Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 02:59:30.432 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44512 10 6452 1 2025-10-13 03:00:30.831 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:47008 10 6452 1 2025-10-13 03:01:31.234 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42554 10 6452 1 2025-10-13 03:01:47.871 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 03:01:47.789 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 03:01:47.790 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 03:01:47.479 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:01:47.789 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:02:31.636 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35646 10 6452 1 2025-10-13 03:03:32.062 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37372 10 6452 1 2025-10-13 03:04:32.464 00:00:10.752 TCP 1.101.0.1:3000 -> 23.104.0.1:36700 10 6452 1 2025-10-13 03:00:43.424 00:06:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 03:05:33.254 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54732 10 6452 1 2025-10-13 03:00:43.428 00:06:00.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 03:06:33.657 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49212 10 6452 1 2025-10-13 03:06:47.920 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 03:06:47.914 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 03:06:47.639 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:06:47.790 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:06:47.874 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 03:07:34.087 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60748 10 6452 1 2025-10-13 03:08:34.493 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49626 10 6452 1 2025-10-13 03:09:34.896 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:38388 10 6452 1 2025-10-13 03:10:35.322 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36990 10 6452 1 2025-10-13 03:11:48.494 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 03:11:47.992 00:00:00.042 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 03:11:48.170 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 03:11:48.058 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:11:35.728 00:00:10.576 TCP 1.101.0.1:3000 -> 23.104.0.1:37010 16 14402 1 2025-10-13 03:11:48.411 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:07:43.428 00:06:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 03:07:43.426 00:06:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 03:12:36.345 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36610 10 6452 1 2025-10-13 03:13:36.705 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55376 10 6452 1 2025-10-13 03:14:37.118 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49378 10 6452 1 2025-10-13 03:15:37.520 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35010 10 6452 1 2025-10-13 03:16:47.746 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 03:16:37.919 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45296 10 6452 1 2025-10-13 03:16:47.744 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 03:16:47.911 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:16:48.103 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:16:48.186 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 03:17:38.321 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52866 10 6452 1 2025-10-13 03:18:38.679 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58384 10 6452 1 2025-10-13 03:14:43.429 00:06:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 03:14:43.431 00:06:00.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 03:19:39.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52112 10 6452 1 2025-10-13 03:20:39.511 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:59890 11 6504 1 2025-10-13 03:21:48.274 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 03:21:48.191 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:21:48.273 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 03:21:48.077 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 03:21:47.975 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:21:39.970 00:00:10.426 TCP 1.101.0.1:3000 -> 23.104.0.1:45142 10 6452 1 2025-10-13 03:22:40.437 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44584 10 6452 1 2025-10-13 03:23:40.837 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:37982 10 6452 1 2025-10-13 03:24:41.260 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:50998 10 6452 1 2025-10-13 03:25:41.638 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50354 10 6452 1 2025-10-13 03:21:43.433 00:06:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 03:26:48.070 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 03:26:48.326 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 03:26:48.176 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:26:48.316 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:21:43.431 00:06:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 03:26:48.399 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 03:26:42.065 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41092 10 6452 1 2025-10-13 03:27:42.474 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60894 10 6452 1 2025-10-13 03:28:42.887 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:37238 10 6452 1 2025-10-13 03:29:43.317 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36478 10 6452 1 2025-10-13 03:30:43.721 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41272 10 6452 1 2025-10-13 03:31:48.550 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 03:31:48.344 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:31:48.822 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:31:48.378 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 03:31:48.905 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 03:31:44.134 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:39202 12 10369 1 2025-10-13 03:32:44.609 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35460 10 6452 1 2025-10-13 03:28:43.433 00:06:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 03:28:43.436 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 03:33:45.020 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:47090 10 6452 1 2025-10-13 03:34:45.430 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48420 10 6452 1 2025-10-13 03:35:45.837 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:39436 10 6452 1 2025-10-13 03:36:48.337 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 03:36:48.261 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 03:36:48.410 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 03:36:48.357 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:36:48.254 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:36:46.258 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55940 10 6452 1 2025-10-13 03:37:46.662 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59444 10 6452 1 2025-10-13 03:38:47.095 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48116 10 6452 1 2025-10-13 03:39:47.457 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:39168 10 6452 1 2025-10-13 03:35:43.434 00:06:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 03:35:43.436 00:06:00.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 03:40:47.825 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40552 10 6452 1 2025-10-13 03:41:48.599 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 03:41:48.443 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 03:41:48.643 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 03:41:48.391 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:41:48.515 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:41:48.230 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37700 10 6452 1 2025-10-13 03:42:48.634 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42244 10 6452 1 2025-10-13 03:43:49.054 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36886 10 6452 1 2025-10-13 03:44:49.460 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43034 10 6452 1 2025-10-13 03:45:49.863 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33010 10 6452 1 2025-10-13 03:46:48.603 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:46:48.680 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 03:46:48.650 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 03:46:48.543 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:46:48.686 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 03:46:50.280 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50048 10 6452 1 2025-10-13 03:42:43.436 00:06:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 03:42:43.438 00:06:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 03:47:50.679 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48094 10 6452 1 2025-10-13 03:48:51.104 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50570 10 6452 1 2025-10-13 03:49:51.465 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44960 10 6452 1 2025-10-13 03:50:51.872 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:58168 10 6452 1 2025-10-13 03:51:48.875 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 03:51:49.139 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 03:51:48.935 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:51:49.062 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:51:49.145 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 03:51:52.235 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60578 10 6452 1 2025-10-13 03:52:52.637 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34450 10 6452 1 2025-10-13 03:53:53.040 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49872 10 6452 1 2025-10-13 03:49:43.437 00:06:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 03:49:43.440 00:06:00.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 03:54:53.443 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36090 10 6452 1 2025-10-13 03:55:53.807 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35636 10 6452 1 2025-10-13 03:56:48.884 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:56:48.886 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 03:56:48.692 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 03:56:48.822 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 03:56:48.967 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 03:56:54.217 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48190 10 6452 1 2025-10-13 03:57:54.621 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36934 10 6452 1 Summary: total flows: 135, total bytes: 421483, total packets: 1003, avg bps: 959, avg pps: 0, avg bpp: 420 Time window: 2025-10-13 02:59:30 - 2025-10-13 03:58:04 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0030s User: 0.0020s Wall: 0.0021s flows/second: 64133.1 Runtime: 0.0021s