Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 14:59:17.228 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40280 10 6452 1 2025-09-13 15:00:17.632 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55060 10 6452 1 2025-09-13 15:01:18.031 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34810 10 6452 1 2025-09-13 14:57:29.091 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-13 15:02:18.388 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41382 10 6452 1 2025-09-13 15:02:35.654 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 15:02:35.917 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 15:02:35.789 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:02:35.960 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:02:36.044 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 15:03:18.789 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33388 10 6452 1 2025-09-13 15:04:19.153 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48064 10 6452 1 2025-09-13 15:00:29.068 00:05:00.028 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-13 15:05:19.556 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53276 10 6452 1 2025-09-13 15:06:19.974 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46556 10 6452 1 2025-09-13 15:07:20.336 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43882 10 6452 1 2025-09-13 15:07:36.387 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 15:07:36.229 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 15:07:36.221 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 15:07:35.999 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:07:36.304 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:08:20.739 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34016 10 6452 1 2025-09-13 15:04:29.094 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-13 15:09:21.143 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:47342 10 6452 1 2025-09-13 15:06:29.071 00:04:00.027 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-13 15:10:21.569 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:60542 10 6452 1 2025-09-13 15:11:21.934 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:33034 10 6452 1 2025-09-13 15:12:22.359 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41616 10 6452 1 2025-09-13 15:12:35.983 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 15:12:36.085 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 15:12:35.894 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 15:12:35.905 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:12:35.901 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:13:22.766 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40242 10 6452 1 2025-09-13 15:14:23.172 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44310 10 6452 1 2025-09-13 15:11:29.074 00:04:00.024 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-13 15:15:23.596 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59258 10 6452 1 2025-09-13 15:11:29.096 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-13 15:16:24.012 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36118 10 6452 1 2025-09-13 15:17:24.415 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50338 10 6452 1 2025-09-13 15:17:36.159 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 15:17:36.208 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 15:17:36.103 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:17:36.153 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:17:36.236 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 15:18:24.823 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41438 10 6452 1 2025-09-13 15:19:25.228 00:00:10.489 TCP 1.101.0.1:3000 -> 23.104.0.1:57906 14 10471 1 2025-09-13 15:20:25.759 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:47956 10 6452 1 2025-09-13 15:16:29.076 00:06:00.025 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-13 15:21:26.177 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49140 10 6452 1 2025-09-13 15:22:36.182 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:22:36.395 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 15:22:26.589 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41228 10 6452 1 2025-09-13 15:22:36.388 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 15:22:36.529 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:22:36.265 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 15:18:29.098 00:05:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 426 1 2025-09-13 15:23:26.945 00:00:15.503 TCP 1.101.0.1:3000 -> 23.104.0.1:41888 10 6452 1 2025-09-13 15:24:32.530 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54786 10 6452 1 2025-09-13 15:25:32.933 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:45616 10 6452 1 2025-09-13 15:26:33.362 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36316 10 6452 1 2025-09-13 15:27:36.323 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 15:27:36.392 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 15:27:36.386 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 15:27:36.188 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:27:36.241 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:27:33.767 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:44352 10 6452 1 2025-09-13 15:23:29.079 00:06:00.023 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-13 15:24:29.099 00:04:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-13 15:28:34.183 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33474 10 6452 1 2025-09-13 15:29:34.581 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40800 10 6452 1 2025-09-13 15:30:34.995 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42242 10 6452 1 2025-09-13 15:31:35.405 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48952 10 6452 1 2025-09-13 15:32:36.484 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 15:32:36.444 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 15:32:36.103 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:32:36.447 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:32:36.529 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 15:32:35.813 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33010 10 6452 1 2025-09-13 15:29:29.099 00:04:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-13 15:33:36.225 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46526 10 6452 1 2025-09-13 15:34:36.628 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39960 10 6452 1 2025-09-13 15:30:29.084 00:06:00.019 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-13 15:35:36.989 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55436 10 6452 1 2025-09-13 15:36:37.393 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40042 10 6452 1 2025-09-13 15:37:29.085 00:00:00.018 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-09-13 15:37:36.546 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 15:37:36.551 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 15:37:36.548 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 15:37:36.404 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:37:36.464 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:37:37.756 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:36006 10 6452 1 2025-09-13 15:34:29.100 00:04:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-13 15:38:38.186 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53254 10 6452 1 2025-09-13 15:39:38.591 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37220 10 6452 1 2025-09-13 15:40:38.989 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38854 10 6452 1 2025-09-13 15:41:39.393 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56410 10 6452 1 2025-09-13 15:38:29.085 00:04:00.018 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-13 15:42:36.638 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 15:42:36.697 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 15:42:36.553 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 15:42:36.501 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:42:36.555 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:42:39.791 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46184 10 6452 1 2025-09-13 15:43:40.195 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33392 10 6452 1 2025-09-13 15:39:29.101 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-13 15:44:40.604 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37086 10 6452 1 2025-09-13 15:45:41.012 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45082 10 6452 1 2025-09-13 15:46:41.421 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42224 10 6452 1 2025-09-13 15:43:29.087 00:04:00.018 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-13 15:47:37.250 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 15:47:37.152 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 15:47:36.860 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:47:37.253 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:47:37.335 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 15:47:41.788 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59446 10 6452 1 2025-09-13 15:48:42.188 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53974 10 6452 1 2025-09-13 15:49:42.597 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40090 10 6452 1 2025-09-13 15:50:42.997 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54102 10 6452 1 2025-09-13 15:46:29.104 00:06:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-13 15:51:43.407 00:00:10.500 TCP 1.101.0.1:3000 -> 23.104.0.1:43586 10 6452 1 2025-09-13 15:52:36.681 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:52:36.858 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 15:52:36.859 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 15:52:36.816 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:52:36.764 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 15:52:43.958 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:52926 10 6452 1 2025-09-13 15:48:29.087 00:06:00.019 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-13 15:53:44.400 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37620 10 6452 1 2025-09-13 15:54:44.799 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48178 10 6452 1 2025-09-13 15:53:29.105 00:02:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 213 1 2025-09-13 15:55:45.204 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51928 10 6452 1 2025-09-13 15:56:45.612 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34178 10 6452 1 2025-09-13 15:57:37.093 00:00:00.060 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 15:57:36.847 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:57:37.012 00:00:00.059 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 15:57:36.799 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 15:57:36.943 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 15:57:46.016 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50830 10 6452 1 Summary: total flows: 139, total bytes: 410761, total packets: 943, avg bps: 905, avg pps: 0, avg bpp: 435 Time window: 2025-09-13 14:57:29 - 2025-09-13 15:57:56 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0048s User: 0.0000s Wall: 0.0044s flows/second: 31263.8 Runtime: 0.0045s