Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 15:59:30.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58248 10 6452 1 2025-10-22 16:00:30.683 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41872 10 6452 1 2025-10-22 16:01:23.327 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 16:01:23.434 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 16:01:23.161 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:01:23.243 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:01:23.321 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 16:01:31.114 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46360 10 6452 1 2025-10-22 16:02:31.520 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39642 10 6452 1 2025-10-22 16:03:31.921 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50380 10 6452 1 2025-10-22 15:58:48.293 00:06:00.296 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 16:04:32.336 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49082 10 6452 1 2025-10-22 15:59:48.296 00:06:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 16:05:32.752 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60652 10 6452 1 2025-10-22 16:06:24.171 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 16:06:23.975 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:06:24.223 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:06:24.112 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 16:06:24.306 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 16:06:33.116 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36282 10 6452 1 2025-10-22 16:07:33.521 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41762 10 6452 1 2025-10-22 16:08:33.934 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:35004 10 6452 1 2025-10-22 16:09:34.369 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39622 10 6452 1 2025-10-22 16:10:34.779 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46078 10 6452 1 2025-10-22 16:05:48.294 00:06:00.301 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 16:11:23.460 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 16:11:23.377 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:11:23.484 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 16:11:23.590 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 16:11:23.505 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:11:35.199 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60064 10 6452 1 2025-10-22 16:06:48.297 00:06:00.297 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 16:12:35.605 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58202 10 6452 1 2025-10-22 16:13:36.014 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55160 10 6452 1 2025-10-22 16:14:36.418 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54280 10 6452 1 2025-10-22 16:15:36.818 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37502 10 6452 1 2025-10-22 16:16:23.775 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 16:16:23.315 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:16:23.751 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:16:23.751 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 16:16:23.835 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 16:16:37.217 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:53794 10 6452 1 2025-10-22 16:17:37.607 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:44100 10 6452 1 2025-10-22 16:12:48.295 00:06:00.302 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 16:18:37.977 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47932 10 6452 1 2025-10-22 16:13:48.298 00:06:00.297 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 16:19:38.394 00:00:10.626 TCP 1.101.0.1:3000 -> 23.104.0.1:42256 12 10375 1 2025-10-22 16:20:39.083 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43216 10 6452 1 2025-10-22 16:21:23.984 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 16:21:23.666 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:21:23.599 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:21:23.887 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 16:21:23.680 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 16:21:39.484 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45866 10 6452 1 2025-10-22 16:22:39.890 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55454 10 6452 1 2025-10-22 16:23:40.259 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45322 10 6452 1 2025-10-22 16:19:48.300 00:06:00.300 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 16:24:40.665 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:40132 12 10369 1 2025-10-22 16:20:48.302 00:06:00.296 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 16:25:41.112 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43938 10 6452 1 2025-10-22 16:26:24.305 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 16:26:23.902 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 16:26:23.625 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:26:24.222 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:26:23.991 00:00:00.048 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 16:26:41.518 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33484 10 6452 1 2025-10-22 16:27:41.925 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:42736 10 6452 1 2025-10-22 16:28:42.351 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57242 10 6452 1 2025-10-22 16:29:42.747 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54484 10 6452 1 2025-10-22 16:30:43.151 00:00:10.471 TCP 1.101.0.1:3000 -> 23.104.0.1:49872 10 6452 1 2025-10-22 16:31:23.943 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 16:31:24.079 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:31:23.880 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:31:23.944 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 16:31:23.962 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 16:26:48.300 00:06:00.302 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 16:31:43.663 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54428 10 6452 1 2025-10-22 16:27:48.302 00:06:00.297 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 16:32:44.092 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59328 10 6452 1 2025-10-22 16:33:44.495 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59956 10 6452 1 2025-10-22 16:34:44.900 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43530 12 6556 1 2025-10-22 16:35:45.311 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58118 10 6452 1 2025-10-22 16:36:24.063 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 16:36:24.067 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:36:24.093 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:36:24.097 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 16:36:24.177 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 16:36:45.778 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42634 10 6452 1 2025-10-22 16:37:46.195 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60088 10 6452 1 2025-10-22 16:33:48.301 00:06:00.303 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 16:38:46.598 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47134 10 6452 1 2025-10-22 16:34:48.305 00:06:00.297 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 16:39:47.003 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:58370 12 10375 1 2025-10-22 16:40:47.490 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46918 10 6452 1 2025-10-22 16:41:25.514 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 16:41:25.530 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:41:25.565 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:41:25.403 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 16:41:25.648 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 16:41:47.903 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54734 10 6452 1 2025-10-22 16:42:48.317 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50028 10 6452 1 2025-10-22 16:43:48.725 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49922 10 6452 1 2025-10-22 16:44:49.138 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39988 10 6452 1 2025-10-22 16:40:48.305 00:06:00.302 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 16:45:49.501 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39224 10 6452 1 2025-10-22 16:46:24.260 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 16:46:24.333 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 16:46:24.306 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:46:24.177 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:46:24.275 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 16:41:48.307 00:06:00.297 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 16:46:49.911 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34690 10 6452 1 2025-10-22 16:47:50.276 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38676 10 6452 1 2025-10-22 16:48:50.675 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:43346 12 6556 1 2025-10-22 16:49:51.106 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56906 10 6452 1 2025-10-22 16:50:51.508 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37172 10 6452 1 2025-10-22 16:51:24.053 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 16:51:24.204 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:51:24.322 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:51:24.339 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 16:51:24.405 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 16:51:51.867 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59982 10 6452 1 2025-10-22 16:47:48.309 00:06:00.299 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 16:52:52.277 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40664 10 6452 1 2025-10-22 16:48:48.310 00:06:00.296 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 16:53:52.685 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36164 10 6452 1 2025-10-22 16:54:53.112 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59164 10 6452 1 2025-10-22 16:55:53.519 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 10 6452 1 2025-10-22 16:56:24.486 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 16:56:24.234 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:56:24.634 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 16:56:24.391 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 16:56:24.738 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 16:56:53.927 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:40722 10 6452 1 2025-10-22 16:57:54.350 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46288 10 6452 1 Summary: total flows: 135, total bytes: 421535, total packets: 1004, avg bps: 948, avg pps: 0, avg bpp: 419 Time window: 2025-10-22 15:58:48 - 2025-10-22 16:58:04 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0043s User: 0.0007s Wall: 0.0023s flows/second: 57867.2 Runtime: 0.0024s