Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 12:59:21.654 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60874 10 6452 1 2025-09-24 13:00:22.025 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40032 10 6452 1 2025-09-24 12:58:34.290 00:02:00.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 13:01:22.429 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54136 10 6452 1 2025-09-24 13:01:34.291 00:01:00.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 12:58:34.292 00:04:00.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 13:02:22.835 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:43882 10 6452 1 2025-09-24 13:02:51.323 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 13:02:51.214 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 13:02:51.254 00:00:00.061 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 13:02:51.368 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:02:51.233 00:00:00.038 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:03:23.221 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48036 10 6452 1 2025-09-24 13:04:23.626 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43976 10 6452 1 2025-09-24 13:03:34.291 00:02:00.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 13:05:24.036 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43870 10 6452 1 2025-09-24 13:06:24.434 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32952 12 6556 1 2025-09-24 13:06:34.292 00:01:00.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 13:03:34.295 00:04:00.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 13:07:24.840 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:56144 10 6452 1 2025-09-24 13:07:50.965 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 13:07:51.332 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 13:07:51.053 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:07:51.108 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:07:51.190 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 13:08:25.265 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:57946 10 6452 1 2025-09-24 13:08:34.295 00:01:00.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 13:09:25.641 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56402 10 6452 1 2025-09-24 13:08:34.293 00:02:00.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 13:10:26.052 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53256 10 6452 1 2025-09-24 13:11:26.454 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55184 10 6452 1 2025-09-24 13:11:34.293 00:01:00.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 13:10:34.295 00:02:00.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 13:12:26.856 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35602 10 6452 1 2025-09-24 13:12:51.337 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 13:12:51.265 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 13:12:51.257 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 13:12:51.178 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:12:51.255 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:13:27.268 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:59768 10 6452 1 2025-09-24 13:13:34.295 00:01:00.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 13:14:27.632 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43572 10 6452 1 2025-09-24 13:15:28.039 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39434 10 6452 1 2025-09-24 13:16:28.440 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53180 10 6452 1 2025-09-24 13:15:34.296 00:02:00.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 13:13:34.293 00:04:00.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 13:17:28.854 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52388 10 6452 1 2025-09-24 13:17:51.488 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 13:17:51.515 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 13:17:51.403 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 13:17:51.349 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:17:51.405 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:18:29.268 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51492 10 6452 1 2025-09-24 13:18:34.296 00:01:00.153 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 13:19:29.672 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35182 10 6452 1 2025-09-24 13:20:30.033 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60280 10 6452 1 2025-09-24 13:21:30.403 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40702 10 6452 1 2025-09-24 13:20:34.296 00:02:00.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 13:18:34.293 00:04:00.158 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 13:22:30.810 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57880 10 6452 1 2025-09-24 13:22:51.905 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 13:22:51.614 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 13:22:51.712 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 13:22:51.599 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:22:51.824 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:23:31.219 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56878 10 6452 1 2025-09-24 13:23:34.299 00:01:00.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 13:24:31.623 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59896 10 6452 1 2025-09-24 13:25:32.021 00:00:15.072 TCP 1.101.0.1:3000 -> 23.104.0.1:56246 10 6452 1 2025-09-24 13:26:37.133 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36176 12 6556 1 2025-09-24 13:23:34.296 00:04:00.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 13:27:37.540 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46880 10 6452 1 2025-09-24 13:27:52.010 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 13:27:51.903 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 13:27:51.707 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:27:51.900 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:27:51.982 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 13:28:37.945 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40694 10 6452 1 2025-09-24 13:28:34.298 00:01:00.155 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 13:25:34.298 00:04:00.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 13:29:38.353 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56068 10 6452 1 2025-09-24 13:30:38.758 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:55328 10 6452 1 2025-09-24 13:31:39.192 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44596 10 6452 1 2025-09-24 13:30:34.298 00:02:00.154 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 13:32:39.594 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47868 10 6452 1 2025-09-24 13:32:51.822 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 13:32:51.790 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 13:32:51.742 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 13:32:51.613 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:32:51.741 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:33:39.996 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41828 10 6452 1 2025-09-24 13:33:34.300 00:01:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 13:30:34.301 00:04:00.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 13:34:40.400 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50120 10 6452 1 2025-09-24 13:35:40.759 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:58374 10 6452 1 2025-09-24 13:36:41.145 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:49940 10 6452 1 2025-09-24 13:35:34.300 00:02:00.154 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 13:37:51.879 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 13:37:41.515 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53324 10 6452 1 2025-09-24 13:37:51.616 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 13:37:51.848 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:37:51.881 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:37:51.965 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 13:38:41.917 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43370 10 6452 1 2025-09-24 13:35:34.304 00:04:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-24 13:38:34.301 00:01:00.154 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 13:39:42.325 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43920 10 6452 1 2025-09-24 13:40:42.734 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:39976 10 6452 1 2025-09-24 13:40:34.305 00:01:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 13:41:43.115 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58244 10 6452 1 2025-09-24 13:40:34.302 00:02:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-24 13:42:52.007 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 13:42:43.521 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56088 10 6452 1 2025-09-24 13:42:52.093 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 13:42:51.854 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 13:42:51.854 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:42:51.924 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:43:43.928 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37816 10 6452 1 2025-09-24 13:43:34.303 00:01:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-24 13:42:34.305 00:02:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 13:44:44.341 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59178 10 6452 1 2025-09-24 13:45:44.750 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42642 10 6452 1 2025-09-24 13:45:34.307 00:01:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 13:46:45.150 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35134 10 6452 1 2025-09-24 13:47:52.071 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 13:47:52.259 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 13:47:51.995 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 13:47:52.008 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:47:51.988 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:47:45.554 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43796 10 6452 1 2025-09-24 13:48:45.969 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34078 10 6452 1 2025-09-24 13:45:34.303 00:04:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 13:47:34.306 00:02:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 13:49:46.374 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34346 10 6452 1 2025-09-24 13:50:46.774 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50528 10 6452 1 2025-09-24 13:50:34.307 00:01:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 13:51:47.183 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49482 10 6452 1 2025-09-24 13:52:52.393 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 13:52:52.173 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 13:52:52.208 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:52:52.310 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:52:52.246 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 13:52:47.586 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60842 10 6452 1 2025-09-24 13:53:47.988 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59098 10 6452 1 2025-09-24 13:52:34.307 00:02:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-24 13:50:34.305 00:04:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-24 13:54:48.390 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37598 10 6452 1 2025-09-24 13:55:48.797 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38520 10 6452 1 2025-09-24 13:55:34.308 00:01:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-24 13:56:49.207 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44928 10 6452 1 2025-09-24 13:57:52.190 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-24 13:57:52.243 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-24 13:57:52.109 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:57:52.244 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-24 13:57:52.326 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-24 13:57:49.605 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58636 10 6452 1 Summary: total flows: 156, total bytes: 410264, total packets: 1006, avg bps: 920, avg pps: 0, avg bpp: 407 Time window: 2025-09-24 12:58:34 - 2025-09-24 13:57:59 Total flows processed: 156, passed: 156, Blocks skipped: 0, Bytes read: 16288 Sys: 0.0038s User: 0.0013s Wall: 0.0028s flows/second: 55757.3 Runtime: 0.0028s