Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 15:54:24.082 00:06:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-03 15:59:39.401 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43352 10 6452 1 2025-09-03 16:00:39.802 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52056 10 6452 1 2025-09-03 16:01:40.222 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54018 10 6452 1 2025-09-03 16:02:40.954 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 16:02:40.785 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 16:02:40.758 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:02:40.781 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:02:40.864 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:02:40.626 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43626 10 6452 1 2025-09-03 15:58:24.080 00:06:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-03 16:03:41.028 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:38432 12 10367 1 2025-09-03 16:04:41.505 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43062 10 6452 1 2025-09-03 16:05:41.907 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56724 10 6452 1 2025-09-03 16:01:24.082 00:06:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-03 16:06:42.319 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37010 10 6452 1 2025-09-03 16:07:41.518 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 16:07:41.377 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 16:07:41.157 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:07:41.377 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:07:41.460 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:07:42.684 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36110 10 6452 1 2025-09-03 16:08:43.107 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59100 10 6452 1 2025-09-03 16:09:43.510 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54926 10 6452 1 2025-09-03 16:08:24.084 00:02:00.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-03 16:05:24.081 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-03 16:10:43.935 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:45488 10 6452 1 2025-09-03 16:11:44.316 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47066 10 6452 1 2025-09-03 16:12:41.181 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 16:12:41.095 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 16:12:41.119 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:12:41.181 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:12:41.263 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:12:44.727 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44228 10 6452 1 2025-09-03 16:13:45.145 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:59940 10 6452 1 2025-09-03 16:12:24.082 00:02:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-03 16:14:45.526 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60514 10 6452 1 2025-09-03 16:11:24.084 00:04:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 16:15:45.924 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:40536 10 6452 1 2025-09-03 16:16:46.312 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58714 10 6452 1 2025-09-03 16:17:41.353 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:17:41.437 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 16:17:41.370 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 16:17:41.312 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:17:41.270 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:17:46.672 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47088 10 6452 1 2025-09-03 16:18:47.105 00:00:10.741 TCP 1.101.0.1:3000 -> 23.104.0.1:45390 10 6452 1 2025-09-03 16:15:24.084 00:04:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 16:19:47.889 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:34960 12 6556 1 2025-09-03 16:16:24.085 00:04:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 16:20:48.370 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:57692 10 6452 1 2025-09-03 16:21:48.772 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54964 10 6452 1 2025-09-03 16:22:41.579 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:22:41.441 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 16:22:41.445 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 16:22:41.244 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:22:41.493 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:22:49.177 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34314 10 6452 1 2025-09-03 16:23:49.580 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49856 10 6452 1 2025-09-03 16:20:24.087 00:04:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 16:24:49.990 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60180 10 6452 1 2025-09-03 16:21:24.089 00:04:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 16:25:50.355 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60942 10 6452 1 2025-09-03 16:26:50.763 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47678 10 6452 1 2025-09-03 16:27:41.553 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:27:41.454 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 16:27:41.537 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 16:27:41.555 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:27:41.471 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:27:51.177 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60138 10 6452 1 2025-09-03 16:28:51.578 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45288 10 6452 1 2025-09-03 16:25:24.087 00:04:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 16:29:51.984 00:00:10.859 TCP 1.101.0.1:3000 -> 23.104.0.1:52054 10 6452 1 2025-09-03 16:30:52.880 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59192 10 6452 1 2025-09-03 16:26:24.090 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-03 16:31:53.294 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38460 10 6452 1 2025-09-03 16:32:41.787 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 16:32:41.812 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 16:32:41.494 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:32:41.799 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:32:41.881 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:32:53.704 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59346 10 6452 1 2025-09-03 16:33:54.116 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51728 10 6452 1 2025-09-03 16:34:54.524 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53156 10 6452 1 2025-09-03 16:30:24.088 00:06:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-03 16:35:54.924 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35356 10 6452 1 2025-09-03 16:36:55.323 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47154 10 6452 1 2025-09-03 16:37:41.615 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:37:41.701 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 16:37:41.694 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 16:37:41.710 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:37:41.533 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:37:55.721 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52862 10 6452 1 2025-09-03 16:33:24.091 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-03 16:38:56.107 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33180 10 6452 1 2025-09-03 16:39:56.521 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43858 10 6452 1 2025-09-03 16:40:56.886 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56248 10 6452 1 2025-09-03 16:41:57.287 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42558 10 6452 1 2025-09-03 16:37:24.090 00:06:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-03 16:40:24.095 00:02:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-03 16:42:41.872 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:42:41.637 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 16:42:41.792 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 16:42:41.759 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:42:41.789 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:42:57.689 00:00:10.653 TCP 1.101.0.1:3000 -> 23.104.0.1:57616 10 6452 1 2025-09-03 16:43:58.394 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50486 10 6452 1 2025-09-03 16:44:58.794 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:47996 10 6452 1 2025-09-03 16:45:59.217 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50494 10 6452 1 2025-09-03 16:44:24.096 00:02:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-03 16:46:59.626 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52342 10 6452 1 2025-09-03 16:43:24.098 00:04:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 16:47:41.822 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:47:42.107 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 16:47:42.071 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 16:47:41.935 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:47:41.740 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:48:00.032 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:60236 12 10367 1 2025-09-03 16:49:00.512 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60476 10 6452 1 2025-09-03 16:50:00.915 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58420 10 6452 1 2025-09-03 16:51:01.320 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45588 10 6452 1 2025-09-03 16:47:24.095 00:04:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 16:52:01.734 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43908 10 6452 1 2025-09-03 16:48:24.097 00:04:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 16:52:41.927 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 16:52:42.237 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 16:52:41.968 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:52:41.922 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:52:42.006 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:53:02.135 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35964 10 6452 1 2025-09-03 16:54:02.535 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53638 10 6452 1 2025-09-03 16:55:02.893 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:36410 12 6556 1 2025-09-03 16:56:03.311 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60104 10 6452 1 2025-09-03 16:52:24.096 00:04:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 16:57:03.714 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40898 10 6452 1 2025-09-03 16:53:24.100 00:04:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 16:57:41.778 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 16:57:41.903 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 16:57:42.108 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:57:42.149 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 16:57:42.232 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 16:58:04.122 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50864 10 6452 1 Summary: total flows: 142, total bytes: 418955, total packets: 1024, avg bps: 875, avg pps: 0, avg bpp: 409 Time window: 2025-09-03 15:54:24 - 2025-09-03 16:58:14 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0019s User: 0.0029s Wall: 0.0018s flows/second: 78491.2 Runtime: 0.0018s