Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 03:58:53.569 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44926 10 6452 1 2025-10-08 03:59:24.391 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 03:59:24.305 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 03:59:24.479 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 03:59:24.362 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 03:59:24.309 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 03:59:53.979 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52438 10 6452 1 2025-10-08 04:00:54.387 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40038 10 6452 1 2025-10-08 04:01:54.792 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45004 10 6452 1 2025-10-08 03:58:40.981 00:05:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 04:02:55.207 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50456 10 6452 1 2025-10-08 03:59:40.984 00:05:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 04:03:55.565 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53254 10 6452 1 2025-10-08 04:04:24.889 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 04:04:24.749 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 04:04:24.906 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 04:04:24.545 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:04:24.808 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:04:55.965 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47750 10 6452 1 2025-10-08 04:05:56.329 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41516 10 6452 1 2025-10-08 04:06:56.740 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50494 10 6452 1 2025-10-08 04:07:57.148 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53692 10 6452 1 2025-10-08 04:04:40.983 00:05:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 04:08:57.554 00:00:11.069 TCP 1.101.0.1:3000 -> 23.104.0.1:45676 10 6452 1 2025-10-08 04:09:24.711 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:09:24.730 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:09:24.602 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 04:09:24.598 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 04:09:24.813 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 04:05:40.986 00:05:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 04:09:58.663 00:00:10.740 TCP 1.101.0.1:3000 -> 23.104.0.1:34602 10 6452 1 2025-10-08 04:10:59.443 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44314 10 6452 1 2025-10-08 04:11:59.845 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:49762 10 6452 1 2025-10-08 04:13:00.220 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38930 10 6452 1 2025-10-08 04:14:00.629 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36330 10 6452 1 2025-10-08 04:14:24.852 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 04:14:24.847 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 04:14:24.801 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:14:24.932 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:14:25.015 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 04:10:40.987 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 04:15:00.993 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:49790 10 6452 1 2025-10-08 04:11:40.990 00:05:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 04:16:01.422 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59716 10 6452 1 2025-10-08 04:17:01.827 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59212 10 6452 1 2025-10-08 04:18:02.250 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36290 10 6452 1 2025-10-08 04:19:02.657 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46080 10 6452 1 2025-10-08 04:19:24.790 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 04:19:24.936 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:19:25.138 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 04:19:25.114 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:19:25.020 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 04:20:03.066 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:44140 12 10369 1 2025-10-08 04:16:40.987 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 04:21:03.544 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60456 10 6452 1 2025-10-08 04:17:40.992 00:05:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 04:22:03.943 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44178 10 6452 1 2025-10-08 04:23:04.364 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40974 10 6452 1 2025-10-08 04:24:04.769 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:43986 10 6452 1 2025-10-08 04:24:24.886 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 04:24:24.889 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 04:24:24.937 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:24:24.889 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:24:24.981 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 04:25:05.192 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39242 10 6452 1 2025-10-08 04:26:05.605 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41002 10 6452 1 2025-10-08 04:22:40.990 00:05:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 04:27:06.010 00:00:10.976 TCP 1.101.0.1:3000 -> 23.104.0.1:41380 10 6452 1 2025-10-08 04:23:40.993 00:05:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 04:28:07.028 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37400 10 6452 1 2025-10-08 04:29:07.428 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38102 10 6452 1 2025-10-08 04:29:25.219 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 04:29:24.769 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 04:29:24.880 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 04:29:25.097 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:29:25.137 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:30:07.837 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:56472 10 6452 1 2025-10-08 04:31:08.229 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58922 10 6452 1 2025-10-08 04:32:08.628 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:33584 10 6452 1 2025-10-08 04:28:40.992 00:05:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 04:33:09.006 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48594 10 6452 1 2025-10-08 04:29:40.995 00:05:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 04:34:09.408 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39852 10 6452 1 2025-10-08 04:34:25.246 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 04:34:25.387 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 04:34:25.179 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:34:25.311 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:34:25.394 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 04:35:09.811 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49754 10 6452 1 2025-10-08 04:36:10.213 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48862 10 6452 1 2025-10-08 04:37:10.618 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57786 10 6452 1 2025-10-08 04:38:11.029 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:42004 11 6504 1 2025-10-08 04:34:40.995 00:05:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 04:39:11.487 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40852 10 6452 1 2025-10-08 04:39:25.185 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 04:39:25.372 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 04:39:25.258 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:39:25.185 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:39:25.267 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 04:35:40.999 00:05:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 04:40:11.854 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47038 10 6452 1 2025-10-08 04:41:12.269 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35856 10 6452 1 2025-10-08 04:42:12.683 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56014 10 6452 1 2025-10-08 04:43:13.108 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37782 10 6452 1 2025-10-08 04:44:13.512 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50470 10 6452 1 2025-10-08 04:44:25.609 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 04:44:25.527 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:44:25.457 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 04:44:25.443 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 04:44:25.558 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:40:40.996 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 04:45:13.915 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58518 10 6452 1 2025-10-08 04:46:14.319 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53388 10 6452 1 2025-10-08 04:41:41.002 00:06:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 04:47:14.723 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41130 10 6452 1 2025-10-08 04:48:15.140 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52846 10 6452 1 2025-10-08 04:49:25.498 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 04:49:15.542 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59240 10 6452 1 2025-10-08 04:49:25.502 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 04:49:25.592 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:49:25.510 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:49:25.592 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 04:50:15.944 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41832 10 6452 1 2025-10-08 04:46:40.998 00:05:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 04:51:16.356 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53234 10 6452 1 2025-10-08 04:52:16.756 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:39550 10 6452 1 2025-10-08 04:53:17.182 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51712 10 6452 1 2025-10-08 04:48:41.001 00:06:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 04:54:25.705 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 04:54:25.510 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 04:54:25.531 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:54:25.697 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 04:54:17.582 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47396 10 6452 1 2025-10-08 04:54:25.780 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 04:55:17.987 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58150 10 6452 1 2025-10-08 04:56:18.393 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:56738 10 6452 1 2025-10-08 04:57:18.835 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:52062 10 6452 1 2025-10-08 04:52:41.000 00:06:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 04:58:19.263 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34208 10 6452 1 Summary: total flows: 139, total bytes: 420600, total packets: 1017, avg bps: 934, avg pps: 0, avg bpp: 413 Time window: 2025-10-08 03:58:40 - 2025-10-08 04:58:41 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0027s User: 0.0009s Wall: 0.0017s flows/second: 80537.1 Runtime: 0.0017s