Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 01:59:05.457 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49702 10 6452 1 2025-10-13 02:00:05.822 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39102 10 6452 1 2025-10-13 02:01:06.227 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35466 10 6452 1 2025-10-13 02:01:46.675 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:01:46.592 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:01:46.536 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:01:46.594 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:01:46.184 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:02:06.627 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41378 10 6452 1 2025-10-13 01:57:43.409 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 01:57:43.408 00:06:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:03:07.026 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51666 10 6452 1 2025-10-13 02:04:07.390 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36308 10 6452 1 2025-10-13 02:05:07.788 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43866 10 6452 1 2025-10-13 02:06:08.187 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52872 10 6452 1 2025-10-13 02:06:46.661 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:06:46.733 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:06:46.614 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:06:46.602 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:06:46.685 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:07:08.589 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39736 10 6452 1 2025-10-13 02:08:08.994 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39148 10 6452 1 2025-10-13 02:09:09.358 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47056 10 6452 1 2025-10-13 02:04:43.410 00:06:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:04:43.412 00:06:00.441 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:10:09.764 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33438 10 6452 1 2025-10-13 02:11:10.181 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35674 10 6452 1 2025-10-13 02:11:46.704 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:11:46.777 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:11:46.873 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:11:46.602 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:11:46.786 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:12:10.583 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34166 10 6452 1 2025-10-13 02:13:10.982 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54122 12 6556 1 2025-10-13 02:14:11.386 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40040 10 6452 1 2025-10-13 02:15:11.750 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40626 10 6452 1 2025-10-13 02:16:12.157 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:49560 10 6452 1 2025-10-13 02:11:43.411 00:06:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:11:43.413 00:06:00.442 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:16:46.815 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:16:46.818 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:16:46.683 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:16:47.008 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:16:47.090 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:17:12.554 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51518 10 6452 1 2025-10-13 02:18:12.967 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46834 10 6452 1 2025-10-13 02:19:13.370 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56308 10 6452 1 2025-10-13 02:20:13.775 00:00:10.867 TCP 1.101.0.1:3000 -> 23.104.0.1:34438 10 6452 1 2025-10-13 02:21:14.680 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56654 10 6452 1 2025-10-13 02:21:46.844 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:21:46.989 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:21:46.791 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:21:46.754 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:21:46.837 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:22:15.126 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57804 10 6452 1 2025-10-13 02:23:15.532 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35570 10 6452 1 2025-10-13 02:18:43.412 00:06:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:18:43.415 00:06:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:24:15.899 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:33238 12 6556 1 2025-10-13 02:25:16.333 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43538 10 6452 1 2025-10-13 02:26:16.746 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51970 10 6452 1 2025-10-13 02:26:47.535 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:26:47.452 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:26:46.881 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:26:47.005 00:00:00.041 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:26:47.087 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:27:17.115 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52802 10 6452 1 2025-10-13 02:28:17.539 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51352 10 6452 1 2025-10-13 02:29:17.903 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44964 10 6452 1 2025-10-13 02:30:18.311 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44608 10 6452 1 2025-10-13 02:25:43.415 00:06:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:25:43.418 00:06:00.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:31:18.718 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55026 10 6452 1 2025-10-13 02:31:47.072 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:31:47.214 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:31:47.168 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:31:47.260 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:31:47.357 00:00:00.015 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:32:19.103 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36684 10 6452 1 2025-10-13 02:33:19.506 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44626 10 6452 1 2025-10-13 02:34:19.906 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41328 10 6452 1 2025-10-13 02:35:20.318 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57362 10 6452 1 2025-10-13 02:36:20.681 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40706 10 6452 1 2025-10-13 02:36:47.220 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:36:47.065 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:36:47.195 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:36:47.344 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:36:47.427 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:37:21.105 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52456 10 6452 1 2025-10-13 02:32:43.417 00:06:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:32:43.419 00:06:00.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:38:21.505 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44240 10 6452 1 2025-10-13 02:39:21.867 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43110 10 6452 1 2025-10-13 02:40:22.273 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:35684 10 6452 1 2025-10-13 02:41:22.653 00:00:10.910 TCP 1.101.0.1:3000 -> 23.104.0.1:47872 10 6452 1 2025-10-13 02:41:47.489 00:00:00.019 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:41:47.074 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:41:47.447 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:41:47.325 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:41:47.406 00:00:00.019 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:42:23.603 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54204 10 6452 1 2025-10-13 02:43:24.006 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33586 10 6452 1 2025-10-13 02:44:24.412 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50126 10 6452 1 2025-10-13 02:39:43.423 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:39:43.422 00:06:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:45:24.775 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59678 10 6452 1 2025-10-13 02:46:25.183 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56066 10 6452 1 2025-10-13 02:46:47.859 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:46:47.229 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:46:47.399 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:46:47.685 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:46:47.482 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:47:25.542 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52594 10 6452 1 2025-10-13 02:48:25.944 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:48276 10 6452 1 2025-10-13 02:49:26.323 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49430 10 6452 1 2025-10-13 02:50:26.734 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53028 10 6452 1 2025-10-13 02:51:27.142 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43006 10 6452 1 2025-10-13 02:46:43.425 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:46:43.422 00:06:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:51:47.343 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:51:47.259 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:51:47.456 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:51:47.269 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:51:47.476 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:52:27.547 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55442 10 6452 1 2025-10-13 02:53:27.950 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59868 10 6452 1 2025-10-13 02:54:28.356 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39442 10 6452 1 2025-10-13 02:55:28.753 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:36672 10 6452 1 2025-10-13 02:56:29.185 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56532 10 6452 1 2025-10-13 02:56:47.582 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:56:47.610 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:56:47.661 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:56:47.628 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:56:47.498 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:57:29.590 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33782 10 6452 1 2025-10-13 02:53:43.424 00:06:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:53:43.426 00:06:00.442 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:58:29.989 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46306 10 6452 1 Summary: total flows: 138, total bytes: 417946, total packets: 1036, avg bps: 898, avg pps: 0, avg bpp: 403 Time window: 2025-10-13 01:57:43 - 2025-10-13 02:59:43 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0040s User: 0.0020s Wall: 0.0025s flows/second: 56097.5 Runtime: 0.0025s