Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 09:58:59.471 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58800 10 6452 1 2025-10-29 09:59:38.890 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 09:59:38.570 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:59:38.704 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:59:38.376 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:59:38.807 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:59:59.869 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39892 10 6452 1 2025-10-29 09:56:51.785 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 10:01:00.232 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41234 10 6452 1 2025-10-29 09:57:51.782 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 10:02:00.593 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59648 10 6452 1 2025-10-29 10:03:00.959 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37964 10 6452 1 2025-10-29 10:04:01.363 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56036 10 6452 1 2025-10-29 10:04:38.722 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 10:04:38.638 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:04:38.772 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:04:38.640 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 10:04:38.855 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 10:05:01.763 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:47756 10 6452 1 2025-10-29 10:06:02.177 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:36526 10 6452 1 2025-10-29 10:02:51.787 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 10:07:02.643 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53568 10 6452 1 2025-10-29 10:03:51.784 00:05:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 10:08:03.064 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41070 10 6452 1 2025-10-29 10:09:03.468 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45762 10 6452 1 2025-10-29 10:09:38.825 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 10:09:38.826 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 10:09:38.746 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:09:38.826 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:09:38.910 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 10:10:03.878 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55186 10 6452 1 2025-10-29 10:11:04.280 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58874 10 6452 1 2025-10-29 10:12:04.690 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41974 10 6452 1 2025-10-29 10:08:51.788 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 10:13:05.109 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47546 12 6556 1 2025-10-29 10:09:51.786 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 10:14:05.509 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39442 10 6452 1 2025-10-29 10:14:38.888 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 10:14:38.695 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 10:14:38.854 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:14:38.923 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:14:39.008 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 10:15:05.905 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54536 12 6556 1 2025-10-29 10:16:06.318 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56372 10 6452 1 2025-10-29 10:17:06.723 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52896 10 6452 1 2025-10-29 10:18:07.109 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60402 10 6452 1 2025-10-29 10:14:51.790 00:05:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 10:19:07.475 00:00:11.065 TCP 1.101.0.1:3000 -> 23.104.0.1:47608 10 6452 1 2025-10-29 10:19:39.083 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 10:19:38.903 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 10:19:38.981 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:19:38.819 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:19:38.904 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 10:15:51.788 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 10:20:08.590 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49070 10 6452 1 2025-10-29 10:21:08.950 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44150 10 6452 1 2025-10-29 10:22:09.360 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46172 10 6452 1 2025-10-29 10:23:09.719 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:34588 12 10369 1 2025-10-29 10:24:10.155 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47468 10 6452 1 2025-10-29 10:24:39.371 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 10:24:39.282 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 10:24:39.061 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 10:24:39.231 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:24:39.288 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:20:51.790 00:05:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 10:25:10.555 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59038 10 6452 1 2025-10-29 10:21:51.788 00:05:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 10:26:10.958 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45796 10 6452 1 2025-10-29 10:27:11.357 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35132 10 6452 1 2025-10-29 10:28:11.768 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:37578 10 6452 1 2025-10-29 10:29:12.160 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59236 10 6452 1 2025-10-29 10:29:39.194 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 10:29:39.292 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 10:29:38.814 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:29:38.889 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:29:38.972 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 10:30:12.560 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58862 10 6452 1 2025-10-29 10:26:51.792 00:05:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 10:31:12.965 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33756 10 6452 1 2025-10-29 10:27:51.790 00:05:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 10:32:13.369 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48870 10 6452 1 2025-10-29 10:33:13.727 00:00:10.475 TCP 1.101.0.1:3000 -> 23.104.0.1:52504 10 6452 1 2025-10-29 10:34:14.243 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44224 10 6452 1 2025-10-29 10:34:39.262 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 10:34:39.175 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 10:34:39.276 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:34:39.414 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:34:39.497 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 10:35:14.643 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46696 10 6452 1 2025-10-29 10:36:15.055 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37132 10 6452 1 2025-10-29 10:32:51.793 00:05:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 10:37:15.466 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44954 10 6452 1 2025-10-29 10:33:51.791 00:05:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 10:38:15.870 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56070 10 6452 1 2025-10-29 10:39:16.273 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52248 10 6452 1 2025-10-29 10:39:39.538 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 10:39:39.059 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:39:39.455 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:39:39.136 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 10:39:39.503 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 10:40:16.675 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:60058 10 6452 1 2025-10-29 10:41:17.040 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34176 10 6452 1 2025-10-29 10:42:17.400 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52756 10 6452 1 2025-10-29 10:38:51.793 00:05:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 10:43:17.806 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:57724 10 6452 1 2025-10-29 10:39:51.790 00:05:00.365 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 10:44:18.181 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35008 10 6452 1 2025-10-29 10:44:39.434 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 10:44:39.270 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:44:39.512 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:44:39.625 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 10:44:39.595 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 10:45:18.582 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39672 10 6452 1 2025-10-29 10:46:18.995 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47240 10 6452 1 2025-10-29 10:47:19.396 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57400 10 6452 1 2025-10-29 10:48:19.801 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38726 10 6452 1 2025-10-29 10:44:51.795 00:05:00.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 10:49:20.209 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46274 10 6452 1 2025-10-29 10:49:39.581 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 10:49:39.522 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 10:49:39.371 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:49:39.632 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:49:39.716 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 10:45:51.791 00:05:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 10:50:20.579 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55974 10 6452 1 2025-10-29 10:51:20.984 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34436 10 6452 1 2025-10-29 10:52:21.393 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:50838 12 10369 1 2025-10-29 10:53:21.880 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38986 10 6452 1 2025-10-29 10:54:22.294 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46410 10 6452 1 2025-10-29 10:54:39.784 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 10:54:39.778 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 10:54:39.783 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:54:39.512 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 10:54:39.595 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 10:50:51.795 00:05:00.365 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 10:55:22.697 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43778 10 6452 1 2025-10-29 10:51:51.792 00:05:00.371 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 10:56:23.109 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46214 10 6452 1 2025-10-29 10:57:23.470 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:32952 10 6452 1 2025-10-29 10:58:23.879 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43780 10 6452 1 Summary: total flows: 140, total bytes: 425042, total packets: 1028, avg bps: 918, avg pps: 0, avg bpp: 413 Time window: 2025-10-29 09:56:51 - 2025-10-29 10:58:34 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0021s User: 0.0021s Wall: 0.0018s flows/second: 78387.7 Runtime: 0.0018s