Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 04:59:08.064 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54518 10 6452 1 2025-10-02 05:00:08.472 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37436 10 6452 1 2025-10-02 05:01:08.881 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49264 10 6452 1 2025-10-02 05:01:32.689 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:01:32.567 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:01:32.381 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:01:32.458 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:01:32.607 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:02:09.280 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36756 10 6452 1 2025-10-02 04:58:37.858 00:05:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:03:09.683 00:00:10.777 TCP 1.101.0.1:3000 -> 23.104.0.1:33730 10 6452 1 2025-10-02 05:04:10.504 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46102 10 6452 1 2025-10-02 05:00:37.861 00:05:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:05:10.908 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:52842 10 6452 1 2025-10-02 05:06:11.279 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43794 10 6452 1 2025-10-02 05:06:32.614 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:06:32.613 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:06:32.616 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:06:32.683 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:06:32.698 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:07:11.684 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:34192 10 6452 1 2025-10-02 05:08:12.110 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52594 10 6452 1 2025-10-02 05:04:37.861 00:05:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:09:12.509 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33472 10 6452 1 2025-10-02 05:10:12.910 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56902 10 6452 1 2025-10-02 05:06:37.865 00:05:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:11:13.320 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34222 10 6452 1 2025-10-02 05:11:32.519 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:11:32.648 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:11:32.384 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:11:32.806 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:11:32.888 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:12:13.733 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50756 10 6452 1 2025-10-02 05:13:14.149 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38960 10 6452 1 2025-10-02 05:14:14.518 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44150 10 6452 1 2025-10-02 05:10:37.864 00:05:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:15:14.924 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50524 10 6452 1 2025-10-02 05:16:15.336 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:35490 10 6452 1 2025-10-02 05:16:32.755 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:16:32.805 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:16:32.635 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:16:32.697 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:16:32.782 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:12:37.865 00:05:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:17:15.716 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:60852 10 6452 1 2025-10-02 05:18:16.136 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:42500 12 10375 1 2025-10-02 05:19:16.616 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46890 10 6452 1 2025-10-02 05:20:17.019 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38750 10 6452 1 2025-10-02 05:16:37.864 00:05:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:21:17.418 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56148 10 6452 1 2025-10-02 05:21:32.914 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:21:32.921 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:21:32.725 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:21:32.832 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:21:32.877 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:22:17.822 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43844 10 6452 1 2025-10-02 05:18:37.866 00:05:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:23:18.244 00:00:10.670 TCP 1.101.0.1:3000 -> 23.104.0.1:52684 10 6452 1 2025-10-02 05:24:18.957 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48960 10 6452 1 2025-10-02 05:25:19.362 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59630 10 6452 1 2025-10-02 05:26:32.920 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:26:32.499 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:26:32.919 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:26:19.734 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:42280 10 6452 1 2025-10-02 05:26:32.856 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:26:33.004 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:22:37.865 00:05:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:27:20.151 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50584 10 6452 1 2025-10-02 05:28:20.564 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46144 10 6452 1 2025-10-02 05:24:37.867 00:05:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:29:20.966 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48280 10 6452 1 2025-10-02 05:30:21.373 00:00:10.534 TCP 1.101.0.1:3000 -> 23.104.0.1:56170 10 6452 1 2025-10-02 05:31:33.081 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:31:33.075 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:31:32.998 00:00:00.040 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:31:32.870 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:31:33.000 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:31:21.951 00:00:10.545 TCP 1.101.0.1:3000 -> 23.104.0.1:42426 10 6452 1 2025-10-02 05:32:22.531 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40572 10 6452 1 2025-10-02 05:28:37.866 00:05:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:33:22.934 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33460 10 6452 1 2025-10-02 05:34:23.351 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39744 10 6452 1 2025-10-02 05:30:37.869 00:05:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:35:23.761 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35892 10 6452 1 2025-10-02 05:36:33.365 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:36:33.281 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:36:24.176 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35052 10 6452 1 2025-10-02 05:36:33.421 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:36:33.302 00:00:00.016 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:36:33.282 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:37:24.579 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58100 10 6452 1 2025-10-02 05:38:24.983 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:40754 12 10375 1 2025-10-02 05:34:37.868 00:05:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:39:25.460 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48518 10 6452 1 2025-10-02 05:36:37.869 00:05:00.289 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:40:25.819 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42030 10 6452 1 2025-10-02 05:41:33.214 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:41:33.298 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:41:33.059 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:41:33.411 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:41:33.494 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:41:26.191 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:51582 10 6452 1 2025-10-02 05:42:26.586 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45202 10 6452 1 2025-10-02 05:43:26.990 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34248 10 6452 1 2025-10-02 05:44:27.400 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56728 10 6452 1 2025-10-02 05:40:37.869 00:05:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:45:27.802 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38268 10 6452 1 2025-10-02 05:46:33.416 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:46:33.174 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:46:33.183 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:46:33.352 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:46:33.332 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:42:37.873 00:05:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:46:28.200 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49212 10 6452 1 2025-10-02 05:47:28.603 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49056 10 6452 1 2025-10-02 05:48:29.012 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59690 10 6452 1 2025-10-02 05:49:29.417 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:44498 11 6504 1 2025-10-02 05:46:37.874 00:05:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:50:29.872 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56282 10 6452 1 2025-10-02 05:51:33.367 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:51:33.382 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:51:33.439 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:51:33.495 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:51:33.523 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:51:30.280 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49618 10 6452 1 2025-10-02 05:48:37.876 00:05:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:52:30.685 00:00:10.644 TCP 1.101.0.1:3000 -> 23.104.0.1:45842 10 6452 1 2025-10-02 05:53:31.366 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34512 12 6556 1 2025-10-02 05:54:31.769 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49272 10 6452 1 2025-10-02 05:55:32.182 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:38194 10 6452 1 2025-10-02 05:56:33.778 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:56:33.918 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:56:33.681 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:56:33.645 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:56:33.859 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:52:37.881 00:05:00.281 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:56:32.544 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:51776 10 6452 1 2025-10-02 05:57:32.973 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:49276 10 6452 1 2025-10-02 05:54:37.884 00:05:00.277 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:58:33.397 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39938 10 6452 1 Summary: total flows: 140, total bytes: 425002, total packets: 1027, avg bps: 928, avg pps: 0, avg bpp: 413 Time window: 2025-10-02 04:58:37 - 2025-10-02 05:59:38 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0039s User: 0.0008s Wall: 0.0026s flows/second: 54664.2 Runtime: 0.0026s