Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 05:55:23.862 00:05:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 05:59:28.066 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37092 10 6452 1 2025-09-03 05:56:23.865 00:05:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 06:00:28.475 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60442 10 6452 1 2025-09-03 06:01:28.883 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34922 10 6452 1 2025-09-03 06:02:29.023 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 06:02:28.817 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 06:02:28.888 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 06:02:28.640 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:02:28.942 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:02:29.290 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54648 10 6452 1 2025-09-03 06:03:29.650 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:33244 12 10367 1 2025-09-03 06:04:30.134 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57958 10 6452 1 2025-09-03 06:01:23.862 00:05:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 06:05:30.535 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32972 10 6452 1 2025-09-03 06:02:23.866 00:05:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 06:06:30.946 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39510 10 6452 1 2025-09-03 06:07:28.926 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 06:07:29.109 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 06:07:28.868 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:07:28.996 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:07:29.081 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 06:07:31.354 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43886 10 6452 1 2025-09-03 06:08:31.755 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57892 10 6452 1 2025-09-03 06:09:32.174 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54064 10 6452 1 2025-09-03 06:10:32.591 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40470 10 6452 1 2025-09-03 06:07:23.864 00:05:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 06:11:32.996 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39690 10 6452 1 2025-09-03 06:12:29.345 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 06:12:29.268 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 06:12:29.293 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:12:29.343 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:12:29.426 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 06:08:23.867 00:05:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 06:12:33.396 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45334 10 6452 1 2025-09-03 06:13:33.797 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:39474 10 6452 1 2025-09-03 06:14:34.173 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52792 10 6452 1 2025-09-03 06:15:34.577 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43232 10 6452 1 2025-09-03 06:16:34.983 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38096 10 6452 1 2025-09-03 06:13:23.865 00:05:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 06:17:29.178 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 06:17:29.382 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 06:17:29.203 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:17:29.265 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:17:29.349 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 06:17:35.392 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34902 10 6452 1 2025-09-03 06:14:23.868 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 06:18:35.793 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:60326 13 13935 1 2025-09-03 06:19:36.283 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60002 10 6452 1 2025-09-03 06:20:36.690 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57566 10 6452 1 2025-09-03 06:21:37.113 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:41364 10 6452 1 2025-09-03 06:22:29.481 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 06:22:29.393 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 06:22:29.239 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 06:22:29.153 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:22:29.399 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:22:37.469 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56160 10 6452 1 2025-09-03 06:19:23.869 00:05:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 06:23:37.875 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50880 10 6452 1 2025-09-03 06:20:23.870 00:05:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 06:24:38.279 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35360 10 6452 1 2025-09-03 06:25:38.682 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59982 10 6452 1 2025-09-03 06:26:39.109 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53460 10 6452 1 2025-09-03 06:27:29.474 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 06:27:29.306 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 06:27:29.517 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:27:29.474 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:27:29.556 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 06:27:39.510 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46736 10 6452 1 2025-09-03 06:28:39.922 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:60414 10 6452 1 2025-09-03 06:25:23.868 00:05:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 06:29:40.340 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44118 10 6452 1 2025-09-03 06:26:23.871 00:05:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 06:30:40.742 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:47770 10 6452 1 2025-09-03 06:31:41.107 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48706 10 6452 1 2025-09-03 06:32:29.610 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 06:32:29.602 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 06:32:29.480 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:32:29.675 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:32:29.758 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 06:32:41.509 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:55944 10 6452 1 2025-09-03 06:33:41.868 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38900 10 6452 1 2025-09-03 06:34:42.276 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39460 10 6452 1 2025-09-03 06:31:23.872 00:05:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 06:35:42.688 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32844 10 6452 1 2025-09-03 06:32:23.874 00:05:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 06:36:43.112 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42288 10 6452 1 2025-09-03 06:37:29.738 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 06:37:29.669 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 06:37:29.658 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 06:37:29.368 00:00:00.020 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:37:29.656 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:37:43.507 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57422 10 6452 1 2025-09-03 06:38:43.909 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34040 10 6452 1 2025-09-03 06:39:44.323 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55010 10 6452 1 2025-09-03 06:40:44.730 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43292 10 6452 1 2025-09-03 06:37:23.874 00:05:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 06:41:45.138 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46524 10 6452 1 2025-09-03 06:38:23.877 00:05:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 06:42:29.738 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 06:42:29.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 06:42:29.774 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 06:42:29.455 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:42:29.655 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:42:45.559 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51186 10 6452 1 2025-09-03 06:43:45.957 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57446 10 6452 1 2025-09-03 06:44:46.369 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57300 10 6452 1 2025-09-03 06:45:46.776 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57212 10 6452 1 2025-09-03 06:46:47.194 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34258 10 6452 1 2025-09-03 06:47:29.875 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 06:43:23.875 00:05:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 06:47:29.952 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 06:47:29.856 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 06:47:29.600 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:47:29.792 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:47:47.595 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:59502 12 10365 1 2025-09-03 06:44:23.877 00:05:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 06:48:48.106 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47924 10 6452 1 2025-09-03 06:49:48.530 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59986 10 6452 1 2025-09-03 06:50:48.939 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:56382 10 6452 1 2025-09-03 06:51:49.377 00:00:11.602 TCP 1.101.0.1:3000 -> 23.104.0.1:47408 10 6452 1 2025-09-03 06:52:29.973 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 06:52:29.950 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:52:30.072 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 06:52:30.071 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:52:30.154 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 06:52:51.032 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55662 10 6452 1 2025-09-03 06:49:23.881 00:05:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 06:53:51.438 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35018 10 6452 1 2025-09-03 06:50:23.885 00:05:00.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 06:54:51.838 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:59844 10 6452 1 2025-09-03 06:55:52.226 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38540 10 6452 1 2025-09-03 06:56:52.633 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60872 10 6452 1 2025-09-03 06:57:30.157 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 06:57:30.147 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 06:57:30.062 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:57:30.413 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 06:57:30.495 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 06:57:53.034 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37924 10 6452 1 Summary: total flows: 139, total bytes: 425859, total packets: 1017, avg bps: 906, avg pps: 0, avg bpp: 418 Time window: 2025-09-03 05:55:23 - 2025-09-03 06:58:03 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0016s User: 0.0033s Wall: 0.0025s flows/second: 55308.6 Runtime: 0.0025s