Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 04:58:59.724 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58212 10 6452 1 2025-09-08 04:59:52.012 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 04:59:51.613 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 04:59:52.055 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 04:59:51.852 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 04:59:52.137 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 05:00:00.134 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:44834 10 6452 1 2025-09-08 05:01:00.493 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43388 10 6452 1 2025-09-08 05:02:00.892 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58372 10 6452 1 2025-09-08 05:03:01.305 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57946 10 6452 1 2025-09-08 04:58:26.263 00:06:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 05:04:01.709 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:40752 10 6452 1 2025-09-08 04:59:26.266 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 05:04:52.360 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 05:04:52.330 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 05:04:52.161 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:04:52.277 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:04:52.330 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 05:05:02.107 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54782 10 6452 1 2025-09-08 05:06:02.508 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:41280 10 6452 1 2025-09-08 05:07:02.932 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:58470 10 6452 1 2025-09-08 05:08:03.310 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58048 10 6452 1 2025-09-08 05:09:03.715 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:45480 12 10365 1 2025-09-08 05:09:52.417 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:09:52.284 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 05:09:52.380 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 05:09:52.127 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:09:52.499 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 05:10:04.191 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45772 10 6452 1 2025-09-08 05:05:26.264 00:06:00.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 05:11:04.549 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52218 10 6452 1 2025-09-08 05:06:26.268 00:06:00.123 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 05:12:04.909 00:00:10.874 TCP 1.101.0.1:3000 -> 23.104.0.1:44930 10 6452 1 2025-09-08 05:13:05.822 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44298 10 6452 1 2025-09-08 05:14:06.223 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44716 10 6452 1 2025-09-08 05:14:52.429 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 05:14:52.167 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:14:52.543 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:14:52.481 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 05:14:52.627 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 05:15:06.587 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41316 10 6452 1 2025-09-08 05:16:06.991 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35430 10 6452 1 2025-09-08 05:17:07.350 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58802 10 6452 1 2025-09-08 05:12:26.264 00:06:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 05:18:07.717 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52116 10 6452 1 2025-09-08 05:13:26.269 00:06:00.125 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 05:19:08.117 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54430 10 6452 1 2025-09-08 05:19:52.669 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 05:19:52.399 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:19:52.436 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:19:52.768 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 05:19:52.519 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 05:20:08.519 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46630 10 6452 1 2025-09-08 05:21:08.923 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:51866 10 6452 1 2025-09-08 05:22:09.355 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:47926 10 6452 1 2025-09-08 05:23:09.734 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58044 10 6452 1 2025-09-08 05:24:10.139 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58984 10 6452 1 2025-09-08 05:19:26.267 00:06:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 05:24:52.479 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:24:52.540 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 05:24:52.480 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 05:24:52.414 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:24:52.560 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 05:25:10.504 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48324 10 6452 1 2025-09-08 05:20:26.270 00:06:00.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 05:26:10.917 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43616 10 6452 1 2025-09-08 05:27:11.322 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:37720 10 6452 1 2025-09-08 05:28:11.699 00:00:10.947 TCP 1.101.0.1:3000 -> 23.104.0.1:56050 10 6452 1 2025-09-08 05:29:12.687 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:52454 10 6452 1 2025-09-08 05:29:52.719 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 05:29:52.705 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 05:29:52.471 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:29:52.636 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:29:52.709 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 05:30:13.066 00:00:10.804 TCP 1.101.0.1:3000 -> 23.104.0.1:44586 10 6452 1 2025-09-08 05:31:13.913 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54780 10 6452 1 2025-09-08 05:26:26.268 00:06:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 05:32:14.309 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58570 10 6452 1 2025-09-08 05:27:26.272 00:06:00.126 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 05:33:14.708 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45366 10 6452 1 2025-09-08 05:34:15.114 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52068 10 6452 1 2025-09-08 05:34:52.826 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 05:34:52.682 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 05:34:52.689 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:34:52.743 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:34:52.567 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 05:35:15.519 00:00:10.785 TCP 1.101.0.1:3000 -> 23.104.0.1:54218 10 6452 1 2025-09-08 05:36:16.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55336 10 6452 1 2025-09-08 05:37:16.763 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47416 10 6452 1 2025-09-08 05:38:17.178 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:36012 10 6452 1 2025-09-08 05:33:26.273 00:06:00.128 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 05:34:26.276 00:06:00.123 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 05:39:17.548 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48862 10 6452 1 2025-09-08 05:39:52.842 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 05:39:52.854 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 05:39:52.709 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:39:52.759 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:39:52.852 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 05:40:17.954 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60166 10 6452 1 2025-09-08 05:41:18.364 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60746 10 6452 1 2025-09-08 05:42:18.767 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40572 10 6452 1 2025-09-08 05:43:19.170 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59524 10 6452 1 2025-09-08 05:44:19.577 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55332 10 6452 1 2025-09-08 05:44:52.944 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 05:44:52.660 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:44:52.950 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:44:52.868 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 05:44:53.033 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 05:45:19.978 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56092 10 6452 1 2025-09-08 05:40:26.274 00:06:00.128 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 05:46:20.385 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50652 10 6452 1 2025-09-08 05:41:26.276 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 05:47:20.785 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52916 10 6452 1 2025-09-08 05:48:21.194 00:00:10.513 TCP 1.101.0.1:3000 -> 23.104.0.1:55008 14 10471 1 2025-09-08 05:49:21.745 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42306 10 6452 1 2025-09-08 05:49:53.330 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 05:49:52.989 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 05:49:52.839 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:49:53.247 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:49:52.993 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 05:50:22.113 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43170 10 6452 1 2025-09-08 05:51:22.521 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59296 10 6452 1 2025-09-08 05:47:26.274 00:06:00.130 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-08 05:52:22.929 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:49600 10 6452 1 2025-09-08 05:48:26.278 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-08 05:53:23.351 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59296 10 6452 1 2025-09-08 05:54:23.752 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55404 10 6452 1 2025-09-08 05:54:53.159 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-08 05:54:52.989 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:54:53.210 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-08 05:54:53.093 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-08 05:54:53.293 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-08 05:55:24.154 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55348 10 6452 1 2025-09-08 05:56:24.556 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50846 10 6452 1 2025-09-08 05:57:24.920 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:45598 12 6556 1 2025-09-08 05:58:25.338 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38428 10 6452 1 Summary: total flows: 136, total bytes: 424052, total packets: 1012, avg bps: 939, avg pps: 0, avg bpp: 419 Time window: 2025-09-08 04:58:26 - 2025-09-08 05:58:35 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0036s User: 0.0009s Wall: 0.0015s flows/second: 88534.1 Runtime: 0.0016s