Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 17:58:53.403 00:00:10.592 TCP 1.101.0.1:3000 -> 23.104.0.1:40072 10 6452 1 2025-10-25 17:59:54.032 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34670 10 6452 1 2025-10-25 18:00:54.439 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58740 10 6452 1 2025-10-25 17:57:49.942 00:05:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 18:01:54.841 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:35054 10 6452 1 2025-10-25 17:58:49.940 00:05:00.275 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 18:02:52.809 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 18:02:52.820 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:02:52.730 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:02:52.858 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 18:02:52.813 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 18:02:55.260 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37324 10 6452 1 2025-10-25 18:03:55.668 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40128 10 6452 1 2025-10-25 18:04:56.094 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41190 10 6452 1 2025-10-25 18:05:56.497 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35924 10 6452 1 2025-10-25 18:06:56.902 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43196 10 6452 1 2025-10-25 18:03:49.943 00:05:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 18:07:52.802 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 18:07:52.931 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 18:07:52.731 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:07:52.719 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:07:52.932 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 18:07:57.276 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58376 10 6452 1 2025-10-25 18:04:49.941 00:05:00.275 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 18:08:57.675 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35372 10 6452 1 2025-10-25 18:09:58.108 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52990 10 6452 1 2025-10-25 18:10:58.513 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34908 10 6452 1 2025-10-25 18:11:58.923 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:44164 10 6452 1 2025-10-25 18:12:53.063 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 18:12:53.116 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 18:12:53.014 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:12:52.982 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:12:53.181 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 18:12:59.294 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50438 10 6452 1 2025-10-25 18:09:49.946 00:05:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 18:13:59.695 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50136 10 6452 1 2025-10-25 18:10:49.943 00:05:00.275 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 18:15:00.071 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:45508 10 6452 1 2025-10-25 18:16:00.525 00:00:11.711 TCP 1.101.0.1:3000 -> 23.104.0.1:43646 10 6452 1 2025-10-25 18:17:02.280 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47048 10 6452 1 2025-10-25 18:17:53.061 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 18:17:52.866 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 18:17:52.914 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:17:52.980 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:17:52.975 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 18:18:02.689 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:60574 10 6452 1 2025-10-25 18:19:03.074 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47240 10 6452 1 2025-10-25 18:15:49.948 00:05:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 18:20:03.476 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43146 10 6452 1 2025-10-25 18:16:49.945 00:05:00.276 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 18:21:03.883 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:43386 12 6556 1 2025-10-25 18:22:04.311 00:00:10.501 TCP 1.101.0.1:3000 -> 23.104.0.1:37968 10 6452 1 2025-10-25 18:22:53.103 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 18:22:52.796 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:22:53.220 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:22:53.103 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 18:22:53.303 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 18:23:04.854 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41088 10 6452 1 2025-10-25 18:24:05.269 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43784 10 6452 1 2025-10-25 18:25:05.669 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33696 10 6452 1 2025-10-25 18:21:49.950 00:05:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 18:26:06.102 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56422 10 6452 1 2025-10-25 18:22:49.947 00:05:00.275 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 18:27:06.506 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47132 10 6452 1 2025-10-25 18:27:53.451 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 18:27:53.746 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 18:27:53.243 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:27:53.367 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:27:53.777 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 18:28:06.917 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:49022 11 6504 1 2025-10-25 18:29:07.368 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59168 10 6452 1 2025-10-25 18:30:07.774 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48166 10 6452 1 2025-10-25 18:31:08.184 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:54580 12 10375 1 2025-10-25 18:27:49.951 00:05:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 18:32:08.659 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54328 10 6452 1 2025-10-25 18:32:53.379 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 18:32:53.305 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:32:53.495 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:32:53.380 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 18:28:49.951 00:05:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 18:32:53.579 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 18:33:09.077 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41616 10 6452 1 2025-10-25 18:34:09.445 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:54932 10 6452 1 2025-10-25 18:35:09.897 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57248 10 6452 1 2025-10-25 18:36:10.311 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56326 10 6452 1 2025-10-25 18:37:10.714 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44784 10 6452 1 2025-10-25 18:33:49.955 00:05:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 18:37:53.571 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 18:37:53.634 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 18:37:53.502 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:37:53.488 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:37:53.486 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 18:38:11.131 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45692 10 6452 1 2025-10-25 18:34:49.953 00:05:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 18:39:11.499 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34790 10 6452 1 2025-10-25 18:40:11.913 00:00:10.494 TCP 1.101.0.1:3000 -> 23.104.0.1:34978 10 6452 1 2025-10-25 18:41:12.441 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:55524 11 6504 1 2025-10-25 18:42:12.901 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39004 12 6556 1 2025-10-25 18:42:53.892 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 18:42:53.810 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:42:53.811 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 18:42:53.575 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 18:42:53.532 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:43:13.306 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45214 10 6452 1 2025-10-25 18:39:49.957 00:05:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 18:44:13.712 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42726 10 6452 1 2025-10-25 18:40:49.955 00:05:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 18:45:14.115 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49178 10 6452 1 2025-10-25 18:46:14.519 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42554 10 6452 1 2025-10-25 18:47:14.930 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:52140 10 6452 1 2025-10-25 18:47:54.073 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 18:47:53.757 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 18:47:53.766 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:47:53.991 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:47:53.887 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 18:48:15.352 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41842 10 6452 1 2025-10-25 18:49:15.751 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38474 10 6452 1 2025-10-25 18:45:49.960 00:05:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 18:50:16.154 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53632 10 6452 1 2025-10-25 18:46:49.959 00:05:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 18:51:16.557 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59472 10 6452 1 2025-10-25 18:52:16.976 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51268 10 6452 1 2025-10-25 18:52:53.760 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 18:52:53.961 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 18:52:53.545 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:52:53.679 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:52:53.905 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 18:53:17.383 00:00:24.712 TCP 1.101.0.1:3000 -> 23.104.0.1:38338 10 6452 1 2025-10-25 18:54:32.135 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55240 10 6452 1 2025-10-25 18:55:32.548 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40038 10 6452 1 2025-10-25 18:51:49.964 00:05:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 18:56:32.953 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42644 10 6452 1 2025-10-25 18:52:49.962 00:05:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 18:57:33.320 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57784 10 6452 1 2025-10-25 18:57:54.005 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 18:57:53.963 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 18:57:53.934 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:57:53.920 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 18:57:53.890 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 18:58:33.724 00:00:16.962 TCP 1.101.0.1:3000 -> 23.104.0.1:46428 10 6452 1 Summary: total flows: 140, total bytes: 421235, total packets: 1028, avg bps: 920, avg pps: 0, avg bpp: 409 Time window: 2025-10-25 17:57:49 - 2025-10-25 18:58:50 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0024s User: 0.0024s Wall: 0.0022s flows/second: 64726.9 Runtime: 0.0022s