Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 18:59:14.283 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36012 10 6452 1 2025-10-29 18:59:49.823 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 18:59:49.880 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 18:59:49.642 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 18:59:50.062 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 18:59:49.978 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:00:14.698 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51282 10 6452 1 2025-10-29 18:56:51.937 00:05:00.402 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 19:01:15.064 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47250 10 6452 1 2025-10-29 18:57:51.934 00:05:00.408 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 19:02:15.428 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38834 10 6452 1 2025-10-29 19:03:15.792 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54490 10 6452 1 2025-10-29 19:04:16.150 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50320 10 6452 1 2025-10-29 19:04:49.581 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 19:04:49.316 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 19:04:49.419 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:04:49.522 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:04:49.606 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 19:05:16.555 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38686 10 6452 1 2025-10-29 19:06:16.959 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56738 10 6452 1 2025-10-29 19:02:51.939 00:05:00.404 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 19:07:17.322 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47420 10 6452 1 2025-10-29 19:03:51.936 00:05:00.409 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 19:08:17.732 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45490 10 6452 1 2025-10-29 19:09:18.144 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54804 10 6452 1 2025-10-29 19:09:49.464 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 19:09:49.478 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 19:09:49.491 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 19:09:49.416 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:09:49.380 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:10:18.552 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54478 11 6504 1 2025-10-29 19:11:18.964 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39140 10 6452 1 2025-10-29 19:12:19.364 00:00:16.686 TCP 1.101.0.1:3000 -> 23.104.0.1:37764 10 6452 1 2025-10-29 19:08:51.941 00:05:00.402 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 19:13:26.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55452 10 6452 1 2025-10-29 19:09:51.940 00:05:00.406 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 19:14:26.518 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49588 10 6452 1 2025-10-29 19:14:49.713 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 19:14:49.742 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 19:14:49.696 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 19:14:49.708 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:14:49.632 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:15:26.924 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48046 10 6452 1 2025-10-29 19:16:27.333 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49436 10 6452 1 2025-10-29 19:17:27.733 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:46804 12 10375 1 2025-10-29 19:18:28.178 00:00:11.297 TCP 1.101.0.1:3000 -> 23.104.0.1:54832 10 6452 1 2025-10-29 19:14:51.943 00:05:00.400 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 19:19:29.513 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56298 10 6452 1 2025-10-29 19:19:49.961 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 19:19:49.817 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 19:19:49.973 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 19:19:49.705 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:19:49.880 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:15:51.941 00:05:00.405 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 19:20:29.872 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47216 10 6452 1 2025-10-29 19:21:30.277 00:00:19.241 TCP 1.101.0.1:3000 -> 23.104.0.1:51782 10 6452 1 2025-10-29 19:22:39.557 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60430 10 6452 1 2025-10-29 19:23:39.959 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60452 10 6452 1 2025-10-29 19:24:50.666 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 19:20:51.944 00:05:00.402 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 19:24:50.671 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 19:24:50.686 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:24:40.362 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51870 10 6452 1 2025-10-29 19:24:50.667 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:24:50.751 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 19:21:51.942 00:05:00.407 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 19:25:40.761 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53842 10 6452 1 2025-10-29 19:26:41.169 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46998 10 6452 1 2025-10-29 19:27:41.572 00:00:10.469 TCP 1.101.0.1:3000 -> 23.104.0.1:47378 14 14298 1 2025-10-29 19:28:42.107 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45880 10 6452 1 2025-10-29 19:29:50.272 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 19:29:49.967 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 19:29:49.869 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:29:50.142 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 19:29:42.512 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45516 10 6452 1 2025-10-29 19:29:50.189 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:30:42.871 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39300 10 6452 1 2025-10-29 19:26:51.948 00:05:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 19:27:51.942 00:05:00.407 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 19:31:43.280 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37408 10 6452 1 2025-10-29 19:32:43.680 00:00:12.059 TCP 1.101.0.1:3000 -> 23.104.0.1:46588 10 6452 1 2025-10-29 19:33:45.782 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47756 10 6452 1 2025-10-29 19:34:49.922 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 19:34:50.220 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 19:34:50.070 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:34:50.132 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:34:50.215 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 19:34:46.184 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49678 10 6452 1 2025-10-29 19:35:46.586 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:59398 10 6452 1 2025-10-29 19:32:51.945 00:05:00.402 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 19:36:47.021 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33800 10 6452 1 2025-10-29 19:33:51.942 00:05:00.410 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 19:37:47.424 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60578 10 6452 1 2025-10-29 19:38:47.835 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:45730 10 6452 1 2025-10-29 19:39:50.061 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 19:39:50.320 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 19:39:50.122 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 19:39:50.341 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:39:49.978 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:39:48.227 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54876 10 6452 1 2025-10-29 19:40:48.629 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41370 10 6452 1 2025-10-29 19:41:49.032 00:00:10.612 TCP 1.101.0.1:3000 -> 23.104.0.1:52752 10 6452 1 2025-10-29 19:38:51.947 00:05:00.401 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 19:42:49.685 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59550 10 6452 1 2025-10-29 19:39:51.945 00:05:00.406 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 19:43:50.107 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59820 10 6452 1 2025-10-29 19:44:49.925 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:44:50.073 00:00:00.049 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 19:44:50.067 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 19:44:50.005 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 19:44:49.991 00:00:00.049 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:44:50.511 00:00:16.735 TCP 1.101.0.1:3000 -> 23.104.0.1:51254 10 6452 1 2025-10-29 19:45:57.299 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37492 10 6452 1 2025-10-29 19:46:57.706 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37346 10 6452 1 2025-10-29 19:47:58.113 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56016 10 6452 1 2025-10-29 19:44:51.949 00:05:00.401 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 19:48:58.523 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53100 10 6452 1 2025-10-29 19:49:50.688 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 19:45:51.946 00:05:00.406 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 19:49:50.663 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 19:49:50.668 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 19:49:50.560 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:49:50.605 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:49:58.887 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47622 10 6452 1 2025-10-29 19:50:59.250 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48642 10 6452 1 2025-10-29 19:51:59.656 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:46098 10 6452 1 2025-10-29 19:53:00.141 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:47480 12 10369 1 2025-10-29 19:54:00.619 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43418 10 6452 1 2025-10-29 19:54:50.405 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 19:50:51.949 00:05:00.402 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 19:54:50.568 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 19:54:50.430 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:54:50.316 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 19:54:50.399 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 19:55:01.029 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49014 10 6452 1 2025-10-29 19:51:51.951 00:05:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 19:56:01.435 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57940 10 6452 1 2025-10-29 19:57:01.795 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56182 10 6452 1 2025-10-29 19:58:02.199 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52814 10 6452 1 Summary: total flows: 139, total bytes: 426286, total packets: 1019, avg bps: 926, avg pps: 0, avg bpp: 418 Time window: 2025-10-29 18:56:51 - 2025-10-29 19:58:12 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0040s User: 0.0024s Wall: 0.0024s flows/second: 57798.0 Runtime: 0.0024s