Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 17:59:13.387 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51158 10 6452 1 2025-10-15 18:00:13.786 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45140 10 6452 1 2025-10-15 18:01:14.193 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:35264 12 10369 1 2025-10-15 17:57:44.695 00:05:00.455 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 18:02:14.672 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54036 10 6452 1 2025-10-15 18:03:03.499 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 18:03:03.619 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 18:03:03.534 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:03:03.619 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:03:03.702 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 18:03:15.111 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54860 10 6452 1 2025-10-15 17:59:44.694 00:05:00.460 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 18:04:15.522 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54200 10 6452 1 2025-10-15 18:05:15.921 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52488 10 6452 1 2025-10-15 18:06:16.332 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48008 10 6452 1 2025-10-15 18:07:16.734 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56600 10 6452 1 2025-10-15 18:03:44.698 00:05:00.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 18:08:03.729 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 18:08:03.482 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:08:03.821 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:08:03.662 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 18:08:03.903 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 18:08:17.143 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43046 10 6452 1 2025-10-15 18:09:17.560 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41216 10 6452 1 2025-10-15 18:05:44.696 00:05:00.462 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 18:10:17.966 00:00:10.548 TCP 1.101.0.1:3000 -> 23.104.0.1:45302 10 6452 1 2025-10-15 18:11:18.546 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53180 10 6452 1 2025-10-15 18:12:18.913 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47094 10 6452 1 2025-10-15 18:13:04.094 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 18:13:03.976 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 18:13:03.729 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:13:03.831 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:13:03.915 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 18:13:19.278 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50338 10 6452 1 2025-10-15 18:09:44.700 00:05:00.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 18:14:19.679 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46024 10 6452 1 2025-10-15 18:15:20.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48374 10 6452 1 2025-10-15 18:11:44.698 00:05:00.461 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 18:16:20.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37948 10 6452 1 2025-10-15 18:17:20.927 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:43260 10 6452 1 2025-10-15 18:18:03.610 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 18:18:03.596 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 18:18:03.795 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:18:03.877 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:18:03.959 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 18:18:21.342 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58428 10 6452 1 2025-10-15 18:19:21.701 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50516 10 6452 1 2025-10-15 18:15:44.702 00:05:00.454 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 18:20:22.078 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53098 10 6452 1 2025-10-15 18:21:22.484 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40952 10 6452 1 2025-10-15 18:17:44.701 00:05:00.459 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 18:22:22.885 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:59020 10 6452 1 2025-10-15 18:23:03.806 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 18:23:03.794 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 18:23:03.839 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:23:03.806 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:23:03.890 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 18:23:23.337 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59986 10 6452 1 2025-10-15 18:24:23.739 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59200 10 6452 1 2025-10-15 18:25:24.145 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34230 10 6452 1 2025-10-15 18:21:44.706 00:05:00.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 18:26:24.556 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42042 10 6452 1 2025-10-15 18:27:24.961 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52786 10 6452 1 2025-10-15 18:23:44.705 00:05:00.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 18:28:04.272 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 18:28:04.159 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 18:28:04.105 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 18:28:04.141 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:28:04.191 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:28:25.368 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49762 10 6452 1 2025-10-15 18:29:25.730 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57824 10 6452 1 2025-10-15 18:30:26.141 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39960 10 6452 1 2025-10-15 18:31:26.551 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52670 10 6452 1 2025-10-15 18:27:44.708 00:05:00.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 18:32:26.960 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39814 10 6452 1 2025-10-15 18:33:04.311 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 18:33:04.390 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 18:33:04.339 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 18:33:04.357 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:33:04.229 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:33:27.365 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59904 10 6452 1 2025-10-15 18:29:44.706 00:05:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 18:34:27.772 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60714 10 6452 1 2025-10-15 18:35:28.181 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49166 10 6452 1 2025-10-15 18:36:28.586 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:46028 13 10415 1 2025-10-15 18:37:29.095 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56084 10 6452 1 2025-10-15 18:33:44.708 00:05:00.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 18:38:04.234 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 18:38:04.301 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 18:38:04.247 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:38:04.352 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:38:04.437 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 18:38:29.494 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51020 10 6452 1 2025-10-15 18:39:29.895 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:53118 10 6452 1 2025-10-15 18:35:44.706 00:05:00.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 18:40:30.268 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48312 10 6452 1 2025-10-15 18:41:30.669 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42024 10 6452 1 2025-10-15 18:42:31.099 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51628 10 6452 1 2025-10-15 18:43:04.223 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 18:43:04.454 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 18:43:03.950 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:43:04.457 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:43:04.539 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 18:43:31.502 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40292 10 6452 1 2025-10-15 18:39:44.709 00:05:00.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 18:44:31.902 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40832 12 6556 1 2025-10-15 18:45:32.310 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36682 10 6452 1 2025-10-15 18:41:44.708 00:05:00.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 18:46:32.710 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36196 10 6452 1 2025-10-15 18:47:33.117 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40004 10 6452 1 2025-10-15 18:48:04.446 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 18:48:04.363 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:48:04.447 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 18:48:04.441 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 18:48:04.367 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:48:33.515 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50372 10 6452 1 2025-10-15 18:49:33.919 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:36866 10 6452 1 2025-10-15 18:45:44.711 00:05:00.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 18:50:34.289 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48620 10 6452 1 2025-10-15 18:47:44.709 00:05:00.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 18:51:34.690 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35300 10 6452 1 2025-10-15 18:52:35.070 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45252 10 6452 1 2025-10-15 18:53:04.713 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 18:53:04.578 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 18:53:04.620 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:53:04.699 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:53:04.784 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 18:53:35.435 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50778 10 6452 1 2025-10-15 18:54:35.799 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:55322 10 6452 1 2025-10-15 18:55:36.193 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48548 10 6452 1 2025-10-15 18:51:44.713 00:05:00.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 18:56:36.602 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:47636 10 6452 1 2025-10-15 18:53:44.713 00:05:00.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 18:57:36.984 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45052 10 6452 1 2025-10-15 18:58:04.909 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 18:58:04.594 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 18:58:04.826 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 18:58:04.516 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:58:04.826 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 18:58:37.394 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44584 10 6452 1 Summary: total flows: 140, total bytes: 424984, total packets: 1027, avg bps: 928, avg pps: 0, avg bpp: 413 Time window: 2025-10-15 17:57:44 - 2025-10-15 18:58:47 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0023s User: 0.0031s Wall: 0.0019s flows/second: 73455.4 Runtime: 0.0019s