Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-22 01:58:40.512 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48454 10 6452 1 2025-09-22 01:59:40.915 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38488 10 6452 1 2025-09-22 01:55:33.184 00:06:00.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 02:00:41.324 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58836 10 6452 1 2025-09-22 02:01:39.829 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:01:40.141 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 02:01:40.147 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:01:40.148 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 02:01:40.230 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 02:01:41.722 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41596 10 6452 1 2025-09-22 02:02:42.137 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46724 10 6452 1 2025-09-22 01:58:33.191 00:06:00.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 02:03:42.540 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53128 10 6452 1 2025-09-22 02:04:42.940 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:43480 10 6452 1 2025-09-22 02:05:43.361 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39734 10 6452 1 2025-09-22 02:06:40.414 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 02:06:40.329 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 02:06:40.164 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 02:06:40.182 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:06:40.331 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:06:43.767 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54258 10 6452 1 2025-09-22 02:02:33.186 00:06:00.085 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 02:07:44.182 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40928 10 6452 1 2025-09-22 02:08:44.543 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41706 10 6452 1 2025-09-22 02:09:44.948 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48390 10 6452 1 2025-09-22 02:05:33.190 00:06:00.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 02:10:45.352 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47798 10 6452 1 2025-09-22 02:11:39.930 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:11:40.467 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 02:11:40.630 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 02:11:40.582 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:11:40.664 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 02:11:45.767 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57064 10 6452 1 2025-09-22 02:12:46.186 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39510 10 6452 1 2025-09-22 02:13:46.586 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37164 10 6452 1 2025-09-22 02:09:33.187 00:06:00.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 02:14:47.000 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45792 10 6452 1 2025-09-22 02:15:47.373 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49306 10 6452 1 2025-09-22 02:16:40.360 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 02:16:40.459 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 02:16:40.123 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:16:40.451 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:16:40.533 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 02:16:47.729 00:00:10.551 TCP 1.101.0.1:3000 -> 23.104.0.1:39966 14 14280 1 2025-09-22 02:12:33.189 00:06:00.082 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 02:17:48.323 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37128 10 6452 1 2025-09-22 02:18:48.729 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60270 10 6452 1 2025-09-22 02:19:49.137 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44266 10 6452 1 2025-09-22 02:20:49.546 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54226 10 6452 1 2025-09-22 02:16:33.188 00:06:00.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 02:21:40.545 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 02:21:40.484 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:21:40.412 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:21:40.497 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 02:21:40.495 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 02:21:49.954 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59128 10 6452 1 2025-09-22 02:22:50.317 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33212 10 6452 1 2025-09-22 02:23:50.731 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55462 10 6452 1 2025-09-22 02:19:33.190 00:06:00.082 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 02:24:51.143 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41256 10 6452 1 2025-09-22 02:25:51.542 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49494 10 6452 1 2025-09-22 02:26:40.743 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 02:26:40.660 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:26:40.614 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 02:26:40.505 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 02:26:40.164 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:26:51.947 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:34758 10 6452 1 2025-09-22 02:27:52.315 00:00:10.938 TCP 1.101.0.1:3000 -> 23.104.0.1:34802 10 6452 1 2025-09-22 02:23:33.188 00:06:00.089 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 02:28:53.287 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35380 10 6452 1 2025-09-22 02:29:53.704 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35048 10 6452 1 2025-09-22 02:30:54.118 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:48104 10 6452 1 2025-09-22 02:26:33.195 00:06:00.079 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 02:31:40.981 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:31:40.905 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 02:31:40.981 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 02:31:40.528 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:31:41.064 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 02:31:54.474 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57300 10 6452 1 2025-09-22 02:32:54.838 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:56550 10 6452 1 2025-09-22 02:33:55.274 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56522 10 6452 1 2025-09-22 02:34:55.681 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60440 10 6452 1 2025-09-22 02:30:33.194 00:06:00.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 02:35:56.104 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59852 10 6452 1 2025-09-22 02:36:40.705 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 02:36:40.711 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 02:36:40.480 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 02:36:40.753 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:36:40.623 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:36:56.511 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49020 10 6452 1 2025-09-22 02:37:56.911 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42014 10 6452 1 2025-09-22 02:33:33.197 00:06:00.079 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 02:38:57.316 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42616 10 6452 1 2025-09-22 02:39:57.722 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57268 10 6452 1 2025-09-22 02:40:58.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59954 10 6452 1 2025-09-22 02:41:41.221 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 02:41:41.131 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 02:41:40.826 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:41:41.113 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:41:41.196 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 02:41:58.516 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49768 10 6452 1 2025-09-22 02:37:33.196 00:06:00.085 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 02:42:58.925 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57322 10 6452 1 2025-09-22 02:43:59.338 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37342 10 6452 1 2025-09-22 02:44:59.740 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50520 10 6452 1 2025-09-22 02:40:33.198 00:06:00.079 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 02:46:00.145 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58204 10 6452 1 2025-09-22 02:46:40.863 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 02:46:40.870 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 02:46:40.995 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:46:40.936 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:46:41.019 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 02:47:00.546 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35236 10 6452 1 2025-09-22 02:48:00.957 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51476 10 6452 1 2025-09-22 02:49:01.364 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:40348 10 6452 1 2025-09-22 02:44:33.197 00:06:00.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 02:50:01.778 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45378 10 6452 1 2025-09-22 02:51:02.184 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50428 10 6452 1 2025-09-22 02:51:40.981 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 02:51:40.997 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:51:41.115 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:51:40.981 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 02:51:41.198 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 02:52:02.594 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42254 10 6452 1 2025-09-22 02:47:33.199 00:06:00.079 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 02:53:02.997 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34094 10 6452 1 2025-09-22 02:54:03.364 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54102 10 6452 1 2025-09-22 02:55:03.728 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51558 10 6452 1 2025-09-22 02:56:04.132 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57174 10 6452 1 2025-09-22 02:51:33.198 00:06:00.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 02:56:41.697 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 02:56:41.488 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 02:56:41.241 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 02:56:41.408 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:56:41.615 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 02:57:04.540 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:35436 12 10365 1 2025-09-22 02:58:05.025 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58198 10 6452 1 Summary: total flows: 137, total bytes: 428618, total packets: 1024, avg bps: 911, avg pps: 0, avg bpp: 418 Time window: 2025-09-22 01:55:33 - 2025-09-22 02:58:15 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0040s User: 0.0010s Wall: 0.0024s flows/second: 57370.2 Runtime: 0.0024s