Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 01:59:05.457 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49702 10 6452 1 2025-10-13 02:00:05.821 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39102 10 6452 1 2025-10-13 01:55:43.410 00:06:00.442 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:01:06.227 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35466 10 6452 1 2025-10-13 01:56:43.406 00:06:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:01:46.675 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:01:46.537 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:01:46.184 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:01:46.592 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:01:46.594 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:02:06.626 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41378 10 6452 1 2025-10-13 02:03:07.025 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51666 10 6452 1 2025-10-13 02:04:07.390 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36308 10 6452 1 2025-10-13 02:05:07.789 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43866 10 6452 1 2025-10-13 02:06:08.187 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52872 10 6452 1 2025-10-13 02:06:46.684 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:06:46.661 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:06:46.614 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:06:46.602 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:06:46.733 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:07:08.589 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39736 10 6452 1 2025-10-13 02:02:43.410 00:06:00.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:08:08.994 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39148 10 6452 1 2025-10-13 02:03:43.413 00:06:00.445 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:09:09.360 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47056 10 6452 1 2025-10-13 02:10:09.763 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33438 10 6452 1 2025-10-13 02:11:10.182 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35674 10 6452 1 2025-10-13 02:11:46.787 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:11:46.777 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:11:46.603 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:11:46.704 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:11:46.874 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:12:10.584 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34166 10 6452 1 2025-10-13 02:13:10.982 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54122 12 6556 1 2025-10-13 02:14:11.386 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40040 10 6452 1 2025-10-13 02:09:43.413 00:06:00.441 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:15:11.751 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40626 10 6452 1 2025-10-13 02:10:43.411 00:06:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:16:12.158 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:49560 10 6452 1 2025-10-13 02:16:46.816 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:16:46.684 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:16:47.009 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:16:46.819 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:16:47.091 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:17:12.555 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51518 10 6452 1 2025-10-13 02:18:12.966 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46834 10 6452 1 2025-10-13 02:19:13.371 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56308 10 6452 1 2025-10-13 02:20:13.776 00:00:10.866 TCP 1.101.0.1:3000 -> 23.104.0.1:34438 10 6452 1 2025-10-13 02:21:14.680 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56654 10 6452 1 2025-10-13 02:16:43.414 00:06:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:21:46.844 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:21:46.791 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:21:46.754 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:21:46.989 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:21:46.836 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:22:15.125 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57804 10 6452 1 2025-10-13 02:17:43.412 00:06:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:23:15.531 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35570 10 6452 1 2025-10-13 02:24:15.899 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:33238 12 6556 1 2025-10-13 02:25:16.333 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43538 10 6452 1 2025-10-13 02:26:16.747 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51970 10 6452 1 2025-10-13 02:26:47.536 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:26:46.881 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:26:47.006 00:00:00.041 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:26:47.453 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:26:47.087 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:27:17.116 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52802 10 6452 1 2025-10-13 02:28:17.540 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51352 10 6452 1 2025-10-13 02:23:43.415 00:06:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:29:17.904 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44964 10 6452 1 2025-10-13 02:24:43.415 00:06:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:30:18.312 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44608 10 6452 1 2025-10-13 02:31:18.718 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55026 10 6452 1 2025-10-13 02:31:47.356 00:00:00.015 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:31:47.071 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:31:47.166 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:31:47.258 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:31:47.213 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:32:19.103 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36684 10 6452 1 2025-10-13 02:33:19.505 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44626 10 6452 1 2025-10-13 02:34:19.905 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41328 10 6452 1 2025-10-13 02:35:20.317 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57362 10 6452 1 2025-10-13 02:30:43.420 00:06:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:36:20.681 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40706 10 6452 1 2025-10-13 02:31:43.419 00:06:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:36:47.428 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:36:47.219 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:36:47.195 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:36:47.344 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:36:47.065 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:37:21.105 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52456 10 6452 1 2025-10-13 02:38:21.504 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44240 10 6452 1 2025-10-13 02:39:21.866 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43110 10 6452 1 2025-10-13 02:40:22.273 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:35684 10 6452 1 2025-10-13 02:41:22.653 00:00:10.910 TCP 1.101.0.1:3000 -> 23.104.0.1:47872 10 6452 1 2025-10-13 02:41:47.074 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:41:47.325 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:41:47.407 00:00:00.019 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:41:47.448 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:41:47.489 00:00:00.019 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:42:23.603 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54204 10 6452 1 2025-10-13 02:37:43.423 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:43:24.006 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33586 10 6452 1 2025-10-13 02:38:43.421 00:06:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:44:24.412 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50126 10 6452 1 2025-10-13 02:45:24.774 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59678 10 6452 1 2025-10-13 02:46:25.184 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56066 10 6452 1 2025-10-13 02:46:47.482 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:46:47.686 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:46:47.229 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:46:47.400 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:46:47.860 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:47:25.542 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52594 10 6452 1 2025-10-13 02:48:25.945 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:48276 10 6452 1 2025-10-13 02:49:26.324 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49430 10 6452 1 2025-10-13 02:44:43.426 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:50:26.735 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53028 10 6452 1 2025-10-13 02:45:43.422 00:06:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:51:27.143 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43006 10 6452 1 2025-10-13 02:51:47.455 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:51:47.475 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:51:47.259 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:51:47.268 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:51:47.342 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:52:27.548 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55442 10 6452 1 2025-10-13 02:53:27.950 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59868 10 6452 1 2025-10-13 02:54:28.358 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:39442 10 6452 1 2025-10-13 02:55:28.755 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:36672 10 6452 1 2025-10-13 02:56:29.184 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56532 10 6452 1 2025-10-13 02:51:43.425 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 02:56:47.611 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 02:56:47.629 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:56:47.499 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 02:56:47.662 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 02:56:47.581 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 02:57:29.588 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33782 10 6452 1 2025-10-13 02:52:43.424 00:06:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 02:58:29.990 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46306 10 6452 1 Summary: total flows: 138, total bytes: 417946, total packets: 1036, avg bps: 884, avg pps: 0, avg bpp: 403 Time window: 2025-10-13 01:55:43 - 2025-10-13 02:58:43 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0032s User: 0.0016s Wall: 0.0018s flows/second: 78408.8 Runtime: 0.0018s