Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 01:58:52.682 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35212 10 6452 1 2025-10-26 01:59:53.108 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33818 10 6452 1 2025-10-26 02:00:53.519 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35112 10 6452 1 2025-10-26 01:56:50.148 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 02:01:53.921 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45606 10 6452 1 2025-10-26 02:03:02.426 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:03:02.621 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:03:02.457 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:03:02.077 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:02:54.328 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52954 10 6452 1 2025-10-26 02:03:02.344 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 01:58:50.150 00:06:00.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 02:03:54.731 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35524 10 6452 1 2025-10-26 02:04:55.112 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40012 10 6452 1 2025-10-26 02:05:55.509 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50138 10 6452 1 2025-10-26 02:06:55.870 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57576 10 6452 1 2025-10-26 02:08:02.541 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:08:02.458 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:08:02.480 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:08:02.457 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:08:02.631 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:07:56.283 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:58494 10 6452 1 2025-10-26 02:03:50.149 00:06:00.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 02:08:56.651 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55550 10 6452 1 2025-10-26 02:09:57.015 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38994 10 6452 1 2025-10-26 02:05:50.154 00:06:00.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 02:10:57.377 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:38506 12 10375 1 2025-10-26 02:11:57.853 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:43000 10 6452 1 2025-10-26 02:13:02.410 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:13:02.513 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:13:02.449 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:13:02.492 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:13:02.574 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:12:58.234 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46490 10 6452 1 2025-10-26 02:13:58.639 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50288 10 6452 1 2025-10-26 02:14:59.038 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57592 10 6452 1 2025-10-26 02:10:50.153 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 02:15:59.441 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56264 10 6452 1 2025-10-26 02:16:59.800 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54614 10 6452 1 2025-10-26 02:12:50.155 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 02:18:02.716 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:18:02.691 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:18:02.694 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:18:02.561 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:18:02.633 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:18:00.207 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49960 10 6452 1 2025-10-26 02:19:00.610 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36892 10 6452 1 2025-10-26 02:20:01.012 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:56446 10 6452 1 2025-10-26 02:21:01.363 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43830 10 6452 1 2025-10-26 02:22:01.768 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47600 10 6452 1 2025-10-26 02:17:50.154 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 02:23:02.850 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:23:02.970 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:23:02.695 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:23:02.844 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:23:02.927 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:23:02.176 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35702 10 6452 1 2025-10-26 02:24:02.577 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35260 10 6452 1 2025-10-26 02:19:50.158 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 02:25:02.983 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59806 10 6452 1 2025-10-26 02:26:03.351 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33392 10 6452 1 2025-10-26 02:27:03.754 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54406 10 6452 1 2025-10-26 02:28:02.885 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:28:02.823 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:28:02.833 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:28:02.825 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:28:02.908 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:28:04.183 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53616 12 6556 1 2025-10-26 02:29:04.586 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52412 10 6452 1 2025-10-26 02:24:50.155 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 02:30:04.996 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59760 10 6452 1 2025-10-26 02:31:05.398 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55720 10 6452 1 2025-10-26 02:26:50.162 00:06:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 02:32:05.813 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36158 10 6452 1 2025-10-26 02:33:03.032 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:33:02.946 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:33:03.186 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:33:02.895 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:33:02.950 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:33:06.216 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38698 10 6452 1 2025-10-26 02:34:06.619 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60304 10 6452 1 2025-10-26 02:35:07.024 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49610 10 6452 1 2025-10-26 02:36:07.421 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45992 10 6452 1 2025-10-26 02:31:50.158 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 02:37:07.829 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:60126 10 6452 1 2025-10-26 02:38:03.063 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:38:03.203 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:38:03.133 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:38:02.922 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:38:02.980 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:38:08.271 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:32934 10 6452 1 2025-10-26 02:33:50.162 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 02:39:08.642 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49684 10 6452 1 2025-10-26 02:40:09.059 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39774 10 6452 1 2025-10-26 02:41:09.416 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58192 10 6452 1 2025-10-26 02:42:09.819 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38434 10 6452 1 2025-10-26 02:43:03.140 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:43:03.129 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:43:03.132 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:43:03.197 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:43:03.056 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:43:10.226 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42792 10 6452 1 2025-10-26 02:38:50.170 00:06:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 02:44:10.627 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54372 10 6452 1 2025-10-26 02:45:10.989 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57786 10 6452 1 2025-10-26 02:40:50.173 00:06:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 02:46:11.388 00:00:10.556 TCP 1.101.0.1:3000 -> 23.104.0.1:36324 10 6452 1 2025-10-26 02:47:11.981 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42306 10 6452 1 2025-10-26 02:48:03.226 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:48:03.375 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:48:03.246 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:48:03.124 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:48:03.207 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:48:12.387 00:00:10.716 TCP 1.101.0.1:3000 -> 23.104.0.1:50078 10 6452 1 2025-10-26 02:49:13.150 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42382 10 6452 1 2025-10-26 02:50:13.556 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50534 10 6452 1 2025-10-26 02:45:50.171 00:06:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 02:51:13.956 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36418 10 6452 1 2025-10-26 02:52:14.364 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:45202 10 6452 1 2025-10-26 02:47:50.173 00:06:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 02:53:03.736 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:53:03.559 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:53:03.437 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:53:03.452 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:53:03.655 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:53:14.759 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:41496 10 6452 1 2025-10-26 02:54:15.193 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35368 10 6452 1 2025-10-26 02:55:15.570 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:54248 10 6452 1 2025-10-26 02:56:15.945 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38752 10 6452 1 2025-10-26 02:57:16.362 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57962 10 6452 1 2025-10-26 02:52:50.173 00:06:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 02:58:03.403 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:58:03.386 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:58:03.427 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:58:03.384 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:58:03.466 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:58:16.763 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:49778 10 6452 1 Summary: total flows: 137, total bytes: 420904, total packets: 1022, avg bps: 905, avg pps: 0, avg bpp: 411 Time window: 2025-10-26 01:56:50 - 2025-10-26 02:58:50 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0033s User: 0.0016s Wall: 0.0028s flows/second: 49621.7 Runtime: 0.0028s