Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 19:59:01.073 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35656 10 6452 1 2025-09-15 20:00:01.475 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41152 10 6452 1 2025-09-15 20:01:01.874 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53624 10 6452 1 2025-09-15 19:57:30.152 00:04:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 20:02:02.280 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50596 10 6452 1 2025-09-15 20:03:02.680 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41940 10 6452 1 2025-09-15 19:59:30.117 00:04:00.037 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-15 20:03:39.714 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 20:03:40.074 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:03:39.713 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:03:40.197 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 20:03:39.795 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 20:04:03.107 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55410 10 6452 1 2025-09-15 20:05:03.467 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37838 10 6452 1 2025-09-15 20:06:03.829 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50306 10 6452 1 2025-09-15 20:07:04.227 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39712 10 6452 1 2025-09-15 20:02:30.152 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-15 20:08:04.590 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:37456 11 6504 1 2025-09-15 20:08:39.807 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 20:08:39.660 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:08:39.851 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:08:39.851 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 20:08:39.933 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 20:09:05.051 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36846 10 6452 1 2025-09-15 20:04:30.118 00:06:00.040 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 20:10:05.457 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35056 10 6452 1 2025-09-15 20:11:05.860 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52044 10 6452 1 2025-09-15 20:12:06.271 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:37976 10 6452 1 2025-09-15 20:13:06.649 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39786 10 6452 1 2025-09-15 20:09:30.155 00:04:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 20:13:40.094 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 20:13:40.075 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:13:39.995 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:13:39.995 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 20:13:40.078 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 20:14:07.061 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59780 10 6452 1 2025-09-15 20:15:07.464 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56266 10 6452 1 2025-09-15 20:16:07.879 00:00:18.227 TCP 1.101.0.1:3000 -> 23.104.0.1:50610 10 6452 1 2025-09-15 20:11:30.121 00:06:00.041 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 20:17:16.163 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36624 10 6452 1 2025-09-15 20:18:16.563 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36490 11 6492 1 2025-09-15 20:14:30.157 00:04:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 20:18:39.981 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 20:18:39.960 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 20:18:39.927 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:18:39.899 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:18:39.702 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 20:19:16.962 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55182 10 6452 1 2025-09-15 20:20:17.372 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54810 10 6452 1 2025-09-15 20:18:30.121 00:02:00.042 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-15 20:21:17.781 00:00:11.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51026 10 6452 1 2025-09-15 20:22:19.181 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51004 10 6452 1 2025-09-15 20:19:30.159 00:04:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 20:23:19.582 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57512 10 6452 1 2025-09-15 20:23:40.085 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 20:23:39.927 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:23:40.090 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:23:39.975 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 20:23:40.171 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 20:24:19.948 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39882 10 6452 1 2025-09-15 20:21:30.121 00:04:00.045 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-15 20:25:20.352 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49636 10 6452 1 2025-09-15 20:26:20.717 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59802 10 6452 1 2025-09-15 20:27:21.133 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56974 10 6452 1 2025-09-15 20:24:30.161 00:04:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 20:28:21.537 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58848 10 6452 1 2025-09-15 20:28:40.378 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 20:28:40.306 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 20:28:40.316 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:28:40.295 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:28:40.303 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 20:29:21.940 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46422 10 6452 1 2025-09-15 20:26:30.122 00:04:00.044 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-15 20:30:22.356 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53254 10 6452 1 2025-09-15 20:31:22.759 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:35234 10 6452 1 2025-09-15 20:32:23.188 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42094 10 6452 1 2025-09-15 20:29:30.164 00:04:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 20:33:23.596 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47520 10 6452 1 2025-09-15 20:33:40.717 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:33:40.814 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 20:33:40.571 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 20:33:40.493 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:33:40.800 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 20:34:24.002 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52450 10 6452 1 2025-09-15 20:31:30.124 00:04:00.045 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-15 20:35:24.403 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48836 10 6452 1 2025-09-15 20:36:24.808 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36670 10 6452 1 2025-09-15 20:37:25.214 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48866 10 6452 1 2025-09-15 20:38:25.617 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52742 10 6452 1 2025-09-15 20:38:40.372 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 20:38:40.241 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:38:40.257 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:38:40.254 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 20:38:40.339 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 20:34:30.165 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-15 20:39:26.018 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58940 10 6452 1 2025-09-15 20:36:30.126 00:04:00.045 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-15 20:40:26.412 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38750 10 6452 1 2025-09-15 20:41:26.815 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57578 10 6452 1 2025-09-15 20:42:27.221 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44028 10 6452 1 2025-09-15 20:43:40.609 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:43:40.462 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:43:40.633 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 20:43:40.462 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 20:43:27.631 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:49316 10 6452 1 2025-09-15 20:43:40.546 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 20:44:28.055 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32838 10 6452 1 2025-09-15 20:41:30.167 00:04:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 407 1 2025-09-15 20:45:28.459 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59006 10 6452 1 2025-09-15 20:41:30.125 00:06:00.048 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-15 20:46:28.864 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:44922 10 6452 1 2025-09-15 20:47:29.289 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33156 10 6452 1 2025-09-15 20:48:40.663 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 20:48:40.517 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:48:40.553 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:48:40.490 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 20:48:29.692 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34752 10 6452 1 2025-09-15 20:48:40.636 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 20:49:30.112 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50714 10 6452 1 2025-09-15 20:46:30.129 00:04:00.042 TCP 179.21.23.21:38570 -> 179.21.23.23:179 9 563 1 2025-09-15 20:50:30.515 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47232 10 6452 1 2025-09-15 20:51:30.928 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:37022 10 6452 1 2025-09-15 20:48:30.129 00:04:00.045 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-15 20:52:31.352 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:56930 10 6452 1 2025-09-15 20:53:40.927 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 20:53:40.840 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 20:53:40.802 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:53:40.844 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:53:40.843 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 20:53:31.713 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43872 10 6452 1 2025-09-15 20:54:32.096 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:53922 12 10367 1 2025-09-15 20:51:30.171 00:04:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 5 355 1 2025-09-15 20:55:32.578 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:40956 10 6452 1 2025-09-15 20:56:33.030 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57354 10 6452 1 2025-09-15 20:53:30.130 00:04:00.044 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-15 20:57:33.438 00:00:11.510 TCP 1.101.0.1:3000 -> 23.104.0.1:49222 10 6452 1 2025-09-15 20:58:40.945 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-15 20:58:40.782 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-15 20:58:40.785 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:58:40.862 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-15 20:58:40.862 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-15 20:58:34.984 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:32770 10 6452 1 Summary: total flows: 142, total bytes: 417953, total packets: 966, avg bps: 909, avg pps: 0, avg bpp: 432 Time window: 2025-09-15 19:57:30 - 2025-09-15 20:58:45 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0032s User: 0.0021s Wall: 0.0022s flows/second: 64632.8 Runtime: 0.0022s