Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-22 14:59:00.922 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60806 10 6452 1 2025-09-22 15:00:01.337 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34574 10 6452 1 2025-09-22 15:01:01.744 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60654 10 6452 1 2025-09-22 15:01:55.924 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:01:55.935 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:01:55.715 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:01:55.843 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:01:55.843 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:02:02.149 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49068 10 6452 1 2025-09-22 14:57:33.407 00:06:00.103 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:03:02.511 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41878 10 6452 1 2025-09-22 15:04:02.919 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44102 10 6452 1 2025-09-22 14:59:33.410 00:06:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:05:03.325 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44560 10 6452 1 2025-09-22 15:06:03.727 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35762 10 6452 1 2025-09-22 15:06:55.941 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:06:55.820 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:06:55.738 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:06:55.858 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:06:55.820 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:07:04.138 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47118 10 6452 1 2025-09-22 15:08:04.542 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39320 10 6452 1 2025-09-22 15:09:04.950 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58684 10 6452 1 2025-09-22 15:04:33.408 00:06:00.103 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:10:05.368 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34540 10 6452 1 2025-09-22 15:11:05.768 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39474 10 6452 1 2025-09-22 15:06:33.411 00:06:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:11:55.637 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:11:55.840 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:11:55.955 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:11:55.655 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:11:56.039 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:12:06.137 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:34468 10 6452 1 2025-09-22 15:13:06.509 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57422 10 6452 1 2025-09-22 15:14:06.911 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41638 10 6452 1 2025-09-22 15:15:07.324 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46942 10 6452 1 2025-09-22 15:16:07.727 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44742 10 6452 1 2025-09-22 15:11:33.411 00:06:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:16:55.888 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:16:55.872 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:16:56.048 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:16:56.064 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:16:56.132 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:17:08.140 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50412 10 6452 1 2025-09-22 15:18:08.544 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47934 10 6452 1 2025-09-22 15:13:33.414 00:06:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:19:08.954 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57654 10 6452 1 2025-09-22 15:20:09.364 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35536 10 6452 1 2025-09-22 15:21:09.768 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:47516 12 10367 1 2025-09-22 15:21:55.802 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:21:55.789 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:21:56.190 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:21:56.143 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:21:56.106 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:22:10.249 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49906 10 6452 1 2025-09-22 15:23:10.647 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36774 10 6452 1 2025-09-22 15:18:33.413 00:06:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:24:11.059 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37992 10 6452 1 2025-09-22 15:25:11.471 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:45106 10 6452 1 2025-09-22 15:20:33.415 00:06:00.097 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:26:11.830 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:56958 12 10365 1 2025-09-22 15:26:56.436 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:26:56.113 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:26:56.436 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:26:56.170 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:26:56.520 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:27:12.291 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40034 10 6452 1 2025-09-22 15:28:12.693 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:60816 10 6452 1 2025-09-22 15:29:13.062 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37994 10 6452 1 2025-09-22 15:30:13.421 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44304 10 6452 1 2025-09-22 15:25:33.414 00:06:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:31:13.824 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:58626 11 6504 1 2025-09-22 15:31:56.417 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:31:56.243 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:31:56.088 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:31:56.336 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:31:56.338 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:32:14.283 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43026 10 6452 1 2025-09-22 15:27:33.417 00:06:00.097 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:33:14.686 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42574 10 6452 1 2025-09-22 15:34:15.071 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46658 10 6452 1 2025-09-22 15:35:15.473 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55622 10 6452 1 2025-09-22 15:36:15.883 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42958 10 6452 1 2025-09-22 15:36:56.525 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:36:56.395 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:36:56.357 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:36:56.442 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:36:56.396 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:37:16.285 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54620 10 6452 1 2025-09-22 15:32:33.415 00:06:00.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:38:16.685 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33678 10 6452 1 2025-09-22 15:39:17.108 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55382 10 6452 1 2025-09-22 15:34:33.419 00:06:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:40:17.512 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45902 10 6452 1 2025-09-22 15:41:17.874 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50500 10 6452 1 2025-09-22 15:41:56.450 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:41:56.476 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:41:56.498 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:41:56.369 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:41:56.484 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:42:18.283 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38292 10 6452 1 2025-09-22 15:43:18.647 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59654 10 6452 1 2025-09-22 15:44:19.062 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57770 10 6452 1 2025-09-22 15:39:33.418 00:06:00.100 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:45:19.464 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42670 10 6452 1 2025-09-22 15:46:19.870 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47880 10 6452 1 2025-09-22 15:41:33.422 00:06:00.099 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:46:56.769 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:46:56.680 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:46:56.636 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:46:56.687 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:46:56.580 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:47:20.278 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39770 10 6452 1 2025-09-22 15:48:20.689 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57546 10 6452 1 2025-09-22 15:49:21.107 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52220 10 6452 1 2025-09-22 15:50:21.474 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37012 10 6452 1 2025-09-22 15:46:33.419 00:06:00.104 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:51:21.876 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42140 10 6452 1 2025-09-22 15:51:56.753 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:51:56.479 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:51:56.805 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:51:56.757 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:51:56.888 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:52:22.277 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54114 10 6452 1 2025-09-22 15:53:22.640 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36958 10 6452 1 2025-09-22 15:48:33.422 00:06:00.099 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-22 15:54:23.072 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37606 10 6452 1 2025-09-22 15:55:23.481 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36970 10 6452 1 2025-09-22 15:56:23.889 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:51238 10 6452 1 2025-09-22 15:56:57.038 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-22 15:56:57.098 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-22 15:56:56.986 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:56:56.955 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-22 15:56:57.158 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-22 15:57:24.268 00:00:10.571 TCP 1.101.0.1:3000 -> 23.104.0.1:51872 10 6452 1 2025-09-22 15:53:33.424 00:06:00.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-22 15:58:24.881 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49332 10 6452 1 Summary: total flows: 137, total bytes: 424757, total packets: 1023, avg bps: 913, avg pps: 0, avg bpp: 415 Time window: 2025-09-22 14:57:33 - 2025-09-22 15:59:33 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0042s User: 0.0000s Wall: 0.0029s flows/second: 46965.2 Runtime: 0.0029s