Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 23:59:32.316 00:00:11.093 TCP 1.101.0.1:3000 -> 23.104.0.1:45958 10 6452 1 2025-10-03 00:00:33.444 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:48362 10 6452 1 2025-10-03 00:01:33.818 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37556 10 6452 1 2025-10-03 00:01:55.485 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 00:01:55.268 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 00:01:55.267 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 00:01:55.179 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:01:55.403 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-02 23:57:38.306 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 00:02:34.226 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55004 10 6452 1 2025-10-03 00:03:34.590 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41410 10 6452 1 2025-10-03 00:04:34.992 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60232 10 6452 1 2025-10-03 00:00:38.309 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 00:05:35.394 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58286 10 6452 1 2025-10-03 00:06:35.757 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38180 10 6452 1 2025-10-03 00:06:55.462 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 00:06:55.409 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 00:06:55.420 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:06:55.419 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:06:55.501 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 00:07:36.153 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60208 10 6452 1 2025-10-03 00:08:36.555 00:00:10.515 TCP 1.101.0.1:3000 -> 23.104.0.1:55066 14 14292 1 2025-10-03 00:04:38.307 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 00:09:37.114 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:33556 10 6452 1 2025-10-03 00:10:37.487 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37714 10 6452 1 2025-10-03 00:11:37.885 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:56760 12 6556 1 2025-10-03 00:11:55.651 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 00:11:55.723 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 00:11:55.745 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:11:55.764 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:11:55.846 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 00:07:38.310 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 00:12:38.323 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46924 10 6452 1 2025-10-03 00:13:38.731 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41346 10 6452 1 2025-10-03 00:14:39.141 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:46656 10 6452 1 2025-10-03 00:15:39.520 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49520 10 6452 1 2025-10-03 00:11:38.307 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 00:16:39.918 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35220 10 6452 1 2025-10-03 00:16:56.037 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 00:16:55.824 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 00:16:55.820 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 00:16:55.521 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:16:55.954 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:17:40.281 00:00:11.117 TCP 1.101.0.1:3000 -> 23.104.0.1:48986 10 6452 1 2025-10-03 00:18:41.436 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33830 10 6452 1 2025-10-03 00:14:38.311 00:06:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 00:19:41.840 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34842 10 6452 1 2025-10-03 00:20:42.255 00:00:10.583 TCP 1.101.0.1:3000 -> 23.104.0.1:55038 10 6452 1 2025-10-03 00:21:42.878 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57242 10 6452 1 2025-10-03 00:21:55.769 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 00:21:55.762 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 00:21:55.720 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:21:55.898 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:21:55.981 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 00:22:43.243 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55302 10 6452 1 2025-10-03 00:18:38.309 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 00:23:43.642 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:60318 10 6452 1 2025-10-03 00:24:44.058 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55760 10 6452 1 2025-10-03 00:25:44.413 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:52516 10 6452 1 2025-10-03 00:21:38.312 00:06:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 00:26:55.990 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 00:26:55.958 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 00:26:55.958 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 00:26:55.642 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:26:44.857 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:33094 10 6452 1 2025-10-03 00:26:55.906 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:27:45.231 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50928 10 6452 1 2025-10-03 00:28:45.632 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41242 10 6452 1 2025-10-03 00:29:46.039 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45036 10 6452 1 2025-10-03 00:25:38.313 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 00:30:46.438 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58898 10 6452 1 2025-10-03 00:31:56.067 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 00:31:55.988 00:00:00.045 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 00:31:46.850 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52652 10 6452 1 2025-10-03 00:31:55.935 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 00:31:55.935 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:31:55.984 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:32:47.261 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:58588 11 6504 1 2025-10-03 00:28:38.317 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 00:33:47.715 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54464 10 6452 1 2025-10-03 00:34:48.120 00:00:22.837 TCP 1.101.0.1:3000 -> 23.104.0.1:48790 10 6452 1 2025-10-03 00:36:01.027 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48916 10 6452 1 2025-10-03 00:36:55.972 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 00:36:56.096 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 00:36:56.003 00:00:00.041 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 00:36:56.060 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:36:55.889 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:37:01.437 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57382 10 6452 1 2025-10-03 00:32:38.316 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 00:38:01.800 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40018 10 6452 1 2025-10-03 00:39:02.214 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56438 10 6452 1 2025-10-03 00:40:02.624 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40250 10 6452 1 2025-10-03 00:35:38.319 00:06:00.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 00:41:03.026 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48452 10 6452 1 2025-10-03 00:41:56.169 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 00:41:56.164 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 00:41:56.088 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:41:56.169 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:41:56.253 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 00:42:03.429 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51528 10 6452 1 2025-10-03 00:43:03.833 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:44918 10 6452 1 2025-10-03 00:44:04.212 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58624 10 6452 1 2025-10-03 00:39:38.320 00:06:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 00:45:04.619 00:00:10.577 TCP 1.101.0.1:3000 -> 23.104.0.1:52088 10 6452 1 2025-10-03 00:46:05.234 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48474 10 6452 1 2025-10-03 00:46:56.343 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 00:46:56.140 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 00:46:55.985 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:46:56.388 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:46:56.471 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 00:47:05.636 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49704 10 6452 1 2025-10-03 00:42:38.324 00:06:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 00:48:06.001 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50974 10 6452 1 2025-10-03 00:49:06.397 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:34598 10 6452 1 2025-10-03 00:50:06.796 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:44182 10 6452 1 2025-10-03 00:51:07.174 00:00:10.940 TCP 1.101.0.1:3000 -> 23.104.0.1:39350 10 6452 1 2025-10-03 00:46:38.322 00:06:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 00:51:56.692 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 00:51:56.226 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 00:51:56.589 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:51:56.549 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:51:56.632 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 00:52:08.152 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45548 10 6452 1 2025-10-03 00:53:08.553 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60504 10 6452 1 2025-10-03 00:54:08.956 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36566 10 6452 1 2025-10-03 00:49:38.325 00:06:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 00:55:09.360 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54516 10 6452 1 2025-10-03 00:56:09.760 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35944 10 6452 1 2025-10-03 00:56:56.356 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 00:56:56.514 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 00:56:56.433 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 00:56:56.299 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:56:56.273 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 00:57:10.174 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56270 10 6452 1 2025-10-03 00:58:10.587 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43450 10 6452 1 2025-10-03 00:53:38.322 00:06:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 136, total bytes: 418421, total packets: 1015, avg bps: 899, avg pps: 0, avg bpp: 412 Time window: 2025-10-02 23:57:38 - 2025-10-03 00:59:38 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0031s User: 0.0010s Wall: 0.0062s flows/second: 22070.2 Runtime: 0.0062s