Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 07:59:19.030 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47028 10 6452 1 2025-09-04 07:58:24.398 00:02:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 08:00:19.435 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34678 10 6452 1 2025-09-04 07:59:24.400 00:02:00.245 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 08:01:19.837 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:58188 10 6452 1 2025-09-04 08:01:24.399 00:01:00.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 08:02:20.272 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48312 10 6452 1 2025-09-04 08:02:59.880 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:03:00.283 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 08:03:00.375 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 08:03:00.088 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 08:03:00.200 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:02:24.401 00:01:00.244 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 08:03:20.638 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57830 10 6452 1 2025-09-04 08:04:21.054 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32790 10 6452 1 2025-09-04 08:04:24.400 00:01:00.245 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 08:03:24.399 00:02:00.249 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 08:05:21.453 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57496 10 6452 1 2025-09-04 08:06:21.852 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:50776 10 6452 1 2025-09-04 08:06:24.400 00:01:00.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 08:07:22.275 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39290 10 6452 1 2025-09-04 08:08:00.544 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 08:08:00.420 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 08:08:00.453 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 08:08:00.272 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:08:00.461 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:06:24.404 00:02:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 08:08:22.673 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54816 10 6452 1 2025-09-04 08:09:23.104 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49728 10 6452 1 2025-09-04 08:08:24.401 00:02:00.248 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 08:09:24.404 00:01:00.243 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 08:10:23.470 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60734 10 6452 1 2025-09-04 08:11:23.878 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:53674 10 6452 1 2025-09-04 08:11:24.403 00:01:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 08:12:24.302 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38988 10 6452 1 2025-09-04 08:13:00.627 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 08:13:00.402 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 08:13:00.538 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 08:13:00.615 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:13:00.544 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:11:24.405 00:02:00.243 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 08:13:24.710 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47398 10 6452 1 2025-09-04 08:14:25.114 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47838 10 6452 1 2025-09-04 08:13:24.403 00:02:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 08:14:24.407 00:01:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 08:15:25.480 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51682 10 6452 1 2025-09-04 08:16:25.880 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41230 10 6452 1 2025-09-04 08:16:24.404 00:01:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 08:17:26.279 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49516 10 6452 1 2025-09-04 08:18:00.379 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 08:18:00.377 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 08:18:00.517 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:18:00.466 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:18:00.550 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 08:16:24.406 00:02:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 08:18:26.691 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:38812 12 10367 1 2025-09-04 08:18:24.403 00:01:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 08:19:27.185 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33822 10 6452 1 2025-09-04 08:19:24.409 00:01:00.239 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 08:20:27.589 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45952 10 6452 1 2025-09-04 08:21:27.959 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60706 10 6452 1 2025-09-04 08:20:24.405 00:02:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 08:22:28.364 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:52820 10 6452 1 2025-09-04 08:23:00.932 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 08:23:00.817 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 08:23:00.691 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 08:23:00.655 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:23:00.849 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:21:24.407 00:02:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 08:23:28.765 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38902 10 6452 1 2025-09-04 08:23:24.405 00:01:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 08:24:29.178 00:00:10.752 TCP 1.101.0.1:3000 -> 23.104.0.1:51696 10 6452 1 2025-09-04 08:24:24.408 00:01:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 08:25:29.966 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59536 10 6452 1 2025-09-04 08:26:30.376 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51280 10 6452 1 2025-09-04 08:25:24.405 00:02:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 08:27:30.777 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43272 10 6452 1 2025-09-04 08:28:00.782 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 08:28:00.660 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 08:28:00.758 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:28:00.740 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:28:00.822 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 08:26:24.408 00:02:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 08:28:31.146 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56862 10 6452 1 2025-09-04 08:28:24.406 00:01:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 08:29:31.549 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50650 10 6452 1 2025-09-04 08:29:24.409 00:01:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 08:30:31.950 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:32814 10 6452 1 2025-09-04 08:31:32.359 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60414 10 6452 1 2025-09-04 08:30:24.406 00:02:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 08:32:32.765 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46082 10 6452 1 2025-09-04 08:33:00.878 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 08:33:00.699 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 08:33:00.789 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 08:33:00.673 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:33:00.791 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:31:24.409 00:02:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 08:33:33.182 00:00:10.699 TCP 1.101.0.1:3000 -> 23.104.0.1:47952 10 6452 1 2025-09-04 08:33:24.408 00:01:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 08:34:33.919 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:41276 11 6504 1 2025-09-04 08:34:24.410 00:01:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 08:35:34.369 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57432 10 6452 1 2025-09-04 08:36:34.776 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60848 10 6452 1 2025-09-04 08:36:24.410 00:01:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 08:35:24.407 00:02:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 08:37:35.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49434 10 6452 1 2025-09-04 08:38:01.243 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 08:38:01.218 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 08:38:01.214 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 08:38:01.168 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:38:01.160 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:38:35.587 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:42188 12 10367 1 2025-09-04 08:38:24.409 00:01:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 08:39:36.032 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60124 10 6452 1 2025-09-04 08:38:24.412 00:02:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 08:40:36.439 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54338 10 6452 1 2025-09-04 08:41:36.845 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:41500 10 6452 1 2025-09-04 08:41:24.412 00:01:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 08:40:24.409 00:02:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 08:42:37.267 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59368 10 6452 1 2025-09-04 08:43:01.187 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 08:43:01.155 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 08:43:01.151 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 08:43:00.989 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:43:01.105 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:43:37.669 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:35060 12 10367 1 2025-09-04 08:43:24.410 00:01:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 08:44:38.151 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40988 10 6452 1 2025-09-04 08:43:24.413 00:02:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 08:45:38.565 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59820 10 6452 1 2025-09-04 08:46:38.969 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47376 10 6452 1 2025-09-04 08:46:24.414 00:01:00.245 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 08:45:24.411 00:02:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 08:47:39.382 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38284 10 6452 1 2025-09-04 08:48:01.295 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 08:48:00.963 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 08:48:01.098 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 08:48:01.015 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:48:01.211 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:48:39.787 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52582 10 6452 1 2025-09-04 08:48:24.412 00:01:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 08:49:40.192 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39606 10 6452 1 2025-09-04 08:48:24.414 00:02:00.244 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 08:50:40.596 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46824 10 6452 1 2025-09-04 08:50:24.412 00:01:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 08:51:40.997 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:37826 10 6452 1 2025-09-04 08:51:24.414 00:01:00.244 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 08:52:41.452 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:53896 10 6452 1 2025-09-04 08:53:01.301 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 08:53:01.217 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 08:53:01.040 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 08:53:00.989 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:53:01.217 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:53:41.812 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51736 10 6452 1 2025-09-04 08:52:24.412 00:02:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-04 08:54:42.216 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46144 10 6452 1 2025-09-04 08:53:24.414 00:02:00.245 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-04 08:55:42.634 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:35266 11 6504 1 2025-09-04 08:55:24.412 00:01:00.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-04 08:56:43.105 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58730 10 6452 1 2025-09-04 08:56:24.415 00:01:00.245 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-04 08:57:43.515 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57516 10 6452 1 2025-09-04 08:58:01.328 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-04 08:58:01.340 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-04 08:58:01.341 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-04 08:58:01.508 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-04 08:58:01.247 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 167, total bytes: 422151, total packets: 1014, avg bps: 944, avg pps: 0, avg bpp: 416 Time window: 2025-09-04 07:58:24 - 2025-09-04 08:58:01 Total flows processed: 167, passed: 167, Blocks skipped: 0, Bytes read: 17432 Sys: 0.0034s User: 0.0017s Wall: 0.0028s flows/second: 58886.0 Runtime: 0.0029s