Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 11:58:59.758 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:42902 10 6452 1 2025-09-13 11:55:28.984 00:05:00.065 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-13 12:00:00.178 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45582 10 6452 1 2025-09-13 11:56:28.980 00:05:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-13 12:01:00.578 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54898 10 6452 1 2025-09-13 12:02:00.980 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48060 10 6452 1 2025-09-13 12:02:32.600 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 12:02:32.667 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:02:32.581 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:02:32.517 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:02:32.563 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 12:03:01.391 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44330 10 6452 1 2025-09-13 12:04:01.797 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:42936 12 10367 1 2025-09-13 12:05:02.280 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43068 10 6452 1 2025-09-13 12:01:28.985 00:05:00.068 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-13 12:06:02.679 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45032 10 6452 1 2025-09-13 12:02:28.983 00:05:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-13 12:07:03.109 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51856 10 6452 1 2025-09-13 12:07:32.126 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:07:32.238 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:07:32.218 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:07:32.229 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 12:07:32.301 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 12:08:03.514 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49614 10 6452 1 2025-09-13 12:09:03.913 00:00:10.531 TCP 1.101.0.1:3000 -> 23.104.0.1:54070 10 6452 1 2025-09-13 12:10:04.479 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56736 10 6452 1 2025-09-13 12:11:04.882 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49740 10 6452 1 2025-09-13 12:07:28.986 00:05:00.068 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-13 12:12:05.288 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44620 10 6452 1 2025-09-13 12:08:28.983 00:05:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-13 12:12:32.506 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 12:12:32.345 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:12:32.181 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:12:32.423 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:12:32.462 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 12:13:05.696 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43846 10 6452 1 2025-09-13 12:14:06.106 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43586 10 6452 1 2025-09-13 12:15:06.519 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58340 10 6452 1 2025-09-13 12:16:06.924 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:49694 10 6452 1 2025-09-13 12:17:07.356 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50338 10 6452 1 2025-09-13 12:13:28.989 00:05:00.066 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-13 12:17:33.449 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 12:17:32.963 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:17:33.367 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:17:32.980 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 12:17:32.980 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:18:07.760 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:55394 10 6452 1 2025-09-13 12:14:28.990 00:05:00.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-13 12:19:08.188 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:54436 12 10365 1 2025-09-13 12:20:08.634 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36656 10 6452 1 2025-09-13 12:21:09.069 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49800 10 6452 1 2025-09-13 12:22:09.480 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36492 10 6452 1 2025-09-13 12:22:32.733 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:22:32.639 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:22:32.729 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:22:32.571 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 12:22:32.811 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 12:23:09.891 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:43166 12 6556 1 2025-09-13 12:19:28.992 00:05:00.065 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-13 12:24:10.315 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55548 10 6452 1 2025-09-13 12:20:28.990 00:05:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-13 12:25:10.727 00:00:10.653 TCP 1.101.0.1:3000 -> 23.104.0.1:39730 10 6452 1 2025-09-13 12:26:11.426 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39996 10 6452 1 2025-09-13 12:27:11.791 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51910 10 6452 1 2025-09-13 12:27:32.864 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:27:32.622 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:27:32.791 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:27:32.736 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 12:27:32.873 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 12:28:12.203 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37562 10 6452 1 2025-09-13 12:29:12.565 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37268 10 6452 1 2025-09-13 12:25:28.994 00:05:00.064 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-13 12:30:12.966 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59160 10 6452 1 2025-09-13 12:26:28.991 00:05:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-13 12:31:13.367 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45574 10 6452 1 2025-09-13 12:32:13.733 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44822 10 6452 1 2025-09-13 12:32:33.409 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:32:32.868 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:32:32.609 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:32:33.151 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 12:32:32.692 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 12:33:14.145 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52712 10 6452 1 2025-09-13 12:34:14.551 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41614 10 6452 1 2025-09-13 12:35:14.950 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45364 10 6452 1 2025-09-13 12:31:28.995 00:05:00.065 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-13 12:36:15.360 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52268 10 6452 1 2025-09-13 12:32:28.994 00:05:00.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-13 12:37:15.757 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:60644 10 6452 1 2025-09-13 12:37:32.661 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:37:32.844 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 12:37:32.846 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:37:32.616 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:37:32.743 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 12:38:16.177 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43016 10 6452 1 2025-09-13 12:39:16.577 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58986 10 6452 1 2025-09-13 12:40:16.980 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47820 10 6452 1 2025-09-13 12:41:17.388 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59790 10 6452 1 2025-09-13 12:37:28.998 00:05:00.063 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-13 12:42:33.156 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 12:42:17.798 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:52870 11 6504 1 2025-09-13 12:38:28.994 00:05:00.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-13 12:42:32.972 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:42:33.075 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:42:33.073 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:42:33.074 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 12:43:18.258 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49878 10 6452 1 2025-09-13 12:44:18.667 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57404 10 6452 1 2025-09-13 12:45:19.104 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60856 10 6452 1 2025-09-13 12:46:19.529 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:35952 10 6452 1 2025-09-13 12:47:19.993 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32924 10 6452 1 2025-09-13 12:47:33.147 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:47:32.855 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:47:33.150 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:47:32.959 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 12:47:33.234 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 12:48:20.398 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34948 10 6452 1 2025-09-13 12:44:28.997 00:05:00.067 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-13 12:43:29.000 00:06:00.061 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-13 12:49:20.764 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:45124 10 6452 1 2025-09-13 12:50:21.188 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:54052 10 6452 1 2025-09-13 12:51:21.582 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41162 10 6452 1 2025-09-13 12:52:33.332 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:52:33.225 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:52:21.987 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49418 10 6452 1 2025-09-13 12:52:33.322 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:52:33.328 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 12:52:33.405 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 12:53:22.394 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45856 10 6452 1 2025-09-13 12:54:22.794 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45314 10 6452 1 2025-09-13 12:50:29.001 00:06:00.064 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-13 12:50:29.003 00:06:00.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-13 12:55:23.208 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54542 10 6452 1 2025-09-13 12:56:23.609 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54384 10 6452 1 2025-09-13 12:57:33.451 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 12:57:33.374 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 12:57:33.242 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:57:24.015 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58468 10 6452 1 2025-09-13 12:57:33.369 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 12:57:33.376 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 12:58:24.372 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50822 10 6452 1 Summary: total flows: 140, total bytes: 425353, total packets: 1033, avg bps: 898, avg pps: 0, avg bpp: 411 Time window: 2025-09-13 11:55:28 - 2025-09-13 12:58:34 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0029s User: 0.0029s Wall: 0.0019s flows/second: 75109.1 Runtime: 0.0019s