Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 20:58:45.184 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59640 10 6452 1 2025-10-28 20:59:23.143 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 20:59:22.988 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 20:59:22.947 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 20:59:22.748 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:59:23.059 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:59:45.581 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59004 10 6452 1 2025-10-28 20:55:51.525 00:06:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:00:45.986 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52014 10 6452 1 2025-10-28 21:01:46.390 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53300 10 6452 1 2025-10-28 21:02:46.752 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46618 10 6452 1 2025-10-28 20:58:51.522 00:06:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:03:47.163 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56268 10 6452 1 2025-10-28 21:04:23.458 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:04:23.189 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:04:22.825 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:04:23.376 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:04:23.317 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:04:47.569 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:49086 10 6452 1 2025-10-28 21:05:47.999 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34922 10 6452 1 2025-10-28 21:06:48.365 00:00:14.204 TCP 1.101.0.1:3000 -> 23.104.0.1:53212 10 6452 1 2025-10-28 21:02:51.525 00:06:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:07:52.660 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50366 10 6452 1 2025-10-28 21:08:53.067 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49588 10 6452 1 2025-10-28 21:09:23.268 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:09:23.246 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:09:23.249 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:09:23.150 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:09:23.187 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:09:53.472 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34750 10 6452 1 2025-10-28 21:05:51.523 00:06:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:10:53.874 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59624 10 6452 1 2025-10-28 21:11:54.291 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56258 10 6452 1 2025-10-28 21:12:54.659 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50238 10 6452 1 2025-10-28 21:13:55.089 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43438 10 6452 1 2025-10-28 21:14:23.347 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:14:23.265 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:14:23.313 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:14:23.121 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:14:22.995 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:09:51.531 00:06:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:14:55.490 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37536 10 6452 1 2025-10-28 21:15:55.894 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:41846 10 6452 1 2025-10-28 21:16:56.323 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33950 10 6452 1 2025-10-28 21:12:51.529 00:06:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:17:56.729 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39284 10 6452 1 2025-10-28 21:18:57.139 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41950 10 6452 1 2025-10-28 21:19:23.230 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:19:23.365 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:19:23.168 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:19:23.148 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:19:23.424 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:19:57.544 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48878 10 6452 1 2025-10-28 21:20:57.954 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33160 10 6452 1 2025-10-28 21:16:51.531 00:06:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:21:58.363 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44060 10 6452 1 2025-10-28 21:22:58.764 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:55374 10 6452 1 2025-10-28 21:23:59.184 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56560 10 6452 1 2025-10-28 21:24:23.552 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:24:23.409 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:24:23.555 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:24:23.426 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:24:23.636 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:19:51.529 00:06:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:24:59.546 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36176 10 6452 1 2025-10-28 21:25:59.945 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36610 10 6452 1 2025-10-28 21:27:00.358 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43458 10 6452 1 2025-10-28 21:28:00.722 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37424 10 6452 1 2025-10-28 21:23:51.534 00:06:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:29:01.108 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38270 10 6452 1 2025-10-28 21:29:23.734 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:29:23.564 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:29:23.457 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:29:23.652 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:29:23.821 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:30:01.509 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42554 10 6452 1 2025-10-28 21:31:01.912 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44274 10 6452 1 2025-10-28 21:26:51.538 00:06:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:32:02.275 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57760 10 6452 1 2025-10-28 21:33:02.641 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45582 10 6452 1 2025-10-28 21:34:03.067 00:00:10.659 TCP 1.101.0.1:3000 -> 23.104.0.1:46258 10 6452 1 2025-10-28 21:34:23.491 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:34:23.671 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:34:23.412 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:34:23.711 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:34:23.409 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:35:03.779 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50038 10 6452 1 2025-10-28 21:30:51.541 00:06:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:36:04.146 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39220 10 6452 1 2025-10-28 21:37:04.553 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59680 10 6452 1 2025-10-28 21:38:04.959 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45308 10 6452 1 2025-10-28 21:33:51.541 00:06:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:39:05.368 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:43666 11 6504 1 2025-10-28 21:39:23.917 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:39:23.711 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:39:23.794 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:39:23.682 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:39:23.835 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:40:05.826 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33732 10 6452 1 2025-10-28 21:41:06.231 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47192 10 6452 1 2025-10-28 21:42:06.592 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54520 10 6452 1 2025-10-28 21:37:51.543 00:06:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:43:06.994 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56476 10 6452 1 2025-10-28 21:44:07.408 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51652 10 6452 1 2025-10-28 21:44:24.718 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:44:24.540 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:44:24.666 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:44:24.797 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:44:24.748 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:45:07.809 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54360 10 6452 1 2025-10-28 21:40:51.542 00:06:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:46:08.222 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45064 10 6452 1 2025-10-28 21:47:08.628 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:43466 10 6452 1 2025-10-28 21:48:08.986 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42086 10 6452 1 2025-10-28 21:49:09.404 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60206 10 6452 1 2025-10-28 21:49:23.811 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:49:23.831 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:49:23.987 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:49:23.810 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:49:23.891 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:44:51.545 00:06:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:50:09.806 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53800 10 6452 1 2025-10-28 21:51:10.211 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46414 10 6452 1 2025-10-28 21:52:10.621 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34404 10 6452 1 2025-10-28 21:47:51.543 00:06:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 21:53:11.027 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40134 10 6452 1 2025-10-28 21:54:23.901 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:54:11.386 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38466 10 6452 1 2025-10-28 21:54:24.064 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 21:54:23.788 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:54:24.200 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:54:24.282 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:55:11.789 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52208 10 6452 1 2025-10-28 21:56:12.192 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54788 10 6452 1 2025-10-28 21:51:51.548 00:06:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:57:12.592 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:33868 10 6452 1 2025-10-28 21:58:12.991 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59022 10 6452 1 Summary: total flows: 137, total bytes: 416929, total packets: 1019, avg bps: 889, avg pps: 0, avg bpp: 409 Time window: 2025-10-28 20:55:51 - 2025-10-28 21:58:23 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0033s User: 0.0025s Wall: 0.0023s flows/second: 59251.4 Runtime: 0.0023s