Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 04:59:25.154 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46106 10 6452 1 2025-10-14 05:00:25.561 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50652 10 6452 1 2025-10-14 05:01:25.960 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52494 10 6452 1 2025-10-14 05:02:19.350 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 05:02:19.272 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:02:19.114 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:02:19.192 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 05:02:19.199 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 05:02:26.369 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52576 10 6452 1 2025-10-14 04:58:43.902 00:05:00.468 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 04:58:43.900 00:05:00.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 05:03:26.735 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58186 10 6452 1 2025-10-14 05:04:27.142 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49870 10 6452 1 2025-10-14 05:05:27.545 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46920 10 6452 1 2025-10-14 05:06:27.954 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40224 10 6452 1 2025-10-14 05:07:19.120 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 05:07:18.980 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:07:19.184 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:07:19.123 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 05:07:19.268 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 05:07:28.360 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54806 10 6452 1 2025-10-14 05:08:28.761 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:34648 10 6452 1 2025-10-14 05:04:43.906 00:05:00.466 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 05:04:43.903 00:05:00.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 05:09:29.138 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46974 10 6452 1 2025-10-14 05:10:29.539 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:48958 10 6452 1 2025-10-14 05:11:29.896 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51578 12 6556 1 2025-10-14 05:12:19.244 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 05:12:18.900 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:12:19.174 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:12:19.173 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 05:12:19.257 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 05:12:30.313 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:56438 11 6504 1 2025-10-14 05:13:30.799 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52582 10 6452 1 2025-10-14 05:10:43.905 00:05:00.470 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 05:14:31.205 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50946 10 6452 1 2025-10-14 05:10:43.907 00:05:00.465 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 05:15:31.607 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38060 10 6452 1 2025-10-14 05:16:32.029 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51332 10 6452 1 2025-10-14 05:17:19.303 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 05:17:19.448 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 05:17:19.282 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:17:19.220 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:17:19.214 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 05:17:32.438 00:00:10.531 TCP 1.101.0.1:3000 -> 23.104.0.1:40800 10 6452 1 2025-10-14 05:18:33.013 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49568 10 6452 1 2025-10-14 05:19:33.413 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36204 10 6452 1 2025-10-14 05:16:43.907 00:05:00.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 05:20:33.815 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60680 10 6452 1 2025-10-14 05:16:43.909 00:05:00.468 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 05:21:34.215 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:52256 12 10369 1 2025-10-14 05:22:19.468 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 05:22:19.556 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 05:22:19.466 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:22:19.386 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:22:19.571 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 05:22:34.664 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38756 10 6452 1 2025-10-14 05:23:35.096 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45330 10 6452 1 2025-10-14 05:24:35.496 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52104 10 6452 1 2025-10-14 05:25:35.908 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44200 10 6452 1 2025-10-14 05:22:43.913 00:05:00.466 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 05:22:43.910 00:05:00.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 05:26:36.316 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:51584 12 10369 1 2025-10-14 05:27:19.612 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 05:27:19.526 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 05:27:19.542 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:27:19.530 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:27:19.605 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 05:27:36.797 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51542 10 6452 1 2025-10-14 05:28:37.199 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43136 10 6452 1 2025-10-14 05:29:37.604 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:50294 10 6452 1 2025-10-14 05:30:37.981 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46334 10 6452 1 2025-10-14 05:31:38.385 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54184 10 6452 1 2025-10-14 05:32:19.765 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 05:32:19.767 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 05:32:19.606 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:32:19.682 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:32:19.845 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 05:28:43.914 00:05:00.469 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 05:28:43.910 00:05:00.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 05:32:38.755 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34926 10 6452 1 2025-10-14 05:33:39.155 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51436 10 6452 1 2025-10-14 05:34:39.562 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45986 10 6452 1 2025-10-14 05:35:39.970 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34118 10 6452 1 2025-10-14 05:36:40.372 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42252 10 6452 1 2025-10-14 05:37:19.885 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 05:37:19.685 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:37:19.882 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:37:19.939 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 05:37:19.966 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 05:37:40.776 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55052 10 6452 1 2025-10-14 05:34:43.912 00:05:00.476 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 05:34:43.916 00:05:00.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 05:38:41.188 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60930 10 6452 1 2025-10-14 05:39:41.565 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51330 10 6452 1 2025-10-14 05:40:41.966 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58636 10 6452 1 2025-10-14 05:41:42.372 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50240 10 6452 1 2025-10-14 05:42:19.943 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 05:42:19.968 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 05:42:19.796 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:42:19.860 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:42:19.919 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 05:42:42.770 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60186 10 6452 1 2025-10-14 05:43:43.183 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57006 10 6452 1 2025-10-14 05:40:43.913 00:05:00.476 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 05:40:43.915 00:05:00.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 05:44:43.542 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39644 10 6452 1 2025-10-14 05:45:43.909 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56864 10 6452 1 2025-10-14 05:46:44.278 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:51406 12 10375 1 2025-10-14 05:47:19.830 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 05:47:19.627 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:47:19.828 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:47:19.617 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 05:47:19.911 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 05:47:44.753 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44242 10 6452 1 2025-10-14 05:48:45.159 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43108 10 6452 1 2025-10-14 05:49:45.564 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54506 10 6452 1 2025-10-14 05:46:43.917 00:05:00.469 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 05:46:43.914 00:05:00.475 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 05:50:45.967 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38200 10 6452 1 2025-10-14 05:51:46.371 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49812 10 6452 1 2025-10-14 05:52:19.942 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 05:52:19.967 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:52:19.989 00:00:00.051 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:52:19.941 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 05:52:20.071 00:00:00.052 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 05:52:46.783 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40754 10 6452 1 2025-10-14 05:53:47.194 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35440 10 6452 1 2025-10-14 05:54:47.558 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50504 10 6452 1 2025-10-14 05:55:47.964 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44758 10 6452 1 2025-10-14 05:52:43.919 00:05:00.468 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-14 05:52:43.917 00:05:00.473 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-14 05:56:48.367 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33736 10 6452 1 2025-10-14 05:57:20.267 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 05:57:20.126 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:57:20.267 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 05:57:20.167 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 05:57:20.349 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 05:57:48.772 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41038 10 6452 1 Summary: total flows: 139, total bytes: 422461, total packets: 1019, avg bps: 950, avg pps: 0, avg bpp: 414 Time window: 2025-10-14 04:58:43 - 2025-10-14 05:57:59 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0036s User: 0.0009s Wall: 0.0021s flows/second: 67673.6 Runtime: 0.0021s