Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 15:58:57.696 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54118 10 6452 1 2025-10-03 15:59:58.103 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44626 10 6452 1 2025-10-03 16:00:58.508 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51378 10 6452 1 2025-10-03 15:56:38.609 00:06:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 16:01:58.875 00:00:10.663 TCP 1.101.0.1:3000 -> 23.104.0.1:37910 10 6452 1 2025-10-03 16:02:14.781 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 16:02:14.781 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 16:02:14.937 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:02:14.785 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:02:14.868 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 16:02:59.570 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:59538 12 10375 1 2025-10-03 16:04:00.053 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39006 10 6452 1 2025-10-03 15:59:38.612 00:06:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 16:05:00.453 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:46280 10 6452 1 2025-10-03 16:06:00.812 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:43942 10 6452 1 2025-10-03 16:07:14.710 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 16:07:14.723 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 16:07:01.182 00:00:10.762 TCP 1.101.0.1:3000 -> 23.104.0.1:45422 10 6452 1 2025-10-03 16:07:14.862 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 16:07:14.756 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:07:14.627 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:08:01.976 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43298 10 6452 1 2025-10-03 16:03:38.616 00:06:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 16:09:02.390 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46132 10 6452 1 2025-10-03 16:10:02.794 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:36720 10 6452 1 2025-10-03 16:11:03.165 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33684 10 6452 1 2025-10-03 16:06:38.618 00:06:00.338 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 16:12:14.926 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 16:12:14.927 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 16:12:03.527 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39518 10 6452 1 2025-10-03 16:12:14.626 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 16:12:14.725 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:12:14.844 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:13:03.936 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54268 10 6452 1 2025-10-03 16:14:04.355 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45032 12 6556 1 2025-10-03 16:15:04.757 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60282 10 6452 1 2025-10-03 16:10:38.616 00:06:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 16:16:05.170 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39022 10 6452 1 2025-10-03 16:17:14.844 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 16:17:14.925 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:17:14.917 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:17:15.000 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 16:17:15.102 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 16:17:05.571 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48186 10 6452 1 2025-10-03 16:18:05.969 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37772 10 6452 1 2025-10-03 16:13:38.618 00:06:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 16:19:06.330 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46746 10 6452 1 2025-10-03 16:20:06.738 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37932 10 6452 1 2025-10-03 16:21:07.152 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35002 10 6452 1 2025-10-03 16:22:14.855 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:22:14.839 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:22:14.923 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 16:22:15.084 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 16:22:15.076 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 16:22:07.520 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52100 10 6452 1 2025-10-03 16:17:38.619 00:06:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 16:23:07.879 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49192 10 6452 1 2025-10-03 16:24:08.283 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50178 10 6452 1 2025-10-03 16:25:08.678 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47006 10 6452 1 2025-10-03 16:20:38.621 00:06:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 16:26:09.112 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33436 10 6452 1 2025-10-03 16:27:15.389 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 16:27:15.254 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 16:27:15.307 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 16:27:15.211 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:27:15.308 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:27:09.529 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52300 10 6452 1 2025-10-03 16:28:09.933 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:49486 10 6452 1 2025-10-03 16:29:10.326 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:34528 10 6452 1 2025-10-03 16:24:38.622 00:06:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 16:30:10.694 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33982 10 6452 1 2025-10-03 16:31:11.111 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53948 10 6452 1 2025-10-03 16:32:15.448 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 16:32:15.241 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 16:32:15.176 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:32:15.324 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:32:15.407 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 16:32:11.508 00:00:11.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51520 10 6452 1 2025-10-03 16:27:38.625 00:06:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 16:33:12.867 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:46938 12 10369 1 2025-10-03 16:34:13.309 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33250 10 6452 1 2025-10-03 16:35:13.708 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43386 10 6452 1 2025-10-03 16:36:14.114 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36368 10 6452 1 2025-10-03 16:31:38.625 00:06:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 16:37:15.079 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 16:37:15.263 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 16:37:15.206 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:37:15.266 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:37:15.351 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 16:37:14.518 00:00:10.721 TCP 1.101.0.1:3000 -> 23.104.0.1:33906 10 6452 1 2025-10-03 16:38:15.277 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47990 10 6452 1 2025-10-03 16:39:15.679 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58746 10 6452 1 2025-10-03 16:34:38.628 00:06:00.336 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 16:40:16.109 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56578 10 6452 1 2025-10-03 16:41:16.511 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57642 10 6452 1 2025-10-03 16:42:15.343 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 16:42:15.409 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 16:42:15.097 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:42:15.413 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:42:15.498 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 16:42:16.922 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57826 10 6452 1 2025-10-03 16:43:17.339 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54782 10 6452 1 2025-10-03 16:38:38.626 00:06:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 16:44:17.750 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34328 10 6452 1 2025-10-03 16:45:18.150 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46814 10 6452 1 2025-10-03 16:46:18.561 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52870 10 6452 1 2025-10-03 16:41:38.629 00:06:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 16:47:15.896 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 16:47:15.829 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 16:47:15.956 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:47:15.680 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:47:15.764 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 16:47:18.963 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49612 10 6452 1 2025-10-03 16:48:19.360 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49156 10 6452 1 2025-10-03 16:49:19.725 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50786 10 6452 1 2025-10-03 16:50:20.108 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:37378 10 6452 1 2025-10-03 16:45:38.628 00:06:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 16:51:20.491 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50668 10 6452 1 2025-10-03 16:52:15.674 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 16:52:15.606 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:52:15.763 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:52:15.585 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 16:52:15.847 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 16:52:20.899 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52300 10 6452 1 2025-10-03 16:53:21.343 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58524 10 6452 1 2025-10-03 16:48:38.632 00:06:00.338 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 16:54:21.751 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:34480 10 6452 1 2025-10-03 16:55:22.183 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32980 10 6452 1 2025-10-03 16:56:22.585 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47516 10 6452 1 2025-10-03 16:57:15.556 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 16:57:15.660 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 16:57:15.768 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 16:57:15.577 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:57:15.473 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 16:57:22.949 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40590 10 6452 1 2025-10-03 16:52:38.629 00:06:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 16:58:23.313 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54942 10 6452 1 Summary: total flows: 137, total bytes: 424821, total packets: 1024, avg bps: 913, avg pps: 0, avg bpp: 414 Time window: 2025-10-03 15:56:38 - 2025-10-03 16:58:38 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0035s User: 0.0014s Wall: 0.0021s flows/second: 64289.5 Runtime: 0.0022s