Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-27 17:58:59.899 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49708 12 6556 1 2025-09-27 17:59:23.826 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 17:59:23.805 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 17:59:23.660 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 17:59:23.744 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 17:59:23.808 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 18:00:00.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51574 10 6452 1 2025-09-27 18:01:00.717 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36944 10 6452 1 2025-09-27 18:02:01.120 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42762 10 6452 1 2025-09-27 18:03:01.522 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38346 10 6452 1 2025-09-27 18:04:01.929 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:48108 10 6452 1 2025-09-27 18:04:23.871 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 18:04:23.659 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 18:04:23.689 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:04:23.871 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:04:23.955 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 17:59:35.822 00:06:00.166 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 18:05:02.364 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57606 10 6452 1 2025-09-27 18:00:35.819 00:06:00.172 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 18:06:02.766 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45408 10 6452 1 2025-09-27 18:07:03.142 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:42132 10 6452 1 2025-09-27 18:08:03.542 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:57504 10 6452 1 2025-09-27 18:09:03.899 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:47050 10 6452 1 2025-09-27 18:09:24.222 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 18:09:23.950 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 18:09:23.867 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 18:09:23.700 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:09:24.138 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:10:04.272 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33106 10 6452 1 2025-09-27 18:11:04.687 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53604 10 6452 1 2025-09-27 18:06:35.823 00:06:00.168 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 18:12:05.106 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54250 10 6452 1 2025-09-27 18:07:35.821 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 18:13:05.511 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39516 10 6452 1 2025-09-27 18:14:05.916 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49782 10 6452 1 2025-09-27 18:14:23.972 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 18:14:23.985 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 18:14:23.834 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:14:24.091 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:14:24.173 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 18:15:06.276 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33174 12 6556 1 2025-09-27 18:16:06.681 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51528 10 6452 1 2025-09-27 18:17:07.110 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58554 10 6452 1 2025-09-27 18:18:07.516 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53154 10 6452 1 2025-09-27 18:13:35.824 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 18:19:24.387 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 18:19:07.922 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57596 10 6452 1 2025-09-27 18:19:24.366 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 18:19:24.415 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 18:19:24.201 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:19:24.304 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:14:35.822 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 18:20:08.339 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39342 10 6452 1 2025-09-27 18:21:08.748 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45898 10 6452 1 2025-09-27 18:22:09.151 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45576 10 6452 1 2025-09-27 18:23:09.553 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44850 10 6452 1 2025-09-27 18:24:23.938 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 18:24:24.101 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 18:24:24.101 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:24:24.379 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:24:09.954 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60788 10 6452 1 2025-09-27 18:24:24.460 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 18:25:10.367 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57738 10 6452 1 2025-09-27 18:20:35.826 00:06:00.168 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 18:26:10.775 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56082 10 6452 1 2025-09-27 18:21:35.823 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 18:27:11.188 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:42770 12 10367 1 2025-09-27 18:28:11.669 00:00:10.977 TCP 1.101.0.1:3000 -> 23.104.0.1:55910 10 6452 1 2025-09-27 18:29:24.430 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 18:29:24.276 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 18:29:24.239 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:29:12.705 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:60722 10 6452 1 2025-09-27 18:29:24.128 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:29:24.210 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 18:30:13.215 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42084 10 6452 1 2025-09-27 18:31:13.580 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54202 10 6452 1 2025-09-27 18:32:13.985 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46428 10 6452 1 2025-09-27 18:27:35.829 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 18:28:35.827 00:05:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-27 18:33:14.399 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34208 10 6452 1 2025-09-27 18:34:24.575 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 18:34:24.494 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:34:24.587 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 18:34:24.496 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 18:34:24.516 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:34:14.812 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60944 10 6452 1 2025-09-27 18:35:15.211 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48812 10 6452 1 2025-09-27 18:36:15.615 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41028 10 6452 1 2025-09-27 18:37:16.021 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41796 10 6452 1 2025-09-27 18:38:16.428 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33716 10 6452 1 2025-09-27 18:34:35.832 00:05:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-27 18:34:35.828 00:05:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-27 18:39:24.743 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 18:39:24.212 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 18:39:24.659 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 18:39:24.561 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:39:24.661 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:39:16.839 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:60650 10 6452 1 2025-09-27 18:40:17.269 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51456 10 6452 1 2025-09-27 18:41:17.665 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41260 10 6452 1 2025-09-27 18:42:18.103 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45084 10 6452 1 2025-09-27 18:43:18.469 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58728 10 6452 1 2025-09-27 18:44:24.747 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 18:44:24.742 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 18:44:24.481 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:44:24.686 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:44:24.768 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 18:44:18.866 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51784 10 6452 1 2025-09-27 18:40:35.832 00:05:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-27 18:40:35.835 00:05:00.193 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-27 18:45:19.278 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46380 10 6452 1 2025-09-27 18:46:19.684 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34202 10 6452 1 2025-09-27 18:47:20.109 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37854 10 6452 1 2025-09-27 18:48:20.508 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51726 10 6452 1 2025-09-27 18:49:24.789 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 18:49:24.758 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 18:49:24.544 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 18:49:24.714 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:49:24.706 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:49:20.922 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:40252 10 6452 1 2025-09-27 18:50:21.344 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59474 10 6452 1 2025-09-27 18:46:35.833 00:05:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-27 18:46:35.836 00:05:00.197 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-27 18:51:21.710 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53332 10 6452 1 2025-09-27 18:52:22.124 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51374 10 6452 1 2025-09-27 18:53:22.482 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46326 10 6452 1 2025-09-27 18:54:24.643 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:54:24.813 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 18:54:24.645 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 18:54:24.592 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 18:54:24.725 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 18:54:22.883 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38070 12 6556 1 2025-09-27 18:55:23.302 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38672 10 6452 1 2025-09-27 18:56:23.708 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:59706 10 6452 1 2025-09-27 18:52:35.838 00:05:00.201 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-27 18:52:35.836 00:05:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-27 18:57:24.140 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60494 10 6452 1 2025-09-27 18:58:24.499 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33834 10 6452 1 Summary: total flows: 138, total bytes: 420858, total packets: 1022, avg bps: 941, avg pps: 0, avg bpp: 411 Time window: 2025-09-27 17:58:59 - 2025-09-27 18:58:34 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0037s User: 0.0018s Wall: 0.0022s flows/second: 62527.2 Runtime: 0.0022s