Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 14:58:48.963 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56782 10 6452 1 2025-10-01 14:54:37.619 00:06:00.204 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 14:59:49.362 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51644 10 6452 1 2025-10-01 14:55:37.622 00:06:00.197 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 15:00:49.770 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55908 10 6452 1 2025-10-01 15:01:15.638 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 15:01:15.704 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 15:01:15.476 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:01:15.556 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:01:15.705 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 15:01:50.185 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56698 10 6452 1 2025-10-01 15:02:50.588 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44374 10 6452 1 2025-10-01 15:03:50.997 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49222 10 6452 1 2025-10-01 15:04:51.399 00:00:10.817 TCP 1.101.0.1:3000 -> 23.104.0.1:38200 10 6452 1 2025-10-01 15:05:52.252 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34782 10 6452 1 2025-10-01 15:06:16.448 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 15:06:16.302 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 15:06:16.322 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:06:16.365 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:06:16.179 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 15:01:37.625 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 15:06:52.659 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35224 10 6452 1 2025-10-01 15:02:37.626 00:06:00.196 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 15:07:53.063 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:36318 12 10369 1 2025-10-01 15:08:53.546 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41278 10 6452 1 2025-10-01 15:09:53.913 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56052 10 6452 1 2025-10-01 15:10:54.314 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39258 10 6452 1 2025-10-01 15:11:15.953 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 15:11:15.864 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 15:11:15.900 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:11:15.871 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:11:15.867 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 15:11:54.720 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46196 10 6452 1 2025-10-01 15:12:55.131 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:41990 10 6452 1 2025-10-01 15:08:37.623 00:06:00.203 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 15:13:55.496 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:47924 10 6452 1 2025-10-01 15:09:37.625 00:06:00.198 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 15:14:55.913 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37890 10 6452 1 2025-10-01 15:15:56.316 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37294 10 6452 1 2025-10-01 15:16:15.942 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 15:16:15.904 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:16:15.943 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:16:15.878 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 15:16:16.027 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 15:16:56.722 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:37472 10 6452 1 2025-10-01 15:17:57.154 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59610 10 6452 1 2025-10-01 15:18:57.559 00:00:10.973 TCP 1.101.0.1:3000 -> 23.104.0.1:54464 10 6452 1 2025-10-01 15:19:58.573 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60108 10 6452 1 2025-10-01 15:15:37.627 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 15:20:58.979 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48994 10 6452 1 2025-10-01 15:21:15.913 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:21:16.322 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 15:21:16.243 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 15:21:16.239 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:21:16.241 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 15:16:37.629 00:06:00.197 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 15:21:59.390 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47200 10 6452 1 2025-10-01 15:22:59.797 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52082 10 6452 1 2025-10-01 15:24:00.204 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44142 10 6452 1 2025-10-01 15:25:00.600 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39072 10 6452 1 2025-10-01 15:26:00.962 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:40738 10 6452 1 2025-10-01 15:26:16.289 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 15:26:16.150 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:26:16.256 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:26:16.191 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 15:26:16.337 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 15:27:01.336 00:00:10.835 TCP 1.101.0.1:3000 -> 23.104.0.1:51098 10 6452 1 2025-10-01 15:22:37.628 00:06:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 15:28:02.212 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56228 10 6452 1 2025-10-01 15:23:37.630 00:06:00.195 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 15:29:02.580 00:00:19.997 TCP 1.101.0.1:3000 -> 23.104.0.1:52948 10 6452 1 2025-10-01 15:30:12.614 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37928 10 6452 1 2025-10-01 15:31:16.495 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 15:31:16.413 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:31:16.503 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 15:31:16.411 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 15:31:16.334 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:31:13.018 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50238 10 6452 1 2025-10-01 15:32:13.420 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36828 10 6452 1 2025-10-01 15:33:13.825 00:00:10.657 TCP 1.101.0.1:3000 -> 23.104.0.1:51898 10 6452 1 2025-10-01 15:34:14.525 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40762 10 6452 1 2025-10-01 15:29:37.630 00:06:00.203 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 15:35:14.895 00:00:10.819 TCP 1.101.0.1:3000 -> 23.104.0.1:59966 10 6452 1 2025-10-01 15:30:37.632 00:06:00.199 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 15:36:16.412 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 15:36:16.439 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:36:16.479 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:36:16.313 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 15:36:16.563 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 15:36:15.753 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53660 10 6452 1 2025-10-01 15:37:16.158 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:51714 12 6556 1 2025-10-01 15:38:16.618 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49100 10 6452 1 2025-10-01 15:39:16.983 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34738 10 6452 1 2025-10-01 15:40:17.402 00:00:10.712 TCP 1.101.0.1:3000 -> 23.104.0.1:55150 10 6452 1 2025-10-01 15:41:16.392 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 15:41:16.505 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 15:41:16.460 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:41:16.310 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:41:16.625 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 15:41:18.149 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38022 10 6452 1 2025-10-01 15:36:37.631 00:06:00.203 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 15:42:18.548 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43056 10 6452 1 2025-10-01 15:37:37.634 00:06:00.198 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 15:43:18.951 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43576 10 6452 1 2025-10-01 15:44:19.362 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36758 10 6452 1 2025-10-01 15:45:19.768 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37160 10 6452 1 2025-10-01 15:46:16.643 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 15:46:16.599 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 15:46:16.465 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:46:16.560 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:46:16.562 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 15:46:20.183 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41550 10 6452 1 2025-10-01 15:47:20.580 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41552 10 6452 1 2025-10-01 15:48:20.988 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58184 10 6452 1 2025-10-01 15:43:37.634 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 15:49:21.394 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42344 10 6452 1 2025-10-01 15:44:37.636 00:06:00.196 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 15:50:21.761 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58842 10 6452 1 2025-10-01 15:51:16.691 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 15:51:16.541 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:51:16.691 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:51:16.769 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 15:51:16.773 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 15:51:22.178 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55324 10 6452 1 2025-10-01 15:52:22.540 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52830 10 6452 1 2025-10-01 15:53:22.944 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34618 10 6452 1 2025-10-01 15:54:23.358 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41040 10 6452 1 2025-10-01 15:55:23.765 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:33838 10 6452 1 2025-10-01 15:50:37.636 00:06:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-01 15:56:16.755 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-01 15:56:16.837 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:56:16.873 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-01 15:56:16.760 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-01 15:56:16.955 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-01 15:56:24.150 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56362 10 6452 1 2025-10-01 15:51:37.639 00:06:00.195 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-01 15:57:24.559 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55080 10 6452 1 2025-10-01 15:58:24.968 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44738 10 6452 1 Summary: total flows: 138, total bytes: 421759, total packets: 1036, avg bps: 879, avg pps: 0, avg bpp: 407 Time window: 2025-10-01 14:54:37 - 2025-10-01 15:58:35 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0040s User: 0.0016s Wall: 0.0024s flows/second: 56740.9 Runtime: 0.0024s