Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 12:59:01.180 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34232 10 6452 1 2025-10-16 12:54:45.124 00:06:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 13:00:01.586 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35364 10 6452 1 2025-10-16 12:55:45.124 00:06:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 13:01:01.982 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51918 10 6452 1 2025-10-16 13:02:02.349 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37586 10 6452 1 2025-10-16 13:03:02.761 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57196 10 6452 1 2025-10-16 13:03:26.545 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:03:26.567 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:03:26.527 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:03:26.590 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:03:26.462 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:04:03.176 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58074 10 6452 1 2025-10-16 13:05:03.582 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53716 10 6452 1 2025-10-16 13:06:03.981 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60518 10 6452 1 2025-10-16 13:01:45.127 00:06:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 13:07:04.382 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53932 10 6452 1 2025-10-16 13:02:45.125 00:06:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 13:08:04.790 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45218 10 6452 1 2025-10-16 13:08:26.404 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:08:26.516 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:08:26.633 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:08:26.510 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:08:26.716 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:09:05.196 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50790 10 6452 1 2025-10-16 13:10:05.596 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54790 10 6452 1 2025-10-16 13:11:06.004 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35702 10 6452 1 2025-10-16 13:12:06.406 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43300 10 6452 1 2025-10-16 13:13:06.804 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:46042 10 6452 1 2025-10-16 13:13:26.947 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:13:26.527 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:13:26.526 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:13:26.564 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:13:27.030 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:08:45.130 00:06:00.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 13:14:07.183 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:33090 10 6452 1 2025-10-16 13:09:45.127 00:06:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 13:15:07.543 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35920 10 6452 1 2025-10-16 13:16:07.951 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51032 10 6452 1 2025-10-16 13:17:08.317 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57610 10 6452 1 2025-10-16 13:18:08.721 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35836 10 6452 1 2025-10-16 13:18:26.816 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:18:26.681 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:18:26.516 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:18:26.813 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:18:26.897 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:19:09.150 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52510 10 6452 1 2025-10-16 13:20:09.553 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54614 10 6452 1 2025-10-16 13:15:45.131 00:06:00.394 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 13:21:09.956 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38372 10 6452 1 2025-10-16 13:16:45.129 00:06:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 13:22:10.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34764 10 6452 1 2025-10-16 13:23:10.762 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:60272 10 6452 1 2025-10-16 13:23:26.666 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:23:26.905 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:23:26.786 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:23:26.625 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:23:26.583 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:24:11.183 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37916 10 6452 1 2025-10-16 13:25:11.588 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55236 10 6452 1 2025-10-16 13:26:11.991 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57440 10 6452 1 2025-10-16 13:27:12.393 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39224 10 6452 1 2025-10-16 13:22:45.132 00:06:00.394 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 13:28:12.792 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55168 10 6452 1 2025-10-16 13:28:26.857 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:28:26.907 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:28:26.775 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:28:26.892 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:28:26.783 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:23:45.129 00:06:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 13:29:13.152 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44572 10 6452 1 2025-10-16 13:30:13.553 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:54230 10 6452 1 2025-10-16 13:31:13.984 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44918 10 6452 1 2025-10-16 13:32:14.394 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38316 10 6452 1 2025-10-16 13:33:26.943 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:33:27.094 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:33:26.768 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:33:14.794 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38616 10 6452 1 2025-10-16 13:33:27.099 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:33:27.182 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:34:15.200 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38048 10 6452 1 2025-10-16 13:29:45.134 00:06:00.394 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 13:35:15.605 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51242 10 6452 1 2025-10-16 13:30:45.131 00:06:00.402 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 13:36:16.022 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45024 10 6452 1 2025-10-16 13:37:16.430 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55670 10 6452 1 2025-10-16 13:38:27.269 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:38:27.226 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:38:26.973 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:38:27.100 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:38:16.800 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34144 10 6452 1 2025-10-16 13:38:27.353 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:39:17.204 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:34258 10 6452 1 2025-10-16 13:40:17.561 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36698 10 6452 1 2025-10-16 13:41:17.926 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54496 10 6452 1 2025-10-16 13:36:45.140 00:06:00.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 13:42:18.336 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44176 10 6452 1 2025-10-16 13:37:45.139 00:06:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 13:43:27.539 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:43:27.035 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:43:27.580 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:43:27.334 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:43:18.697 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51330 10 6452 1 2025-10-16 13:43:27.455 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:44:19.107 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45974 10 6452 1 2025-10-16 13:45:19.511 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34664 10 6452 1 2025-10-16 13:46:19.912 00:00:19.598 TCP 1.101.0.1:3000 -> 23.104.0.1:34770 10 6452 1 2025-10-16 13:47:29.560 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:37366 10 6452 1 2025-10-16 13:48:27.498 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:48:27.503 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:48:27.297 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:48:27.364 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:48:27.447 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:48:29.917 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56210 10 6452 1 2025-10-16 13:43:45.150 00:06:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 13:49:30.321 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44716 10 6452 1 2025-10-16 13:44:45.149 00:06:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 13:50:30.725 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47336 10 6452 1 2025-10-16 13:51:31.136 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58798 10 6452 1 2025-10-16 13:52:31.537 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38658 10 6452 1 2025-10-16 13:53:27.407 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:53:27.312 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:53:27.151 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:53:27.584 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:53:27.667 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:53:31.938 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52550 10 6452 1 2025-10-16 13:54:32.356 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49118 10 6452 1 2025-10-16 13:55:32.757 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57624 10 6452 1 2025-10-16 13:50:45.152 00:06:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 13:56:33.176 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:46090 12 10369 1 2025-10-16 13:51:45.150 00:06:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 13:57:33.664 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33654 10 6452 1 2025-10-16 13:58:27.671 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:58:27.516 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:58:27.218 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:58:27.723 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:58:27.805 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:58:34.099 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43988 10 6452 1 Summary: total flows: 138, total bytes: 421655, total packets: 1034, avg bps: 878, avg pps: 0, avg bpp: 407 Time window: 2025-10-16 12:54:45 - 2025-10-16 13:58:44 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0027s User: 0.0018s Wall: 0.0021s flows/second: 65991.8 Runtime: 0.0021s