Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 04:59:00.215 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36802 10 6452 1 2025-09-24 05:00:00.620 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50636 10 6452 1 2025-09-24 05:01:00.989 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59122 10 6452 1 2025-09-24 05:02:01.402 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58104 10 6452 1 2025-09-24 04:58:34.124 00:04:00.161 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 05:02:41.473 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 05:02:41.527 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 05:02:41.307 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 05:02:41.349 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:02:41.391 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:03:01.800 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33038 10 6452 1 2025-09-24 04:58:34.127 00:06:00.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-24 05:04:02.200 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34342 10 6452 1 2025-09-24 05:05:02.602 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:53974 10 6452 1 2025-09-24 05:06:03.065 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46940 10 6452 1 2025-09-24 05:07:03.471 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:48206 12 10367 1 2025-09-24 05:03:34.124 00:04:00.162 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 05:07:41.768 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 05:07:41.420 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 05:07:41.685 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 05:07:41.374 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:07:41.686 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:08:03.952 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:34866 10 6452 1 2025-09-24 05:09:04.315 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57620 10 6452 1 2025-09-24 05:05:34.127 00:04:00.158 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 05:10:04.720 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53974 10 6452 1 2025-09-24 05:11:05.129 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39236 10 6452 1 2025-09-24 05:12:05.487 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60828 10 6452 1 2025-09-24 05:08:34.125 00:04:00.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 05:12:41.684 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 05:12:41.298 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:12:41.687 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:12:41.684 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 05:12:41.770 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 05:13:05.910 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37952 10 6452 1 2025-09-24 05:14:06.316 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56000 10 6452 1 2025-09-24 05:10:34.134 00:04:00.153 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 05:15:06.722 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37580 10 6452 1 2025-09-24 05:16:07.143 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:49540 10 6452 1 2025-09-24 05:17:07.503 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37440 10 6452 1 2025-09-24 05:13:34.135 00:04:00.155 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 05:17:42.179 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 05:17:41.957 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 05:17:41.956 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 05:17:41.728 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:17:42.095 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:18:07.908 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47492 10 6452 1 2025-09-24 05:19:08.328 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:57908 10 6452 1 2025-09-24 05:15:34.138 00:04:00.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 05:20:08.688 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41104 10 6452 1 2025-09-24 05:21:09.109 00:00:10.851 TCP 1.101.0.1:3000 -> 23.104.0.1:48510 10 6452 1 2025-09-24 05:22:09.995 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48480 10 6452 1 2025-09-24 05:22:42.003 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 05:22:41.935 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 05:22:41.822 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:22:41.837 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:22:41.919 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 05:23:10.401 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:46246 10 6452 1 2025-09-24 05:18:34.136 00:06:00.155 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-24 05:24:10.757 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59272 10 6452 1 2025-09-24 05:20:34.141 00:04:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 05:25:11.181 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44572 10 6452 1 2025-09-24 05:26:11.547 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36492 10 6452 1 2025-09-24 05:27:11.956 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53400 10 6452 1 2025-09-24 05:27:42.038 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 05:27:41.950 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 05:27:41.957 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 05:27:41.922 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:27:41.957 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:28:12.370 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33790 10 6452 1 2025-09-24 05:29:12.734 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47520 10 6452 1 2025-09-24 05:25:34.144 00:04:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 05:25:34.140 00:04:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 05:30:13.141 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35488 10 6452 1 2025-09-24 05:31:13.545 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58014 10 6452 1 2025-09-24 05:32:13.946 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60720 10 6452 1 2025-09-24 05:32:42.046 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 05:32:42.062 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 05:32:42.064 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 05:32:42.085 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:32:41.964 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:33:14.354 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33788 10 6452 1 2025-09-24 05:34:14.753 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45306 10 6452 1 2025-09-24 05:30:34.142 00:04:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 05:35:15.154 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37046 10 6452 1 2025-09-24 05:30:34.145 00:06:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-24 05:36:15.553 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56006 10 6452 1 2025-09-24 05:37:15.916 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56008 10 6452 1 2025-09-24 05:37:42.161 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 05:37:41.968 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 05:37:41.960 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 05:37:42.099 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:37:42.079 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:38:16.320 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44778 10 6452 1 2025-09-24 05:39:16.727 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52768 10 6452 1 2025-09-24 05:35:34.142 00:04:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 05:40:17.105 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52504 10 6452 1 2025-09-24 05:41:17.511 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44020 10 6452 1 2025-09-24 05:42:17.874 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35044 10 6452 1 2025-09-24 05:37:34.146 00:06:00.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-24 05:42:42.551 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 05:42:42.471 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 05:42:42.588 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 05:42:42.304 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:42:42.468 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:43:18.240 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46944 10 6452 1 2025-09-24 05:44:18.643 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40172 10 6452 1 2025-09-24 05:40:34.143 00:04:00.155 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 05:45:19.069 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56884 10 6452 1 2025-09-24 05:46:19.471 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35934 10 6452 1 2025-09-24 05:44:34.150 00:02:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 05:47:19.845 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:45322 10 6452 1 2025-09-24 05:47:42.450 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 05:47:42.369 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:47:42.364 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 05:47:42.417 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 05:47:42.350 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:48:20.297 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44234 10 6452 1 2025-09-24 05:49:20.709 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37620 10 6452 1 2025-09-24 05:45:34.147 00:04:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 05:50:21.114 00:00:10.590 TCP 1.101.0.1:3000 -> 23.104.0.1:47104 10 6452 1 2025-09-24 05:47:34.151 00:04:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 05:51:21.749 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43890 10 6452 1 2025-09-24 05:52:22.153 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55088 10 6452 1 2025-09-24 05:52:42.531 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 05:52:42.528 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 05:52:42.538 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:52:42.394 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:52:42.478 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 05:53:22.517 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55472 10 6452 1 2025-09-24 05:54:22.919 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39840 10 6452 1 2025-09-24 05:50:34.148 00:06:00.155 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-24 05:55:23.341 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33520 10 6452 1 2025-09-24 05:56:23.741 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33944 10 6452 1 2025-09-24 05:52:34.151 00:04:00.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 05:57:24.145 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46728 10 6452 1 2025-09-24 05:57:42.548 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 05:57:42.547 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 05:57:42.546 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:57:42.675 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 05:57:42.758 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 05:58:24.548 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39200 10 6452 1 Summary: total flows: 142, total bytes: 420669, total packets: 1018, avg bps: 934, avg pps: 0, avg bpp: 413 Time window: 2025-09-24 04:58:34 - 2025-09-24 05:58:34 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0035s User: 0.0017s Wall: 0.0020s flows/second: 71714.8 Runtime: 0.0020s