Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 15:58:46.423 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:49698 12 10367 1 2025-09-13 15:59:46.899 00:00:10.986 TCP 1.101.0.1:3000 -> 23.104.0.1:35016 12 6556 1 2025-09-13 15:55:29.088 00:06:00.020 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-13 15:56:29.105 00:04:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-13 16:00:47.924 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:43262 10 6452 1 2025-09-13 16:01:48.345 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52456 10 6452 1 2025-09-13 16:02:37.175 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 16:02:37.098 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 16:02:37.004 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 16:02:36.665 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:02:37.094 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:02:48.751 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51386 10 6452 1 2025-09-13 16:03:49.150 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:49866 12 10365 1 2025-09-13 16:04:49.628 00:00:10.727 TCP 1.101.0.1:3000 -> 23.104.0.1:55854 10 6452 1 2025-09-13 16:01:29.106 00:04:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-13 16:05:50.393 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34080 10 6452 1 2025-09-13 16:06:50.796 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50686 10 6452 1 2025-09-13 16:02:29.090 00:06:00.021 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-13 16:07:37.566 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 16:07:37.496 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 16:07:37.508 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 16:07:37.298 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:07:37.484 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:07:51.216 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58998 11 6504 1 2025-09-13 16:08:51.633 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56066 10 6452 1 2025-09-13 16:09:29.091 00:00:00.020 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-09-13 16:09:52.040 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51984 10 6452 1 2025-09-13 16:06:29.108 00:04:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-13 16:10:52.445 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54028 10 6452 1 2025-09-13 16:11:52.849 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:36906 10 6452 1 2025-09-13 16:12:37.109 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 16:12:37.026 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:12:37.226 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 16:12:37.132 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 16:12:36.967 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:12:53.271 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:43250 10 6452 1 2025-09-13 16:13:53.738 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50258 10 6452 1 2025-09-13 16:10:29.092 00:04:00.021 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-13 16:14:54.148 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57598 10 6452 1 2025-09-13 16:15:54.554 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:46508 10 6452 1 2025-09-13 16:11:29.108 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-13 16:16:54.928 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56654 10 6452 1 2025-09-13 16:17:37.366 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 16:17:37.397 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 16:17:37.397 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 16:17:37.346 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:17:37.284 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:17:55.347 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47844 10 6452 1 2025-09-13 16:18:55.749 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48706 10 6452 1 2025-09-13 16:15:29.092 00:04:00.023 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-13 16:19:56.150 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33180 10 6452 1 2025-09-13 16:20:56.555 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56140 10 6452 1 2025-09-13 16:21:56.956 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45814 10 6452 1 2025-09-13 16:22:37.173 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 16:22:37.173 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 16:22:37.303 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:22:37.471 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:22:37.554 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 16:22:57.366 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47946 10 6452 1 2025-09-13 16:18:29.113 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-13 16:23:57.772 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49992 10 6452 1 2025-09-13 16:24:58.180 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57616 10 6452 1 2025-09-13 16:20:29.092 00:06:00.024 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-13 16:25:58.582 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49298 10 6452 1 2025-09-13 16:26:58.943 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:49864 10 6452 1 2025-09-13 16:25:29.114 00:02:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 213 1 2025-09-13 16:27:37.686 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 16:27:37.637 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 16:27:37.562 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 16:27:37.423 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:27:37.603 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:27:59.323 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45262 11 6492 1 2025-09-13 16:28:59.724 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58580 10 6452 1 2025-09-13 16:30:00.142 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34750 10 6452 1 2025-09-13 16:31:00.551 00:00:10.512 TCP 1.101.0.1:3000 -> 23.104.0.1:54266 10 6452 1 2025-09-13 16:32:01.116 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46552 10 6452 1 2025-09-13 16:28:29.115 00:04:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-13 16:27:29.094 00:06:00.026 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-13 16:32:37.671 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 16:32:37.745 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 16:32:37.483 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 16:32:37.536 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:32:37.587 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:33:01.512 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38806 10 6452 1 2025-09-13 16:34:01.924 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:46284 12 6556 1 2025-09-13 16:35:02.348 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58226 10 6452 1 2025-09-13 16:36:02.764 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:57178 10 6452 1 2025-09-13 16:37:03.183 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60330 10 6452 1 2025-09-13 16:33:29.118 00:04:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-13 16:37:37.876 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 16:37:37.724 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 16:37:37.726 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 16:37:37.764 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:37:37.793 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:38:03.581 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42672 10 6452 1 2025-09-13 16:39:03.985 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52852 10 6452 1 2025-09-13 16:34:29.101 00:06:00.020 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-13 16:40:04.391 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39224 10 6452 1 2025-09-13 16:41:04.796 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48028 10 6452 1 2025-09-13 16:41:29.105 00:00:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-09-13 16:42:05.195 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44328 10 6452 1 2025-09-13 16:38:29.117 00:04:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-13 16:42:37.928 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 16:42:37.848 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 16:42:37.932 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 16:42:37.830 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:42:37.845 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:43:05.595 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53816 10 6452 1 2025-09-13 16:44:06.000 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45376 10 6452 1 2025-09-13 16:45:06.401 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34038 10 6452 1 2025-09-13 16:46:06.802 00:00:10.679 TCP 1.101.0.1:3000 -> 23.104.0.1:48404 10 6452 1 2025-09-13 16:42:29.104 00:04:00.025 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-13 16:47:07.520 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37806 10 6452 1 2025-09-13 16:47:37.955 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 16:47:37.966 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 16:47:37.778 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:47:37.856 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:47:37.939 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 16:48:07.925 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:38846 10 6452 1 2025-09-13 16:43:29.118 00:06:00.008 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-13 16:49:08.360 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47414 10 6452 1 2025-09-13 16:50:08.766 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:42546 10 6452 1 2025-09-13 16:51:09.186 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42136 10 6452 1 2025-09-13 16:47:29.105 00:04:00.026 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-13 16:52:09.586 00:00:10.843 TCP 1.101.0.1:3000 -> 23.104.0.1:35494 10 6452 1 2025-09-13 16:52:37.967 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 16:52:37.874 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 16:52:38.068 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 16:52:37.867 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:52:37.884 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:53:10.470 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36762 10 6452 1 2025-09-13 16:54:10.875 00:00:10.494 TCP 1.101.0.1:3000 -> 23.104.0.1:48946 13 10419 1 2025-09-13 16:55:11.406 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51250 10 6452 1 2025-09-13 16:50:29.129 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 497 1 2025-09-13 16:56:11.811 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34196 10 6452 1 2025-09-13 16:52:29.106 00:04:00.027 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-13 16:57:12.211 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56568 10 6452 1 2025-09-13 16:57:38.153 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-13 16:57:38.180 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-13 16:57:38.277 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:57:38.168 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-13 16:57:38.251 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-13 16:58:12.612 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56348 10 6452 1 Summary: total flows: 143, total bytes: 426292, total packets: 978, avg bps: 903, avg pps: 0, avg bpp: 435 Time window: 2025-09-13 15:55:29 - 2025-09-13 16:58:22 Total flows processed: 143, passed: 143, Blocks skipped: 0, Bytes read: 14936 Sys: 0.0037s User: 0.0015s Wall: 0.0024s flows/second: 59978.5 Runtime: 0.0024s