Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 13:59:11.259 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45388 10 6452 1 2025-10-20 14:00:23.493 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:00:23.124 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:00:23.251 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:00:11.669 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38594 10 6452 1 2025-10-20 14:00:23.273 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:00:23.357 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:01:12.105 00:00:16.754 TCP 1.101.0.1:3000 -> 23.104.0.1:50264 10 6452 1 2025-10-20 13:56:47.233 00:06:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 13:56:47.232 00:06:00.255 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:02:18.895 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40368 12 6556 1 2025-10-20 14:03:19.315 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37644 10 6452 1 2025-10-20 14:04:19.721 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53712 10 6452 1 2025-10-20 14:05:23.212 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:05:23.298 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:05:23.187 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:05:23.159 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:05:23.242 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:05:20.135 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32850 10 6452 1 2025-10-20 14:06:20.540 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57730 10 6452 1 2025-10-20 14:07:20.898 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36626 12 6556 1 2025-10-20 14:08:21.305 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43208 10 6452 1 2025-10-20 14:03:47.231 00:06:00.255 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:03:47.234 00:06:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:09:21.673 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36044 10 6452 1 2025-10-20 14:10:23.201 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:10:23.232 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:10:23.471 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:10:23.281 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:10:23.554 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:10:22.105 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45104 10 6452 1 2025-10-20 14:11:22.512 00:00:14.528 TCP 1.101.0.1:3000 -> 23.104.0.1:35768 10 6452 1 2025-10-20 14:12:27.116 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:34834 10 6452 1 2025-10-20 14:13:27.516 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47788 10 6452 1 2025-10-20 14:14:27.918 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:35290 10 6452 1 2025-10-20 14:15:23.374 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:15:23.455 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:15:23.310 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:15:23.369 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:15:23.453 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:15:28.353 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47702 10 6452 1 2025-10-20 14:10:47.234 00:06:00.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:10:47.231 00:06:00.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:16:28.718 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40968 10 6452 1 2025-10-20 14:17:29.105 00:00:10.530 TCP 1.101.0.1:3000 -> 23.104.0.1:43456 10 6452 1 2025-10-20 14:18:29.675 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57576 10 6452 1 2025-10-20 14:19:30.112 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46552 10 6452 1 2025-10-20 14:20:23.402 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:20:23.524 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:20:23.601 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:20:23.604 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:20:23.687 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:20:30.476 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51642 10 6452 1 2025-10-20 14:21:30.872 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52944 10 6452 1 2025-10-20 14:17:47.232 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:22:31.237 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51410 10 6452 1 2025-10-20 14:17:47.234 00:06:00.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:23:31.637 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47428 10 6452 1 2025-10-20 14:24:32.036 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42710 10 6452 1 2025-10-20 14:25:23.579 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:25:23.494 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:25:23.650 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:25:23.594 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:25:23.496 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:25:32.445 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59080 10 6452 1 2025-10-20 14:26:32.846 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:36798 10 6452 1 2025-10-20 14:27:33.243 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41830 10 6452 1 2025-10-20 14:28:33.647 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34760 10 6452 1 2025-10-20 14:29:34.070 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45474 10 6452 1 2025-10-20 14:24:47.238 00:06:00.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:24:47.235 00:06:00.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:30:23.592 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:30:23.883 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:30:23.852 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:30:23.820 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:30:23.903 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:30:34.475 00:00:10.777 TCP 1.101.0.1:3000 -> 23.104.0.1:45062 10 6452 1 2025-10-20 14:31:35.296 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52834 10 6452 1 2025-10-20 14:32:35.696 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57516 10 6452 1 2025-10-20 14:33:36.103 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38224 10 6452 1 2025-10-20 14:34:36.479 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35484 10 6452 1 2025-10-20 14:35:23.974 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:35:23.926 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:35:23.533 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:35:24.001 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:35:24.083 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:35:36.888 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:36368 12 6556 1 2025-10-20 14:36:37.312 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:56614 10 6452 1 2025-10-20 14:31:47.238 00:06:00.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:31:47.235 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:37:37.739 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47152 10 6452 1 2025-10-20 14:38:38.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34782 10 6452 1 2025-10-20 14:39:38.551 00:00:21.249 TCP 1.101.0.1:3000 -> 23.104.0.1:51624 10 6452 1 2025-10-20 14:40:24.373 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:40:24.334 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:40:24.008 00:00:00.047 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:40:24.205 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:40:24.289 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:40:49.853 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48120 10 6452 1 2025-10-20 14:41:50.268 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41608 10 6452 1 2025-10-20 14:42:50.666 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47840 10 6452 1 2025-10-20 14:38:47.236 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:38:47.240 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:43:51.097 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43598 10 6452 1 2025-10-20 14:44:51.499 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43166 10 6452 1 2025-10-20 14:45:24.072 00:00:00.056 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:45:24.093 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:45:24.100 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:45:24.109 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:45:23.988 00:00:00.056 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:45:51.907 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56010 10 6452 1 2025-10-20 14:46:52.271 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50994 10 6452 1 2025-10-20 14:47:52.672 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60876 10 6452 1 2025-10-20 14:48:53.101 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56620 10 6452 1 2025-10-20 14:49:53.462 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:58096 10 6452 1 2025-10-20 14:50:24.220 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:50:24.041 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:50:24.143 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:50:24.150 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:50:24.234 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:45:47.237 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:45:47.240 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:50:53.947 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41650 10 6452 1 2025-10-20 14:51:54.359 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47602 10 6452 1 2025-10-20 14:52:54.759 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:50924 10 6452 1 2025-10-20 14:53:55.188 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44542 10 6452 1 2025-10-20 14:54:55.593 00:00:10.606 TCP 1.101.0.1:3000 -> 23.104.0.1:55172 10 6452 1 2025-10-20 14:55:24.113 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:55:24.182 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:55:24.284 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:55:24.194 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:55:24.277 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:55:56.234 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59232 10 6452 1 2025-10-20 14:56:56.638 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58606 10 6452 1 2025-10-20 14:52:47.245 00:06:00.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:52:47.245 00:06:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:57:57.001 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58914 10 6452 1 Summary: total flows: 137, total bytes: 411598, total packets: 1028, avg bps: 885, avg pps: 0, avg bpp: 400 Time window: 2025-10-20 13:56:47 - 2025-10-20 14:58:47 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0037s User: 0.0009s Wall: 0.0022s flows/second: 63514.9 Runtime: 0.0022s