Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-30 16:58:42.849 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51638 10 6452 1 2025-10-30 16:59:43.276 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56052 10 6452 1 2025-10-30 17:00:16.411 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 17:00:16.375 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 17:00:16.207 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:00:16.402 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:00:16.485 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 17:00:43.678 00:00:10.564 TCP 1.101.0.1:3000 -> 23.104.0.1:44528 10 6452 1 2025-10-30 17:01:44.292 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39114 10 6452 1 2025-10-30 16:57:52.371 00:06:00.402 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 17:02:44.693 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37230 10 6452 1 2025-10-30 17:03:45.063 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:32966 10 6452 1 2025-10-30 16:59:52.375 00:06:00.397 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 17:04:45.423 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54014 10 6452 1 2025-10-30 17:05:16.031 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 17:05:15.933 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 17:05:15.955 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 17:05:16.119 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:05:15.947 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:05:45.826 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42056 10 6452 1 2025-10-30 17:06:46.234 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55898 10 6452 1 2025-10-30 17:07:46.637 00:00:10.910 TCP 1.101.0.1:3000 -> 23.104.0.1:40438 10 6452 1 2025-10-30 17:08:47.588 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:49264 10 6452 1 2025-10-30 17:04:52.373 00:06:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 17:09:47.958 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53490 10 6452 1 2025-10-30 17:10:16.154 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 17:10:16.113 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 17:10:16.082 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:10:16.072 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:10:16.164 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 17:10:48.363 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56216 10 6452 1 2025-10-30 17:06:52.376 00:06:00.397 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 17:11:48.769 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37238 10 6452 1 2025-10-30 17:12:49.181 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43504 10 6452 1 2025-10-30 17:13:49.546 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:60850 12 10375 1 2025-10-30 17:14:50.022 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42508 10 6452 1 2025-10-30 17:15:16.618 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 17:15:16.591 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 17:15:16.499 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:15:16.500 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:15:16.583 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 17:15:50.419 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42432 10 6452 1 2025-10-30 17:11:52.377 00:06:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 17:16:50.786 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54234 10 6452 1 2025-10-30 17:17:51.193 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35124 10 6452 1 2025-10-30 17:13:52.379 00:06:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 17:18:51.588 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43580 10 6452 1 2025-10-30 17:19:51.995 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33876 10 6452 1 2025-10-30 17:20:16.460 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 17:20:16.303 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 17:20:16.380 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 17:20:16.316 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:20:16.377 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:20:52.356 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45720 10 6452 1 2025-10-30 17:21:52.719 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40100 10 6452 1 2025-10-30 17:22:53.134 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:46224 10 6452 1 2025-10-30 17:18:52.380 00:06:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 17:23:53.514 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53938 10 6452 1 2025-10-30 17:24:53.879 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58858 10 6452 1 2025-10-30 17:25:16.447 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 17:25:16.366 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:25:16.294 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 17:25:16.361 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 17:25:16.319 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:20:52.383 00:06:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 17:25:54.288 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:50976 10 6452 1 2025-10-30 17:26:54.659 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49906 10 6452 1 2025-10-30 17:27:55.067 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38540 10 6452 1 2025-10-30 17:28:55.476 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42456 10 6452 1 2025-10-30 17:29:55.880 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55352 10 6452 1 2025-10-30 17:30:16.560 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:30:16.471 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 17:30:16.295 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 17:30:16.486 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:30:16.643 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 17:25:52.381 00:06:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 17:30:56.284 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48556 10 6452 1 2025-10-30 17:31:56.647 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36138 10 6452 1 2025-10-30 17:27:52.383 00:06:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 17:32:57.068 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36320 10 6452 1 2025-10-30 17:33:57.473 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38466 10 6452 1 2025-10-30 17:34:57.841 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:59894 10 6452 1 2025-10-30 17:35:16.556 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 17:35:16.584 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 17:35:16.543 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 17:35:16.258 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:35:16.473 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:35:58.227 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:58504 10 6452 1 2025-10-30 17:36:58.592 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55958 10 6452 1 2025-10-30 17:32:52.390 00:06:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 17:37:58.995 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41302 10 6452 1 2025-10-30 17:38:59.407 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:46742 12 10375 1 2025-10-30 17:34:52.391 00:06:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 17:39:59.879 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51224 10 6452 1 2025-10-30 17:40:17.095 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 17:40:16.843 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 17:40:16.729 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 17:40:16.663 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:40:17.011 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:41:00.291 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:38620 10 6452 1 2025-10-30 17:42:00.650 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48652 10 6452 1 2025-10-30 17:43:01.063 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60846 10 6452 1 2025-10-30 17:44:01.464 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:48654 12 10375 1 2025-10-30 17:39:52.391 00:06:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 17:45:01.945 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34698 10 6452 1 2025-10-30 17:45:16.996 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 17:45:16.617 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 17:45:16.904 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 17:45:16.778 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:45:16.910 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:46:02.351 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60878 10 6452 1 2025-10-30 17:41:52.395 00:06:00.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 17:47:02.754 00:00:11.448 TCP 1.101.0.1:3000 -> 23.104.0.1:45548 10 6452 1 2025-10-30 17:48:04.240 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55504 10 6452 1 2025-10-30 17:49:04.645 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:52648 10 6452 1 2025-10-30 17:50:16.875 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 17:50:16.933 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 17:50:16.939 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 17:50:16.717 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:50:05.022 00:00:10.674 TCP 1.101.0.1:3000 -> 23.104.0.1:46080 10 6452 1 2025-10-30 17:50:16.792 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:51:05.731 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58346 10 6452 1 2025-10-30 17:46:52.393 00:06:00.395 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 17:52:06.143 00:00:10.556 TCP 1.101.0.1:3000 -> 23.104.0.1:58782 10 6452 1 2025-10-30 17:53:06.738 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47442 10 6452 1 2025-10-30 17:48:52.396 00:06:00.389 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 17:54:07.144 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:50630 10 6452 1 2025-10-30 17:55:16.973 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 17:55:17.053 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 17:55:17.049 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 17:55:16.848 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:55:16.890 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 17:55:07.534 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48420 10 6452 1 2025-10-30 17:56:07.934 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:53760 10 6452 1 2025-10-30 17:57:08.319 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36440 10 6452 1 2025-10-30 17:58:08.722 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38168 10 6452 1 Summary: total flows: 136, total bytes: 427785, total packets: 1010, avg bps: 943, avg pps: 0, avg bpp: 423 Time window: 2025-10-30 16:57:52 - 2025-10-30 17:58:19 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0049s User: 0.0019s Wall: 0.0022s flows/second: 60767.6 Runtime: 0.0023s