Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 13:59:29.998 00:00:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 1 71 1 2025-09-15 13:59:16.589 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48740 10 6452 1 2025-09-15 13:55:29.977 00:05:00.024 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-15 14:00:29.998 00:00:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 1 71 1 2025-09-15 14:00:17.000 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43734 10 6452 1 2025-09-15 14:01:29.998 00:00:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 1 71 1 2025-09-15 14:01:17.398 00:00:10.877 TCP 1.101.0.1:3000 -> 23.104.0.1:32846 10 6452 1 2025-09-15 14:02:18.308 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53482 10 6452 1 2025-09-15 14:02:29.997 00:00:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 1 71 1 2025-09-15 14:03:29.998 00:00:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 1 71 1 2025-09-15 14:03:18.712 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37538 10 6452 1 2025-09-15 14:03:32.431 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 14:03:32.429 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 14:03:32.187 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:03:32.554 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:03:32.638 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 14:04:29.998 00:00:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 1 71 1 2025-09-15 14:04:19.120 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56066 10 6452 1 2025-09-15 14:05:19.526 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52336 10 6452 1 2025-09-15 14:01:29.979 00:05:00.023 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-15 14:05:30.000 00:00:59.998 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 142 1 2025-09-15 14:06:19.927 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:54742 10 6452 1 2025-09-15 14:07:20.357 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56414 10 6452 1 2025-09-15 14:08:32.632 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 14:08:32.476 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 14:08:20.755 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57940 10 6452 1 2025-09-15 14:08:32.601 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 14:08:32.563 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:08:32.550 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:09:21.118 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49316 10 6452 1 2025-09-15 14:10:21.522 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:50402 12 10367 1 2025-09-15 14:07:29.981 00:05:00.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-15 14:11:22.005 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37802 12 6556 1 2025-09-15 14:07:29.999 00:06:00.037 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 757 1 2025-09-15 14:12:22.414 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:60370 10 6452 1 2025-09-15 14:13:32.843 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 14:13:32.760 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 14:13:32.656 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 14:13:32.493 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:13:22.846 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45266 10 6452 1 2025-09-15 14:13:32.759 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:14:23.257 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32994 10 6452 1 2025-09-15 14:15:23.656 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33066 10 6452 1 2025-09-15 14:16:24.016 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58572 10 6452 1 2025-09-15 14:17:24.418 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47710 10 6452 1 2025-09-15 14:13:29.983 00:05:00.064 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-15 14:18:32.852 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 14:18:32.770 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:18:32.856 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 14:14:29.986 00:05:00.059 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-15 14:18:32.771 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 14:18:32.795 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:18:24.821 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54200 10 6452 1 2025-09-15 14:19:25.190 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50856 10 6452 1 2025-09-15 14:20:25.551 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41302 10 6452 1 2025-09-15 14:21:25.954 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43306 10 6452 1 2025-09-15 14:22:26.368 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38360 10 6452 1 2025-09-15 14:23:32.923 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 14:19:29.984 00:05:00.066 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-15 14:23:32.806 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 14:23:32.689 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 14:23:32.655 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:23:32.839 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:23:26.770 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46778 10 6452 1 2025-09-15 14:20:29.986 00:05:00.062 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-15 14:24:27.182 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53144 10 6452 1 2025-09-15 14:25:27.589 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59582 10 6452 1 2025-09-15 14:26:27.991 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33618 10 6452 1 2025-09-15 14:27:28.398 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52938 10 6452 1 2025-09-15 14:28:33.131 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 14:28:32.974 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 14:28:32.974 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 14:28:32.907 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:28:33.047 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:28:28.804 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35328 10 6452 1 2025-09-15 14:25:29.984 00:05:00.067 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-15 14:29:29.209 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41128 10 6452 1 2025-09-15 14:26:29.987 00:05:00.062 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-15 14:30:29.607 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49784 12 6556 1 2025-09-15 14:31:30.011 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47510 10 6452 1 2025-09-15 14:32:30.411 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44634 10 6452 1 2025-09-15 14:33:32.916 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 14:33:33.090 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 14:33:32.852 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:33:33.001 00:00:00.038 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:33:33.083 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 14:33:30.822 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38280 10 6452 1 2025-09-15 14:34:31.187 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42850 10 6452 1 2025-09-15 14:31:29.986 00:05:00.066 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-15 14:35:31.593 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44820 10 6452 1 2025-09-15 14:32:29.990 00:05:00.060 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-15 14:36:32.002 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44208 10 6452 1 2025-09-15 14:37:32.411 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34164 10 6452 1 2025-09-15 14:38:33.303 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 14:38:33.198 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 14:38:33.198 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 14:38:32.875 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:38:33.221 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:38:32.807 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55448 10 6452 1 2025-09-15 14:39:33.214 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33408 10 6452 1 2025-09-15 14:40:33.579 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54122 10 6452 1 2025-09-15 14:37:29.989 00:05:00.068 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-15 14:41:33.988 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60774 10 6452 1 2025-09-15 14:38:29.991 00:05:00.064 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-15 14:42:34.349 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50638 10 6452 1 2025-09-15 14:43:33.235 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 14:43:33.268 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 14:43:33.058 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 14:43:33.246 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:43:33.153 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:43:34.753 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56574 10 6452 1 2025-09-15 14:44:35.157 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53932 10 6452 1 2025-09-15 14:45:35.558 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36804 10 6452 1 2025-09-15 14:46:35.963 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35218 10 6452 1 2025-09-15 14:43:29.990 00:05:00.069 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-15 14:47:36.365 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54616 10 6452 1 2025-09-15 14:48:33.422 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 14:44:29.992 00:05:00.064 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-15 14:48:33.381 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 14:48:33.273 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:48:33.262 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:48:33.346 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 14:48:36.770 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45940 10 6452 1 2025-09-15 14:49:37.179 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38068 10 6452 1 2025-09-15 14:50:37.587 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53284 10 6452 1 2025-09-15 14:51:37.948 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48578 10 6452 1 2025-09-15 14:52:38.325 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53670 10 6452 1 2025-09-15 14:53:34.063 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 14:49:29.990 00:05:00.070 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-15 14:53:34.040 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 14:53:33.949 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 14:53:33.185 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:53:33.980 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:53:38.729 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48290 10 6452 1 2025-09-15 14:50:29.994 00:05:00.065 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-15 14:54:39.104 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36486 10 6452 1 2025-09-15 14:55:39.509 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36464 10 6452 1 2025-09-15 14:56:39.872 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56806 10 6452 1 2025-09-15 14:57:40.278 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41620 10 6452 1 2025-09-15 14:58:33.641 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 14:58:33.621 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 14:58:33.500 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 14:58:33.533 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 14:58:33.560 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 144, total bytes: 413782, total packets: 1000, avg bps: 874, avg pps: 0, avg bpp: 413 Time window: 2025-09-15 13:55:29 - 2025-09-15 14:58:33 Total flows processed: 144, passed: 144, Blocks skipped: 0, Bytes read: 15040 Sys: 0.0035s User: 0.0017s Wall: 0.0027s flows/second: 52767.8 Runtime: 0.0027s