Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 02:59:07.268 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43992 10 6452 1 2025-10-03 03:00:07.677 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:49346 10 6452 1 2025-10-03 02:55:38.362 00:06:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 03:01:08.040 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36658 10 6452 1 2025-10-03 03:01:58.960 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 03:01:58.951 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:01:59.010 00:00:00.045 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:01:58.882 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:01:58.877 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:02:08.447 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37694 10 6452 1 2025-10-03 03:03:08.855 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:43170 12 10375 1 2025-10-03 03:04:09.347 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44008 10 6452 1 2025-10-03 02:59:38.360 00:06:00.277 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 03:05:09.768 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:41266 10 6452 1 2025-10-03 03:06:10.140 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46338 10 6452 1 2025-10-03 03:06:59.068 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:06:58.922 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:06:59.247 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:06:59.199 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:06:59.331 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 03:07:10.544 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42982 10 6452 1 2025-10-03 03:02:38.362 00:06:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 03:08:10.959 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46584 10 6452 1 2025-10-03 03:09:11.362 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:47450 10 6452 1 2025-10-03 03:10:11.730 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58320 10 6452 1 2025-10-03 03:11:12.136 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54762 10 6452 1 2025-10-03 03:06:38.360 00:06:00.277 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 03:11:59.260 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:11:59.058 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:11:59.120 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:11:59.333 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:11:59.418 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 03:12:12.543 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39486 10 6452 1 2025-10-03 03:13:12.947 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60806 10 6452 1 2025-10-03 03:14:13.362 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58354 10 6452 1 2025-10-03 03:09:38.363 00:06:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 03:15:13.764 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34924 10 6452 1 2025-10-03 03:16:14.169 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54046 10 6452 1 2025-10-03 03:16:59.136 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:16:59.268 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:16:59.178 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:16:59.271 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:16:59.354 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 03:17:14.574 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35630 10 6452 1 2025-10-03 03:18:14.981 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42990 10 6452 1 2025-10-03 03:13:38.363 00:06:00.278 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 03:19:15.351 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38920 10 6452 1 2025-10-03 03:20:15.749 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45988 10 6452 1 2025-10-03 03:21:16.149 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35056 10 6452 1 2025-10-03 03:16:38.367 00:06:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 03:21:59.494 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 03:21:59.466 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:21:59.239 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:21:59.256 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:21:59.410 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:22:16.528 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38872 10 6452 1 2025-10-03 03:23:16.930 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:45474 10 6452 1 2025-10-03 03:24:17.353 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59612 10 6452 1 2025-10-03 03:25:17.765 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:37250 10 6452 1 2025-10-03 03:20:38.367 00:06:00.277 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 03:26:18.185 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55660 10 6452 1 2025-10-03 03:26:59.327 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:26:59.497 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:26:59.375 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:26:59.415 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:26:59.497 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 03:27:18.588 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58058 10 6452 1 2025-10-03 03:28:18.993 00:00:10.493 TCP 1.101.0.1:3000 -> 23.104.0.1:54184 14 10473 1 2025-10-03 03:23:38.368 00:06:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 03:29:19.525 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33180 10 6452 1 2025-10-03 03:30:19.889 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:47278 10 6452 1 2025-10-03 03:31:20.272 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47448 10 6452 1 2025-10-03 03:31:59.594 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:31:59.524 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:31:59.343 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:31:59.523 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:31:59.605 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 03:32:20.680 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56712 10 6452 1 2025-10-03 03:27:38.367 00:06:00.276 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 03:33:21.038 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43964 10 6452 1 2025-10-03 03:34:21.436 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58550 10 6452 1 2025-10-03 03:35:21.842 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:52428 10 6452 1 2025-10-03 03:30:38.372 00:06:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 03:36:22.268 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38716 10 6452 1 2025-10-03 03:36:59.604 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:36:59.613 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:36:59.645 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:36:59.731 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:36:59.814 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 03:37:22.679 00:00:10.609 TCP 1.101.0.1:3000 -> 23.104.0.1:56004 10 6452 1 2025-10-03 03:38:23.351 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43216 10 6452 1 2025-10-03 03:34:38.370 00:06:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 03:39:23.714 00:00:13.262 TCP 1.101.0.1:3000 -> 23.104.0.1:44922 10 6452 1 2025-10-03 03:40:27.022 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38078 10 6452 1 2025-10-03 03:41:27.384 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52198 10 6452 1 2025-10-03 03:41:59.751 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:41:59.877 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:41:59.768 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:41:59.649 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:41:59.734 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 03:37:38.374 00:06:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 03:42:27.791 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50224 10 6452 1 2025-10-03 03:43:28.200 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59246 10 6452 1 2025-10-03 03:44:28.608 00:00:10.485 TCP 1.101.0.1:3000 -> 23.104.0.1:42428 10 6452 1 2025-10-03 03:45:29.132 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43374 10 6452 1 2025-10-03 03:46:29.538 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54656 10 6452 1 2025-10-03 03:41:38.381 00:06:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 03:46:59.802 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 03:46:59.879 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:46:59.881 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:46:59.756 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:46:59.720 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:47:29.942 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52166 12 6556 1 2025-10-03 03:48:30.364 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57342 10 6452 1 2025-10-03 03:44:38.385 00:06:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 03:49:30.731 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51640 10 6452 1 2025-10-03 03:50:31.137 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44510 10 6452 1 2025-10-03 03:51:31.540 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36108 10 6452 1 2025-10-03 03:51:59.924 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:51:59.925 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:51:59.642 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:51:59.927 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:52:00.010 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 03:52:31.949 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39608 10 6452 1 2025-10-03 03:48:38.384 00:06:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 03:53:32.377 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55384 10 6452 1 2025-10-03 03:54:32.777 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52794 10 6452 1 2025-10-03 03:55:33.194 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48314 10 6452 1 2025-10-03 03:51:38.387 00:06:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 03:56:33.596 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36506 10 6452 1 2025-10-03 03:56:59.925 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 03:56:59.681 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:57:00.206 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 03:57:00.225 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 03:57:00.123 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 03:57:34.001 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49742 10 6452 1 2025-10-03 03:58:34.419 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34422 12 6556 1 Summary: total flows: 137, total bytes: 425029, total packets: 1028, avg bps: 898, avg pps: 0, avg bpp: 413 Time window: 2025-10-03 02:55:38 - 2025-10-03 03:58:44 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0041s User: 0.0010s Wall: 0.0019s flows/second: 73735.4 Runtime: 0.0019s