Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 09:54:28.452 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 09:59:27.921 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42712 10 6452 1 2025-09-12 10:00:28.336 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56526 10 6452 1 2025-09-12 09:56:28.453 00:06:00.003 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-12 10:01:28.737 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37634 10 6452 1 2025-09-12 10:02:00.985 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 10:02:00.781 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 10:02:00.765 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:02:00.982 00:00:00.019 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:02:01.065 00:00:00.018 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 10:02:29.141 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51836 10 6452 1 2025-09-12 10:03:29.557 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35358 10 6452 1 2025-09-12 10:04:29.914 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51104 10 6452 1 2025-09-12 10:05:30.317 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51628 10 6452 1 2025-09-12 10:01:28.454 00:06:00.014 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 10:06:30.731 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:60322 10 6452 1 2025-09-12 10:07:00.989 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 10:07:01.108 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 10:07:01.156 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:07:01.164 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:07:01.248 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 10:07:31.153 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42120 10 6452 1 2025-09-12 10:03:28.455 00:06:00.010 TCP 179.21.23.23:179 -> 179.21.23.21:38570 9 601 1 2025-09-12 10:08:31.558 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49956 10 6452 1 2025-09-12 10:09:31.964 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59782 10 6452 1 2025-09-12 10:10:32.387 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55856 10 6452 1 2025-09-12 10:11:32.790 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43940 10 6452 1 2025-09-12 10:12:01.265 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 10:12:01.379 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 10:12:01.467 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 10:12:00.909 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:12:01.184 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:12:33.157 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36450 10 6452 1 2025-09-12 10:08:28.454 00:06:00.014 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 10:13:33.557 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:44098 10 6452 1 2025-09-12 10:14:33.918 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46716 10 6452 1 2025-09-12 10:10:28.465 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 10:15:34.326 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59264 10 6452 1 2025-09-12 10:16:34.733 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32814 10 6452 1 2025-09-12 10:17:01.432 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 10:17:01.348 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 10:17:01.342 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 10:17:01.238 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:17:01.348 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:17:35.145 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40184 10 6452 1 2025-09-12 10:18:35.548 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48434 10 6452 1 2025-09-12 10:19:35.948 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:39822 10 6452 1 2025-09-12 10:15:28.454 00:06:00.015 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 10:20:36.375 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46348 10 6452 1 2025-09-12 10:21:36.783 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52650 10 6452 1 2025-09-12 10:22:01.422 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 10:22:01.174 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 10:22:01.192 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 10:22:01.085 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:22:01.340 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:17:28.466 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 10:22:37.198 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47800 10 6452 1 2025-09-12 10:23:37.599 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38278 10 6452 1 2025-09-12 10:24:38.002 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51196 10 6452 1 2025-09-12 10:25:38.403 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57008 10 6452 1 2025-09-12 10:26:38.807 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38324 10 6452 1 2025-09-12 10:27:01.577 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 10:27:01.481 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 10:27:01.504 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:27:01.546 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:27:01.631 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 10:22:28.457 00:06:00.015 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 10:27:39.220 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33118 10 6452 1 2025-09-12 10:28:39.637 00:00:10.461 TCP 1.101.0.1:3000 -> 23.104.0.1:60786 12 10367 1 2025-09-12 10:24:28.469 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 10:29:40.135 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42658 10 6452 1 2025-09-12 10:30:40.546 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:52576 10 6452 1 2025-09-12 10:31:40.928 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:60440 10 6452 1 2025-09-12 10:32:01.506 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:32:01.498 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:32:01.502 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 10:32:01.499 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 10:32:01.582 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 10:32:41.362 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40848 10 6452 1 2025-09-12 10:33:41.767 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54048 10 6452 1 2025-09-12 10:29:28.459 00:06:00.015 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 10:34:42.177 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57572 10 6452 1 2025-09-12 10:35:42.576 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41188 10 6452 1 2025-09-12 10:31:28.470 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 10:36:42.975 00:00:11.172 TCP 1.101.0.1:3000 -> 23.104.0.1:41386 10 6452 1 2025-09-12 10:37:01.730 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 10:37:01.648 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 10:37:01.640 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 10:37:01.455 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:37:01.648 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:37:44.190 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53224 10 6452 1 2025-09-12 10:38:44.593 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37176 10 6452 1 2025-09-12 10:39:44.992 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43154 10 6452 1 2025-09-12 10:40:45.391 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58586 10 6452 1 2025-09-12 10:36:28.462 00:06:00.012 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 10:41:45.796 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49176 10 6452 1 2025-09-12 10:42:02.025 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 10:42:01.939 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 10:42:01.835 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 10:42:01.972 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:42:01.943 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:42:46.203 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53530 10 6452 1 2025-09-12 10:38:28.470 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 10:43:46.608 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45594 10 6452 1 2025-09-12 10:44:47.027 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35122 10 6452 1 2025-09-12 10:45:47.430 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40784 10 6452 1 2025-09-12 10:46:47.833 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:45048 10 6452 1 2025-09-12 10:47:01.878 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 10:47:01.891 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 10:47:01.888 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 10:47:01.914 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:47:01.796 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:47:48.267 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34684 10 6452 1 2025-09-12 10:43:28.465 00:06:00.011 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 10:48:48.672 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48632 10 6452 1 2025-09-12 10:49:49.113 00:00:10.769 TCP 1.101.0.1:3000 -> 23.104.0.1:54244 10 6452 1 2025-09-12 10:45:28.472 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 10:50:49.926 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:33284 10 6452 1 2025-09-12 10:52:02.009 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 10:51:50.351 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39770 10 6452 1 2025-09-12 10:52:02.135 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 10:52:01.968 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:52:02.009 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:52:02.092 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 10:52:50.754 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48036 10 6452 1 2025-09-12 10:53:51.119 00:00:10.770 TCP 1.101.0.1:3000 -> 23.104.0.1:33102 10 6452 1 2025-09-12 10:54:51.929 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:47390 10 6452 1 2025-09-12 10:50:28.469 00:06:00.010 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-12 10:55:52.357 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59614 10 6452 1 2025-09-12 10:57:02.224 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-12 10:57:01.968 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-12 10:57:02.143 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-12 10:56:52.784 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48836 10 6452 1 2025-09-12 10:57:01.729 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:57:02.141 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-12 10:52:28.474 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-12 10:57:53.149 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47262 10 6452 1 Summary: total flows: 137, total bytes: 412393, total packets: 970, avg bps: 859, avg pps: 0, avg bpp: 425 Time window: 2025-09-12 09:54:28 - 2025-09-12 10:58:28 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0041s User: 0.0010s Wall: 0.0024s flows/second: 58295.6 Runtime: 0.0024s