Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 08:59:02.798 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43548 10 6452 1 2025-10-13 09:00:03.203 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48178 10 6452 1 2025-10-13 09:01:03.603 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55290 10 6452 1 2025-10-13 09:01:55.162 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 09:01:55.165 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 09:01:55.118 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:01:55.289 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:01:55.372 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 09:02:04.006 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44556 10 6452 1 2025-10-13 08:57:43.528 00:06:00.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 08:57:43.530 00:06:00.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 09:03:04.409 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58346 10 6452 1 2025-10-13 09:04:04.811 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41182 10 6452 1 2025-10-13 09:05:05.219 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56086 10 6452 1 2025-10-13 09:06:05.622 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34312 10 6452 1 2025-10-13 09:06:54.809 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:06:55.163 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 09:06:55.139 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 09:06:55.220 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:06:55.303 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 09:07:05.984 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47356 10 6452 1 2025-10-13 09:08:06.383 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50218 10 6452 1 2025-10-13 09:09:06.749 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56638 10 6452 1 2025-10-13 09:04:43.534 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-10-13 09:04:43.532 00:06:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 09:10:07.153 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43938 10 6452 1 2025-10-13 09:11:07.524 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56964 10 6452 1 2025-10-13 09:11:54.974 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:11:54.982 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 09:11:55.293 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 09:11:55.344 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:11:55.057 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 09:12:07.922 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38358 10 6452 1 2025-10-13 09:13:08.286 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45302 10 6452 1 2025-10-13 09:14:08.694 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47468 10 6452 1 2025-10-13 09:15:09.116 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42284 10 6452 1 2025-10-13 09:10:43.984 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-10-13 09:16:09.518 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54174 10 6452 1 2025-10-13 09:11:43.533 00:06:00.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 09:16:55.066 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 09:16:55.059 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 09:16:55.234 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:16:55.265 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:16:55.347 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 09:17:09.923 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40254 10 6452 1 2025-10-13 09:18:10.327 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44536 10 6452 1 2025-10-13 09:19:10.730 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58316 10 6452 1 2025-10-13 09:20:11.137 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40564 10 6452 1 2025-10-13 09:21:11.545 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53714 10 6452 1 2025-10-13 09:21:55.681 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 09:21:55.682 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 09:21:55.598 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:21:55.277 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:21:55.359 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 09:22:11.945 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:43462 10 6452 1 2025-10-13 09:17:43.538 00:06:00.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 09:23:12.364 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47992 10 6452 1 2025-10-13 09:18:43.536 00:06:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 09:24:12.775 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52050 10 6452 1 2025-10-13 09:25:13.194 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45594 10 6452 1 2025-10-13 09:26:13.596 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58096 10 6452 1 2025-10-13 09:26:55.400 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 09:26:55.493 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 09:26:55.342 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:26:55.487 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:26:55.569 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 09:27:13.996 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36236 10 6452 1 2025-10-13 09:28:14.400 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52262 10 6452 1 2025-10-13 09:29:14.804 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46400 10 6452 1 2025-10-13 09:24:43.539 00:06:00.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 09:30:15.209 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34194 10 6452 1 2025-10-13 09:25:43.538 00:06:00.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 09:31:15.567 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50530 10 6452 1 2025-10-13 09:31:55.709 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 09:31:55.623 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 09:31:55.498 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 09:31:55.508 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:31:55.626 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:32:15.963 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59562 10 6452 1 2025-10-13 09:33:16.370 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33362 10 6452 1 2025-10-13 09:34:16.766 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33472 10 6452 1 2025-10-13 09:35:17.185 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50502 10 6452 1 2025-10-13 09:36:17.589 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49858 10 6452 1 2025-10-13 09:31:43.541 00:06:00.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 09:36:55.748 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 09:36:55.666 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 09:36:55.728 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 09:36:55.595 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:36:55.666 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:37:17.990 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33634 10 6452 1 2025-10-13 09:32:43.539 00:06:00.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 09:38:18.387 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57292 10 6452 1 2025-10-13 09:39:18.790 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59268 10 6452 1 2025-10-13 09:40:19.152 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56170 10 6452 1 2025-10-13 09:41:19.512 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52050 10 6452 1 2025-10-13 09:41:55.696 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 09:41:55.643 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:41:55.615 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:41:55.833 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 09:41:55.833 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 09:42:19.913 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:48752 10 6452 1 2025-10-13 09:43:20.272 00:00:10.936 TCP 1.101.0.1:3000 -> 23.104.0.1:40994 10 6452 1 2025-10-13 09:38:43.543 00:06:00.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 09:44:21.248 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36968 10 6452 1 2025-10-13 09:39:43.542 00:06:00.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 09:45:21.615 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41276 10 6452 1 2025-10-13 09:46:22.032 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40934 10 6452 1 2025-10-13 09:46:55.820 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 09:46:55.747 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 09:46:55.495 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:46:55.817 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:46:55.900 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 09:47:22.437 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:35096 10 6452 1 2025-10-13 09:48:22.792 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:38996 10 6452 1 2025-10-13 09:49:23.164 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41652 10 6452 1 2025-10-13 09:50:23.562 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47040 10 6452 1 2025-10-13 09:45:43.544 00:06:00.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 09:51:23.966 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51774 10 6452 1 2025-10-13 09:46:43.541 00:06:00.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-13 09:51:55.910 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 09:51:55.822 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 09:51:56.061 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:51:55.828 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:51:55.928 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 09:52:24.376 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47534 10 6452 1 2025-10-13 09:53:24.796 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:36430 10 6452 1 2025-10-13 09:54:25.215 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43330 10 6452 1 2025-10-13 09:55:25.580 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:57208 10 6452 1 2025-10-13 09:56:25.939 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42456 10 6452 1 2025-10-13 09:56:55.993 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 09:56:55.877 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 09:56:55.831 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:56:56.102 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 09:56:56.183 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 09:57:26.346 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35542 10 6452 1 2025-10-13 09:52:43.546 00:06:00.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-13 09:53:43.544 00:05:00.458 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 09:58:26.752 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40472 10 6452 1 Summary: total flows: 138, total bytes: 417492, total packets: 1028, avg bps: 912, avg pps: 0, avg bpp: 406 Time window: 2025-10-13 08:57:43 - 2025-10-13 09:58:44 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0030s User: 0.0007s Wall: 0.0012s flows/second: 114707.5 Runtime: 0.0012s