Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 05:58:53.948 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34048 10 6452 1 2025-10-17 05:59:54.355 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43766 10 6452 1 2025-10-17 06:00:54.758 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:43768 10 6452 1 2025-10-17 05:56:45.511 00:06:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 06:01:55.176 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50910 10 6452 1 2025-10-17 05:57:45.509 00:06:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 06:02:55.587 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52924 10 6452 1 2025-10-17 06:03:46.986 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 06:03:47.116 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 06:03:47.082 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:03:46.990 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:03:47.073 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 06:03:55.992 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43976 10 6452 1 2025-10-17 06:04:56.402 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51314 10 6452 1 2025-10-17 06:05:56.803 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:50794 10 6452 1 2025-10-17 06:06:57.232 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53450 10 6452 1 2025-10-17 06:07:57.638 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43262 10 6452 1 2025-10-17 06:08:47.107 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 06:03:45.514 00:06:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 06:08:46.931 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 06:08:47.140 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:08:47.145 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:08:47.228 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 06:08:58.059 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41262 10 6452 1 2025-10-17 06:04:45.512 00:06:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 06:09:58.465 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58632 10 6452 1 2025-10-17 06:10:58.871 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42528 10 6452 1 2025-10-17 06:11:59.286 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49438 10 6452 1 2025-10-17 06:12:59.687 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46434 10 6452 1 2025-10-17 06:13:47.172 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 06:13:47.259 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 06:13:47.037 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 06:13:46.997 00:00:00.052 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:13:47.089 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:14:00.105 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50544 10 6452 1 2025-10-17 06:15:00.504 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52580 10 6452 1 2025-10-17 06:10:45.516 00:06:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 06:16:00.915 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51702 10 6452 1 2025-10-17 06:11:45.515 00:06:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 06:17:01.319 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50278 10 6452 1 2025-10-17 06:18:01.728 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:38406 10 6452 1 2025-10-17 06:18:47.189 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 06:18:47.404 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:18:47.092 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:18:47.187 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 06:18:47.174 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 06:19:02.139 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41364 10 6452 1 2025-10-17 06:20:02.544 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59502 10 6452 1 2025-10-17 06:21:02.944 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32888 10 6452 1 2025-10-17 06:22:03.353 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:58700 12 10375 1 2025-10-17 06:17:45.521 00:06:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 06:23:03.852 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:42934 10 6452 1 2025-10-17 06:23:47.511 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 06:18:45.516 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 06:23:47.154 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 06:23:47.339 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 06:23:47.464 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:23:47.429 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:24:04.271 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37388 10 6452 1 2025-10-17 06:25:04.677 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48964 10 6452 1 2025-10-17 06:26:05.107 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39438 10 6452 1 2025-10-17 06:27:05.518 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60086 10 6452 1 2025-10-17 06:28:05.925 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45368 10 6452 1 2025-10-17 06:28:47.605 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 06:28:47.386 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 06:28:47.185 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 06:28:47.398 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:28:47.523 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:29:06.338 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52386 10 6452 1 2025-10-17 06:24:45.520 00:06:00.335 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 06:30:06.747 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58916 10 6452 1 2025-10-17 06:25:45.520 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 06:31:07.151 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53878 10 6452 1 2025-10-17 06:32:07.550 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45106 10 6452 1 2025-10-17 06:33:07.954 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44020 10 6452 1 2025-10-17 06:33:47.539 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 06:33:47.471 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:33:47.464 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:33:47.731 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 06:33:47.547 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 06:34:08.365 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58338 10 6452 1 2025-10-17 06:35:08.726 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50034 10 6452 1 2025-10-17 06:36:09.134 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51440 10 6452 1 2025-10-17 06:31:45.525 00:06:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 06:37:09.542 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39610 10 6452 1 2025-10-17 06:32:45.524 00:06:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 06:38:09.904 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:57248 11 6504 1 2025-10-17 06:38:47.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 06:38:47.697 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 06:38:47.627 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:38:47.699 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:38:47.783 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 06:39:10.331 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48768 10 6452 1 2025-10-17 06:40:10.740 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33658 10 6452 1 2025-10-17 06:41:11.146 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52184 10 6452 1 2025-10-17 06:42:11.552 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53938 10 6452 1 2025-10-17 06:43:11.963 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41224 10 6452 1 2025-10-17 06:43:47.817 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 06:43:47.649 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:43:47.867 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:43:47.708 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 06:38:45.528 00:06:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 06:43:47.950 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 06:44:12.370 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39716 10 6452 1 2025-10-17 06:39:45.526 00:06:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 06:45:12.773 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51346 10 6452 1 2025-10-17 06:46:13.183 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51332 10 6452 1 2025-10-17 06:47:13.586 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54622 10 6452 1 2025-10-17 06:48:13.994 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44388 10 6452 1 2025-10-17 06:48:47.851 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 06:48:48.055 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 06:48:47.817 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:48:47.890 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:48:47.974 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 06:49:14.359 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57572 10 6452 1 2025-10-17 06:50:14.760 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45706 10 6452 1 2025-10-17 06:45:45.530 00:06:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 06:51:15.174 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42730 10 6452 1 2025-10-17 06:46:45.528 00:06:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 06:52:15.570 00:00:10.450 TCP 1.101.0.1:3000 -> 23.104.0.1:60894 12 10369 1 2025-10-17 06:53:16.070 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60898 10 6452 1 2025-10-17 06:53:48.029 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 06:53:48.198 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 06:53:48.207 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 06:53:47.980 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:53:47.945 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:54:16.439 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:47488 10 6452 1 2025-10-17 06:55:16.812 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53840 10 6452 1 2025-10-17 06:56:17.219 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41450 10 6452 1 2025-10-17 06:57:17.581 00:00:11.278 TCP 1.101.0.1:3000 -> 23.104.0.1:41212 10 6452 1 2025-10-17 06:52:45.531 00:06:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 06:58:18.901 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36028 10 6452 1 2025-10-17 06:58:48.083 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 06:58:47.842 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:58:48.187 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 06:58:48.184 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 06:58:48.271 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 06:53:45.529 00:06:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 138, total bytes: 425630, total packets: 1037, avg bps: 900, avg pps: 0, avg bpp: 410 Time window: 2025-10-17 05:56:45 - 2025-10-17 06:59:45 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0031s User: 0.0008s Wall: 0.0013s flows/second: 107566.2 Runtime: 0.0013s