Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 08:58:55.168 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54254 10 6452 1 2025-10-03 08:59:55.531 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43444 10 6452 1 2025-10-03 09:00:55.936 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:47690 10 6452 1 2025-10-03 08:56:38.487 00:06:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 09:02:06.249 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 09:02:06.309 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 09:02:06.171 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:01:56.365 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45584 10 6452 1 2025-10-03 09:02:06.356 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:02:06.438 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 09:02:56.765 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53224 10 6452 1 2025-10-03 09:03:57.179 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34566 10 6452 1 2025-10-03 08:59:38.490 00:06:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 09:04:57.580 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56294 10 6452 1 2025-10-03 09:05:57.943 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39850 10 6452 1 2025-10-03 09:07:06.640 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 09:06:58.354 00:00:10.432 TCP 1.101.0.1:3000 -> 23.104.0.1:54094 11 6504 1 2025-10-03 09:07:06.739 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 09:07:06.595 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:07:06.637 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:07:06.720 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 09:07:58.834 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:50130 10 6452 1 2025-10-03 09:03:38.490 00:06:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 09:08:59.255 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:40690 11 6504 1 2025-10-03 09:09:59.710 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42562 10 6452 1 2025-10-03 09:11:00.115 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34522 10 6452 1 2025-10-03 09:06:38.493 00:06:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 09:12:06.783 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 09:12:06.783 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 09:12:06.434 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:12:06.791 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:12:06.874 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 09:12:00.517 00:00:13.988 TCP 1.101.0.1:3000 -> 23.104.0.1:49948 10 6452 1 2025-10-03 09:13:04.556 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51074 10 6452 1 2025-10-03 09:14:04.962 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34714 10 6452 1 2025-10-03 09:15:05.365 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44316 10 6452 1 2025-10-03 09:10:38.493 00:06:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 09:16:05.774 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33860 10 6452 1 2025-10-03 09:17:06.451 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 09:17:06.447 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 09:17:06.634 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:17:06.649 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:17:06.732 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 09:17:06.181 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42298 10 6452 1 2025-10-03 09:18:06.581 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55022 10 6452 1 2025-10-03 09:13:38.496 00:06:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 09:19:06.945 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57350 10 6452 1 2025-10-03 09:20:07.354 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:44812 10 6452 1 2025-10-03 09:21:07.847 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52646 10 6452 1 2025-10-03 09:22:06.595 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 09:22:06.663 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 09:22:06.688 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:22:06.666 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:22:06.748 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 09:22:08.269 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34448 10 6452 1 2025-10-03 09:17:38.494 00:06:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 09:23:08.678 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47088 10 6452 1 2025-10-03 09:24:09.106 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50796 10 6452 1 2025-10-03 09:25:09.504 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37456 10 6452 1 2025-10-03 09:20:38.497 00:06:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 09:26:09.908 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:53594 10 6452 1 2025-10-03 09:27:07.059 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 09:27:07.042 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 09:27:07.133 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:27:06.960 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:27:07.043 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 09:27:10.277 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35966 10 6452 1 2025-10-03 09:28:10.644 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:53804 12 10369 1 2025-10-03 09:29:11.126 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47032 10 6452 1 2025-10-03 09:24:38.495 00:06:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 09:30:11.526 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39684 10 6452 1 2025-10-03 09:31:11.887 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:34680 10 6452 1 2025-10-03 09:32:07.173 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 09:32:06.893 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:32:07.076 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:32:07.082 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 09:32:07.158 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 09:32:12.312 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34110 12 6556 1 2025-10-03 09:27:38.500 00:06:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 09:33:12.714 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51208 10 6452 1 2025-10-03 09:34:13.120 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53424 10 6452 1 2025-10-03 09:35:13.525 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49018 10 6452 1 2025-10-03 09:36:13.921 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34484 10 6452 1 2025-10-03 09:31:38.496 00:06:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 09:37:07.049 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 09:37:07.097 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:37:07.056 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:37:06.901 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 09:37:07.139 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 09:37:14.326 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59512 10 6452 1 2025-10-03 09:38:14.689 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58086 10 6452 1 2025-10-03 09:39:15.103 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50254 10 6452 1 2025-10-03 09:34:38.500 00:06:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 09:40:15.514 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53518 10 6452 1 2025-10-03 09:41:15.925 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:41436 10 6452 1 2025-10-03 09:42:07.192 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 09:42:07.111 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:42:07.112 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 09:42:06.914 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 09:42:07.059 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:42:16.353 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54228 10 6452 1 2025-10-03 09:43:16.718 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56882 10 6452 1 2025-10-03 09:38:38.498 00:06:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 09:44:17.133 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36902 10 6452 1 2025-10-03 09:45:17.536 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47290 10 6452 1 2025-10-03 09:46:17.940 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49836 10 6452 1 2025-10-03 09:41:38.501 00:06:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 09:47:07.294 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 09:47:07.157 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:47:07.250 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:47:07.132 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 09:47:07.332 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 09:47:18.355 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:42088 10 6452 1 2025-10-03 09:48:18.828 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50264 10 6452 1 2025-10-03 09:49:19.230 00:00:10.559 TCP 1.101.0.1:3000 -> 23.104.0.1:54094 10 6452 1 2025-10-03 09:50:19.828 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40996 10 6452 1 2025-10-03 09:45:38.499 00:06:00.276 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 09:51:20.231 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43206 10 6452 1 2025-10-03 09:52:07.427 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 09:52:07.033 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 09:52:07.521 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 09:52:07.097 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:52:07.344 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:52:20.636 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51544 10 6452 1 2025-10-03 09:53:21.039 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:51516 12 10369 1 2025-10-03 09:48:38.501 00:06:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 09:54:21.518 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56180 10 6452 1 2025-10-03 09:55:21.926 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41548 10 6452 1 2025-10-03 09:56:22.338 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33316 10 6452 1 2025-10-03 09:57:07.483 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 09:57:07.780 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 09:57:07.657 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:57:07.770 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 09:57:07.853 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 09:57:22.755 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:43606 10 6452 1 2025-10-03 09:52:38.503 00:06:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 09:58:23.186 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39288 10 6452 1 Summary: total flows: 137, total bytes: 424919, total packets: 1026, avg bps: 913, avg pps: 0, avg bpp: 414 Time window: 2025-10-03 08:56:38 - 2025-10-03 09:58:38 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0028s User: 0.0019s Wall: 0.0045s flows/second: 30189.1 Runtime: 0.0046s