Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 16:59:04.525 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36378 10 6452 1 2025-09-03 17:00:04.938 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:35456 10 6452 1 2025-09-03 17:01:05.315 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59828 10 6452 1 2025-09-03 16:57:24.097 00:04:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 17:02:05.715 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44544 10 6452 1 2025-09-03 17:02:42.364 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 17:02:42.355 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 17:02:42.366 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:02:42.356 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:02:42.439 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 17:03:06.139 00:00:10.907 TCP 1.101.0.1:3000 -> 23.104.0.1:48784 10 6452 1 2025-09-03 16:58:24.100 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-03 17:04:07.124 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45906 10 6452 1 2025-09-03 17:05:07.530 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50630 10 6452 1 2025-09-03 17:06:07.930 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:36222 10 6452 1 2025-09-03 17:07:08.366 00:00:10.969 TCP 1.101.0.1:3000 -> 23.104.0.1:34284 10 6452 1 2025-09-03 17:02:24.098 00:06:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-03 17:07:42.343 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 17:07:42.220 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 17:07:42.180 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:07:42.220 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:07:42.304 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 17:08:09.373 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47348 10 6452 1 2025-09-03 17:09:09.776 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43932 10 6452 1 2025-09-03 17:05:24.102 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 790 1 2025-09-03 17:10:10.137 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40380 10 6452 1 2025-09-03 17:11:10.542 00:00:10.431 TCP 1.101.0.1:3000 -> 23.104.0.1:57614 11 6504 1 2025-09-03 17:12:11.021 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38982 10 6452 1 2025-09-03 17:12:42.420 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 17:12:42.427 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 17:12:42.198 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:12:42.496 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:12:42.578 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 17:13:11.419 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50998 10 6452 1 2025-09-03 17:09:24.101 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-09-03 17:14:11.821 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35750 10 6452 1 2025-09-03 17:15:12.188 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37704 10 6452 1 2025-09-03 17:11:24.363 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-09-03 17:16:12.548 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51556 10 6452 1 2025-09-03 17:17:12.959 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44698 10 6452 1 2025-09-03 17:17:42.538 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 17:17:42.534 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 17:17:42.583 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 17:17:42.146 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:17:42.455 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:15:24.368 00:03:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 421 1 2025-09-03 17:18:13.363 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51858 10 6452 1 2025-09-03 17:19:13.724 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:33888 10 6452 1 2025-09-03 17:18:24.103 00:01:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-03 17:20:14.144 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60350 10 6452 1 2025-09-03 17:21:14.552 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50904 10 6452 1 2025-09-03 17:22:14.953 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35188 10 6452 1 2025-09-03 17:22:42.522 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 17:22:42.428 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 17:22:42.670 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:22:42.431 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:22:42.513 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 17:19:24.100 00:04:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 17:23:15.362 00:00:10.490 TCP 1.101.0.1:3000 -> 23.104.0.1:55428 13 10419 1 2025-09-03 17:20:24.104 00:04:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 17:24:15.891 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:48314 12 6556 1 2025-09-03 17:25:16.311 00:00:10.789 TCP 1.101.0.1:3000 -> 23.104.0.1:48008 10 6452 1 2025-09-03 17:26:17.139 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50864 10 6452 1 2025-09-03 17:27:17.542 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36268 10 6452 1 2025-09-03 17:27:42.742 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 17:27:42.740 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 17:27:42.693 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:27:42.608 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:27:42.690 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 17:24:24.103 00:04:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 17:28:17.943 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:60886 10 6452 1 2025-09-03 17:25:24.105 00:04:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 17:29:18.389 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53916 10 6452 1 2025-09-03 17:30:18.752 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:54810 10 6452 1 2025-09-03 17:31:19.176 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53974 10 6452 1 2025-09-03 17:32:19.587 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60518 10 6452 1 2025-09-03 17:32:43.157 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 17:32:43.127 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 17:32:43.073 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 17:32:42.832 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:32:43.074 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:29:24.103 00:04:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 17:33:19.949 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37684 10 6452 1 2025-09-03 17:30:24.105 00:04:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 17:34:20.360 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33244 10 6452 1 2025-09-03 17:35:20.768 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:60118 10 6452 1 2025-09-03 17:36:21.185 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53738 10 6452 1 2025-09-03 17:37:21.588 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35094 10 6452 1 2025-09-03 17:37:43.064 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 17:37:43.108 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 17:37:42.783 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:37:43.103 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:37:43.186 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 17:34:24.104 00:04:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-03 17:38:21.993 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38938 10 6452 1 2025-09-03 17:39:22.404 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37390 10 6452 1 2025-09-03 17:35:24.107 00:06:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-03 17:40:22.809 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33152 10 6452 1 2025-09-03 17:41:23.178 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:52950 10 6452 1 2025-09-03 17:42:23.607 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:33828 10 6452 1 2025-09-03 17:42:43.033 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 17:42:42.872 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 17:42:42.763 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 17:42:42.919 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:42:42.951 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:43:24.069 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:49102 10 6452 1 2025-09-03 17:39:24.105 00:06:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-03 17:44:24.490 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45056 10 6452 1 2025-09-03 17:45:24.899 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38058 10 6452 1 2025-09-03 17:42:24.108 00:04:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 17:46:25.265 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:46814 11 6504 1 2025-09-03 17:47:43.088 00:00:00.052 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 17:47:25.730 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59370 10 6452 1 2025-09-03 17:47:43.099 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 17:47:43.145 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 17:47:43.058 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:47:43.006 00:00:00.050 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:48:26.139 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51244 10 6452 1 2025-09-03 17:49:26.550 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45726 10 6452 1 2025-09-03 17:50:26.953 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:41066 10 6452 1 2025-09-03 17:46:24.106 00:06:00.275 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-03 17:47:24.109 00:04:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 17:51:27.372 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43688 10 6452 1 2025-09-03 17:52:27.736 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59394 10 6452 1 2025-09-03 17:52:43.364 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 17:52:43.172 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 17:52:43.227 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 17:52:43.108 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:52:43.282 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:53:28.112 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34120 10 6452 1 2025-09-03 17:54:28.525 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54988 10 6452 1 2025-09-03 17:53:24.107 00:02:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-03 17:55:28.880 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58456 10 6452 1 2025-09-03 17:52:24.110 00:04:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-03 17:56:29.280 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56428 10 6452 1 2025-09-03 17:57:29.690 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37248 10 6452 1 2025-09-03 17:57:43.249 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:57:43.249 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 17:57:43.291 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 17:57:43.327 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 17:57:43.331 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 17:58:30.102 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59106 10 6452 1 Summary: total flows: 142, total bytes: 420929, total packets: 1023, avg bps: 915, avg pps: 0, avg bpp: 411 Time window: 2025-09-03 16:57:24 - 2025-09-03 17:58:40 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0038s User: 0.0010s Wall: 0.0015s flows/second: 92988.5 Runtime: 0.0015s