Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 00:58:40.794 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55380 10 6452 1 2025-10-13 00:59:41.207 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40534 10 6452 1 2025-10-13 01:00:41.617 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:55992 10 6452 1 2025-10-13 01:01:45.578 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 01:01:45.438 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 01:01:45.291 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:01:45.495 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:01:45.341 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 01:01:41.992 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55326 10 6452 1 2025-10-13 01:02:42.422 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41734 10 6452 1 2025-10-13 01:03:42.784 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43418 10 6452 1 2025-10-13 00:59:43.396 00:06:00.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 01:04:43.189 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45840 10 6452 1 2025-10-13 01:00:43.394 00:06:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 01:05:43.602 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:41722 12 10369 1 2025-10-13 01:06:45.351 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 01:06:45.438 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:06:45.429 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:06:45.339 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 01:06:45.512 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 01:06:44.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50782 10 6452 1 2025-10-13 01:07:44.512 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42456 10 6452 1 2025-10-13 01:08:44.914 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54548 10 6452 1 2025-10-13 01:09:45.327 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47548 10 6452 1 2025-10-13 01:10:45.727 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59842 10 6452 1 2025-10-13 01:11:45.459 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 01:11:45.580 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:11:45.529 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:11:45.605 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 01:06:43.397 00:06:00.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 01:11:45.612 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 01:11:46.106 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60726 10 6452 1 2025-10-13 01:07:43.395 00:06:00.442 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 01:12:46.465 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:43382 10 6452 1 2025-10-13 01:13:46.825 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35664 10 6452 1 2025-10-13 01:14:47.187 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60640 10 6452 1 2025-10-13 01:15:47.588 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34884 10 6452 1 2025-10-13 01:16:45.535 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 01:16:45.546 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 01:16:45.622 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:16:45.453 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:16:45.534 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 01:16:47.990 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46582 10 6452 1 2025-10-13 01:17:48.361 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53856 10 6452 1 2025-10-13 01:13:43.400 00:06:00.436 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 01:18:48.762 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:57026 10 6452 1 2025-10-13 01:14:43.398 00:06:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 01:19:49.188 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45848 10 6452 1 2025-10-13 01:20:49.589 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33842 10 6452 1 2025-10-13 01:21:45.828 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:21:45.788 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:21:45.915 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 01:21:45.693 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 01:21:45.872 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 01:21:49.992 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39848 10 6452 1 2025-10-13 01:22:50.353 00:00:10.743 TCP 1.101.0.1:3000 -> 23.104.0.1:59342 10 6452 1 2025-10-13 01:23:51.136 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41622 10 6452 1 2025-10-13 01:24:51.539 00:00:10.487 TCP 1.101.0.1:3000 -> 23.104.0.1:41150 10 6452 1 2025-10-13 01:20:43.401 00:06:00.438 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 01:25:52.090 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47046 10 6452 1 2025-10-13 01:26:45.855 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 01:26:45.829 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:26:45.766 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:26:45.756 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 01:26:45.849 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 01:21:43.399 00:06:00.443 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 01:26:52.500 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56026 10 6452 1 2025-10-13 01:27:52.907 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37892 12 6556 1 2025-10-13 01:28:53.318 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46434 10 6452 1 2025-10-13 01:29:53.739 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:56844 10 6452 1 2025-10-13 01:30:54.135 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:35678 10 6452 1 2025-10-13 01:31:45.739 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 01:31:45.751 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:31:45.838 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 01:31:46.141 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 01:31:46.059 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:31:54.507 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50966 10 6452 1 2025-10-13 01:27:43.402 00:06:00.438 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 01:32:54.911 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51286 10 6452 1 2025-10-13 01:28:43.399 00:06:00.443 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 01:33:55.312 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35538 10 6452 1 2025-10-13 01:34:55.714 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57494 10 6452 1 2025-10-13 01:35:56.117 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56054 10 6452 1 2025-10-13 01:36:45.914 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 01:36:45.924 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 01:36:45.831 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:36:45.830 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 01:36:46.125 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:36:56.521 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44278 10 6452 1 2025-10-13 01:37:56.930 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:49266 10 6452 1 2025-10-13 01:38:57.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56664 10 6452 1 2025-10-13 01:34:43.404 00:06:00.440 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 01:39:57.758 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:45534 10 6452 1 2025-10-13 01:35:43.401 00:06:00.445 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 01:40:58.178 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40568 10 6452 1 2025-10-13 01:41:45.812 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:41:46.500 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 01:41:46.010 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 01:41:46.418 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:41:46.011 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 01:41:58.581 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52292 10 6452 1 2025-10-13 01:42:58.987 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34742 10 6452 1 2025-10-13 01:43:59.394 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50882 10 6452 1 2025-10-13 01:44:59.804 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36748 10 6452 1 2025-10-13 01:46:00.215 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38184 10 6452 1 2025-10-13 01:41:43.404 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 01:46:46.723 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 01:46:46.438 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:46:46.491 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:46:46.647 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 01:46:46.573 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 01:47:00.612 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41098 10 6452 1 2025-10-13 01:42:43.403 00:06:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 01:48:00.972 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54318 10 6452 1 2025-10-13 01:49:01.423 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50872 10 6452 1 2025-10-13 01:50:01.827 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:52954 10 6452 1 2025-10-13 01:51:02.265 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52594 10 6452 1 2025-10-13 01:51:46.418 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 01:51:46.256 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 01:51:46.280 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:51:46.336 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:51:46.395 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 01:52:02.669 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39360 10 6452 1 2025-10-13 01:53:03.031 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38236 10 6452 1 2025-10-13 01:48:43.409 00:06:00.442 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 01:54:03.395 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40354 10 6452 1 2025-10-13 01:49:43.406 00:06:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 01:55:03.796 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:52168 10 6452 1 2025-10-13 01:56:04.186 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47458 10 6452 1 2025-10-13 01:56:46.440 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 01:56:46.518 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 01:56:46.505 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:56:46.358 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 01:56:46.471 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 01:57:04.600 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45224 10 6452 1 2025-10-13 01:58:05.026 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51630 10 6452 1 Summary: total flows: 136, total bytes: 420037, total packets: 1008, avg bps: 940, avg pps: 0, avg bpp: 416 Time window: 2025-10-13 00:58:40 - 2025-10-13 01:58:15 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0026s User: 0.0026s Wall: 0.0021s flows/second: 66021.5 Runtime: 0.0021s