Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 06:58:54.342 00:00:10.659 TCP 1.101.0.1:3000 -> 23.104.0.1:40234 10 6452 1 2025-09-04 06:57:24.380 00:02:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 06:59:55.036 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58596 10 6452 1 2025-09-04 07:00:55.399 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50008 10 6452 1 2025-09-04 07:00:24.381 00:01:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 06:59:24.380 00:02:00.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 07:01:55.800 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:44974 10 6452 1 2025-09-04 07:02:59.091 00:00:00.045 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 07:02:58.947 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 07:02:58.826 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 07:02:58.890 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:02:59.010 00:00:00.044 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:02:56.184 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:54500 10 6452 1 2025-09-04 07:02:24.379 00:01:00.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 07:03:56.584 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35922 10 6452 1 2025-09-04 07:02:24.381 00:02:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 07:04:56.981 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60320 10 6452 1 2025-09-04 07:05:57.382 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57882 10 6452 1 2025-09-04 07:05:24.383 00:01:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 07:04:24.380 00:02:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 07:06:57.792 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:39074 10 6452 1 2025-09-04 07:07:59.253 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 07:07:59.176 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 07:07:59.103 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 07:07:58.898 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:07:59.171 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:07:58.188 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:55772 11 6504 1 2025-09-04 07:07:24.380 00:01:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 07:08:58.658 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46636 10 6452 1 2025-09-04 07:07:24.383 00:02:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 07:09:59.019 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59692 10 6452 1 2025-09-04 07:10:59.425 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39926 10 6452 1 2025-09-04 07:10:24.385 00:01:00.245 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 07:11:59.834 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:60234 10 6452 1 2025-09-04 07:12:59.610 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 07:12:59.587 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 07:12:59.532 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 07:12:59.358 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:12:59.528 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:13:00.261 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45110 10 6452 1 2025-09-04 07:09:24.383 00:04:00.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-04 07:14:00.667 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55916 10 6452 1 2025-09-04 07:12:24.386 00:02:00.245 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 07:15:01.098 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48330 10 6452 1 2025-09-04 07:14:24.384 00:01:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 07:16:01.527 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48802 10 6452 1 2025-09-04 07:15:24.387 00:01:00.244 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 07:17:01.891 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42996 12 6556 1 2025-09-04 07:17:59.395 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 07:17:59.328 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 07:17:59.216 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:17:59.322 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:17:59.405 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 07:18:02.309 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60352 10 6452 1 2025-09-04 07:16:24.384 00:02:00.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 07:19:02.712 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49146 10 6452 1 2025-09-04 07:17:24.388 00:02:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 07:20:03.115 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55176 10 6452 1 2025-09-04 07:19:24.385 00:01:00.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 07:21:03.480 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51244 10 6452 1 2025-09-04 07:20:24.387 00:01:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 07:22:03.905 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34068 10 6452 1 2025-09-04 07:22:59.433 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 07:22:59.418 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 07:22:59.425 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 07:22:59.330 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:22:59.351 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:23:04.313 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:42200 10 6452 1 2025-09-04 07:21:24.385 00:02:00.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 07:24:04.680 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52016 10 6452 1 2025-09-04 07:22:24.390 00:02:00.246 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 07:25:05.109 00:00:10.811 TCP 1.101.0.1:3000 -> 23.104.0.1:58832 10 6452 1 2025-09-04 07:24:24.385 00:01:00.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 07:26:05.955 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46710 10 6452 1 2025-09-04 07:25:24.388 00:01:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 07:27:06.362 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41924 10 6452 1 2025-09-04 07:27:59.492 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 07:27:59.623 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 07:27:59.509 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:27:59.663 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:27:59.746 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 07:28:06.763 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:47520 10 6452 1 2025-09-04 07:26:24.385 00:02:00.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 07:29:07.144 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54398 10 6452 1 2025-09-04 07:30:07.551 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60442 10 6452 1 2025-09-04 07:29:24.386 00:01:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 07:31:07.960 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39566 10 6452 1 2025-09-04 07:27:24.387 00:04:00.249 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-04 07:32:08.331 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40990 10 6452 1 2025-09-04 07:32:59.971 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 07:32:59.758 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:32:59.887 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:32:59.838 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 07:32:59.715 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 07:33:08.738 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:35388 12 10367 1 2025-09-04 07:31:24.387 00:02:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 07:32:24.390 00:01:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 07:34:09.221 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42606 10 6452 1 2025-09-04 07:35:09.588 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49658 10 6452 1 2025-09-04 07:34:24.390 00:01:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 07:34:24.391 00:02:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 07:36:09.993 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60984 10 6452 1 2025-09-04 07:37:10.355 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:39368 10 6452 1 2025-09-04 07:37:59.923 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:37:59.971 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 07:37:59.753 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:37:59.982 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 07:38:00.007 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 07:37:24.392 00:01:00.246 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 07:36:24.390 00:02:00.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 07:38:10.759 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34426 10 6452 1 2025-09-04 07:39:11.168 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33746 10 6452 1 2025-09-04 07:40:11.524 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45208 10 6452 1 2025-09-04 07:39:24.392 00:01:00.249 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 07:39:24.395 00:02:00.244 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 07:41:11.890 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:44190 10 6452 1 2025-09-04 07:42:12.316 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:59400 10 6452 1 2025-09-04 07:42:59.861 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 07:42:59.955 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 07:42:59.847 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 07:42:59.805 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:42:59.778 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:43:12.716 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:32944 10 6452 1 2025-09-04 07:41:24.393 00:02:00.249 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 07:42:24.396 00:01:00.243 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 07:44:13.104 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35266 10 6452 1 2025-09-04 07:44:24.395 00:01:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 07:45:13.507 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46902 10 6452 1 2025-09-04 07:44:24.396 00:02:00.243 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 07:46:13.874 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40804 10 6452 1 2025-09-04 07:46:24.396 00:01:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 07:47:14.286 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45918 10 6452 1 2025-09-04 07:47:59.847 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 07:47:59.917 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 07:47:59.796 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:48:00.025 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:48:00.107 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 07:47:24.398 00:01:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 07:48:14.693 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51526 10 6452 1 2025-09-04 07:49:15.057 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36052 10 6452 1 2025-09-04 07:48:24.395 00:02:00.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 07:50:15.463 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34870 10 6452 1 2025-09-04 07:49:24.398 00:02:00.244 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 07:51:15.864 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43852 10 6452 1 2025-09-04 07:51:24.395 00:01:00.249 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 07:52:16.273 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46850 10 6452 1 2025-09-04 07:53:00.284 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 07:53:00.218 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 07:53:00.341 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 07:53:00.292 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:53:00.202 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:52:24.399 00:01:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 07:53:16.641 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:57856 10 6452 1 2025-09-04 07:54:17.036 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36778 10 6452 1 2025-09-04 07:53:24.397 00:02:00.249 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 07:55:17.439 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35852 10 6452 1 2025-09-04 07:54:24.400 00:02:00.244 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 07:56:17.843 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:43122 10 6452 1 2025-09-04 07:56:24.399 00:01:00.249 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 07:57:18.226 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35512 10 6452 1 2025-09-04 07:58:00.157 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 07:58:00.155 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 07:58:00.011 00:00:00.035 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:58:00.156 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 07:58:00.239 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 07:57:24.401 00:01:00.245 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 07:58:18.632 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55392 10 6452 1 Summary: total flows: 167, total bytes: 421194, total packets: 1027, avg bps: 919, avg pps: 0, avg bpp: 410 Time window: 2025-09-04 06:57:24 - 2025-09-04 07:58:29 Total flows processed: 167, passed: 167, Blocks skipped: 0, Bytes read: 17432 Sys: 0.0026s User: 0.0017s Wall: 0.0023s flows/second: 71365.1 Runtime: 0.0024s