Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 03:59:26.876 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41142 10 6452 1 2025-10-25 03:54:49.608 00:06:00.249 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 04:00:27.282 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:39866 10 6452 1 2025-10-25 04:01:27.701 00:00:11.080 TCP 1.101.0.1:3000 -> 23.104.0.1:44732 10 6452 1 2025-10-25 04:02:35.689 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 04:02:35.914 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:02:35.607 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:02:35.915 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 04:02:36.056 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 04:02:28.815 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36292 10 6452 1 2025-10-25 04:03:29.216 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34604 10 6452 1 2025-10-25 03:58:49.612 00:06:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 04:04:29.621 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50418 10 6452 1 2025-10-25 04:05:30.031 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55924 10 6452 1 2025-10-25 04:06:30.435 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37566 10 6452 1 2025-10-25 04:01:49.610 00:06:00.252 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 04:07:35.923 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:07:35.793 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:07:35.876 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 04:07:36.158 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 04:07:36.030 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 04:07:30.797 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36666 10 6452 1 2025-10-25 04:08:31.195 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52548 10 6452 1 2025-10-25 04:09:31.601 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55392 10 6452 1 2025-10-25 04:10:32.007 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51560 12 6556 1 2025-10-25 04:05:49.615 00:06:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 04:11:32.410 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55988 10 6452 1 2025-10-25 04:12:35.975 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 04:12:35.813 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:12:36.079 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:12:36.080 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 04:12:36.163 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 04:12:32.818 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:56508 10 6452 1 2025-10-25 04:13:33.274 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:43310 10 6452 1 2025-10-25 04:08:49.612 00:06:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 04:14:33.692 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42768 10 6452 1 2025-10-25 04:15:34.109 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:35264 10 6452 1 2025-10-25 04:16:34.476 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38808 10 6452 1 2025-10-25 04:17:36.359 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:17:36.281 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 04:17:36.283 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 04:17:36.200 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:17:36.442 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 04:17:34.878 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41450 10 6452 1 2025-10-25 04:12:49.615 00:06:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 04:18:35.284 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60240 10 6452 1 2025-10-25 04:19:35.685 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41598 10 6452 1 2025-10-25 04:15:49.613 00:06:00.253 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 04:20:36.109 00:00:11.186 TCP 1.101.0.1:3000 -> 23.104.0.1:39460 10 6452 1 2025-10-25 04:21:37.337 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55928 10 6452 1 2025-10-25 04:22:35.967 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:22:36.328 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 04:22:36.420 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 04:22:36.245 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:22:36.321 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 04:22:37.741 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56442 10 6452 1 2025-10-25 04:23:38.148 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57236 10 6452 1 2025-10-25 04:19:49.617 00:06:00.249 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 04:24:38.548 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40988 10 6452 1 2025-10-25 04:25:38.951 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45526 10 6452 1 2025-10-25 04:26:39.355 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37110 10 6452 1 2025-10-25 04:27:36.700 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 04:27:36.404 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:27:36.655 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:27:36.731 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 04:27:36.738 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 04:22:49.614 00:06:00.255 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 04:27:39.761 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46702 10 6452 1 2025-10-25 04:28:40.177 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57064 10 6452 1 2025-10-25 04:29:40.587 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58218 10 6452 1 2025-10-25 04:30:40.996 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60960 10 6452 1 2025-10-25 04:26:49.620 00:06:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 04:31:41.405 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45866 10 6452 1 2025-10-25 04:32:36.589 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 04:32:36.691 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 04:32:36.458 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:32:36.507 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:32:36.623 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 04:32:41.812 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57750 10 6452 1 2025-10-25 04:33:42.216 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45212 10 6452 1 2025-10-25 04:29:49.618 00:06:00.252 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 04:34:42.614 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:52252 10 6452 1 2025-10-25 04:35:43.057 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45290 10 6452 1 2025-10-25 04:36:43.425 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44028 10 6452 1 2025-10-25 04:37:36.697 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 04:37:36.591 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:37:36.498 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:37:36.513 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 04:37:36.580 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 04:37:43.789 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58720 10 6452 1 2025-10-25 04:33:49.622 00:06:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 04:38:44.151 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47538 10 6452 1 2025-10-25 04:39:44.546 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41480 10 6452 1 2025-10-25 04:40:44.954 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:46100 12 10369 1 2025-10-25 04:36:49.621 00:06:00.252 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 04:41:45.438 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51072 10 6452 1 2025-10-25 04:42:36.801 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 04:42:36.807 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 04:42:36.703 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:42:36.718 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:42:36.812 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 04:42:45.845 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:47464 10 6452 1 2025-10-25 04:43:46.277 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39608 10 6452 1 2025-10-25 04:44:46.679 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56998 10 6452 1 2025-10-25 04:40:49.624 00:06:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 04:45:47.107 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51630 10 6452 1 2025-10-25 04:46:47.503 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35072 10 6452 1 2025-10-25 04:47:36.954 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 04:47:36.872 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 04:47:36.873 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:47:36.871 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:47:37.145 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 04:47:47.909 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46072 10 6452 1 2025-10-25 04:43:49.628 00:06:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 04:48:48.316 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60302 10 6452 1 2025-10-25 04:49:48.715 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43586 10 6452 1 2025-10-25 04:50:49.108 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49032 10 6452 1 2025-10-25 04:51:49.507 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54910 10 6452 1 2025-10-25 04:52:36.949 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 04:52:37.052 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 04:52:36.981 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:52:36.867 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:52:36.788 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 04:47:49.633 00:06:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 04:52:49.922 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40920 10 6452 1 2025-10-25 04:53:50.327 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54350 10 6452 1 2025-10-25 04:54:50.734 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54328 10 6452 1 2025-10-25 04:50:49.630 00:06:00.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 04:55:51.140 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41856 10 6452 1 2025-10-25 04:56:51.544 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54482 10 6452 1 2025-10-25 04:57:37.128 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 04:57:36.686 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:57:37.081 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 04:57:37.131 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 04:57:37.163 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 04:57:51.950 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:55512 10 6452 1 Summary: total flows: 136, total bytes: 414446, total packets: 1012, avg bps: 874, avg pps: 0, avg bpp: 409 Time window: 2025-10-25 03:54:49 - 2025-10-25 04:58:02 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0042s User: 0.0017s Wall: 0.0028s flows/second: 48312.5 Runtime: 0.0028s