Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 00:59:05.562 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41298 10 6452 1 2025-10-04 00:55:38.806 00:05:00.384 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 01:00:05.923 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:39892 10 6452 1 2025-10-04 01:01:06.298 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51640 10 6452 1 2025-10-04 01:02:06.699 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39216 10 6452 1 2025-10-04 01:02:25.550 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 01:02:25.472 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 01:02:25.658 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:02:25.467 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:02:25.477 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 01:03:07.108 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48508 10 6452 1 2025-10-04 00:59:38.812 00:05:00.378 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 01:04:07.465 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32956 10 6452 1 2025-10-04 01:05:07.865 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60488 10 6452 1 2025-10-04 01:01:38.809 00:05:00.383 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 01:06:08.277 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49386 10 6452 1 2025-10-04 01:07:08.682 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:60628 12 6556 1 2025-10-04 01:07:25.816 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 01:07:25.429 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:07:25.942 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 01:07:25.994 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:07:26.077 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 01:08:09.111 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52586 10 6452 1 2025-10-04 01:09:09.526 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57112 10 6452 1 2025-10-04 01:05:38.812 00:05:00.378 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 01:10:09.888 00:00:10.741 TCP 1.101.0.1:3000 -> 23.104.0.1:50384 10 6452 1 2025-10-04 01:11:10.666 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56232 10 6452 1 2025-10-04 01:07:38.811 00:05:00.383 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 01:12:25.973 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:12:25.791 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 01:12:11.100 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42458 10 6452 1 2025-10-04 01:12:25.969 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 01:12:25.817 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:12:26.057 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 01:13:11.504 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32802 10 6452 1 2025-10-04 01:14:11.914 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52050 10 6452 1 2025-10-04 01:15:12.338 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36838 10 6452 1 2025-10-04 01:11:38.814 00:05:00.378 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 01:16:12.702 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:59362 11 6504 1 2025-10-04 01:17:26.020 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 01:17:25.695 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 01:17:25.955 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:17:25.938 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:17:13.158 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41612 10 6452 1 2025-10-04 01:17:25.983 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 01:13:38.812 00:05:00.384 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 01:18:13.519 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:33762 10 6452 1 2025-10-04 01:19:13.887 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43708 10 6452 1 2025-10-04 01:20:14.299 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45614 10 6452 1 2025-10-04 01:21:14.703 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36640 10 6452 1 2025-10-04 01:17:38.815 00:05:00.380 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 01:22:25.822 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 01:22:25.720 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:22:25.840 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:22:25.967 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 01:22:15.119 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48508 10 6452 1 2025-10-04 01:22:25.922 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 01:23:15.517 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60374 10 6452 1 2025-10-04 01:19:38.812 00:05:00.385 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 01:24:15.928 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:55392 10 6452 1 2025-10-04 01:25:16.363 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58390 10 6452 1 2025-10-04 01:26:16.771 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48138 10 6452 1 2025-10-04 01:27:25.834 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:27:25.805 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 01:27:26.072 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 01:27:26.153 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:27:17.199 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60950 10 6452 1 2025-10-04 01:27:26.235 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 01:23:38.818 00:05:00.380 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 01:28:17.618 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45012 10 6452 1 2025-10-04 01:29:18.015 00:00:10.509 TCP 1.101.0.1:3000 -> 23.104.0.1:45526 10 6452 1 2025-10-04 01:25:38.816 00:05:00.384 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 01:30:18.556 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35256 10 6452 1 2025-10-04 01:31:18.956 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33980 10 6452 1 2025-10-04 01:32:26.439 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 01:32:19.364 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41216 10 6452 1 2025-10-04 01:32:26.364 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 01:32:26.072 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:32:26.357 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:32:26.297 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 01:33:19.775 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38918 10 6452 1 2025-10-04 01:29:38.818 00:05:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 01:34:20.182 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43422 10 6452 1 2025-10-04 01:35:20.581 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34392 10 6452 1 2025-10-04 01:31:38.818 00:05:00.384 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 01:36:20.979 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39270 10 6452 1 2025-10-04 01:37:26.108 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 01:37:26.211 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:37:26.347 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:37:26.181 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 01:37:26.430 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 01:37:21.343 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37534 10 6452 1 2025-10-04 01:38:21.744 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45002 10 6452 1 2025-10-04 01:39:22.152 00:00:10.531 TCP 1.101.0.1:3000 -> 23.104.0.1:54616 10 6452 1 2025-10-04 01:35:38.821 00:05:00.378 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 01:40:22.722 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:43678 10 6452 1 2025-10-04 01:41:23.106 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34184 10 6452 1 2025-10-04 01:37:38.818 00:05:00.383 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 01:42:26.962 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 01:42:26.873 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 01:42:26.958 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:42:26.880 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:42:26.831 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 01:42:23.514 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37856 10 6452 1 2025-10-04 01:43:23.871 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56974 10 6452 1 2025-10-04 01:44:24.280 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39686 10 6452 1 2025-10-04 01:45:24.639 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60114 10 6452 1 2025-10-04 01:41:38.826 00:05:00.375 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 01:46:25.041 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49740 10 6452 1 2025-10-04 01:47:25.655 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 01:47:25.533 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:47:25.683 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:47:25.651 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 01:47:25.765 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 01:43:38.823 00:05:00.380 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 01:47:25.443 00:00:18.131 TCP 1.101.0.1:3000 -> 23.104.0.1:36176 10 6452 1 2025-10-04 01:48:33.641 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:54718 13 10415 1 2025-10-04 01:49:34.130 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:55594 10 6452 1 2025-10-04 01:50:34.487 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48202 10 6452 1 2025-10-04 01:47:38.825 00:05:00.380 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 01:51:34.891 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50138 10 6452 1 2025-10-04 01:52:26.482 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 01:52:26.325 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:52:26.414 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:52:26.327 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 01:52:26.495 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 01:52:35.309 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56686 10 6452 1 2025-10-04 01:49:38.824 00:05:00.384 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-04 01:53:35.710 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41594 10 6452 1 2025-10-04 01:54:36.104 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59992 10 6452 1 2025-10-04 01:55:36.510 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56754 10 6452 1 2025-10-04 01:56:36.904 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54020 10 6452 1 2025-10-04 01:57:26.642 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 01:57:26.598 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:57:26.576 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 01:57:26.654 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 01:57:26.659 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 01:53:38.831 00:05:00.377 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-04 01:57:37.271 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58068 10 6452 1 2025-10-04 01:58:37.679 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48382 10 6452 1 Summary: total flows: 140, total bytes: 421119, total packets: 1026, avg bps: 889, avg pps: 0, avg bpp: 410 Time window: 2025-10-04 00:55:38 - 2025-10-04 01:58:48 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0029s User: 0.0019s Wall: 0.0034s flows/second: 41604.3 Runtime: 0.0034s