Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 04:59:08.063 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54518 10 6452 1 2025-10-02 05:00:08.472 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37436 10 6452 1 2025-10-02 05:01:08.881 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49264 10 6452 1 2025-10-02 05:01:32.566 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:01:32.458 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:01:32.607 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:01:32.380 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:01:32.690 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 04:57:37.858 00:05:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:02:09.279 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36756 10 6452 1 2025-10-02 05:03:09.682 00:00:10.778 TCP 1.101.0.1:3000 -> 23.104.0.1:33730 10 6452 1 2025-10-02 04:59:37.861 00:05:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:04:10.504 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46102 10 6452 1 2025-10-02 05:05:10.907 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:52842 10 6452 1 2025-10-02 05:06:11.280 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43794 10 6452 1 2025-10-02 05:06:32.696 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:06:32.612 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:06:32.683 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:06:32.614 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:06:32.615 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:07:11.683 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:34192 10 6452 1 2025-10-02 05:03:37.862 00:05:00.284 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:08:12.110 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52594 10 6452 1 2025-10-02 05:09:12.508 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33472 10 6452 1 2025-10-02 05:05:37.865 00:05:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:10:12.911 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56902 10 6452 1 2025-10-02 05:11:13.322 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34222 10 6452 1 2025-10-02 05:11:32.518 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:11:32.383 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:11:32.805 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:11:32.646 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:11:32.889 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:12:13.733 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50756 10 6452 1 2025-10-02 05:13:14.149 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38960 10 6452 1 2025-10-02 05:09:37.862 00:05:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:14:14.520 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44150 10 6452 1 2025-10-02 05:15:14.924 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50524 10 6452 1 2025-10-02 05:11:37.866 00:05:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:16:15.336 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:35490 10 6452 1 2025-10-02 05:16:32.780 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:16:32.756 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:16:32.636 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:16:32.698 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:16:32.807 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:17:15.717 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:60852 10 6452 1 2025-10-02 05:18:16.136 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:42500 12 10375 1 2025-10-02 05:19:16.615 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46890 10 6452 1 2025-10-02 05:15:37.864 00:05:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:20:17.019 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38750 10 6452 1 2025-10-02 05:21:17.419 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56148 10 6452 1 2025-10-02 05:21:32.876 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:21:32.724 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:21:32.831 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:21:32.920 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:21:32.914 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:17:37.866 00:05:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:22:17.823 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43844 10 6452 1 2025-10-02 05:23:18.243 00:00:10.670 TCP 1.101.0.1:3000 -> 23.104.0.1:52684 10 6452 1 2025-10-02 05:24:18.957 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48960 10 6452 1 2025-10-02 05:25:19.361 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:59630 10 6452 1 2025-10-02 05:21:37.865 00:05:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:26:19.733 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42280 10 6452 1 2025-10-02 05:26:33.003 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:26:32.857 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:26:32.499 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:26:32.920 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:26:32.921 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:27:20.152 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50584 10 6452 1 2025-10-02 05:23:37.867 00:05:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:28:20.564 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46144 10 6452 1 2025-10-02 05:29:20.967 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48280 10 6452 1 2025-10-02 05:30:21.373 00:00:10.534 TCP 1.101.0.1:3000 -> 23.104.0.1:56170 10 6452 1 2025-10-02 05:31:33.081 00:00:00.041 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:31:33.075 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:31:32.870 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:31:21.952 00:00:10.545 TCP 1.101.0.1:3000 -> 23.104.0.1:42426 10 6452 1 2025-10-02 05:31:33.000 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:31:32.998 00:00:00.040 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:27:37.866 00:05:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:32:22.531 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40572 10 6452 1 2025-10-02 05:33:22.933 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33460 10 6452 1 2025-10-02 05:29:37.869 00:05:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:34:23.352 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39744 10 6452 1 2025-10-02 05:35:23.761 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35892 10 6452 1 2025-10-02 05:36:33.280 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:36:33.302 00:00:00.016 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:36:33.282 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:36:33.420 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:36:24.176 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35052 10 6452 1 2025-10-02 05:36:33.365 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:37:24.578 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58100 10 6452 1 2025-10-02 05:33:37.867 00:05:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:38:24.983 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:40754 12 10375 1 2025-10-02 05:39:25.458 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48518 10 6452 1 2025-10-02 05:35:37.869 00:05:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:40:25.818 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42030 10 6452 1 2025-10-02 05:41:33.410 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:41:33.297 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:41:33.213 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:41:33.058 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:41:33.493 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:41:26.190 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:51582 10 6452 1 2025-10-02 05:42:26.587 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45202 10 6452 1 2025-10-02 05:39:37.870 00:05:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:43:26.990 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34248 10 6452 1 2025-10-02 05:44:27.400 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56728 10 6452 1 2025-10-02 05:45:27.802 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38268 10 6452 1 2025-10-02 05:41:37.872 00:05:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:46:33.416 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:46:33.174 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:46:33.352 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:46:33.332 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:46:33.183 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:46:28.199 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49212 10 6452 1 2025-10-02 05:47:28.604 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49056 10 6452 1 2025-10-02 05:48:29.011 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59690 10 6452 1 2025-10-02 05:45:37.873 00:05:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:49:29.416 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:44498 11 6504 1 2025-10-02 05:50:29.871 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56282 10 6452 1 2025-10-02 05:51:33.523 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:51:33.495 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:51:33.382 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:51:33.439 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:51:33.367 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:51:30.281 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49618 10 6452 1 2025-10-02 05:47:37.877 00:05:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:52:30.686 00:00:10.644 TCP 1.101.0.1:3000 -> 23.104.0.1:45842 10 6452 1 2025-10-02 05:53:31.366 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34512 12 6556 1 2025-10-02 05:54:31.771 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49272 10 6452 1 2025-10-02 05:51:37.880 00:05:00.282 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 05:55:32.181 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:38194 10 6452 1 2025-10-02 05:56:33.915 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 05:56:33.642 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:56:33.775 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 05:56:33.678 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 05:56:33.859 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 05:56:32.543 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51776 10 6452 1 2025-10-02 05:53:37.884 00:05:00.277 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 05:57:32.973 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:49276 10 6452 1 2025-10-02 05:58:33.398 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39938 10 6452 1 Summary: total flows: 140, total bytes: 425002, total packets: 1027, avg bps: 927, avg pps: 0, avg bpp: 413 Time window: 2025-10-02 04:57:37 - 2025-10-02 05:58:43 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0032s User: 0.0021s Wall: 0.0024s flows/second: 57636.7 Runtime: 0.0024s