Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 05:58:48.853 00:00:10.543 TCP 1.101.0.1:3000 -> 23.104.0.1:41878 16 14382 1 2025-09-14 05:55:29.356 00:04:00.015 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-14 05:59:49.431 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58994 10 6452 1 2025-09-14 05:58:29.368 00:02:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 213 1 2025-09-14 06:00:49.835 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:60546 10 6452 1 2025-09-14 06:00:29.355 00:01:00.016 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 06:01:50.240 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60738 10 6452 1 2025-09-14 06:01:29.369 00:01:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 06:02:54.333 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 06:02:54.039 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 06:02:53.930 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 06:02:53.985 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:02:54.251 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:02:50.649 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38030 10 6452 1 2025-09-14 06:03:51.068 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43170 10 6452 1 2025-09-14 06:02:29.356 00:02:00.017 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-14 06:04:51.471 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38910 10 6452 1 2025-09-14 06:03:29.369 00:02:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 213 1 2025-09-14 06:05:51.872 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52664 10 6452 1 2025-09-14 06:05:29.365 00:01:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 06:06:52.275 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49532 10 6452 1 2025-09-14 06:06:29.369 00:01:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 06:07:54.048 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 06:07:53.914 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 06:07:54.100 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:07:53.902 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:07:53.986 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 06:07:52.677 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35064 10 6452 1 2025-09-14 06:08:53.113 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60332 10 6452 1 2025-09-14 06:07:29.366 00:02:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-14 06:09:53.532 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52000 10 6452 1 2025-09-14 06:08:29.371 00:02:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 213 1 2025-09-14 06:10:53.936 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59150 10 6452 1 2025-09-14 06:10:29.367 00:01:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 06:11:54.356 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58616 10 6452 1 2025-09-14 06:11:29.372 00:01:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 06:12:54.346 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 06:12:54.254 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 06:12:54.143 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 06:12:54.101 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:12:54.264 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:12:54.763 00:00:11.109 TCP 1.101.0.1:3000 -> 23.104.0.1:52124 10 6452 1 2025-09-14 06:13:55.914 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47906 10 6452 1 2025-09-14 06:12:29.366 00:02:00.010 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-14 06:14:56.279 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33206 10 6452 1 2025-09-14 06:15:56.681 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36290 10 6452 1 2025-09-14 06:15:29.365 00:01:00.010 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 06:16:57.115 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37978 10 6452 1 2025-09-14 06:13:29.372 00:04:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 355 1 2025-09-14 06:17:54.158 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 06:17:54.282 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 06:17:54.091 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 06:17:53.992 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:17:54.076 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:17:57.518 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43870 10 6452 1 2025-09-14 06:18:57.922 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:34250 10 6452 1 2025-09-14 06:18:29.373 00:01:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 06:17:29.367 00:02:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-14 06:19:58.352 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46654 10 6452 1 2025-09-14 06:20:58.749 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45906 12 6556 1 2025-09-14 06:20:29.367 00:01:00.009 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 06:21:59.152 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53514 10 6452 1 2025-09-14 06:20:29.373 00:02:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 213 1 2025-09-14 06:22:54.528 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 06:22:54.594 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 06:22:54.188 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 06:22:54.225 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:22:54.445 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:22:59.556 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53674 10 6452 1 2025-09-14 06:23:59.957 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46562 10 6452 1 2025-09-14 06:22:29.368 00:02:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-14 06:23:29.374 00:01:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 06:25:00.318 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46566 10 6452 1 2025-09-14 06:26:00.729 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39492 10 6452 1 2025-09-14 06:25:29.368 00:01:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 06:27:01.140 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40840 10 6452 1 2025-09-14 06:25:29.373 00:02:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 213 1 2025-09-14 06:27:54.454 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 06:27:54.372 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 06:27:54.204 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:27:54.454 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:27:54.537 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 06:28:01.502 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48628 10 6452 1 2025-09-14 06:29:01.910 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37598 10 6452 1 2025-09-14 06:28:29.374 00:01:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 06:30:02.315 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52436 10 6452 1 2025-09-14 06:31:02.718 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:55404 10 6452 1 2025-09-14 06:27:29.369 00:04:00.008 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-14 06:32:03.118 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:49196 12 6556 1 2025-09-14 06:30:29.375 00:02:00.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 265 1 2025-09-14 06:32:54.549 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 06:32:54.366 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:32:54.414 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:32:54.555 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 06:32:54.499 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 06:33:03.546 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42372 10 6452 1 2025-09-14 06:32:29.374 00:01:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 06:34:03.950 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39120 10 6452 1 2025-09-14 06:33:29.375 00:01:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 194 1 2025-09-14 06:35:04.358 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60438 10 6452 1 2025-09-14 06:36:04.763 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:50408 10 6452 1 2025-09-14 06:34:29.372 00:02:00.006 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-14 06:37:05.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49540 10 6452 1 2025-09-14 06:35:29.375 00:02:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 213 1 2025-09-14 06:37:54.789 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 06:37:54.370 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 06:37:54.710 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:37:54.707 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:37:54.789 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 06:38:05.595 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:36642 10 6452 1 2025-09-14 06:37:29.374 00:01:00.007 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 06:39:05.965 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54960 10 6452 1 2025-09-14 06:38:29.376 00:01:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 06:40:06.369 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51900 10 6452 1 2025-09-14 06:41:06.783 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38722 10 6452 1 2025-09-14 06:39:29.375 00:02:00.018 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-14 06:42:07.192 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32930 10 6452 1 2025-09-14 06:40:29.378 00:02:00.011 TCP 179.21.23.23:179 -> 179.21.23.21:38570 5 317 1 2025-09-14 06:42:54.783 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 06:42:54.589 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 06:42:54.786 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 06:42:54.898 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:42:54.700 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:43:07.595 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:44732 10 6452 1 2025-09-14 06:42:29.375 00:01:00.018 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 06:44:07.970 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:59890 10 6452 1 2025-09-14 06:43:29.391 00:00:59.999 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 06:45:08.346 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44116 10 6452 1 2025-09-14 06:46:08.754 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:55966 10 6452 1 2025-09-14 06:44:29.376 00:02:00.020 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-14 06:47:09.191 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49766 10 6452 1 2025-09-14 06:45:29.393 00:02:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 213 1 2025-09-14 06:47:54.720 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 06:47:54.807 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 06:47:54.738 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 06:47:54.778 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:47:54.639 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:48:09.600 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33972 10 6452 1 2025-09-14 06:47:29.375 00:01:00.022 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 06:49:10.009 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:40400 10 6452 1 2025-09-14 06:48:29.394 00:00:59.999 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 06:50:10.416 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47562 10 6452 1 2025-09-14 06:51:10.823 00:00:10.952 TCP 1.101.0.1:3000 -> 23.104.0.1:41938 10 6452 1 2025-09-14 06:49:29.376 00:02:00.020 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-14 06:50:29.393 00:01:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 06:52:11.813 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56324 10 6452 1 2025-09-14 06:52:54.809 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 06:52:54.816 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 06:52:54.732 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 06:52:54.584 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:52:54.725 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:53:12.219 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53294 10 6452 1 2025-09-14 06:52:29.378 00:01:00.019 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-14 06:54:12.636 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32998 10 6452 1 2025-09-14 06:52:29.394 00:02:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 213 1 2025-09-14 06:55:13.062 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54208 12 6556 1 2025-09-14 06:56:13.467 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56460 10 6452 1 2025-09-14 06:54:29.377 00:02:00.020 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-14 06:55:29.394 00:01:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 142 1 2025-09-14 06:57:13.824 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39910 10 6452 1 2025-09-14 06:57:54.962 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-14 06:57:55.153 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-14 06:57:55.306 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:57:55.183 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-14 06:57:55.268 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-14 06:58:14.231 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58498 10 6452 1 2025-09-14 06:57:29.379 00:01:00.018 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 Summary: total flows: 167, total bytes: 422751, total packets: 983, avg bps: 894, avg pps: 0, avg bpp: 430 Time window: 2025-09-14 05:55:29 - 2025-09-14 06:58:29 Total flows processed: 167, passed: 167, Blocks skipped: 0, Bytes read: 17432 Sys: 0.0028s User: 0.0019s Wall: 0.0024s flows/second: 70143.1 Runtime: 0.0024s