Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 12:58:41.465 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34318 10 6452 1 2025-10-04 12:59:41.863 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53516 10 6452 1 2025-10-04 12:55:39.088 00:06:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-04 13:00:42.278 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33506 10 6452 1 2025-10-04 13:01:42.682 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58512 10 6452 1 2025-10-04 13:02:39.901 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 13:02:39.772 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 13:02:39.542 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:02:39.677 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:02:39.760 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 12:58:39.086 00:04:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 13:02:43.107 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37726 10 6452 1 2025-10-04 13:03:43.510 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37336 10 6452 1 2025-10-04 13:04:43.915 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45856 10 6452 1 2025-10-04 13:05:44.320 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53096 10 6452 1 2025-10-04 13:06:44.725 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43360 10 6452 1 2025-10-04 13:03:39.088 00:04:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 13:02:39.092 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-10-04 13:07:39.949 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:07:40.329 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 13:07:40.271 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 13:07:40.364 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:07:40.449 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 13:07:45.134 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39752 10 6452 1 2025-10-04 13:08:45.541 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58034 10 6452 1 2025-10-04 13:09:45.945 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37284 10 6452 1 2025-10-04 13:10:46.361 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53680 10 6452 1 2025-10-04 13:08:39.439 00:03:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 440 1 2025-10-04 13:11:46.765 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39390 10 6452 1 2025-10-04 13:12:39.809 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 13:12:39.959 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:08:39.090 00:04:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 13:12:40.172 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 13:12:40.058 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:12:40.140 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 13:12:47.169 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36440 10 6452 1 2025-10-04 13:13:47.577 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55868 10 6452 1 2025-10-04 13:14:47.987 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39344 10 6452 1 2025-10-04 13:15:48.413 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51216 10 6452 1 2025-10-04 13:12:39.092 00:04:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 13:16:48.777 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56420 10 6452 1 2025-10-04 13:17:40.273 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 13:17:40.095 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 13:17:40.014 00:00:00.043 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:17:40.091 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:17:40.174 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 13:17:49.184 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57350 10 6452 1 2025-10-04 13:13:39.089 00:06:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 13:18:49.547 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:41430 12 10369 1 2025-10-04 13:19:49.981 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43316 10 6452 1 2025-10-04 13:20:50.394 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34618 10 6452 1 2025-10-04 13:17:39.093 00:04:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 13:21:50.797 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39900 10 6452 1 2025-10-04 13:22:40.227 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 13:22:40.344 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 13:22:40.218 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:22:40.413 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:22:40.496 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 13:22:51.215 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49772 10 6452 1 2025-10-04 13:23:51.624 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42298 10 6452 1 2025-10-04 13:24:52.030 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54686 10 6452 1 2025-10-04 13:20:39.091 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-10-04 13:25:52.441 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40038 10 6452 1 2025-10-04 13:22:39.094 00:04:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 13:26:52.858 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58924 10 6452 1 2025-10-04 13:27:40.568 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 13:27:40.371 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 13:27:40.036 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:27:40.486 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:27:40.486 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 13:27:53.278 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53246 10 6452 1 2025-10-04 13:28:53.679 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33870 10 6452 1 2025-10-04 13:29:54.111 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:45366 10 6452 1 2025-10-04 13:30:54.508 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35786 10 6452 1 2025-10-04 13:26:39.448 00:06:00.004 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 790 1 2025-10-04 13:31:54.907 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46552 12 6556 1 2025-10-04 13:27:39.094 00:06:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-04 13:32:40.476 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 13:32:40.473 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 13:32:40.428 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:32:40.470 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:32:40.551 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 13:32:55.312 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48204 10 6452 1 2025-10-04 13:33:55.712 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44470 10 6452 1 2025-10-04 13:33:39.093 00:01:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-04 13:34:56.116 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60324 10 6452 1 2025-10-04 13:35:56.517 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54188 10 6452 1 2025-10-04 13:36:56.917 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50252 10 6452 1 2025-10-04 13:37:40.546 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 13:37:40.726 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 13:37:40.629 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:37:40.724 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:37:40.806 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 13:37:57.319 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34540 10 6452 1 2025-10-04 13:38:57.723 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:32980 10 6452 1 2025-10-04 13:35:39.094 00:04:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 13:34:39.096 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-10-04 13:39:58.150 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47386 10 6452 1 2025-10-04 13:40:58.554 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:50328 10 6452 1 2025-10-04 13:41:58.911 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40330 12 6556 1 2025-10-04 13:42:40.695 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 13:42:40.789 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 13:42:40.535 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:42:40.696 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:42:40.784 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 13:42:59.308 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48942 10 6452 1 2025-10-04 13:43:59.714 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51880 10 6452 1 2025-10-04 13:40:39.093 00:04:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 13:45:00.132 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32870 10 6452 1 2025-10-04 13:40:39.451 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-10-04 13:46:00.542 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48560 10 6452 1 2025-10-04 13:47:00.950 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47470 10 6452 1 2025-10-04 13:47:40.790 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 13:47:40.789 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 13:47:40.848 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:47:40.789 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:47:40.873 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 13:48:01.359 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47228 10 6452 1 2025-10-04 13:47:39.100 00:01:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-04 13:49:01.766 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:52968 10 6452 1 2025-10-04 13:50:02.139 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47590 10 6452 1 2025-10-04 13:45:39.095 00:06:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 13:51:02.548 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40990 10 6452 1 2025-10-04 13:52:02.954 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40096 10 6452 1 2025-10-04 13:52:41.082 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 13:52:41.131 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 13:52:41.102 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:52:40.855 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:52:40.937 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 13:53:03.360 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56148 10 6452 1 2025-10-04 13:49:39.102 00:04:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 13:54:03.762 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33436 10 6452 1 2025-10-04 13:55:04.122 00:00:11.068 TCP 1.101.0.1:3000 -> 23.104.0.1:33266 10 6452 1 2025-10-04 13:56:05.228 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60350 10 6452 1 2025-10-04 13:57:05.629 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:34560 10 6452 1 2025-10-04 13:57:40.943 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 13:57:40.948 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 13:57:40.622 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:57:40.944 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 13:52:39.097 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-10-04 13:57:41.028 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 13:58:06.112 00:00:10.693 TCP 1.101.0.1:3000 -> 23.104.0.1:44970 10 6452 1 2025-10-04 13:54:39.101 00:04:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 Summary: total flows: 143, total bytes: 421688, total packets: 1035, avg bps: 892, avg pps: 0, avg bpp: 407 Time window: 2025-10-04 12:55:39 - 2025-10-04 13:58:39 Total flows processed: 143, passed: 143, Blocks skipped: 0, Bytes read: 14936 Sys: 0.0046s User: 0.0012s Wall: 0.0021s flows/second: 67202.9 Runtime: 0.0021s