Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 12:58:40.863 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:39832 10 6452 1 2025-10-06 12:59:41.244 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53608 10 6452 1 2025-10-06 13:00:41.652 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49926 10 6452 1 2025-10-06 12:56:40.083 00:06:00.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 13:01:42.017 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46288 10 6452 1 2025-10-06 12:57:40.086 00:06:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 13:02:42.417 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52482 10 6452 1 2025-10-06 13:03:37.621 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 13:03:37.530 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 13:03:37.655 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:03:37.777 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:03:37.860 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 13:03:42.834 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:60748 10 6452 1 2025-10-06 13:04:43.264 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:41172 12 10375 1 2025-10-06 13:05:43.694 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57382 10 6452 1 2025-10-06 13:06:44.105 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42412 10 6452 1 2025-10-06 13:07:44.511 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50334 10 6452 1 2025-10-06 13:08:37.756 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 13:08:37.823 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 13:08:37.786 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:08:37.825 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:08:37.909 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 13:03:40.085 00:06:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 13:08:44.913 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60170 10 6452 1 2025-10-06 13:04:40.087 00:06:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 13:09:45.318 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:40664 12 10375 1 2025-10-06 13:10:45.798 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41914 10 6452 1 2025-10-06 13:11:46.198 00:00:21.886 TCP 1.101.0.1:3000 -> 23.104.0.1:37722 10 6452 1 2025-10-06 13:12:58.123 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58056 10 6452 1 2025-10-06 13:13:38.173 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 13:13:38.169 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 13:13:37.926 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:13:38.010 00:00:00.045 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:13:38.091 00:00:00.046 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 13:13:58.486 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:37040 12 10369 1 2025-10-06 13:14:58.918 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59516 10 6452 1 2025-10-06 13:10:40.086 00:06:00.402 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 13:15:59.282 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41030 10 6452 1 2025-10-06 13:11:40.088 00:06:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 13:16:59.705 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58582 10 6452 1 2025-10-06 13:18:00.112 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33102 10 6452 1 2025-10-06 13:18:38.317 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 13:18:38.090 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 13:18:37.977 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:18:38.098 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:18:38.181 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 13:19:00.476 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39776 10 6452 1 2025-10-06 13:20:00.879 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40608 10 6452 1 2025-10-06 13:21:01.280 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38284 10 6452 1 2025-10-06 13:22:01.689 00:00:11.119 TCP 1.101.0.1:3000 -> 23.104.0.1:59552 10 6452 1 2025-10-06 13:17:40.086 00:06:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 13:23:02.847 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44570 10 6452 1 2025-10-06 13:23:37.978 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:23:37.940 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:23:37.861 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 13:23:38.063 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 13:23:38.024 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 13:18:40.089 00:06:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 13:24:03.266 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56360 10 6452 1 2025-10-06 13:25:03.675 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45856 10 6452 1 2025-10-06 13:26:04.035 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45738 10 6452 1 2025-10-06 13:27:04.440 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47730 10 6452 1 2025-10-06 13:28:04.838 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:55362 10 6452 1 2025-10-06 13:28:37.999 00:00:00.040 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 13:28:38.203 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 13:28:38.217 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:28:38.205 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:28:38.289 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 13:29:05.264 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52888 10 6452 1 2025-10-06 13:24:40.087 00:06:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 13:30:05.634 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52858 10 6452 1 2025-10-06 13:25:40.090 00:06:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 13:31:06.041 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46136 10 6452 1 2025-10-06 13:32:06.442 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43516 10 6452 1 2025-10-06 13:33:06.846 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:46942 10 6452 1 2025-10-06 13:33:38.177 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 13:33:38.168 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 13:33:38.186 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:33:38.284 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:33:38.366 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 13:34:07.275 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:48122 12 10369 1 2025-10-06 13:35:07.716 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:33128 10 6452 1 2025-10-06 13:36:08.136 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57484 10 6452 1 2025-10-06 13:31:40.088 00:06:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 13:37:08.541 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43560 10 6452 1 2025-10-06 13:32:40.091 00:06:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 13:38:08.949 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51744 10 6452 1 2025-10-06 13:38:38.335 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 13:38:38.448 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 13:38:38.289 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:38:38.650 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:38:38.734 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 13:39:09.361 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50774 10 6452 1 2025-10-06 13:40:09.770 00:00:14.674 TCP 1.101.0.1:3000 -> 23.104.0.1:50346 10 6452 1 2025-10-06 13:41:14.488 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48396 10 6452 1 2025-10-06 13:42:14.897 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45810 10 6452 1 2025-10-06 13:43:15.310 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53848 10 6452 1 2025-10-06 13:43:38.377 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 13:43:38.493 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 13:43:38.217 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:43:38.443 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:43:38.526 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 13:38:40.088 00:06:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 13:44:15.711 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39280 10 6452 1 2025-10-06 13:39:40.092 00:06:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 13:45:16.115 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57796 10 6452 1 2025-10-06 13:46:16.524 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38750 10 6452 1 2025-10-06 13:47:16.884 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:42558 10 6452 1 2025-10-06 13:48:17.297 00:00:10.585 TCP 1.101.0.1:3000 -> 23.104.0.1:41154 10 6452 1 2025-10-06 13:48:38.587 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 13:48:38.625 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 13:48:38.627 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 13:48:38.426 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:48:38.504 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:49:17.920 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:38810 10 6452 1 2025-10-06 13:50:18.349 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56358 10 6452 1 2025-10-06 13:45:40.089 00:06:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 13:51:18.750 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60014 12 6556 1 2025-10-06 13:46:40.093 00:06:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-06 13:52:19.151 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:53762 10 6452 1 2025-10-06 13:53:19.529 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45762 10 6452 1 2025-10-06 13:53:39.039 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 13:53:38.809 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 13:53:38.792 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 13:53:38.440 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:53:38.957 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:54:19.935 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:39266 10 6452 1 2025-10-06 13:55:20.360 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52620 10 6452 1 2025-10-06 13:56:20.766 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58200 10 6452 1 2025-10-06 13:52:40.090 00:06:00.405 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-06 13:58:38.809 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-06 13:57:21.181 00:01:10.774 TCP 1.101.0.1:3000 -> 23.104.0.1:40870 20 12904 1 2025-10-06 13:58:38.848 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-06 13:58:38.843 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-06 13:58:38.537 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:58:38.726 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-06 13:53:40.094 00:06:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 137, total bytes: 433522, total packets: 1042, avg bps: 917, avg pps: 0, avg bpp: 416 Time window: 2025-10-06 12:56:40 - 2025-10-06 13:59:40 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0041s User: 0.0010s Wall: 0.0018s flows/second: 74461.5 Runtime: 0.0019s