Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 03:59:17.788 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55636 10 6452 1 2025-10-06 04:00:18.193 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55840 10 6452 1 2025-10-06 03:56:39.852 00:05:00.426 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:01:18.594 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51240 10 6452 1 2025-10-06 03:57:39.851 00:05:00.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:02:18.994 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43386 10 6452 1 2025-10-06 04:03:26.804 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:03:26.727 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:03:26.743 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:03:19.402 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60230 10 6452 1 2025-10-06 04:03:26.894 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:03:26.979 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:04:19.808 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55770 10 6452 1 2025-10-06 04:05:20.217 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:39884 10 6452 1 2025-10-06 04:06:20.658 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56852 10 6452 1 2025-10-06 04:02:39.855 00:05:00.427 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:07:21.098 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59052 10 6452 1 2025-10-06 04:03:39.853 00:05:00.431 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:08:27.141 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:08:27.058 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:08:26.951 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:08:27.054 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:08:26.845 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:08:21.501 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:44498 10 6452 1 2025-10-06 04:09:21.880 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42542 10 6452 1 2025-10-06 04:10:22.285 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60906 10 6452 1 2025-10-06 04:11:22.687 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57350 10 6452 1 2025-10-06 04:12:23.114 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50136 10 6452 1 2025-10-06 04:08:39.855 00:05:00.428 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:13:27.078 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:13:27.122 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:13:26.853 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:13:27.164 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:13:27.245 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:13:23.514 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35382 10 6452 1 2025-10-06 04:09:39.854 00:05:00.433 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:14:23.918 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:41338 12 10375 1 2025-10-06 04:15:24.369 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38240 10 6452 1 2025-10-06 04:16:24.775 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42440 10 6452 1 2025-10-06 04:17:25.190 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48006 10 6452 1 2025-10-06 04:18:26.814 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:18:27.070 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:18:26.923 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:18:27.069 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:18:27.152 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:18:25.596 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50572 10 6452 1 2025-10-06 04:14:39.856 00:05:00.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:19:26.006 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60252 10 6452 1 2025-10-06 04:15:39.853 00:05:00.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:20:26.405 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41924 10 6452 1 2025-10-06 04:21:26.811 00:00:10.491 TCP 1.101.0.1:3000 -> 23.104.0.1:35086 10 6452 1 2025-10-06 04:22:27.343 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48544 10 6452 1 2025-10-06 04:23:27.457 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:23:27.461 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:23:27.187 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:23:27.300 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:23:27.383 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:23:27.716 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:44910 10 6452 1 2025-10-06 04:24:28.174 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60080 10 6452 1 2025-10-06 04:20:39.856 00:05:00.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:25:28.582 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33528 10 6452 1 2025-10-06 04:21:39.857 00:05:00.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:26:28.993 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:37332 10 6452 1 2025-10-06 04:27:29.385 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48406 10 6452 1 2025-10-06 04:28:27.223 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:28:27.361 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:28:27.089 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:28:27.364 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:28:27.449 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:28:29.798 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54946 10 6452 1 2025-10-06 04:29:30.204 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42668 10 6452 1 2025-10-06 04:26:39.860 00:05:00.426 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:30:30.608 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57034 10 6452 1 2025-10-06 04:27:39.856 00:05:00.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:31:31.006 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59986 10 6452 1 2025-10-06 04:32:31.411 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39114 10 6452 1 2025-10-06 04:33:27.248 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:33:27.348 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:33:27.410 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:33:27.159 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:33:27.331 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:33:31.815 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49426 10 6452 1 2025-10-06 04:34:32.215 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39730 10 6452 1 2025-10-06 04:35:32.623 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56066 10 6452 1 2025-10-06 04:36:33.029 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50232 10 6452 1 2025-10-06 04:32:39.861 00:05:00.426 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:37:33.427 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43744 10 6452 1 2025-10-06 04:33:39.860 00:05:00.431 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:38:27.442 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:38:27.471 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:38:27.541 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:38:27.541 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:38:27.555 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:38:33.827 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:54118 10 6452 1 2025-10-06 04:39:34.273 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:46656 12 10369 1 2025-10-06 04:40:34.753 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:59850 10 6452 1 2025-10-06 04:41:35.187 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33364 10 6452 1 2025-10-06 04:38:39.863 00:05:00.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:42:35.586 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38988 10 6452 1 2025-10-06 04:43:28.126 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:43:27.983 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:43:27.938 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:43:27.897 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:43:27.980 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:39:39.861 00:05:00.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:43:35.945 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35610 10 6452 1 2025-10-06 04:44:36.354 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44606 10 6452 1 2025-10-06 04:45:36.757 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52884 10 6452 1 2025-10-06 04:46:37.176 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44864 10 6452 1 2025-10-06 04:47:37.541 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55944 10 6452 1 2025-10-06 04:48:28.009 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:48:27.723 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:48:27.721 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:48:27.636 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:48:27.926 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:44:39.864 00:05:00.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:48:37.943 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60398 10 6452 1 2025-10-06 04:45:39.861 00:05:00.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:49:38.312 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:43248 11 6504 1 2025-10-06 04:50:38.778 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34502 10 6452 1 2025-10-06 04:51:39.143 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58932 10 6452 1 2025-10-06 04:52:39.549 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:43068 10 6452 1 2025-10-06 04:53:28.134 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:53:27.948 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:53:27.984 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:53:27.765 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:53:28.052 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:53:39.979 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58678 10 6452 1 2025-10-06 04:50:39.865 00:05:00.431 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 04:54:40.384 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39184 10 6452 1 2025-10-06 04:51:39.863 00:05:00.435 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 04:55:40.745 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45884 10 6452 1 2025-10-06 04:56:41.150 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53980 10 6452 1 2025-10-06 04:57:41.509 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46032 10 6452 1 2025-10-06 04:58:28.004 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 04:58:27.845 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 04:58:27.921 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 04:58:27.939 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 04:58:27.919 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 139, total bytes: 418440, total packets: 1015, avg bps: 902, avg pps: 0, avg bpp: 412 Time window: 2025-10-06 03:56:39 - 2025-10-06 04:58:28 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0039s User: 0.0019s Wall: 0.0018s flows/second: 76671.3 Runtime: 0.0018s