Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 00:53:52.561 00:06:00.381 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 00:59:18.383 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59436 10 6452 1 2025-10-31 01:00:25.640 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 01:00:25.554 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 01:00:25.639 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:00:25.557 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:00:18.786 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45614 10 6452 1 2025-10-31 01:00:25.637 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 00:55:52.572 00:06:00.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 01:01:19.194 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36940 10 6452 1 2025-10-31 01:02:19.559 00:00:10.834 TCP 1.101.0.1:3000 -> 23.104.0.1:55696 10 6452 1 2025-10-31 01:03:20.433 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:58822 12 10375 1 2025-10-31 01:04:20.904 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50656 12 6556 1 2025-10-31 01:05:25.784 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 01:05:25.694 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 01:05:25.647 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:05:25.694 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:05:25.777 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 01:05:21.311 00:00:11.139 TCP 1.101.0.1:3000 -> 23.104.0.1:40320 10 6452 1 2025-10-31 01:00:52.571 00:06:00.375 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 01:06:22.489 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51080 10 6452 1 2025-10-31 01:07:22.899 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37638 12 6556 1 2025-10-31 01:02:52.574 00:06:00.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 01:08:23.300 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46362 10 6452 1 2025-10-31 01:09:23.663 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59714 10 6452 1 2025-10-31 01:10:25.885 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 01:10:25.811 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 01:10:25.767 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:10:26.005 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:10:26.088 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 01:10:24.090 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47434 10 6452 1 2025-10-31 01:11:24.496 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50762 10 6452 1 2025-10-31 01:12:24.920 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37594 10 6452 1 2025-10-31 01:07:52.574 00:06:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 01:13:25.281 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59318 10 6452 1 2025-10-31 01:14:25.642 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59236 10 6452 1 2025-10-31 01:09:52.576 00:06:00.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 01:15:25.863 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 01:15:25.867 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 01:15:25.612 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:15:25.795 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:15:25.879 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 01:15:26.046 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59042 10 6452 1 2025-10-31 01:16:26.452 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53244 10 6452 1 2025-10-31 01:17:26.851 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:45618 10 6452 1 2025-10-31 01:18:27.234 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46612 10 6452 1 2025-10-31 01:19:27.634 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58106 10 6452 1 2025-10-31 01:14:52.575 00:06:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 01:20:25.848 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 01:20:26.115 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 01:20:26.108 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 01:20:25.901 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:20:25.765 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:20:28.028 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41980 10 6452 1 2025-10-31 01:21:28.424 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54110 10 6452 1 2025-10-31 01:16:52.580 00:06:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 01:22:28.829 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41294 10 6452 1 2025-10-31 01:23:29.232 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47666 10 6452 1 2025-10-31 01:24:29.636 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54190 10 6452 1 2025-10-31 01:25:26.855 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 01:25:26.772 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:25:26.726 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 01:25:26.729 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 01:25:26.781 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:25:30.036 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53590 10 6452 1 2025-10-31 01:26:30.436 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58978 10 6452 1 2025-10-31 01:21:52.587 00:06:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 01:27:30.843 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:51906 10 6452 1 2025-10-31 01:28:31.297 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:49842 12 10369 1 2025-10-31 01:23:52.590 00:06:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 01:29:31.777 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48126 10 6452 1 2025-10-31 01:30:26.192 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 01:30:26.260 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 01:30:26.067 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:30:26.263 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:30:26.345 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 01:30:32.184 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44786 10 6452 1 2025-10-31 01:31:32.588 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:59516 10 6452 1 2025-10-31 01:32:32.953 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59010 10 6452 1 2025-10-31 01:33:33.371 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53024 10 6452 1 2025-10-31 01:28:52.589 00:06:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 01:34:33.784 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50838 10 6452 1 2025-10-31 01:35:26.856 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 01:35:26.200 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 01:35:26.597 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 01:35:26.212 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:35:26.772 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:35:34.188 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57794 10 6452 1 2025-10-31 01:30:52.593 00:06:00.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 01:36:34.582 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33684 10 6452 1 2025-10-31 01:37:34.988 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45004 10 6452 1 2025-10-31 01:38:35.392 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:47596 12 10375 1 2025-10-31 01:39:35.872 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52862 10 6452 1 2025-10-31 01:40:26.535 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 01:40:26.453 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:40:26.248 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 01:40:26.342 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 01:40:26.276 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:40:36.282 00:00:10.515 TCP 1.101.0.1:3000 -> 23.104.0.1:59870 10 6452 1 2025-10-31 01:35:52.593 00:06:00.365 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 01:41:36.836 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:46878 10 6452 1 2025-10-31 01:42:37.256 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35956 10 6452 1 2025-10-31 01:37:52.594 00:06:00.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 01:43:37.617 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44196 10 6452 1 2025-10-31 01:44:38.026 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59696 10 6452 1 2025-10-31 01:45:26.770 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 01:45:26.433 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 01:45:26.582 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 01:45:26.557 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:45:26.688 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:45:38.427 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:36904 10 6452 1 2025-10-31 01:46:38.806 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:44774 10 6452 1 2025-10-31 01:47:39.175 00:00:10.594 TCP 1.101.0.1:3000 -> 23.104.0.1:38516 10 6452 1 2025-10-31 01:42:52.594 00:06:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 01:48:39.808 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:41446 10 6452 1 2025-10-31 01:49:40.180 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54448 10 6452 1 2025-10-31 01:44:52.597 00:06:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 01:50:26.661 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 01:50:26.326 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 01:50:26.489 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 01:50:26.377 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:50:26.579 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:50:40.541 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33002 10 6452 1 2025-10-31 01:51:40.940 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49048 10 6452 1 2025-10-31 01:52:41.359 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58834 10 6452 1 2025-10-31 01:53:41.761 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57672 10 6452 1 2025-10-31 01:49:52.594 00:06:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 01:54:42.173 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41064 10 6452 1 2025-10-31 01:55:26.586 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 01:55:26.383 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 01:55:26.723 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:55:26.647 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 01:55:26.731 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 01:55:42.577 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43244 10 6452 1 2025-10-31 01:51:52.596 00:06:00.364 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 01:56:42.982 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55822 10 6452 1 2025-10-31 01:57:43.394 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59444 10 6452 1 Summary: total flows: 137, total bytes: 423257, total packets: 1032, avg bps: 881, avg pps: 0, avg bpp: 410 Time window: 2025-10-31 00:53:52 - 2025-10-31 01:57:53 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0044s User: 0.0018s Wall: 0.0033s flows/second: 41300.9 Runtime: 0.0033s