Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 07:59:23.274 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36878 10 6452 1 2025-10-02 08:00:23.635 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35126 10 6452 1 2025-10-02 08:01:24.041 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56562 10 6452 1 2025-10-02 07:57:37.927 00:05:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 08:01:36.276 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 08:01:36.189 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 08:01:36.085 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:01:36.194 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:01:36.119 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 08:02:24.411 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50430 10 6452 1 2025-10-02 08:03:24.813 00:00:10.527 TCP 1.101.0.1:3000 -> 23.104.0.1:39050 10 6452 1 2025-10-02 07:59:37.931 00:05:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 08:04:25.381 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43380 10 6452 1 2025-10-02 08:05:25.784 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:42920 10 6452 1 2025-10-02 08:06:35.912 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:06:36.421 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 08:06:26.217 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33668 10 6452 1 2025-10-02 08:06:35.988 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 08:06:36.338 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:06:36.135 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 08:07:26.619 00:00:10.687 TCP 1.101.0.1:3000 -> 23.104.0.1:35746 10 6452 1 2025-10-02 08:03:37.929 00:05:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 08:08:27.348 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41150 10 6452 1 2025-10-02 08:09:27.752 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47346 10 6452 1 2025-10-02 08:05:37.932 00:05:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 08:10:28.164 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44386 10 6452 1 2025-10-02 08:11:36.466 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 08:11:36.384 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:11:36.270 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 08:11:28.583 00:00:10.601 TCP 1.101.0.1:3000 -> 23.104.0.1:33594 10 6452 1 2025-10-02 08:11:36.325 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 08:11:36.338 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:12:29.219 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37062 10 6452 1 2025-10-02 08:09:37.930 00:05:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 08:13:29.581 00:00:10.685 TCP 1.101.0.1:3000 -> 23.104.0.1:52970 10 6452 1 2025-10-02 08:14:30.298 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47830 10 6452 1 2025-10-02 08:11:37.933 00:05:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 08:15:30.701 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48382 10 6452 1 2025-10-02 08:16:36.581 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 08:16:36.467 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 08:16:36.200 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:16:36.499 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:16:36.336 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 08:16:31.114 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43448 10 6452 1 2025-10-02 08:17:31.520 00:00:10.974 TCP 1.101.0.1:3000 -> 23.104.0.1:36086 10 6452 1 2025-10-02 08:18:32.535 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41026 10 6452 1 2025-10-02 08:15:37.932 00:05:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 08:19:32.899 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53994 10 6452 1 2025-10-02 08:20:33.320 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44092 10 6452 1 2025-10-02 08:21:36.366 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 08:21:36.287 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:21:36.462 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:21:36.449 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 08:17:37.935 00:05:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 08:21:36.545 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 08:21:33.720 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34478 10 6452 1 2025-10-02 08:22:34.128 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50288 10 6452 1 2025-10-02 08:23:34.530 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48780 10 6452 1 2025-10-02 08:24:34.895 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38650 12 6556 1 2025-10-02 08:21:37.933 00:05:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 08:25:35.298 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44032 10 6452 1 2025-10-02 08:26:36.506 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 08:26:36.245 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:26:36.566 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:26:36.614 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 08:26:36.649 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 08:26:35.699 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:53576 10 6452 1 2025-10-02 08:23:37.935 00:05:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 08:27:36.112 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:40702 12 10375 1 2025-10-02 08:28:36.544 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36184 10 6452 1 2025-10-02 08:29:36.954 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58590 10 6452 1 2025-10-02 08:30:37.360 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:57042 10 6452 1 2025-10-02 08:31:36.625 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 08:31:36.579 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:31:36.718 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:31:36.676 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 08:27:37.934 00:05:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 08:31:36.800 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 08:31:37.719 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:42574 10 6452 1 2025-10-02 08:32:38.155 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56644 10 6452 1 2025-10-02 08:29:37.936 00:05:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 08:33:38.555 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43862 10 6452 1 2025-10-02 08:34:38.955 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33232 10 6452 1 2025-10-02 08:35:39.365 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51202 12 6556 1 2025-10-02 08:36:36.932 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 08:36:36.622 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:36:36.937 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:36:36.767 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 08:36:37.023 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 08:36:39.768 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48450 10 6452 1 2025-10-02 08:33:37.934 00:05:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 08:37:40.173 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39848 10 6452 1 2025-10-02 08:38:40.532 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46582 10 6452 1 2025-10-02 08:35:37.939 00:05:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 08:39:40.932 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:39482 10 6452 1 2025-10-02 08:40:41.358 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50482 10 6452 1 2025-10-02 08:41:36.994 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 08:41:36.567 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 08:41:36.739 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:41:36.912 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:41:36.945 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 08:41:41.719 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:48416 10 6452 1 2025-10-02 08:42:42.143 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53114 10 6452 1 2025-10-02 08:39:37.936 00:05:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 08:43:42.539 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33568 10 6452 1 2025-10-02 08:44:42.937 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:48498 10 6452 1 2025-10-02 08:41:37.939 00:05:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 08:45:43.391 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44352 10 6452 1 2025-10-02 08:46:37.006 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 08:46:37.002 00:00:00.045 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 08:46:36.590 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:46:36.920 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:46:37.003 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 08:46:43.799 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57818 10 6452 1 2025-10-02 08:47:44.204 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56174 10 6452 1 2025-10-02 08:48:44.612 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40730 10 6452 1 2025-10-02 08:45:37.939 00:05:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 08:49:45.023 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57268 10 6452 1 2025-10-02 08:50:45.426 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32934 10 6452 1 2025-10-02 08:51:37.251 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 08:51:37.172 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 08:51:36.927 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:51:37.169 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:51:37.004 00:00:00.045 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 08:47:37.942 00:05:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 08:51:45.826 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36958 10 6452 1 2025-10-02 08:52:46.227 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47838 10 6452 1 2025-10-02 08:53:46.632 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43100 10 6452 1 2025-10-02 08:54:47.034 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50156 10 6452 1 2025-10-02 08:51:37.941 00:05:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-02 08:55:47.440 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50460 10 6452 1 2025-10-02 08:56:37.317 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-02 08:56:37.063 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-02 08:56:37.165 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:56:37.235 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 08:56:37.131 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-02 08:56:47.847 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50152 10 6452 1 2025-10-02 08:53:37.943 00:05:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-02 08:57:48.271 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35760 10 6452 1 Summary: total flows: 139, total bytes: 414679, total packets: 1016, avg bps: 906, avg pps: 0, avg bpp: 408 Time window: 2025-10-02 07:57:37 - 2025-10-02 08:58:38 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0044s User: 0.0009s Wall: 0.0030s flows/second: 46846.8 Runtime: 0.0030s