Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 15:59:05.557 00:00:10.626 TCP 1.101.0.1:3000 -> 23.104.0.1:38114 10 6452 1 2025-09-15 16:00:06.221 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53796 10 6452 1 2025-09-15 16:01:06.629 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38046 10 6452 1 2025-09-15 15:56:30.080 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-15 16:02:07.033 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60960 10 6452 1 2025-09-15 16:03:07.396 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47428 10 6452 1 2025-09-15 16:03:34.874 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 16:03:34.674 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 16:03:34.862 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:03:34.967 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:03:35.050 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 16:04:07.807 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:51114 10 6452 1 2025-09-15 16:05:08.179 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49418 10 6452 1 2025-09-15 16:00:30.044 00:06:00.040 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 16:06:08.585 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40958 10 6452 1 2025-09-15 16:07:08.985 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53656 10 6452 1 2025-09-15 16:08:09.390 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49058 10 6452 1 2025-09-15 16:08:34.968 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 16:03:30.080 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-15 16:08:34.956 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 16:08:34.653 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:08:34.885 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:08:34.999 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 16:09:09.793 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35288 10 6452 1 2025-09-15 16:10:10.208 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42120 10 6452 1 2025-09-15 16:11:10.604 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40482 10 6452 1 2025-09-15 16:12:11.012 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40836 10 6452 1 2025-09-15 16:07:30.044 00:06:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 16:13:11.417 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48388 10 6452 1 2025-09-15 16:13:35.031 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 16:13:34.951 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 16:13:34.950 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:13:35.105 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 16:13:35.059 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:14:11.817 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40128 10 6452 1 2025-09-15 16:15:12.217 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53290 10 6452 1 2025-09-15 16:10:30.082 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-15 16:16:12.621 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34516 10 6452 1 2025-09-15 16:17:13.022 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33148 10 6452 1 2025-09-15 16:18:13.426 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50144 10 6452 1 2025-09-15 16:18:35.230 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 16:18:35.161 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 16:18:35.161 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 16:18:35.152 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:18:35.148 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:19:13.786 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43176 10 6452 1 2025-09-15 16:14:30.045 00:06:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 16:20:14.151 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:60428 12 10367 1 2025-09-15 16:21:14.656 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48646 10 6452 1 2025-09-15 16:22:15.106 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47090 10 6452 1 2025-09-15 16:17:30.085 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-15 16:23:15.514 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:33100 10 6452 1 2025-09-15 16:23:35.328 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 16:23:35.331 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 16:23:35.228 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:23:35.204 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:23:35.287 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 16:24:15.873 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55880 10 6452 1 2025-09-15 16:25:16.278 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60702 10 6452 1 2025-09-15 16:26:16.684 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37640 10 6452 1 2025-09-15 16:21:30.047 00:06:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 16:27:17.050 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54778 10 6452 1 2025-09-15 16:28:17.451 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56956 10 6452 1 2025-09-15 16:28:35.378 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 16:28:35.222 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 16:28:35.291 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 16:28:35.306 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:28:35.295 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:29:17.864 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51534 10 6452 1 2025-09-15 16:24:30.086 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-15 16:30:18.287 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57160 10 6452 1 2025-09-15 16:31:18.652 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38700 10 6452 1 2025-09-15 16:32:19.064 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58416 10 6452 1 2025-09-15 16:33:19.473 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43088 10 6452 1 2025-09-15 16:28:30.048 00:06:00.047 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 16:33:35.500 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 16:33:35.496 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 16:33:35.496 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 16:33:35.297 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:33:35.417 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:34:19.837 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39642 10 6452 1 2025-09-15 16:35:20.257 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35682 10 6452 1 2025-09-15 16:36:20.679 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50690 10 6452 1 2025-09-15 16:31:30.091 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-15 16:37:21.094 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53640 10 6452 1 2025-09-15 16:38:21.499 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44320 10 6452 1 2025-09-15 16:38:35.447 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 16:38:35.615 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 16:38:35.690 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:38:35.618 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:38:35.700 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 16:39:21.907 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55974 10 6452 1 2025-09-15 16:35:30.051 00:06:00.044 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 16:40:22.316 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40034 10 6452 1 2025-09-15 16:41:22.716 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38066 10 6452 1 2025-09-15 16:42:23.115 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:52834 10 6452 1 2025-09-15 16:43:35.751 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 16:38:30.093 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-15 16:43:23.480 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50118 10 6452 1 2025-09-15 16:43:35.671 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 16:43:35.667 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 16:43:35.711 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:43:35.668 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:44:23.886 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44934 10 6452 1 2025-09-15 16:45:24.295 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44278 10 6452 1 2025-09-15 16:46:24.695 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58396 10 6452 1 2025-09-15 16:42:30.057 00:06:00.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 16:47:25.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40952 10 6452 1 2025-09-15 16:48:35.895 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 16:48:35.891 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 16:48:35.732 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:48:25.514 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50104 10 6452 1 2025-09-15 16:48:35.834 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:48:35.917 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 16:49:25.879 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55046 10 6452 1 2025-09-15 16:45:30.095 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-15 16:50:26.281 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38586 10 6452 1 2025-09-15 16:51:26.682 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59228 10 6452 1 2025-09-15 16:52:27.050 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51972 10 6452 1 2025-09-15 16:53:35.904 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 16:53:35.759 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 16:53:27.454 00:00:10.995 TCP 1.101.0.1:3000 -> 23.104.0.1:48456 10 6452 1 2025-09-15 16:53:35.824 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 16:53:35.419 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:53:35.821 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:49:30.060 00:06:00.040 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 16:54:28.495 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40258 10 6452 1 2025-09-15 16:55:28.903 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52618 12 6556 1 2025-09-15 16:56:29.309 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44196 10 6452 1 2025-09-15 16:52:30.095 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-15 16:57:29.714 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50310 10 6452 1 2025-09-15 16:58:36.067 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 16:58:35.924 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 16:58:36.060 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 16:58:35.697 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:58:35.983 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 16:58:30.121 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:60860 10 6452 1 Summary: total flows: 137, total bytes: 417620, total packets: 959, avg bps: 895, avg pps: 0, avg bpp: 435 Time window: 2025-09-15 15:56:30 - 2025-09-15 16:58:40 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0017s User: 0.0017s Wall: 0.0014s flows/second: 94947.1 Runtime: 0.0015s