Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 05:59:07.900 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52012 12 6556 1 2025-10-06 06:00:08.313 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42788 10 6452 1 2025-10-06 05:56:39.884 00:05:00.438 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:01:08.709 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50914 10 6452 1 2025-10-06 06:02:09.113 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:47126 11 6504 1 2025-10-06 06:03:09.564 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45052 10 6452 1 2025-10-06 06:03:29.462 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:03:29.370 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:03:28.957 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:03:29.379 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:03:29.085 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:04:09.925 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:57894 10 6452 1 2025-10-06 06:00:39.882 00:05:00.445 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:05:10.303 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49990 10 6452 1 2025-10-06 06:06:10.704 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38664 10 6452 1 2025-10-06 06:02:39.887 00:05:00.438 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:07:11.115 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47698 10 6452 1 2025-10-06 06:08:11.521 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56364 10 6452 1 2025-10-06 06:08:29.122 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:08:29.195 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:08:29.145 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:08:29.297 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:08:29.228 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:09:11.926 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50836 10 6452 1 2025-10-06 06:10:12.343 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:43234 10 6452 1 2025-10-06 06:06:39.884 00:05:00.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:11:12.780 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56388 10 6452 1 2025-10-06 06:12:13.194 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38438 10 6452 1 2025-10-06 06:08:39.887 00:05:00.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:13:13.600 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55980 10 6452 1 2025-10-06 06:13:29.560 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:13:29.511 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:13:29.445 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:13:29.477 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:13:29.404 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:14:13.965 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53924 10 6452 1 2025-10-06 06:15:14.373 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56614 10 6452 1 2025-10-06 06:16:14.779 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33064 10 6452 1 2025-10-06 06:12:39.884 00:05:00.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:17:15.192 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37820 10 6452 1 2025-10-06 06:18:29.569 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:18:15.564 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:44536 10 6452 1 2025-10-06 06:18:29.387 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:18:29.524 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:18:29.487 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:18:29.483 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:14:39.887 00:05:00.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:19:15.939 00:00:10.965 TCP 1.101.0.1:3000 -> 23.104.0.1:51380 10 6452 1 2025-10-06 06:20:16.947 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48240 10 6452 1 2025-10-06 06:21:17.320 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48260 10 6452 1 2025-10-06 06:22:17.733 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:52580 10 6452 1 2025-10-06 06:18:39.885 00:05:00.445 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:23:29.733 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:23:29.712 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:23:29.641 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:23:29.650 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:23:29.746 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:23:18.118 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37632 10 6452 1 2025-10-06 06:24:18.523 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48564 10 6452 1 2025-10-06 06:20:39.888 00:05:00.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:25:18.926 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52962 10 6452 1 2025-10-06 06:26:19.334 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51754 10 6452 1 2025-10-06 06:27:19.742 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34570 10 6452 1 2025-10-06 06:28:29.727 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:28:20.146 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49324 10 6452 1 2025-10-06 06:28:29.789 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:28:29.669 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:28:29.639 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:28:29.793 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:24:39.887 00:05:00.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:29:20.546 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51982 10 6452 1 2025-10-06 06:30:20.955 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34572 10 6452 1 2025-10-06 06:26:39.889 00:05:00.438 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:31:21.368 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60772 10 6452 1 2025-10-06 06:32:21.771 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42860 10 6452 1 2025-10-06 06:33:29.953 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:33:29.869 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:33:29.952 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:33:29.871 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:33:30.061 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:33:22.177 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53800 10 6452 1 2025-10-06 06:34:22.580 00:00:10.838 TCP 1.101.0.1:3000 -> 23.104.0.1:50496 10 6452 1 2025-10-06 06:30:39.888 00:05:00.443 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:35:23.455 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57840 10 6452 1 2025-10-06 06:36:23.814 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59270 10 6452 1 2025-10-06 06:32:39.894 00:05:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:37:24.219 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56000 10 6452 1 2025-10-06 06:38:29.856 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:38:29.732 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:38:29.852 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:38:29.791 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:38:29.933 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:38:24.622 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45984 10 6452 1 2025-10-06 06:39:25.023 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45700 10 6452 1 2025-10-06 06:40:25.423 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54282 10 6452 1 2025-10-06 06:36:39.894 00:05:00.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:41:25.830 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:55472 10 6452 1 2025-10-06 06:42:26.251 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47388 10 6452 1 2025-10-06 06:38:39.896 00:05:00.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:43:30.269 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:43:29.996 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:43:30.093 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:43:30.187 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:43:29.893 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:43:26.662 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:44464 10 6452 1 2025-10-06 06:44:27.037 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34596 10 6452 1 2025-10-06 06:45:27.443 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37014 10 6452 1 2025-10-06 06:42:39.894 00:05:00.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:46:27.846 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:38106 10 6452 1 2025-10-06 06:47:28.399 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53756 10 6452 1 2025-10-06 06:48:30.059 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:48:29.954 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:48:29.943 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:48:30.040 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:48:30.026 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:48:28.758 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47658 10 6452 1 2025-10-06 06:44:39.897 00:05:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:49:29.173 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:58440 12 10375 1 2025-10-06 06:50:29.658 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60454 10 6452 1 2025-10-06 06:51:30.019 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35580 10 6452 1 2025-10-06 06:48:39.895 00:05:00.442 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-06 06:52:30.375 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60290 10 6452 1 2025-10-06 06:53:30.258 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:53:30.177 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:53:30.243 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:53:30.086 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:53:30.280 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:53:30.739 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40294 10 6452 1 2025-10-06 06:50:39.899 00:05:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-06 06:54:31.153 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42720 10 6452 1 2025-10-06 06:55:31.520 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:40256 11 6504 1 2025-10-06 06:56:31.979 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53024 10 6452 1 2025-10-06 06:57:32.341 00:00:10.669 TCP 1.101.0.1:3000 -> 23.104.0.1:58576 10 6452 1 2025-10-06 06:58:30.291 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 06:58:30.051 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:58:30.276 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 06:58:30.287 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 06:58:30.359 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 06:58:33.051 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42454 10 6452 1 2025-10-06 06:54:39.896 00:05:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 140, total bytes: 421131, total packets: 1026, avg bps: 891, avg pps: 0, avg bpp: 410 Time window: 2025-10-06 05:56:39 - 2025-10-06 06:59:40 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0032s User: 0.0011s Wall: 0.0016s flows/second: 86582.5 Runtime: 0.0016s