Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 19:58:40.955 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58822 10 6452 1 2025-10-13 19:59:41.360 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33678 10 6452 1 2025-10-13 20:00:41.768 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:47442 10 6452 1 2025-10-13 20:01:42.135 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53852 10 6452 1 2025-10-13 20:02:08.497 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 20:02:08.502 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 20:02:08.383 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:02:08.541 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:02:08.623 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 20:02:42.535 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41770 10 6452 1 2025-10-13 19:59:43.730 00:05:00.469 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 19:59:43.728 00:05:00.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 20:03:42.896 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50126 10 6452 1 2025-10-13 20:04:43.311 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39518 10 6452 1 2025-10-13 20:05:43.718 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41368 10 6452 1 2025-10-13 20:06:44.123 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47982 10 6452 1 2025-10-13 20:07:08.311 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 20:07:08.261 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 20:07:08.107 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:07:08.317 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:07:08.399 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 20:07:44.520 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40462 10 6452 1 2025-10-13 20:08:44.940 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43164 10 6452 1 2025-10-13 20:05:43.732 00:05:00.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 20:05:43.730 00:05:00.476 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 20:09:45.355 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56678 10 6452 1 2025-10-13 20:10:45.755 00:00:10.832 TCP 1.101.0.1:3000 -> 23.104.0.1:54306 10 6452 1 2025-10-13 20:11:46.630 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:48116 12 10369 1 2025-10-13 20:12:08.474 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 20:12:08.259 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 20:12:08.517 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 20:12:08.505 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:12:08.391 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:12:47.101 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53774 10 6452 1 2025-10-13 20:13:47.513 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38794 10 6452 1 2025-10-13 20:14:47.919 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50196 10 6452 1 2025-10-13 20:11:43.730 00:05:00.480 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 20:11:43.733 00:05:00.475 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 20:15:48.285 00:00:10.539 TCP 1.101.0.1:3000 -> 23.104.0.1:35984 10 6452 1 2025-10-13 20:16:48.863 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:40262 10 6452 1 2025-10-13 20:17:08.765 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 20:17:08.621 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 20:17:08.685 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 20:17:08.559 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:17:08.682 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:17:49.288 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39976 10 6452 1 2025-10-13 20:18:49.696 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59164 10 6452 1 2025-10-13 20:19:50.110 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51154 10 6452 1 2025-10-13 20:20:50.509 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34442 10 6452 1 2025-10-13 20:17:43.731 00:05:00.487 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 20:17:43.735 00:05:00.482 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 20:21:50.915 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46832 10 6452 1 2025-10-13 20:22:08.522 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 20:22:08.542 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:22:08.536 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:22:08.753 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 20:22:08.617 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 20:22:51.324 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:57916 10 6452 1 2025-10-13 20:23:51.701 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51302 10 6452 1 2025-10-13 20:24:52.065 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50950 10 6452 1 2025-10-13 20:25:52.470 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45640 10 6452 1 2025-10-13 20:26:52.831 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35882 10 6452 1 2025-10-13 20:27:08.650 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 20:27:08.669 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 20:27:08.567 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 20:27:08.617 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:27:08.568 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:23:43.736 00:05:00.481 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 20:23:43.733 00:05:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 20:27:53.188 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37442 10 6452 1 2025-10-13 20:28:53.591 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34220 10 6452 1 2025-10-13 20:29:53.957 00:00:10.836 TCP 1.101.0.1:3000 -> 23.104.0.1:48154 10 6452 1 2025-10-13 20:30:54.832 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56316 10 6452 1 2025-10-13 20:32:08.917 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 20:32:08.819 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 20:32:08.757 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 20:32:08.579 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:32:08.835 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:31:55.235 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36102 10 6452 1 2025-10-13 20:32:55.639 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55712 10 6452 1 2025-10-13 20:29:43.738 00:05:00.480 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 20:29:43.737 00:05:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 20:33:56.049 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43566 10 6452 1 2025-10-13 20:34:56.446 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58136 10 6452 1 2025-10-13 20:35:56.851 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:40624 10 6452 1 2025-10-13 20:37:09.172 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 20:37:08.856 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 20:37:08.735 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 20:37:08.984 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:36:57.229 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:33718 10 6452 1 2025-10-13 20:37:09.089 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:37:57.589 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34106 10 6452 1 2025-10-13 20:38:58.010 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56362 10 6452 1 2025-10-13 20:35:43.740 00:05:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 20:35:43.742 00:05:00.477 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 20:39:58.411 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39854 10 6452 1 2025-10-13 20:40:58.814 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48258 10 6452 1 2025-10-13 20:42:08.983 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 20:42:08.904 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 20:41:59.216 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:35674 10 6452 1 2025-10-13 20:42:08.971 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 20:42:08.708 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:42:08.900 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:42:59.613 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49230 10 6452 1 2025-10-13 20:44:00.022 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:49844 10 6452 1 2025-10-13 20:45:00.389 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50004 10 6452 1 2025-10-13 20:41:43.742 00:05:00.481 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 20:41:43.746 00:05:00.476 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 20:46:00.799 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34310 10 6452 1 2025-10-13 20:47:09.158 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 20:47:09.000 00:00:00.041 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 20:47:09.074 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:47:09.105 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:47:09.188 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 20:47:01.196 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50362 10 6452 1 2025-10-13 20:48:01.599 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59226 10 6452 1 2025-10-13 20:49:02.004 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:48480 10 6452 1 2025-10-13 20:50:02.369 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51272 10 6452 1 2025-10-13 20:51:02.732 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58670 10 6452 1 2025-10-13 20:47:43.745 00:05:00.481 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 20:47:43.748 00:05:00.477 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 20:52:09.358 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 20:52:09.274 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 20:52:09.195 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 20:52:09.300 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:52:09.275 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:52:03.144 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38310 10 6452 1 2025-10-13 20:53:03.558 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:40366 10 6452 1 2025-10-13 20:54:03.929 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:45682 10 6452 1 2025-10-13 20:55:04.356 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44508 10 6452 1 2025-10-13 20:56:04.756 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60904 10 6452 1 2025-10-13 20:57:09.400 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 20:57:09.318 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 20:57:09.240 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 20:57:09.302 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:57:09.316 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 20:57:05.158 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40834 10 6452 1 2025-10-13 20:53:43.748 00:05:00.481 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 20:53:43.750 00:05:00.475 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 20:58:05.558 00:00:10.431 TCP 1.101.0.1:3000 -> 23.104.0.1:46968 11 6504 1 Summary: total flows: 140, total bytes: 420969, total packets: 1023, avg bps: 934, avg pps: 0, avg bpp: 411 Time window: 2025-10-13 19:58:40 - 2025-10-13 20:58:44 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0022s User: 0.0022s Wall: 0.0017s flows/second: 81116.5 Runtime: 0.0017s