Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 06:59:01.142 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35364 10 6452 1 2025-10-24 07:00:01.545 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57890 10 6452 1 2025-10-24 07:01:01.945 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:54720 10 6452 1 2025-10-24 07:02:10.158 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 07:02:10.379 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 07:02:10.340 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:02:02.343 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57910 10 6452 1 2025-10-24 07:02:10.429 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:02:10.512 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 07:03:02.706 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43736 10 6452 1 2025-10-24 06:59:49.139 00:04:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 06:59:49.138 00:04:00.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 07:04:03.120 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53266 10 6452 1 2025-10-24 07:05:03.525 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44208 10 6452 1 2025-10-24 07:06:03.889 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:47228 10 6452 1 2025-10-24 07:07:11.895 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 07:07:11.788 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 07:07:11.280 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:07:04.274 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59336 10 6452 1 2025-10-24 07:07:11.808 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:07:11.890 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 07:08:04.641 00:00:17.445 TCP 1.101.0.1:3000 -> 23.104.0.1:37426 10 6452 1 2025-10-24 07:04:49.138 00:04:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 07:04:49.141 00:04:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 07:09:12.144 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45302 10 6452 1 2025-10-24 07:10:12.549 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:59784 13 13943 1 2025-10-24 07:11:13.030 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58514 10 6452 1 2025-10-24 07:12:10.701 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 07:12:10.516 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 07:12:10.411 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 07:12:10.249 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:12:10.619 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:12:13.433 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52848 10 6452 1 2025-10-24 07:13:13.825 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56468 10 6452 1 2025-10-24 07:09:49.141 00:04:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 07:14:14.191 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45492 10 6452 1 2025-10-24 07:09:49.140 00:06:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 07:15:14.591 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53564 10 6452 1 2025-10-24 07:16:14.995 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33672 10 6452 1 2025-10-24 07:17:10.745 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 07:17:10.664 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 07:17:10.562 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 07:17:10.573 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:17:10.661 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:17:15.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36712 10 6452 1 2025-10-24 07:18:15.767 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38066 10 6452 1 2025-10-24 07:14:49.143 00:04:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 07:19:16.181 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47244 10 6452 1 2025-10-24 07:20:16.609 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60664 10 6452 1 2025-10-24 07:16:49.141 00:04:00.249 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 07:21:17.023 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38158 10 6452 1 2025-10-24 07:22:10.714 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 07:22:10.467 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:22:10.716 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:22:10.639 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 07:22:10.799 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 07:22:17.384 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46572 10 6452 1 2025-10-24 07:23:17.792 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35924 10 6452 1 2025-10-24 07:24:18.202 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:45768 10 6452 1 2025-10-24 07:19:49.145 00:06:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 07:25:18.574 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40726 10 6452 1 2025-10-24 07:21:49.142 00:04:00.249 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 07:26:18.978 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35234 10 6452 1 2025-10-24 07:27:10.871 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 07:27:10.756 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 07:27:10.499 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:27:10.837 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:27:10.921 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 07:27:19.395 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50552 10 6452 1 2025-10-24 07:28:19.806 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:53834 10 6452 1 2025-10-24 07:29:20.188 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33956 10 6452 1 2025-10-24 07:30:20.588 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60930 10 6452 1 2025-10-24 07:26:49.147 00:04:00.243 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 07:26:49.144 00:04:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 07:31:20.985 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53606 10 6452 1 2025-10-24 07:32:10.725 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:32:10.831 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:32:10.957 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 07:32:10.956 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 07:32:10.913 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 07:32:21.387 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47040 10 6452 1 2025-10-24 07:33:21.790 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59884 10 6452 1 2025-10-24 07:34:22.148 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57008 10 6452 1 2025-10-24 07:35:22.553 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41626 10 6452 1 2025-10-24 07:31:49.154 00:04:00.237 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 07:31:49.150 00:04:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 07:36:22.958 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:45010 10 6452 1 2025-10-24 07:37:11.006 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 07:37:10.894 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 07:37:10.608 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:37:10.891 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:37:10.973 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 07:37:23.398 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55526 10 6452 1 2025-10-24 07:38:23.798 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42730 10 6452 1 2025-10-24 07:39:24.205 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46736 10 6452 1 2025-10-24 07:40:24.605 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45088 10 6452 1 2025-10-24 07:36:49.151 00:04:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 07:36:49.154 00:04:00.237 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 07:41:25.021 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34088 10 6452 1 2025-10-24 07:42:12.172 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 07:42:11.965 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 07:42:11.755 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:42:12.173 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:42:12.256 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 07:42:25.423 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51540 10 6452 1 2025-10-24 07:43:25.832 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:34144 10 6452 1 2025-10-24 07:44:26.222 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45714 10 6452 1 2025-10-24 07:45:26.631 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40870 10 6452 1 2025-10-24 07:41:49.156 00:04:00.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 07:46:27.041 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56622 10 6452 1 2025-10-24 07:41:49.154 00:06:00.240 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 07:47:11.305 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 07:47:11.134 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 07:47:11.278 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:47:11.129 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:47:11.214 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 07:47:27.406 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36464 10 6452 1 2025-10-24 07:48:27.811 00:00:23.148 TCP 1.101.0.1:3000 -> 23.104.0.1:56438 10 6452 1 2025-10-24 07:49:41.025 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50910 10 6452 1 2025-10-24 07:46:49.157 00:04:00.236 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 07:50:41.430 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:48352 10 6452 1 2025-10-24 07:51:41.784 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54422 10 6452 1 2025-10-24 07:52:11.320 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 07:52:11.380 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 07:52:11.345 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:52:11.233 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:52:11.316 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 07:48:49.155 00:04:00.240 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 07:52:42.148 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47208 10 6452 1 2025-10-24 07:53:42.550 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51568 10 6452 1 2025-10-24 07:54:42.914 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37402 10 6452 1 2025-10-24 07:55:43.320 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45582 10 6452 1 2025-10-24 07:51:49.157 00:06:00.237 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 07:56:43.726 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:45348 10 6452 1 2025-10-24 07:57:11.452 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 07:57:11.459 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 07:57:11.187 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:57:11.500 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 07:57:11.583 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 07:53:49.156 00:04:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 07:57:44.145 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47918 10 6452 1 Summary: total flows: 141, total bytes: 417793, total packets: 1009, avg bps: 945, avg pps: 0, avg bpp: 414 Time window: 2025-10-24 06:59:01 - 2025-10-24 07:57:54 Total flows processed: 141, passed: 141, Blocks skipped: 0, Bytes read: 14728 Sys: 0.0041s User: 0.0021s Wall: 0.0025s flows/second: 55296.6 Runtime: 0.0026s