Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 09:59:27.164 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43840 10 6452 1 2025-10-13 10:00:27.529 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51110 10 6452 1 2025-10-13 10:01:27.932 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:38510 12 10369 1 2025-10-13 10:01:56.282 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 10:01:56.201 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 10:01:56.120 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 10:01:56.302 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:01:56.200 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:02:28.384 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34704 10 6452 1 2025-10-13 10:03:28.786 00:00:10.735 TCP 1.101.0.1:3000 -> 23.104.0.1:60958 10 6452 1 2025-10-13 09:59:43.549 00:05:00.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 09:59:43.546 00:05:00.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 10:04:29.560 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48630 10 6452 1 2025-10-13 10:05:29.935 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59978 10 6452 1 2025-10-13 10:06:30.354 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36748 10 6452 1 2025-10-13 10:06:56.279 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 10:06:56.312 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 10:06:56.259 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 10:06:56.121 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:06:56.196 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:07:30.762 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54902 10 6452 1 2025-10-13 10:08:31.183 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37746 10 6452 1 2025-10-13 10:05:43.550 00:05:00.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 10:09:31.584 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33916 10 6452 1 2025-10-13 10:05:43.548 00:05:00.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 10:10:31.993 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39038 10 6452 1 2025-10-13 10:11:32.402 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45316 10 6452 1 2025-10-13 10:11:56.278 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 10:11:56.188 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 10:11:56.124 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:11:56.193 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:11:56.276 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 10:12:32.808 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34312 10 6452 1 2025-10-13 10:13:33.212 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36116 10 6452 1 2025-10-13 10:14:33.612 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57230 10 6452 1 2025-10-13 10:11:43.552 00:05:00.457 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 10:15:34.020 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:47996 10 6452 1 2025-10-13 10:11:43.549 00:05:00.462 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 10:16:34.411 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:39154 10 6452 1 2025-10-13 10:16:56.572 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 10:16:56.338 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:16:56.490 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:16:56.476 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 10:16:56.309 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 10:17:34.795 00:00:10.468 TCP 1.101.0.1:3000 -> 23.104.0.1:52098 10 6452 1 2025-10-13 10:18:35.302 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45094 10 6452 1 2025-10-13 10:19:35.702 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33474 10 6452 1 2025-10-13 10:20:36.117 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46454 10 6452 1 2025-10-13 10:17:43.551 00:05:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 10:17:43.553 00:05:00.480 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 10:21:36.521 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34292 10 6452 1 2025-10-13 10:21:56.711 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 10:21:56.727 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 10:21:56.634 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 10:21:56.459 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:21:56.629 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:22:36.925 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45508 10 6452 1 2025-10-13 10:23:37.342 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49614 10 6452 1 2025-10-13 10:24:37.748 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:44128 10 6452 1 2025-10-13 10:25:38.197 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48528 10 6452 1 2025-10-13 10:26:38.563 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57322 10 6452 1 2025-10-13 10:26:56.965 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 10:26:57.083 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 10:26:56.949 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 10:26:56.482 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:26:56.882 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:23:43.557 00:05:00.480 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 10:23:43.553 00:05:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 10:27:38.973 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39224 10 6452 1 2025-10-13 10:28:39.385 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50222 12 6556 1 2025-10-13 10:29:39.795 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54380 10 6452 1 2025-10-13 10:30:40.205 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56344 10 6452 1 2025-10-13 10:31:40.613 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36214 10 6452 1 2025-10-13 10:31:57.005 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 10:31:56.685 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 10:31:56.430 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:31:56.683 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:31:56.765 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 10:32:41.015 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47662 10 6452 1 2025-10-13 10:29:43.557 00:05:00.483 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 10:29:43.554 00:05:00.488 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 10:33:41.384 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:46998 10 6452 1 2025-10-13 10:34:41.783 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57854 10 6452 1 2025-10-13 10:35:42.198 00:00:10.641 TCP 1.101.0.1:3000 -> 23.104.0.1:52918 10 6452 1 2025-10-13 10:36:42.875 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34164 10 6452 1 2025-10-13 10:36:56.888 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 10:36:56.798 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 10:36:56.715 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:36:56.806 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:36:56.888 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 10:37:43.282 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46978 10 6452 1 2025-10-13 10:38:43.682 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53226 10 6452 1 2025-10-13 10:35:43.556 00:05:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 10:35:43.557 00:05:00.481 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 10:39:44.049 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:52170 10 6452 1 2025-10-13 10:40:44.468 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55534 10 6452 1 2025-10-13 10:41:56.876 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 10:41:56.960 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 10:41:56.997 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:41:44.869 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:49196 12 10375 1 2025-10-13 10:41:57.076 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:41:57.159 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 10:42:45.363 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52330 10 6452 1 2025-10-13 10:43:45.764 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35724 10 6452 1 2025-10-13 10:44:46.179 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54696 10 6452 1 2025-10-13 10:41:43.556 00:05:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 10:41:43.560 00:05:00.481 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 10:45:46.582 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44972 10 6452 1 2025-10-13 10:46:57.228 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 10:46:57.163 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 10:46:46.982 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56070 10 6452 1 2025-10-13 10:46:56.788 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:46:56.901 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:46:56.984 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 10:47:47.386 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43892 10 6452 1 2025-10-13 10:48:47.795 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:37448 10 6452 1 2025-10-13 10:49:48.192 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55644 10 6452 1 2025-10-13 10:50:48.591 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34276 10 6452 1 2025-10-13 10:47:43.564 00:05:00.478 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 10:47:43.562 00:05:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 10:51:57.073 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 10:51:57.075 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 10:51:57.117 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:51:48.992 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:49746 10 6452 1 2025-10-13 10:51:56.934 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:51:57.017 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 10:52:49.351 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:52254 10 6452 1 2025-10-13 10:53:49.715 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50324 10 6452 1 2025-10-13 10:54:50.120 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39484 10 6452 1 2025-10-13 10:55:50.488 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59068 10 6452 1 2025-10-13 10:56:57.432 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 10:56:57.237 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 10:56:57.165 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 10:56:57.237 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:56:57.349 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 10:56:50.891 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40572 12 6556 1 2025-10-13 10:53:43.562 00:05:00.483 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 10:53:43.564 00:05:00.479 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 10:57:51.307 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35928 10 6452 1 Summary: total flows: 139, total bytes: 418596, total packets: 1018, avg bps: 941, avg pps: 0, avg bpp: 411 Time window: 2025-10-13 09:59:27 - 2025-10-13 10:58:44 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0029s User: 0.0019s Wall: 0.0020s flows/second: 69888.3 Runtime: 0.0020s