Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 03:55:23.827 00:05:00.273 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 03:59:33.986 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:34516 10 6452 1 2025-09-03 03:56:23.832 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 04:00:34.410 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54384 10 6452 1 2025-09-03 04:01:34.774 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55522 10 6452 1 2025-09-03 04:02:26.825 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 04:02:26.800 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 04:02:26.798 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 04:02:26.821 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:02:26.742 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:02:35.184 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39404 10 6452 1 2025-09-03 04:03:35.581 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42846 10 6452 1 2025-09-03 04:04:35.941 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:35748 10 6452 1 2025-09-03 04:01:23.829 00:05:00.273 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 04:05:36.391 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34970 10 6452 1 2025-09-03 04:02:23.832 00:05:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 04:06:36.786 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36744 10 6452 1 2025-09-03 04:07:26.816 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 04:07:26.735 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:07:26.669 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 04:07:26.582 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 04:07:26.580 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:07:37.151 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56156 10 6452 1 2025-09-03 04:08:37.563 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42214 10 6452 1 2025-09-03 04:09:37.972 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:52830 10 6452 1 2025-09-03 04:10:38.392 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50246 10 6452 1 2025-09-03 04:07:23.830 00:05:00.273 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 04:11:38.802 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:39636 10 6452 1 2025-09-03 04:08:23.833 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 04:12:26.715 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 04:12:26.775 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 04:12:26.793 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:12:26.711 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:12:26.793 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 04:12:39.246 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47722 10 6452 1 2025-09-03 04:13:39.688 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52564 10 6452 1 2025-09-03 04:14:40.116 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47756 10 6452 1 2025-09-03 04:15:40.527 00:00:10.705 TCP 1.101.0.1:3000 -> 23.104.0.1:46030 10 6452 1 2025-09-03 04:16:41.271 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35736 10 6452 1 2025-09-03 04:13:23.831 00:05:00.273 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 04:17:26.904 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 04:17:26.816 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 04:17:26.702 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:17:26.908 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:17:26.996 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 04:17:41.675 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54634 10 6452 1 2025-09-03 04:14:23.835 00:05:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 04:18:42.041 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43914 10 6452 1 2025-09-03 04:19:42.445 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46188 10 6452 1 2025-09-03 04:20:42.853 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:34516 10 6452 1 2025-09-03 04:21:43.278 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44694 10 6452 1 2025-09-03 04:22:26.949 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 04:22:26.649 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 04:22:26.866 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 04:22:27.059 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:22:26.867 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:22:43.640 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40210 10 6452 1 2025-09-03 04:19:23.835 00:05:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 04:23:44.058 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33564 10 6452 1 2025-09-03 04:20:23.838 00:05:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 04:24:44.467 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52122 10 6452 1 2025-09-03 04:25:44.869 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47438 10 6452 1 2025-09-03 04:26:45.269 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38396 10 6452 1 2025-09-03 04:27:27.260 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 04:27:27.073 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 04:27:27.072 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 04:27:26.996 00:00:00.049 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:27:27.177 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:27:45.675 00:00:10.477 TCP 1.101.0.1:3000 -> 23.104.0.1:52462 13 10407 1 2025-09-03 04:28:46.188 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56390 10 6452 1 2025-09-03 04:25:23.836 00:05:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 04:29:46.595 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43632 10 6452 1 2025-09-03 04:26:23.838 00:05:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 04:30:47.002 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57840 10 6452 1 2025-09-03 04:31:47.405 00:00:10.580 TCP 1.101.0.1:3000 -> 23.104.0.1:55920 10 6452 1 2025-09-03 04:32:27.147 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 04:32:26.809 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 04:32:26.928 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 04:32:26.973 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:32:27.065 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:32:48.027 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33622 10 6452 1 2025-09-03 04:33:48.432 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46608 10 6452 1 2025-09-03 04:34:48.800 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49214 10 6452 1 2025-09-03 04:31:23.837 00:05:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 04:35:49.209 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44540 10 6452 1 2025-09-03 04:32:23.840 00:05:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 04:36:49.572 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50832 10 6452 1 2025-09-03 04:37:27.151 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 04:37:27.148 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 04:37:27.186 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:37:27.344 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:37:27.427 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 04:37:49.981 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:44586 10 6452 1 2025-09-03 04:38:50.378 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58562 10 6452 1 2025-09-03 04:39:50.774 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53274 10 6452 1 2025-09-03 04:40:51.188 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55632 10 6452 1 2025-09-03 04:37:23.838 00:05:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 04:41:51.592 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:36228 11 6504 1 2025-09-03 04:38:23.841 00:05:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 04:42:27.313 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 04:42:27.616 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 04:42:27.290 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:42:27.411 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:42:27.493 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 04:42:52.051 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58134 10 6452 1 2025-09-03 04:43:52.472 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36616 10 6452 1 2025-09-03 04:44:52.840 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:40188 10 6452 1 2025-09-03 04:45:53.271 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53814 10 6452 1 2025-09-03 04:46:53.675 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:57566 10 6452 1 2025-09-03 04:47:27.706 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 04:43:23.840 00:05:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 04:47:27.624 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 04:47:27.621 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 04:47:27.488 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:47:27.623 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:47:54.114 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35208 10 6452 1 2025-09-03 04:44:23.843 00:05:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 04:48:54.486 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40500 10 6452 1 2025-09-03 04:49:54.866 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44890 10 6452 1 2025-09-03 04:50:55.287 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59342 10 6452 1 2025-09-03 04:51:55.699 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:54148 10 6452 1 2025-09-03 04:52:27.606 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 04:52:27.440 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 04:52:27.641 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 04:52:27.396 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:52:27.523 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:52:56.100 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34590 10 6452 1 2025-09-03 04:49:23.843 00:05:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 04:53:56.461 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39766 10 6452 1 2025-09-03 04:50:23.845 00:05:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 04:54:56.867 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41872 10 6452 1 2025-09-03 04:55:57.268 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59792 10 6452 1 2025-09-03 04:56:57.636 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54686 10 6452 1 2025-09-03 04:57:27.630 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 04:57:27.663 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 04:57:27.661 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 04:57:27.575 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:57:27.547 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 04:57:57.998 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51128 10 6452 1 Summary: total flows: 139, total bytes: 414555, total packets: 1014, avg bps: 880, avg pps: 0, avg bpp: 408 Time window: 2025-09-03 03:55:23 - 2025-09-03 04:58:08 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0039s User: 0.0010s Wall: 0.0020s flows/second: 70736.3 Runtime: 0.0020s