Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 05:59:07.900 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52012 12 6556 1 2025-10-06 06:00:08.313 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42788 10 6452 1 2025-10-06 05:56:39.883 00:05:00.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:01:08.709 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50914 10 6452 1 2025-10-06 05:57:39.881 00:05:00.443 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:02:09.114 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:47126 11 6504 1 2025-10-06 06:03:09.564 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45052 10 6452 1 2025-10-06 06:03:29.461 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:03:29.370 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:03:29.085 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:03:28.957 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:03:29.380 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:04:09.925 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:57894 10 6452 1 2025-10-06 06:05:10.302 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49990 10 6452 1 2025-10-06 06:06:10.704 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38664 10 6452 1 2025-10-06 06:02:39.885 00:05:00.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:07:11.116 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47698 10 6452 1 2025-10-06 06:03:39.882 00:05:00.445 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:08:11.521 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56364 10 6452 1 2025-10-06 06:08:29.122 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:08:29.297 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:08:29.195 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:08:29.145 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:08:29.229 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:09:11.925 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50836 10 6452 1 2025-10-06 06:10:12.343 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:43234 10 6452 1 2025-10-06 06:11:12.779 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56388 10 6452 1 2025-10-06 06:12:13.194 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38438 10 6452 1 2025-10-06 06:08:39.886 00:05:00.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:13:13.601 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55980 10 6452 1 2025-10-06 06:13:29.560 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:13:29.510 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:13:29.404 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:13:29.444 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:13:29.477 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:09:39.883 00:05:00.445 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:14:13.965 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53924 10 6452 1 2025-10-06 06:15:14.374 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56614 10 6452 1 2025-10-06 06:16:14.778 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33064 10 6452 1 2025-10-06 06:17:15.192 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37820 10 6452 1 2025-10-06 06:18:29.569 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:18:29.386 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:18:29.482 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:18:29.523 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:18:15.563 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:44536 10 6452 1 2025-10-06 06:18:29.486 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:14:39.886 00:05:00.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:19:15.939 00:00:10.965 TCP 1.101.0.1:3000 -> 23.104.0.1:51380 10 6452 1 2025-10-06 06:15:39.886 00:05:00.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:20:16.949 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48240 10 6452 1 2025-10-06 06:21:17.321 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48260 10 6452 1 2025-10-06 06:22:17.732 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:52580 10 6452 1 2025-10-06 06:23:29.732 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:23:29.652 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:23:29.714 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:23:29.748 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:23:29.643 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:23:18.119 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37632 10 6452 1 2025-10-06 06:24:18.524 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48564 10 6452 1 2025-10-06 06:20:39.888 00:05:00.440 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:25:18.926 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52962 10 6452 1 2025-10-06 06:21:39.886 00:05:00.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:26:19.333 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51754 10 6452 1 2025-10-06 06:27:19.742 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34570 10 6452 1 2025-10-06 06:28:29.727 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:28:29.788 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:28:29.791 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:28:29.668 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:28:29.638 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:28:20.145 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49324 10 6452 1 2025-10-06 06:29:20.545 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51982 10 6452 1 2025-10-06 06:30:20.954 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34572 10 6452 1 2025-10-06 06:26:39.889 00:05:00.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:31:21.368 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60772 10 6452 1 2025-10-06 06:27:39.887 00:05:00.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:32:21.771 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42860 10 6452 1 2025-10-06 06:33:29.869 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:33:29.952 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:33:29.871 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:33:29.954 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:33:30.061 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:33:22.177 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53800 10 6452 1 2025-10-06 06:34:22.581 00:00:10.837 TCP 1.101.0.1:3000 -> 23.104.0.1:50496 10 6452 1 2025-10-06 06:35:23.454 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57840 10 6452 1 2025-10-06 06:36:23.814 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:59270 10 6452 1 2025-10-06 06:32:39.894 00:05:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:37:24.220 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56000 10 6452 1 2025-10-06 06:33:39.891 00:05:00.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:38:29.934 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:38:29.855 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:38:29.791 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:38:29.731 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:38:29.852 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:38:24.621 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45984 10 6452 1 2025-10-06 06:39:25.024 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45700 10 6452 1 2025-10-06 06:40:25.422 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54282 10 6452 1 2025-10-06 06:41:25.830 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:55472 10 6452 1 2025-10-06 06:42:26.251 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47388 10 6452 1 2025-10-06 06:38:39.896 00:05:00.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:43:29.892 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:43:29.995 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:43:30.092 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:43:30.186 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:43:30.268 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:43:26.661 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:44464 10 6452 1 2025-10-06 06:39:39.893 00:05:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:44:27.036 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34596 10 6452 1 2025-10-06 06:45:27.443 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37014 10 6452 1 2025-10-06 06:46:27.845 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:38106 10 6452 1 2025-10-06 06:47:28.398 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53756 10 6452 1 2025-10-06 06:48:29.953 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:48:29.942 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:48:30.027 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:48:30.058 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:48:30.039 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:48:28.758 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47658 10 6452 1 2025-10-06 06:44:39.897 00:05:00.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:49:29.172 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:58440 12 10375 1 2025-10-06 06:45:39.894 00:05:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:50:29.657 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60454 10 6452 1 2025-10-06 06:51:30.018 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35580 10 6452 1 2025-10-06 06:52:30.376 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60290 10 6452 1 2025-10-06 06:53:30.258 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:53:30.084 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:53:30.241 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:53:30.278 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:53:30.175 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:53:30.739 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40294 10 6452 1 2025-10-06 06:54:31.153 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42720 10 6452 1 2025-10-06 06:50:39.899 00:05:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:55:31.519 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:40256 11 6504 1 2025-10-06 06:51:39.896 00:05:00.442 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:56:31.977 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53024 10 6452 1 2025-10-06 06:57:32.341 00:00:10.670 TCP 1.101.0.1:3000 -> 23.104.0.1:58576 10 6452 1 2025-10-06 06:58:30.276 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:58:30.291 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:58:30.287 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:58:30.051 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:58:30.359 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:58:33.052 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42454 10 6452 1 Summary: total flows: 140, total bytes: 421131, total packets: 1026, avg bps: 904, avg pps: 0, avg bpp: 410 Time window: 2025-10-06 05:56:39 - 2025-10-06 06:58:43 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0021s User: 0.0021s Wall: 0.0015s flows/second: 96152.4 Runtime: 0.0015s