Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 14:59:05.327 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40080 10 6452 1 2025-09-23 15:00:05.733 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:47114 10 6452 1 2025-09-23 14:56:33.859 00:05:00.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-23 15:01:06.123 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47870 10 6452 1 2025-09-23 15:02:06.485 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50916 10 6452 1 2025-09-23 15:02:24.731 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 15:02:24.411 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 15:02:24.409 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 15:02:24.267 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:02:24.647 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:03:06.884 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:42768 12 6556 1 2025-09-23 15:04:07.308 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52856 10 6452 1 2025-09-23 15:00:33.862 00:05:00.177 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-23 15:05:07.723 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50186 10 6452 1 2025-09-23 15:06:08.133 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52034 10 6452 1 2025-09-23 15:02:33.859 00:05:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-23 15:07:08.490 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47974 10 6452 1 2025-09-23 15:07:24.735 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:07:24.636 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 15:07:24.839 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 15:07:24.673 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:07:24.818 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 15:08:08.895 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59418 10 6452 1 2025-09-23 15:09:09.317 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42538 10 6452 1 2025-09-23 15:10:09.721 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35164 10 6452 1 2025-09-23 15:06:33.863 00:05:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-23 15:11:10.148 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:52818 10 6452 1 2025-09-23 15:12:24.843 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 15:12:10.513 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37078 10 6452 1 2025-09-23 15:12:24.889 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 15:12:24.501 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:12:24.750 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:12:24.833 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 15:08:33.861 00:05:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-23 15:13:10.923 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:46544 10 6452 1 2025-09-23 15:14:11.304 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40068 10 6452 1 2025-09-23 15:15:11.676 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53678 10 6452 1 2025-09-23 15:16:12.109 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56986 10 6452 1 2025-09-23 15:12:33.864 00:05:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-23 15:17:24.598 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 15:17:24.680 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 15:17:24.860 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:17:24.926 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:17:12.510 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56024 10 6452 1 2025-09-23 15:17:25.008 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 15:18:12.922 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59568 10 6452 1 2025-09-23 15:14:33.864 00:05:00.186 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-23 15:19:13.327 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46210 10 6452 1 2025-09-23 15:20:13.734 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50146 10 6452 1 2025-09-23 15:21:14.145 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45948 10 6452 1 2025-09-23 15:22:24.974 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:22:14.551 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40364 10 6452 1 2025-09-23 15:22:25.046 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 15:22:25.153 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 15:22:25.007 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:22:25.090 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 15:18:33.866 00:05:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-23 15:23:14.956 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49016 10 6452 1 2025-09-23 15:24:15.374 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:59026 10 6452 1 2025-09-23 15:20:33.863 00:05:00.187 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-23 15:25:15.771 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:55490 10 6452 1 2025-09-23 15:26:16.184 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35846 10 6452 1 2025-09-23 15:27:24.972 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 15:27:24.968 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:27:25.125 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 15:27:25.097 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:27:16.590 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58218 10 6452 1 2025-09-23 15:27:25.052 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 15:28:16.997 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51020 10 6452 1 2025-09-23 15:24:33.868 00:05:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-23 15:29:17.398 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47444 10 6452 1 2025-09-23 15:30:17.799 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:51990 10 6452 1 2025-09-23 15:26:33.865 00:05:00.186 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-23 15:31:18.156 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55908 10 6452 1 2025-09-23 15:32:25.356 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 15:32:25.369 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 15:32:25.281 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 15:32:25.239 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:32:25.274 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:32:18.561 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37984 10 6452 1 2025-09-23 15:33:18.957 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51834 10 6452 1 2025-09-23 15:34:19.360 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41164 10 6452 1 2025-09-23 15:30:33.868 00:05:00.183 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-23 15:35:19.724 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43876 10 6452 1 2025-09-23 15:32:33.866 00:05:00.188 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-23 15:36:20.143 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43348 10 6452 1 2025-09-23 15:37:25.724 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 15:37:25.723 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 15:37:25.567 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 15:37:25.443 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:37:25.642 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:37:20.509 00:00:13.554 TCP 1.101.0.1:3000 -> 23.104.0.1:51520 10 6452 1 2025-09-23 15:38:24.131 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34944 10 6452 1 2025-09-23 15:39:24.533 00:00:10.797 TCP 1.101.0.1:3000 -> 23.104.0.1:35620 10 6452 1 2025-09-23 15:36:33.872 00:05:00.182 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-23 15:40:25.374 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48542 10 6452 1 2025-09-23 15:41:25.776 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:58544 10 6452 1 2025-09-23 15:42:25.352 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 15:42:25.355 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 15:42:25.360 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:42:25.251 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:42:25.335 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 15:38:33.868 00:05:00.188 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-23 15:42:26.139 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33942 10 6452 1 2025-09-23 15:43:26.547 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45772 10 6452 1 2025-09-23 15:44:26.957 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39506 10 6452 1 2025-09-23 15:45:27.365 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50206 10 6452 1 2025-09-23 15:42:33.881 00:05:00.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-23 15:46:27.770 00:00:10.525 TCP 1.101.0.1:3000 -> 23.104.0.1:43668 14 14282 1 2025-09-23 15:47:25.680 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 15:47:25.519 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 15:47:25.167 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:47:25.678 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:47:25.762 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 15:47:28.338 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43862 10 6452 1 2025-09-23 15:44:33.879 00:05:00.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-23 15:48:28.701 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56730 10 6452 1 2025-09-23 15:49:29.114 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49256 10 6452 1 2025-09-23 15:50:29.516 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:54134 10 6452 1 2025-09-23 15:51:29.898 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42460 10 6452 1 2025-09-23 15:52:25.857 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 15:52:25.441 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 15:52:25.540 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 15:52:25.678 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:52:25.773 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:48:33.883 00:05:00.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-23 15:52:30.311 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39996 10 6452 1 2025-09-23 15:53:30.715 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:39714 10 6452 1 2025-09-23 15:50:33.882 00:05:00.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-23 15:54:31.139 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53622 10 6452 1 2025-09-23 15:55:31.542 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36576 10 6452 1 2025-09-23 15:56:31.957 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60706 10 6452 1 2025-09-23 15:57:25.737 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-23 15:57:25.503 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-23 15:57:25.726 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-23 15:57:25.630 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:57:25.655 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-23 15:57:32.366 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:48942 10 6452 1 2025-09-23 15:54:33.885 00:05:00.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-23 15:58:32.791 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45128 10 6452 1 Summary: total flows: 140, total bytes: 424934, total packets: 1026, avg bps: 899, avg pps: 0, avg bpp: 414 Time window: 2025-09-23 14:56:33 - 2025-09-23 15:59:34 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0039s User: 0.0008s Wall: 0.0017s flows/second: 80000.3 Runtime: 0.0018s