Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 22:59:25.706 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41042 10 6452 1 2025-09-05 23:00:26.115 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58110 10 6452 1 2025-09-05 23:01:26.520 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60182 10 6452 1 2025-09-05 22:58:25.219 00:04:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-05 23:02:26.921 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:40090 10 6452 1 2025-09-05 22:59:25.219 00:04:00.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-05 23:03:27.350 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33138 10 6452 1 2025-09-05 23:03:46.918 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 23:03:47.146 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:03:47.130 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:03:47.006 00:00:00.038 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 23:03:47.213 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 23:04:27.754 00:00:10.728 TCP 1.101.0.1:3000 -> 23.104.0.1:56416 10 6452 1 2025-09-05 23:05:28.524 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51180 10 6452 1 2025-09-05 23:06:28.924 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55894 10 6452 1 2025-09-05 23:03:25.218 00:04:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-05 23:07:29.338 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37348 10 6452 1 2025-09-05 23:04:25.220 00:04:00.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-05 23:08:29.742 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52322 10 6452 1 2025-09-05 23:08:47.042 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 23:08:46.972 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:08:47.040 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:08:47.134 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 23:08:47.123 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 23:09:30.147 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58280 10 6452 1 2025-09-05 23:10:30.514 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42474 10 6452 1 2025-09-05 23:11:30.924 00:00:11.008 TCP 1.101.0.1:3000 -> 23.104.0.1:40836 10 6452 1 2025-09-05 23:08:25.218 00:04:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-05 23:12:31.974 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52566 10 6452 1 2025-09-05 23:09:25.221 00:04:00.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-05 23:13:32.380 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:55732 12 10367 1 2025-09-05 23:13:47.189 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 23:13:47.424 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:13:47.335 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:13:47.049 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 23:13:47.417 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 23:13:25.220 00:01:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-05 23:14:32.856 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:52288 10 6452 1 2025-09-05 23:15:33.282 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48140 10 6452 1 2025-09-05 23:16:33.687 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34362 10 6452 1 2025-09-05 23:17:34.117 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51306 10 6452 1 2025-09-05 23:14:25.224 00:04:00.164 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-05 23:18:34.525 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49860 10 6452 1 2025-09-05 23:18:47.414 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 23:18:47.309 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:18:47.419 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:18:47.547 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 23:18:47.501 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 23:15:25.221 00:04:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-05 23:19:34.926 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:37990 10 6452 1 2025-09-05 23:20:35.353 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60426 10 6452 1 2025-09-05 23:21:35.756 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:39502 12 6556 1 2025-09-05 23:22:36.195 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57608 10 6452 1 2025-09-05 23:19:25.226 00:04:00.163 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-05 23:23:47.853 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 23:23:47.702 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 23:23:47.466 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:23:47.770 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:23:47.612 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 23:23:36.597 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51550 10 6452 1 2025-09-05 23:20:25.224 00:04:00.168 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-05 23:24:36.962 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53806 10 6452 1 2025-09-05 23:25:37.323 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48356 10 6452 1 2025-09-05 23:26:37.724 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:47884 10 6452 1 2025-09-05 23:27:38.175 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51280 10 6452 1 2025-09-05 23:24:25.228 00:04:00.162 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-05 23:28:47.676 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 23:28:47.372 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:28:47.717 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:28:47.567 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 23:28:38.583 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46028 10 6452 1 2025-09-05 23:28:47.800 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 23:25:25.227 00:04:00.166 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-05 23:29:38.940 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55894 10 6452 1 2025-09-05 23:29:25.232 00:01:00.160 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-05 23:30:39.356 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34414 10 6452 1 2025-09-05 23:31:39.763 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45704 10 6452 1 2025-09-05 23:32:40.132 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48668 10 6452 1 2025-09-05 23:31:25.232 00:02:00.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-05 23:33:47.869 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 23:33:47.837 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 23:33:47.722 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:33:47.788 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:33:40.539 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51410 10 6452 1 2025-09-05 23:33:47.595 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 23:30:25.228 00:04:00.166 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-05 23:34:40.933 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:48376 10 6452 1 2025-09-05 23:34:25.234 00:01:00.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-05 23:35:41.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44718 10 6452 1 2025-09-05 23:36:41.767 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60076 10 6452 1 2025-09-05 23:37:42.175 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46700 10 6452 1 2025-09-05 23:38:47.839 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 23:38:47.858 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:38:47.956 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:38:47.843 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 23:38:48.038 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 23:38:42.579 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45494 10 6452 1 2025-09-05 23:35:25.234 00:04:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-05 23:39:42.942 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53976 10 6452 1 2025-09-05 23:36:25.237 00:04:00.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-05 23:40:43.358 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48432 10 6452 1 2025-09-05 23:41:43.767 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:37552 10 6452 1 2025-09-05 23:42:44.190 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41084 10 6452 1 2025-09-05 23:43:48.045 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 23:43:48.114 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:43:47.920 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:43:47.811 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 23:43:48.004 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 23:43:44.551 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37776 10 6452 1 2025-09-05 23:40:25.235 00:04:00.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-05 23:44:44.954 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54504 10 6452 1 2025-09-05 23:41:25.239 00:04:00.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-05 23:45:45.371 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38894 10 6452 1 2025-09-05 23:45:25.238 00:01:00.158 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-05 23:46:45.781 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33520 10 6452 1 2025-09-05 23:47:46.192 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58632 10 6452 1 2025-09-05 23:48:48.169 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 23:48:48.086 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:48:48.085 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 23:48:48.088 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 23:48:47.679 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:48:46.593 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33136 10 6452 1 2025-09-05 23:47:25.238 00:02:00.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-05 23:49:46.957 00:00:10.459 TCP 1.101.0.1:3000 -> 23.104.0.1:57344 10 6452 1 2025-09-05 23:46:25.240 00:04:00.155 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-05 23:50:47.457 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49498 10 6452 1 2025-09-05 23:50:25.239 00:01:00.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-05 23:51:47.853 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:38068 10 6452 1 2025-09-05 23:52:48.275 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55574 10 6452 1 2025-09-05 23:53:48.415 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 23:53:48.023 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:53:48.414 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:53:48.311 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-05 23:53:48.497 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 23:53:48.672 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44880 10 6452 1 2025-09-05 23:54:49.102 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55590 10 6452 1 2025-09-05 23:51:25.242 00:04:00.154 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-05 23:55:49.466 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47160 10 6452 1 2025-09-05 23:52:25.246 00:04:00.154 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-05 23:56:49.891 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34214 10 6452 1 2025-09-05 23:57:50.301 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56788 10 6452 1 2025-09-05 23:58:48.367 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-05 23:58:48.060 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-05 23:58:48.066 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:58:48.286 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-05 23:58:48.292 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 Summary: total flows: 146, total bytes: 414075, total packets: 1006, avg bps: 914, avg pps: 0, avg bpp: 411 Time window: 2025-09-05 22:58:25 - 2025-09-05 23:58:48 Total flows processed: 146, passed: 146, Blocks skipped: 0, Bytes read: 15248 Sys: 0.0042s User: 0.0010s Wall: 0.0020s flows/second: 71355.0 Runtime: 0.0021s