Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 07:54:38.479 00:06:00.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 07:59:31.014 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60994 10 6452 1 2025-10-03 08:00:31.417 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51264 10 6452 1 2025-10-03 08:01:31.817 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53638 10 6452 1 2025-10-03 08:02:04.956 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 08:02:04.989 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:02:04.899 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:02:04.890 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 08:02:04.982 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 08:02:32.222 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42860 10 6452 1 2025-10-03 07:58:38.475 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 08:03:32.620 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60490 10 6452 1 2025-10-03 08:04:32.985 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58162 10 6452 1 2025-10-03 08:05:33.393 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53424 10 6452 1 2025-10-03 08:01:38.478 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 08:06:33.797 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53340 10 6452 1 2025-10-03 08:07:05.565 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 08:07:05.053 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:07:05.171 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:07:05.179 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 08:07:05.253 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 08:07:34.206 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51792 10 6452 1 2025-10-03 08:08:34.575 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:39572 10 6452 1 2025-10-03 08:09:34.949 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39184 10 6452 1 2025-10-03 08:05:38.476 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 08:10:35.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45934 10 6452 1 2025-10-03 08:11:35.765 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33970 10 6452 1 2025-10-03 08:12:05.192 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 08:12:05.312 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:12:05.102 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:12:05.261 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 08:12:05.185 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 08:12:36.184 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54658 10 6452 1 2025-10-03 08:08:38.479 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 08:13:36.582 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58570 10 6452 1 2025-10-03 08:14:36.986 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60214 10 6452 1 2025-10-03 08:15:37.387 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44194 10 6452 1 2025-10-03 08:16:37.806 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:51808 10 6452 1 2025-10-03 08:17:05.385 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 08:17:05.278 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:17:05.383 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:17:05.183 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 08:17:05.470 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 08:12:38.479 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 08:17:38.173 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50824 10 6452 1 2025-10-03 08:18:38.576 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45318 10 6452 1 2025-10-03 08:19:38.975 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38486 10 6452 1 2025-10-03 08:15:38.481 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 08:20:39.390 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34606 10 6452 1 2025-10-03 08:21:39.796 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46066 10 6452 1 2025-10-03 08:22:05.356 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:22:05.360 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:22:05.510 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 08:22:05.441 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 08:22:05.442 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 08:22:40.195 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35598 10 6452 1 2025-10-03 08:23:40.599 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42262 10 6452 1 2025-10-03 08:19:38.479 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 08:24:41.001 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50068 10 6452 1 2025-10-03 08:25:41.405 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:34614 10 6452 1 2025-10-03 08:26:41.811 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60912 10 6452 1 2025-10-03 08:27:05.641 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 08:27:05.336 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:27:05.514 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:27:05.785 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 08:27:05.598 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 08:22:38.482 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 08:27:42.217 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36820 10 6452 1 2025-10-03 08:28:42.616 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46494 10 6452 1 2025-10-03 08:29:43.028 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56004 10 6452 1 2025-10-03 08:30:43.433 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48408 10 6452 1 2025-10-03 08:26:38.480 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 08:31:43.840 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:34494 10 6452 1 2025-10-03 08:32:05.765 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 08:32:05.618 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 08:32:05.557 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:32:05.683 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:32:05.678 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 08:32:44.271 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48092 10 6452 1 2025-10-03 08:33:44.676 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50274 10 6452 1 2025-10-03 08:29:38.483 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 08:34:45.108 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56502 10 6452 1 2025-10-03 08:35:45.475 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38008 10 6452 1 2025-10-03 08:36:45.878 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42664 10 6452 1 2025-10-03 08:37:05.962 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 08:37:05.821 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 08:37:05.746 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:37:05.879 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:37:05.817 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 08:37:46.296 00:00:10.561 TCP 1.101.0.1:3000 -> 23.104.0.1:38342 10 6452 1 2025-10-03 08:33:38.482 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 08:38:46.899 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56424 12 6556 1 2025-10-03 08:39:47.312 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34372 10 6452 1 2025-10-03 08:40:47.711 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55594 10 6452 1 2025-10-03 08:36:38.484 00:06:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 08:41:48.122 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56702 10 6452 1 2025-10-03 08:42:05.927 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 08:42:05.952 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:42:05.932 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 08:42:05.994 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:42:06.076 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 08:42:48.529 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50458 10 6452 1 2025-10-03 08:43:48.932 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:49300 10 6452 1 2025-10-03 08:44:49.311 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58176 10 6452 1 2025-10-03 08:40:38.482 00:06:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 08:45:49.715 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56348 10 6452 1 2025-10-03 08:46:50.136 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55368 10 6452 1 2025-10-03 08:47:05.981 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 08:47:06.066 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:47:06.209 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:47:06.102 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 08:47:06.291 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 08:47:50.543 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41136 10 6452 1 2025-10-03 08:43:38.486 00:06:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 08:48:50.944 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52794 10 6452 1 2025-10-03 08:49:51.361 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48892 10 6452 1 2025-10-03 08:50:51.769 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50254 10 6452 1 2025-10-03 08:52:06.345 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 08:51:52.134 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55668 10 6452 1 2025-10-03 08:52:06.293 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 08:52:05.995 00:00:00.049 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:52:06.264 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:52:06.200 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 08:47:38.485 00:06:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 08:52:52.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50652 10 6452 1 2025-10-03 08:53:52.943 00:00:10.637 TCP 1.101.0.1:3000 -> 23.104.0.1:58516 10 6452 1 2025-10-03 08:54:53.618 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57376 10 6452 1 2025-10-03 08:50:38.487 00:06:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 08:55:53.980 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46686 10 6452 1 2025-10-03 08:56:54.389 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33364 10 6452 1 2025-10-03 08:57:06.216 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 08:57:06.157 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:57:06.007 00:00:00.042 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 08:57:06.208 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 08:57:06.090 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 08:57:54.754 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49004 10 6452 1 Summary: total flows: 136, total bytes: 410529, total packets: 1010, avg bps: 862, avg pps: 0, avg bpp: 406 Time window: 2025-10-03 07:54:38 - 2025-10-03 08:58:05 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0029s User: 0.0019s Wall: 0.0021s flows/second: 65258.6 Runtime: 0.0021s