Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 17:59:11.241 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56728 10 6452 1 2025-09-15 18:00:11.642 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41878 10 6452 1 2025-09-15 17:58:30.119 00:02:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 3 213 1 2025-09-15 18:01:12.057 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42594 10 6452 1 2025-09-15 18:02:12.461 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41080 10 6452 1 2025-09-15 18:03:12.861 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54112 10 6452 1 2025-09-15 17:58:30.082 00:06:00.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 18:03:37.117 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 18:03:37.510 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 18:03:37.212 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:03:37.034 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:03:37.251 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 18:04:13.275 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56800 10 6452 1 2025-09-15 18:05:13.680 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53494 10 6452 1 2025-09-15 18:01:30.119 00:04:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 18:06:14.053 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38366 10 6452 1 2025-09-15 18:07:14.457 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:52220 10 6452 1 2025-09-15 18:08:14.817 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47862 10 6452 1 2025-09-15 18:08:37.540 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 18:08:37.458 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:08:37.553 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 18:08:37.314 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 18:08:37.277 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:09:15.180 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35794 10 6452 1 2025-09-15 18:10:15.581 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:36726 10 6452 1 2025-09-15 18:06:30.121 00:04:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 18:05:30.083 00:06:00.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 18:11:15.958 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36776 10 6452 1 2025-09-15 18:12:16.363 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53894 10 6452 1 2025-09-15 18:12:30.085 00:00:00.039 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-09-15 18:13:16.727 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57136 10 6452 1 2025-09-15 18:13:37.306 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 18:13:37.090 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:13:37.647 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:13:37.408 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 18:13:37.729 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 18:14:17.118 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41570 10 6452 1 2025-09-15 18:15:17.521 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45788 10 6452 1 2025-09-15 18:11:30.121 00:04:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 18:16:17.928 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:35202 10 6452 1 2025-09-15 18:17:18.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37478 10 6452 1 2025-09-15 18:13:30.088 00:04:00.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-15 18:18:18.763 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:54810 10 6452 1 2025-09-15 18:18:37.847 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 18:18:37.794 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 18:18:37.644 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:18:37.764 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:18:38.205 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 18:19:19.132 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40026 10 6452 1 2025-09-15 18:20:19.493 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:60064 12 10365 1 2025-09-15 18:16:30.127 00:04:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 18:21:19.970 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:50062 11 6504 1 2025-09-15 18:22:20.441 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60636 10 6452 1 2025-09-15 18:18:30.089 00:04:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-15 18:23:20.842 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55434 10 6452 1 2025-09-15 18:23:37.891 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 18:23:37.694 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 18:23:37.586 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:23:37.809 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:23:37.694 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 18:24:21.251 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60112 10 6452 1 2025-09-15 18:25:21.653 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47578 10 6452 1 2025-09-15 18:21:30.128 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-15 18:26:22.059 00:00:10.769 TCP 1.101.0.1:3000 -> 23.104.0.1:40354 10 6452 1 2025-09-15 18:23:30.090 00:04:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-15 18:27:22.863 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60326 10 6452 1 2025-09-15 18:28:23.279 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39622 10 6452 1 2025-09-15 18:28:37.905 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 18:28:37.855 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 18:28:37.697 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:28:37.823 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:28:37.695 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 18:29:23.645 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46044 10 6452 1 2025-09-15 18:30:24.005 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47808 10 6452 1 2025-09-15 18:31:24.418 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60846 10 6452 1 2025-09-15 18:28:30.130 00:04:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 18:32:24.781 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45478 10 6452 1 2025-09-15 18:28:30.093 00:06:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 18:33:37.962 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 18:33:25.186 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55790 10 6452 1 2025-09-15 18:33:38.010 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 18:33:37.769 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:33:37.881 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:33:37.887 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 18:34:25.607 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:36220 12 10367 1 2025-09-15 18:35:26.121 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45114 10 6452 1 2025-09-15 18:36:26.525 00:00:10.921 TCP 1.101.0.1:3000 -> 23.104.0.1:57010 10 6452 1 2025-09-15 18:33:30.131 00:04:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 18:37:27.496 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60064 10 6452 1 2025-09-15 18:38:38.143 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 18:38:37.741 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:38:37.882 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:38:37.906 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 18:38:27.899 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:60302 10 6452 1 2025-09-15 18:38:37.966 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 18:39:28.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36834 10 6452 1 2025-09-15 18:35:30.093 00:06:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 18:40:28.684 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37580 10 6452 1 2025-09-15 18:41:29.110 00:00:10.856 TCP 1.101.0.1:3000 -> 23.104.0.1:48896 10 6452 1 2025-09-15 18:38:30.132 00:04:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 18:42:29.996 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54386 10 6452 1 2025-09-15 18:43:38.139 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 18:43:38.307 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:43:38.027 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:43:38.327 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 18:43:30.402 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45816 10 6452 1 2025-09-15 18:43:38.112 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 18:42:30.093 00:02:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-15 18:44:30.807 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40480 10 6452 1 2025-09-15 18:45:31.209 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55450 10 6452 1 2025-09-15 18:46:31.571 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59318 10 6452 1 2025-09-15 18:43:30.133 00:04:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 18:47:31.935 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:58162 10 6452 1 2025-09-15 18:48:38.348 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 18:48:38.265 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:48:38.143 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 18:48:38.156 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 18:48:37.858 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:48:32.356 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:44182 10 6452 1 2025-09-15 18:45:30.094 00:04:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-15 18:49:32.723 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:41290 10 6452 1 2025-09-15 18:50:33.152 00:00:10.641 TCP 1.101.0.1:3000 -> 23.104.0.1:32940 10 6452 1 2025-09-15 18:51:33.830 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43968 10 6452 1 2025-09-15 18:48:30.135 00:04:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 18:52:34.200 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51028 10 6452 1 2025-09-15 18:53:38.258 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 18:53:38.228 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:53:38.322 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:53:38.324 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 18:53:38.405 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 18:53:34.559 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:59338 10 6452 1 2025-09-15 18:50:30.096 00:04:00.043 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-15 18:54:34.960 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35724 10 6452 1 2025-09-15 18:55:35.371 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35564 10 6452 1 2025-09-15 18:56:35.792 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48504 10 6452 1 2025-09-15 18:57:36.154 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40482 10 6452 1 2025-09-15 18:53:30.135 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-15 18:58:38.388 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 18:58:38.367 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:58:38.451 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 18:58:38.386 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 18:58:38.533 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 18:58:36.559 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35220 10 6452 1 Summary: total flows: 143, total bytes: 421533, total packets: 961, avg bps: 921, avg pps: 0, avg bpp: 438 Time window: 2025-09-15 17:58:30 - 2025-09-15 18:59:30 Total flows processed: 143, passed: 143, Blocks skipped: 0, Bytes read: 14936 Sys: 0.0032s User: 0.0021s Wall: 0.0022s flows/second: 64940.0 Runtime: 0.0022s