Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 08:58:41.430 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:40824 10 6452 1 2025-09-03 08:55:23.920 00:05:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 08:59:41.922 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:41858 10 6452 1 2025-09-03 08:56:23.922 00:05:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 09:00:42.344 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51588 10 6452 1 2025-09-03 09:01:42.757 00:00:10.528 TCP 1.101.0.1:3000 -> 23.104.0.1:58052 10 6452 1 2025-09-03 09:02:32.669 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 09:02:32.505 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 09:02:32.585 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 09:02:32.316 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:02:32.585 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:02:43.326 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44918 10 6452 1 2025-09-03 09:03:43.726 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33862 10 6452 1 2025-09-03 09:04:44.136 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60618 10 6452 1 2025-09-03 09:01:23.922 00:05:00.273 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 09:05:44.498 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37922 10 6452 1 2025-09-03 09:02:23.925 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 09:06:44.905 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37312 10 6452 1 2025-09-03 09:07:32.939 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 09:07:32.794 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 09:07:33.097 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:07:32.942 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:07:33.026 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 09:07:45.307 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57764 10 6452 1 2025-09-03 09:08:45.676 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32890 10 6452 1 2025-09-03 09:09:46.107 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:55412 10 6452 1 2025-09-03 09:10:46.469 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35696 10 6452 1 2025-09-03 09:07:23.924 00:05:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 09:11:46.875 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38880 10 6452 1 2025-09-03 09:08:23.926 00:05:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 09:12:32.966 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 09:12:32.847 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 09:12:32.783 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 09:12:32.738 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:12:32.884 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:12:47.279 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38936 10 6452 1 2025-09-03 09:13:47.680 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41262 10 6452 1 2025-09-03 09:14:48.109 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48674 10 6452 1 2025-09-03 09:15:48.473 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40784 10 6452 1 2025-09-03 09:16:48.875 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34606 10 6452 1 2025-09-03 09:13:23.926 00:05:00.275 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 09:17:32.783 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 09:17:32.858 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 09:17:32.811 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:17:32.697 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:17:32.780 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 09:17:49.285 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50130 10 6452 1 2025-09-03 09:14:23.927 00:05:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 09:18:49.693 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49764 10 6452 1 2025-09-03 09:19:50.117 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:39550 10 6452 1 2025-09-03 09:20:50.552 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45726 10 6452 1 2025-09-03 09:21:50.962 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50702 10 6452 1 2025-09-03 09:22:33.078 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 09:22:32.958 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 09:22:32.760 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:22:32.904 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:22:32.987 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 09:22:51.367 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54310 10 6452 1 2025-09-03 09:19:23.925 00:05:00.278 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 09:23:51.781 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46766 10 6452 1 2025-09-03 09:20:23.929 00:05:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 09:24:52.186 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59872 10 6452 1 2025-09-03 09:25:52.593 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59482 10 6452 1 2025-09-03 09:26:52.995 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:38400 10 6452 1 2025-09-03 09:27:33.166 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 09:27:33.085 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:27:32.940 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 09:27:33.246 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 09:27:33.010 00:00:00.048 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:27:53.374 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55712 10 6452 1 2025-09-03 09:28:53.774 00:00:10.629 TCP 1.101.0.1:3000 -> 23.104.0.1:52548 10 6452 1 2025-09-03 09:25:23.930 00:05:00.276 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 09:29:54.443 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33276 10 6452 1 2025-09-03 09:26:23.932 00:05:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 09:30:54.846 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:39120 10 6452 1 2025-09-03 09:31:55.282 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38044 10 6452 1 2025-09-03 09:32:33.270 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 09:32:33.141 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 09:32:32.951 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 09:32:33.101 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:32:33.188 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:32:55.643 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38286 10 6452 1 2025-09-03 09:33:56.070 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53606 10 6452 1 2025-09-03 09:34:56.440 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:48754 10 6452 1 2025-09-03 09:31:23.933 00:05:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 09:35:56.803 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38052 10 6452 1 2025-09-03 09:32:23.935 00:05:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 09:36:57.216 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45228 10 6452 1 2025-09-03 09:37:33.398 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 09:37:33.230 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 09:37:33.392 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 09:37:33.283 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:37:33.315 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:37:57.579 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43290 10 6452 1 2025-09-03 09:38:57.983 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56308 10 6452 1 2025-09-03 09:39:58.348 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43800 10 6452 1 2025-09-03 09:40:58.756 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:37758 10 6452 1 2025-09-03 09:37:23.934 00:05:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 09:41:59.179 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49924 10 6452 1 2025-09-03 09:38:23.936 00:05:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 09:42:33.323 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 09:42:33.451 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 09:42:33.375 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 09:42:33.265 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:42:33.241 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:42:59.541 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:57152 10 6452 1 2025-09-03 09:43:59.938 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:42826 10 6452 1 2025-09-03 09:45:00.361 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45530 10 6452 1 2025-09-03 09:46:00.760 00:00:10.828 TCP 1.101.0.1:3000 -> 23.104.0.1:42106 10 6452 1 2025-09-03 09:47:01.625 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58124 10 6452 1 2025-09-03 09:43:23.935 00:05:00.273 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 09:47:33.415 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 09:47:33.480 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 09:47:33.486 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:47:33.475 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:47:33.560 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 09:48:02.032 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:35574 12 10367 1 2025-09-03 09:44:23.936 00:05:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 09:49:02.515 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57816 10 6452 1 2025-09-03 09:50:02.923 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40138 10 6452 1 2025-09-03 09:51:03.329 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47008 10 6452 1 2025-09-03 09:52:03.741 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49120 10 6452 1 2025-09-03 09:52:33.646 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 09:52:33.855 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 09:52:33.241 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:52:33.738 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:52:33.820 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 09:53:04.121 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:38190 12 10365 1 2025-09-03 09:49:23.935 00:05:00.278 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-03 09:54:04.607 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52678 10 6452 1 2025-09-03 09:50:23.937 00:05:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-03 09:55:04.968 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34602 10 6452 1 2025-09-03 09:56:05.371 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43436 10 6452 1 2025-09-03 09:57:05.771 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34878 10 6452 1 2025-09-03 09:57:33.754 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-03 09:57:33.677 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-03 09:57:33.624 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-03 09:57:33.438 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:57:33.671 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-03 09:58:06.175 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59918 10 6452 1 Summary: total flows: 140, total bytes: 424828, total packets: 1024, avg bps: 900, avg pps: 0, avg bpp: 414 Time window: 2025-09-03 08:55:23 - 2025-09-03 09:58:16 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0025s User: 0.0025s Wall: 0.0020s flows/second: 68358.9 Runtime: 0.0021s