Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 03:59:25.216 00:00:10.748 TCP 1.101.0.1:3000 -> 23.104.0.1:43614 10 6452 1 2025-10-19 03:59:42.940 00:00:00.052 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 03:59:42.090 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 03:59:43.214 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 03:59:43.346 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 03:59:43.297 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:00:26.003 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38922 10 6452 1 2025-10-19 04:01:26.368 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38630 10 6452 1 2025-10-19 03:56:46.519 00:06:00.239 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 04:02:26.777 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:35800 10 6452 1 2025-10-19 04:03:27.220 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56516 10 6452 1 2025-10-19 04:04:42.441 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:04:27.623 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33746 10 6452 1 2025-10-19 04:04:42.359 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 04:04:42.301 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:04:42.358 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:04:42.351 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 04:05:28.028 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:51598 10 6452 1 2025-10-19 04:00:46.521 00:06:00.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 04:06:28.384 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33604 10 6452 1 2025-10-19 04:07:28.783 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37406 10 6452 1 2025-10-19 04:08:29.187 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:43636 10 6452 1 2025-10-19 04:03:46.523 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 04:09:29.684 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39098 10 6452 1 2025-10-19 04:09:42.607 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:09:42.519 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 04:09:42.444 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:09:42.523 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:09:42.576 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 04:10:30.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56108 10 6452 1 2025-10-19 04:11:30.510 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40674 10 6452 1 2025-10-19 04:12:30.910 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42686 10 6452 1 2025-10-19 04:07:46.527 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 04:13:31.273 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:42636 12 10375 1 2025-10-19 04:14:42.590 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:14:42.433 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:14:42.509 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:14:42.580 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 04:14:31.760 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56712 10 6452 1 2025-10-19 04:14:42.434 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 04:15:32.174 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42324 10 6452 1 2025-10-19 04:10:46.524 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 04:16:32.583 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54306 10 6452 1 2025-10-19 04:17:32.945 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48692 10 6452 1 2025-10-19 04:18:33.316 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36944 10 6452 1 2025-10-19 04:19:42.585 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:19:42.324 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 04:19:42.644 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:19:42.502 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:19:42.527 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 04:19:33.723 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53410 10 6452 1 2025-10-19 04:14:46.529 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 04:20:34.135 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43812 10 6452 1 2025-10-19 04:21:34.543 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37392 10 6452 1 2025-10-19 04:22:34.958 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:38350 10 6452 1 2025-10-19 04:17:46.526 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 04:23:35.325 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40032 10 6452 1 2025-10-19 04:24:42.810 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:24:42.805 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 04:24:42.652 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:24:42.727 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:24:42.799 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 04:24:35.729 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53538 10 6452 1 2025-10-19 04:25:36.132 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54966 10 6452 1 2025-10-19 04:26:36.542 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60934 10 6452 1 2025-10-19 04:21:46.531 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 04:27:36.956 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:37634 10 6452 1 2025-10-19 04:28:37.376 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:50404 10 6452 1 2025-10-19 04:29:42.846 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 04:29:42.777 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:29:42.731 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:29:42.902 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 04:29:42.813 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:29:37.803 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42538 10 6452 1 2025-10-19 04:24:46.529 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 04:30:38.207 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56736 10 6452 1 2025-10-19 04:31:38.606 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59448 10 6452 1 2025-10-19 04:32:38.971 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51694 10 6452 1 2025-10-19 04:28:46.531 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 04:33:39.385 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54790 10 6452 1 2025-10-19 04:34:42.864 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:34:42.914 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 04:34:42.898 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:34:42.781 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:34:42.859 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 04:34:39.743 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52322 10 6452 1 2025-10-19 04:35:40.142 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41952 10 6452 1 2025-10-19 04:31:46.533 00:06:00.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 04:36:40.545 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:36546 10 6452 1 2025-10-19 04:37:40.916 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:51674 12 10375 1 2025-10-19 04:38:41.361 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36126 10 6452 1 2025-10-19 04:39:42.994 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 04:39:42.991 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:39:42.918 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:39:43.108 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 04:39:43.002 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:39:41.770 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:44668 10 6452 1 2025-10-19 04:35:46.534 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 04:40:42.145 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37590 10 6452 1 2025-10-19 04:41:42.510 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39820 10 6452 1 2025-10-19 04:42:42.912 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57440 10 6452 1 2025-10-19 04:38:46.532 00:06:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 04:43:43.314 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57136 10 6452 1 2025-10-19 04:44:43.271 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 04:44:42.990 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:44:43.170 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:44:43.231 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 04:44:43.253 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:44:43.672 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41172 10 6452 1 2025-10-19 04:45:44.100 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48210 10 6452 1 2025-10-19 04:46:44.505 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48100 10 6452 1 2025-10-19 04:42:46.538 00:06:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 04:47:44.914 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44826 10 6452 1 2025-10-19 04:48:45.319 00:00:12.926 TCP 1.101.0.1:3000 -> 23.104.0.1:58002 10 6452 1 2025-10-19 04:49:43.378 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:49:43.150 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 04:49:43.310 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:49:43.294 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:49:43.158 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 04:49:48.288 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42512 12 6556 1 2025-10-19 04:45:46.536 00:06:00.234 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 04:50:48.697 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48544 10 6452 1 2025-10-19 04:51:49.109 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57928 10 6452 1 2025-10-19 04:52:49.513 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:52344 10 6452 1 2025-10-19 04:53:49.890 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:45658 12 6556 1 2025-10-19 04:54:43.307 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:54:43.343 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:54:43.452 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 04:54:43.343 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 04:54:43.426 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:49:46.542 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 04:54:50.311 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32934 10 6452 1 2025-10-19 04:55:50.714 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59632 10 6452 1 2025-10-19 04:56:51.123 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60856 10 6452 1 2025-10-19 04:52:46.540 00:06:00.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 04:57:51.533 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42168 12 6556 1 Summary: total flows: 136, total bytes: 418583, total packets: 1018, avg bps: 900, avg pps: 0, avg bpp: 411 Time window: 2025-10-19 03:56:46 - 2025-10-19 04:58:46 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0046s User: 0.0009s Wall: 0.0023s flows/second: 59234.2 Runtime: 0.0023s