Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 22:58:39.519 00:00:10.533 TCP 1.101.0.1:3000 -> 23.104.0.1:39294 10 6452 1 2025-10-16 22:59:40.107 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49394 10 6452 1 2025-10-16 23:00:40.508 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38884 10 6452 1 2025-10-16 22:56:45.366 00:06:00.335 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 23:01:40.911 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33130 10 6452 1 2025-10-16 22:57:45.363 00:06:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 23:02:41.275 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35178 10 6452 1 2025-10-16 23:03:38.486 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 23:03:38.323 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:03:38.302 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:03:38.413 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 23:03:38.385 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 23:03:41.686 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47876 10 6452 1 2025-10-16 23:04:42.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50982 10 6452 1 2025-10-16 23:05:42.512 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56636 10 6452 1 2025-10-16 23:06:42.878 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41646 10 6452 1 2025-10-16 23:07:43.282 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49070 10 6452 1 2025-10-16 23:08:38.320 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 23:08:38.449 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 23:08:38.586 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:08:38.457 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:08:38.539 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 23:03:45.369 00:06:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 23:08:43.680 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56920 10 6452 1 2025-10-16 23:04:45.367 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 23:09:44.108 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33080 10 6452 1 2025-10-16 23:10:44.520 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49578 10 6452 1 2025-10-16 23:11:44.924 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:36700 10 6452 1 2025-10-16 23:12:45.299 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56764 10 6452 1 2025-10-16 23:13:39.016 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 23:13:39.078 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 23:13:38.921 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 23:13:38.508 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:13:38.933 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:13:45.666 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57282 10 6452 1 2025-10-16 23:14:46.093 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:51198 10 6452 1 2025-10-16 23:10:45.374 00:06:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 23:15:46.450 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36238 10 6452 1 2025-10-16 23:11:45.372 00:06:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 23:16:46.812 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45386 10 6452 1 2025-10-16 23:17:47.206 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42574 10 6452 1 2025-10-16 23:18:38.974 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 23:18:38.890 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 23:18:38.945 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 23:18:38.920 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:18:38.891 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:18:47.612 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34084 10 6452 1 2025-10-16 23:19:48.022 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40806 10 6452 1 2025-10-16 23:20:48.432 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60940 10 6452 1 2025-10-16 23:21:48.843 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:54658 10 6452 1 2025-10-16 23:17:45.377 00:06:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 23:22:49.273 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51508 10 6452 1 2025-10-16 23:23:38.986 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 23:23:38.936 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 23:23:38.711 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:23:38.990 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:23:39.073 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 23:18:45.374 00:06:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 23:23:49.679 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43936 10 6452 1 2025-10-16 23:24:50.106 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54264 10 6452 1 2025-10-16 23:25:50.517 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57980 10 6452 1 2025-10-16 23:26:50.911 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:51224 10 6452 1 2025-10-16 23:27:51.294 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47198 10 6452 1 2025-10-16 23:28:39.158 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 23:28:38.967 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 23:28:39.074 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 23:28:38.844 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:28:39.074 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:28:51.695 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36910 10 6452 1 2025-10-16 23:24:45.379 00:06:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 23:29:52.114 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44698 10 6452 1 2025-10-16 23:25:45.376 00:06:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 23:30:52.520 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41646 10 6452 1 2025-10-16 23:31:52.886 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:56020 12 6556 1 2025-10-16 23:32:53.310 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38146 10 6452 1 2025-10-16 23:33:39.206 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 23:33:39.248 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 23:33:39.148 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:33:39.049 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:33:39.133 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 23:33:53.710 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52340 10 6452 1 2025-10-16 23:34:54.119 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52362 10 6452 1 2025-10-16 23:35:54.526 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48992 10 6452 1 2025-10-16 23:31:45.381 00:06:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 23:36:54.929 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:47850 10 6452 1 2025-10-16 23:32:45.378 00:06:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 23:37:55.354 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44626 10 6452 1 2025-10-16 23:38:39.216 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 23:38:39.403 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:38:39.499 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:38:39.314 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 23:38:39.582 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 23:38:55.773 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60784 10 6452 1 2025-10-16 23:39:56.208 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55182 10 6452 1 2025-10-16 23:40:56.607 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53030 10 6452 1 2025-10-16 23:41:57.013 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35956 10 6452 1 2025-10-16 23:42:57.415 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36042 10 6452 1 2025-10-16 23:43:39.308 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:43:39.149 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 23:43:39.235 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 23:43:39.095 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:43:39.389 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 23:38:45.384 00:06:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 23:43:57.780 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:42968 10 6452 1 2025-10-16 23:39:45.382 00:06:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 23:44:58.149 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36424 10 6452 1 2025-10-16 23:45:58.565 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47614 10 6452 1 2025-10-16 23:46:58.970 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44360 10 6452 1 2025-10-16 23:47:59.379 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33110 10 6452 1 2025-10-16 23:48:39.270 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 23:48:39.549 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 23:48:39.414 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:48:39.462 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:48:39.544 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 23:48:59.783 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36528 10 6452 1 2025-10-16 23:50:00.193 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40282 11 6504 1 2025-10-16 23:45:45.389 00:06:00.322 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 23:51:00.612 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57892 10 6452 1 2025-10-16 23:46:45.386 00:06:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 23:52:01.023 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53594 10 6452 1 2025-10-16 23:53:01.390 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39814 10 6452 1 2025-10-16 23:53:39.580 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 23:53:39.535 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 23:53:39.383 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:53:39.533 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:53:39.616 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 23:54:01.756 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35266 10 6452 1 2025-10-16 23:55:02.163 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40276 10 6452 1 2025-10-16 23:56:02.557 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38890 10 6452 1 2025-10-16 23:57:02.971 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56820 10 6452 1 2025-10-16 23:52:45.389 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 23:58:03.379 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40868 10 6452 1 2025-10-16 23:58:39.595 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 23:58:39.643 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 23:58:39.577 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:58:39.639 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 23:58:39.724 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 23:53:45.388 00:06:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 138, total bytes: 417894, total packets: 1035, avg bps: 884, avg pps: 0, avg bpp: 403 Time window: 2025-10-16 22:56:45 - 2025-10-16 23:59:45 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0045s User: 0.0018s Wall: 0.0021s flows/second: 66538.0 Runtime: 0.0021s