989 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40552 10 6661 1 2025-09-21 12:13:51.397 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36088 10 6661 1 2025-09-21 12:14:51.797 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50902 10 6661 1 2025-09-21 12:15:52.202 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54672 10 6661 1 2025-09-21 12:16:23.607 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 12:16:23.480 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:16:23.551 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:16:23.370 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 12:16:23.635 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 12:16:52.607 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59280 10 6661 1 2025-09-21 12:17:53.016 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59336 10 6661 1 2025-09-21 12:13:32.883 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 12:18:53.421 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39128 10 6661 1 2025-09-21 12:14:32.871 00:06:00.018 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 12:19:53.822 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42112 10 6661 1 2025-09-21 12:20:54.227 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55794 10 6661 1 2025-09-21 12:21:23.720 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 12:21:23.894 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 12:21:23.441 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:21:23.639 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:21:23.805 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 12:21:54.631 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:45250 10 6661 1 2025-09-21 12:22:55.003 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48168 10 6661 1 2025-09-21 12:23:55.407 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60808 10 6661 1 2025-09-21 12:24:55.823 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47972 10 6661 1 2025-09-21 12:20:32.886 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 12:25:56.232 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36290 10 6661 1 2025-09-21 12:26:23.878 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 12:26:23.737 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 12:26:23.731 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 12:26:23.800 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:26:23.795 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:21:32.872 00:06:00.022 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 12:26:56.596 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48228 10 6661 1 2025-09-21 12:27:57.014 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46544 10 6661 1 2025-09-21 12:28:57.415 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56292 10 6661 1 2025-09-21 12:29:57.823 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:33640 10 6661 1 2025-09-21 12:30:58.199 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49514 10 6661 1 2025-09-21 12:31:24.001 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 12:31:23.929 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 12:31:23.751 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:31:23.679 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:31:23.762 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 12:31:58.603 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55228 10 6661 1 2025-09-21 12:27:32.891 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 12:32:59.018 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33082 10 6661 1 2025-09-21 12:28:32.878 00:06:00.018 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 12:33:59.381 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44326 10 6661 1 2025-09-21 12:34:59.779 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54404 10 6661 1 2025-09-21 12:36:00.189 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58828 10 6661 1 2025-09-21 12:36:23.755 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 12:36:23.968 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 12:36:23.795 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:36:23.934 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:36:24.017 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 12:37:00.593 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45954 10 6661 1 2025-09-21 12:38:00.952 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36050 10 6661 1 2025-09-21 12:39:01.358 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37146 10 6661 1 2025-09-21 12:34:32.895 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 12:40:01.757 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:40170 10 6661 1 2025-09-21 12:35:32.881 00:06:00.016 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 12:41:02.133 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38272 10 6661 1 2025-09-21 12:41:23.895 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 12:41:23.904 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 12:41:23.934 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:41:24.106 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:41:24.189 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 12:42:02.498 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:55334 10 6661 1 2025-09-21 12:43:02.898 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42996 10 6661 1 2025-09-21 12:44:03.309 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45460 10 6661 1 2025-09-21 12:45:03.715 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54332 10 6661 1 2025-09-21 12:46:04.101 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55112 10 6661 1 2025-09-21 12:46:24.106 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 12:46:24.171 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 12:46:24.179 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:46:24.175 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:46:24.257 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 12:41:32.895 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 12:47:04.504 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55638 10 6661 1 2025-09-21 12:42:32.885 00:06:00.016 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 12:48:04.911 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34682 10 6661 1 2025-09-21 12:49:05.320 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54688 10 6661 1 2025-09-21 12:50:05.718 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51198 10 6661 1 2025-09-21 12:51:06.108 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39314 10 6661 1 2025-09-21 12:51:24.265 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 12:51:24.268 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 12:51:24.284 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:51:24.104 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:51:24.186 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 12:52:06.526 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57206 10 6661 1 2025-09-21 12:53:06.924 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38120 10 6661 1 2025-09-21 12:48:32.897 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-21 12:54:07.284 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55048 10 6661 1 2025-09-21 12:49:32.886 00:06:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-21 12:55:07.693 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57266 10 6661 1 2025-09-21 12:56:08.107 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45528 10 6661 1 2025-09-21 12:56:24.337 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-21 12:56:24.264 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-21 12:56:24.371 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:56:24.264 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-21 12:56:24.346 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-21 12:57:08.475 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44668 10 6661 1 2025-09-21 12:58:08.836 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:38032 10 6661 1 Summary: total flows: 136, total bytes: 425644, total packets: 948, avg bps: 952, avg pps: 0, avg bpp: 448 Time window: 2025-09-21 11:58:45 - 2025-09-21 12:58:19 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0021s User: 0.0021s Wall: 0.0021s flows/second: 65445.8 Runtime: 0.0021s