Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 03:55:38.870 00:05:00.388 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 03:59:34.536 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49518 10 6452 1 2025-10-04 04:00:34.935 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:54358 10 6452 1 2025-10-04 03:57:38.869 00:05:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 04:01:35.312 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47790 10 6452 1 2025-10-04 04:02:29.949 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 04:02:29.776 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 04:02:29.509 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:02:29.798 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:02:29.880 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 04:02:35.716 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42186 10 6452 1 2025-10-04 04:03:36.126 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56652 10 6452 1 2025-10-04 04:04:36.537 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50230 10 6452 1 2025-10-04 04:01:38.874 00:05:00.386 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 04:05:36.898 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:33408 12 6556 1 2025-10-04 04:06:37.317 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52490 10 6452 1 2025-10-04 04:07:29.023 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 04:07:29.186 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 04:07:29.246 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 04:07:29.203 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:07:28.940 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:03:38.872 00:05:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 04:07:37.719 00:00:10.526 TCP 1.101.0.1:3000 -> 23.104.0.1:39914 11 6504 1 2025-10-04 04:08:38.291 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36980 10 6452 1 2025-10-04 04:09:38.690 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40004 10 6452 1 2025-10-04 04:10:39.112 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42738 10 6452 1 2025-10-04 04:07:38.877 00:05:00.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 04:11:39.474 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49504 10 6452 1 2025-10-04 04:12:29.536 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 04:12:29.290 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 04:12:29.361 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 04:12:29.381 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:12:29.455 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:12:39.880 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58972 10 6452 1 2025-10-04 04:09:38.874 00:05:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 04:13:40.292 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40756 10 6452 1 2025-10-04 04:14:40.652 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37488 10 6452 1 2025-10-04 04:15:41.059 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34930 10 6452 1 2025-10-04 04:16:41.464 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57356 10 6452 1 2025-10-04 04:17:29.805 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 04:17:29.676 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 04:17:29.495 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 04:17:29.330 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:17:29.723 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:13:38.876 00:05:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 04:17:41.872 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47184 10 6452 1 2025-10-04 04:18:42.279 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57708 10 6452 1 2025-10-04 04:15:38.874 00:05:00.402 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 04:19:42.640 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57250 10 6452 1 2025-10-04 04:20:43.002 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42732 10 6452 1 2025-10-04 04:21:43.364 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49212 10 6452 1 2025-10-04 04:22:29.581 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 04:22:29.410 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:22:29.580 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:22:29.332 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 04:22:29.661 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 04:22:43.768 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:54452 10 6452 1 2025-10-04 04:19:38.879 00:05:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 04:23:44.136 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:49698 12 10375 1 2025-10-04 04:24:44.615 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40712 10 6452 1 2025-10-04 04:21:38.876 00:05:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 04:25:45.026 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54298 10 6452 1 2025-10-04 04:26:45.430 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41056 10 6452 1 2025-10-04 04:27:29.827 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 04:27:29.704 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 04:27:29.655 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 04:27:29.678 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:27:29.745 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:27:45.839 00:00:10.842 TCP 1.101.0.1:3000 -> 23.104.0.1:34164 10 6452 1 2025-10-04 04:28:46.717 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32826 10 6452 1 2025-10-04 04:25:38.879 00:05:00.397 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 04:29:47.134 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59500 10 6452 1 2025-10-04 04:30:47.553 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:35854 10 6452 1 2025-10-04 04:27:38.876 00:05:00.402 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 04:31:47.932 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:48678 13 6608 1 2025-10-04 04:32:29.775 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 04:32:29.597 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 04:32:29.620 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:32:29.693 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:32:29.695 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 04:32:48.371 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36238 10 6452 1 2025-10-04 04:33:48.777 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49298 10 6452 1 2025-10-04 04:34:49.185 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57846 10 6452 1 2025-10-04 04:31:38.890 00:05:00.386 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 04:35:49.587 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53558 10 6452 1 2025-10-04 04:36:49.994 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:43374 10 6452 1 2025-10-04 04:37:30.109 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 04:37:30.029 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 04:37:30.129 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 04:37:30.086 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:37:30.027 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:33:38.889 00:05:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 04:37:50.447 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46392 10 6452 1 2025-10-04 04:38:50.855 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:42190 10 6452 1 2025-10-04 04:39:51.285 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33528 10 6452 1 2025-10-04 04:40:51.689 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39480 10 6452 1 2025-10-04 04:37:38.894 00:05:00.388 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 04:41:52.051 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39804 10 6452 1 2025-10-04 04:42:29.809 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 04:42:29.837 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 04:42:29.829 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 04:42:29.793 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:42:29.726 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:42:52.460 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53078 10 6452 1 2025-10-04 04:39:38.891 00:05:00.394 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 04:43:52.866 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:56580 12 10375 1 2025-10-04 04:44:53.348 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35454 10 6452 1 2025-10-04 04:45:53.756 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53498 10 6452 1 2025-10-04 04:46:54.158 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37628 10 6452 1 2025-10-04 04:47:29.926 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:47:29.936 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:47:30.127 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 04:47:30.008 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 04:47:30.019 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 04:43:38.904 00:05:00.380 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 04:47:54.562 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40304 10 6452 1 2025-10-04 04:48:54.967 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45122 10 6452 1 2025-10-04 04:45:38.902 00:05:00.384 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 04:49:55.376 00:00:14.639 TCP 1.101.0.1:3000 -> 23.104.0.1:45662 10 6452 1 2025-10-04 04:51:00.070 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38934 10 6452 1 2025-10-04 04:52:00.475 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50928 10 6452 1 2025-10-04 04:52:30.166 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 04:52:29.968 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 04:52:30.164 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 04:52:30.211 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:52:30.084 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:53:00.838 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:59210 10 6452 1 2025-10-04 04:49:38.909 00:05:00.375 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 04:54:01.339 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49212 10 6452 1 2025-10-04 04:55:01.745 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:32816 10 6452 1 2025-10-04 04:51:38.906 00:05:00.383 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 04:56:02.149 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39144 10 6452 1 2025-10-04 04:57:02.552 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59342 10 6452 1 2025-10-04 04:57:30.393 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 04:57:30.394 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 04:57:30.184 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:57:30.133 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 04:57:30.215 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 04:58:02.976 00:00:13.963 TCP 1.101.0.1:3000 -> 23.104.0.1:37518 12 10369 1 Summary: total flows: 139, total bytes: 422623, total packets: 1022, avg bps: 899, avg pps: 0, avg bpp: 413 Time window: 2025-10-04 03:55:38 - 2025-10-04 04:58:16 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0044s User: 0.0009s Wall: 0.0020s flows/second: 68372.0 Runtime: 0.0021s