Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 10:58:48.823 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:38926 11 6504 1 2025-10-16 10:59:49.283 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55502 10 6452 1 2025-10-16 10:55:45.093 00:06:00.381 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 11:00:49.644 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37788 10 6452 1 2025-10-16 10:56:45.091 00:06:00.386 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 11:01:50.055 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:45642 10 6452 1 2025-10-16 11:02:50.479 00:00:11.793 TCP 1.101.0.1:3000 -> 23.104.0.1:59322 10 6452 1 2025-10-16 11:03:24.078 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:03:24.073 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:03:24.076 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:03:23.880 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:03:23.964 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 11:03:52.307 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45576 10 6452 1 2025-10-16 11:04:52.674 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35794 10 6452 1 2025-10-16 11:05:53.104 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34496 10 6452 1 2025-10-16 11:06:53.507 00:00:10.706 TCP 1.101.0.1:3000 -> 23.104.0.1:45470 10 6452 1 2025-10-16 11:02:45.094 00:06:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 11:07:54.247 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56152 10 6452 1 2025-10-16 11:08:24.289 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 11:08:24.159 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:08:23.995 00:00:00.041 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:08:24.206 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:08:24.155 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:03:45.092 00:06:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 11:08:54.651 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40400 10 6452 1 2025-10-16 11:09:55.056 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43276 10 6452 1 2025-10-16 11:10:55.460 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51036 10 6452 1 2025-10-16 11:11:55.827 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:44834 10 6452 1 2025-10-16 11:12:56.217 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46520 10 6452 1 2025-10-16 11:13:24.499 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:13:24.420 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:13:24.508 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:13:24.175 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:13:24.258 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 11:13:56.621 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51126 10 6452 1 2025-10-16 11:09:45.102 00:06:00.376 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 11:14:56.987 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58550 10 6452 1 2025-10-16 11:10:45.099 00:06:00.382 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 11:15:57.408 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60006 10 6452 1 2025-10-16 11:16:57.808 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:49918 10 6452 1 2025-10-16 11:17:58.217 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39388 10 6452 1 2025-10-16 11:18:24.234 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:18:24.360 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:18:24.195 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:18:24.357 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:18:24.444 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 11:18:58.629 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:34796 10 6452 1 2025-10-16 11:19:59.069 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34340 10 6452 1 2025-10-16 11:20:59.477 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41740 10 6452 1 2025-10-16 11:16:45.103 00:06:00.379 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 11:21:59.881 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37862 10 6452 1 2025-10-16 11:17:45.101 00:06:00.383 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 11:23:00.286 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48636 10 6452 1 2025-10-16 11:23:24.443 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:23:24.557 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:23:24.231 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:23:24.150 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:23:24.234 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 11:24:00.648 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39052 10 6452 1 2025-10-16 11:25:01.050 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43128 10 6452 1 2025-10-16 11:26:01.411 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48644 10 6452 1 2025-10-16 11:27:01.815 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:45990 10 6452 1 2025-10-16 11:28:02.265 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33274 10 6452 1 2025-10-16 11:28:24.397 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:28:24.410 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:28:24.522 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:28:24.621 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:28:24.705 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 11:23:45.106 00:06:00.378 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 11:29:02.663 00:00:10.842 TCP 1.101.0.1:3000 -> 23.104.0.1:52606 10 6452 1 2025-10-16 11:24:45.104 00:06:00.383 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 11:30:03.543 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38682 10 6452 1 2025-10-16 11:31:03.944 00:00:17.757 TCP 1.101.0.1:3000 -> 23.104.0.1:57970 10 6452 1 2025-10-16 11:32:11.763 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35950 10 6452 1 2025-10-16 11:33:24.802 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 11:33:24.720 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:33:24.728 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:33:12.171 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35480 10 6452 1 2025-10-16 11:33:24.478 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:33:24.718 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:34:12.575 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49804 10 6452 1 2025-10-16 11:35:12.943 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40004 10 6452 1 2025-10-16 11:30:45.107 00:06:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 11:36:13.356 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36780 10 6452 1 2025-10-16 11:31:45.104 00:06:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 11:37:13.721 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40014 10 6452 1 2025-10-16 11:38:14.145 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37990 10 6452 1 2025-10-16 11:38:24.943 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:38:24.943 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:38:25.098 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:38:25.080 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:38:25.027 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 11:39:14.546 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38888 10 6452 1 2025-10-16 11:40:14.908 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46062 12 6556 1 2025-10-16 11:41:15.312 00:00:10.528 TCP 1.101.0.1:3000 -> 23.104.0.1:36496 10 6452 1 2025-10-16 11:42:15.882 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52278 10 6452 1 2025-10-16 11:37:45.109 00:06:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 11:43:24.875 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:43:24.891 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:43:24.920 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:43:24.767 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:43:16.285 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57972 10 6452 1 2025-10-16 11:43:25.003 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 11:38:45.107 00:06:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 11:44:16.692 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59408 10 6452 1 2025-10-16 11:45:17.112 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:59612 10 6452 1 2025-10-16 11:46:17.476 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42146 10 6452 1 2025-10-16 11:47:17.892 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37884 10 6452 1 2025-10-16 11:48:24.975 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:48:25.241 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 11:48:25.058 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:48:18.316 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50484 10 6452 1 2025-10-16 11:48:25.155 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:48:25.159 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:49:18.723 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39510 10 6452 1 2025-10-16 11:44:45.109 00:06:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 11:50:19.133 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58556 10 6452 1 2025-10-16 11:45:45.108 00:06:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 11:51:19.530 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44934 10 6452 1 2025-10-16 11:52:19.890 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:43058 11 6492 1 2025-10-16 11:53:25.126 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:53:25.125 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:53:25.126 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:53:25.129 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:53:25.212 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 11:53:20.317 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53122 10 6452 1 2025-10-16 11:54:20.715 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36780 10 6452 1 2025-10-16 11:55:21.118 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51416 10 6452 1 2025-10-16 11:56:21.521 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50794 10 6452 1 2025-10-16 11:51:45.112 00:06:00.388 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 11:57:21.880 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:51204 11 6504 1 2025-10-16 11:52:45.110 00:06:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 11:58:24.865 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:58:25.352 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 11:58:25.057 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 11:58:25.011 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 11:58:25.269 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 11:58:22.343 00:00:15.521 TCP 1.101.0.1:3000 -> 23.104.0.1:41716 10 6452 1 Summary: total flows: 138, total bytes: 417986, total packets: 1037, avg bps: 884, avg pps: 0, avg bpp: 403 Time window: 2025-10-16 10:55:45 - 2025-10-16 11:58:45 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0033s User: 0.0016s Wall: 0.0022s flows/second: 62894.1 Runtime: 0.0022s