Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 01:58:43.808 00:00:10.432 TCP 1.101.0.1:3000 -> 23.104.0.1:57022 12 10369 1 2025-10-31 01:59:44.281 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37128 10 6452 1 2025-10-31 02:00:26.866 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 02:00:26.711 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 02:00:26.612 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 02:00:26.558 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:00:26.783 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:00:44.687 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38404 10 6452 1 2025-10-31 01:56:52.594 00:06:00.369 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 02:01:45.060 00:00:10.600 TCP 1.101.0.1:3000 -> 23.104.0.1:47044 10 6452 1 2025-10-31 02:02:45.708 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38284 10 6452 1 2025-10-31 01:58:52.598 00:06:00.365 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 02:03:46.115 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39184 10 6452 1 2025-10-31 02:04:46.518 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37142 10 6452 1 2025-10-31 02:05:26.921 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 02:05:26.846 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 02:05:26.844 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:05:26.840 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:05:26.711 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 02:05:46.917 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33196 10 6452 1 2025-10-31 02:06:47.314 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44394 10 6452 1 2025-10-31 02:07:47.679 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60814 10 6452 1 2025-10-31 02:03:52.598 00:06:00.374 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 02:08:48.104 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47368 10 6452 1 2025-10-31 02:09:48.507 00:00:11.526 TCP 1.101.0.1:3000 -> 23.104.0.1:33440 10 6452 1 2025-10-31 02:10:26.839 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 02:10:26.961 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 02:10:26.983 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:10:26.850 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:10:26.934 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 02:05:52.600 00:06:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 02:10:50.106 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48992 10 6452 1 2025-10-31 02:11:50.511 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35424 10 6452 1 2025-10-31 02:12:50.916 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36610 10 6452 1 2025-10-31 02:13:51.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35046 10 6452 1 2025-10-31 02:14:51.718 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:45700 10 6452 1 2025-10-31 02:15:26.973 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 02:15:26.865 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 02:15:26.919 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:15:26.968 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:15:27.051 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 02:10:52.599 00:06:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 02:15:52.110 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47690 10 6452 1 2025-10-31 02:16:52.476 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48254 10 6452 1 2025-10-31 02:12:52.601 00:06:00.369 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 02:17:52.880 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55036 10 6452 1 2025-10-31 02:18:53.281 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38406 10 6452 1 2025-10-31 02:19:53.676 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57298 10 6452 1 2025-10-31 02:20:27.304 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 02:20:27.178 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 02:20:27.316 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:20:27.343 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:20:27.427 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 02:20:54.109 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35004 10 6452 1 2025-10-31 02:21:54.476 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54502 10 6452 1 2025-10-31 02:17:52.599 00:06:00.374 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 02:22:54.872 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37170 10 6452 1 2025-10-31 02:23:55.280 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38168 10 6452 1 2025-10-31 02:19:52.603 00:06:00.371 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 02:24:55.681 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42630 10 6452 1 2025-10-31 02:25:27.266 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 02:25:27.240 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 02:25:27.244 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 02:25:26.940 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:25:27.183 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:25:56.112 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46598 10 6452 1 2025-10-31 02:26:56.515 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57518 10 6452 1 2025-10-31 02:27:56.919 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52206 10 6452 1 2025-10-31 02:28:57.323 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56452 10 6452 1 2025-10-31 02:24:52.601 00:06:00.376 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 02:29:57.724 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54186 10 6452 1 2025-10-31 02:30:27.387 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 02:30:27.299 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 02:30:27.306 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 02:30:27.070 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:30:27.305 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:30:58.133 00:00:11.567 TCP 1.101.0.1:3000 -> 23.104.0.1:49472 10 6452 1 2025-10-31 02:26:52.606 00:06:00.377 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 02:31:59.745 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53718 10 6452 1 2025-10-31 02:33:00.143 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57688 10 6452 1 2025-10-31 02:34:00.502 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46460 10 6452 1 2025-10-31 02:35:00.907 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53260 10 6452 1 2025-10-31 02:35:27.549 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 02:35:27.548 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 02:35:27.443 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:35:27.620 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:35:27.703 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 02:36:01.313 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53744 10 6452 1 2025-10-31 02:31:52.606 00:06:00.380 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 02:37:01.709 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57712 10 6452 1 2025-10-31 02:38:02.095 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:38422 10 6452 1 2025-10-31 02:33:52.612 00:06:00.371 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 02:39:02.522 00:00:12.291 TCP 1.101.0.1:3000 -> 23.104.0.1:48816 10 6452 1 2025-10-31 02:40:04.859 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:40264 10 6452 1 2025-10-31 02:40:27.460 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 02:40:27.528 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 02:40:27.410 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:40:27.520 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:40:27.604 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 02:41:05.284 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59906 10 6452 1 2025-10-31 02:42:05.690 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34642 10 6452 1 2025-10-31 02:43:06.065 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40930 10 6452 1 2025-10-31 02:38:52.610 00:06:00.377 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 02:44:06.476 00:00:10.943 TCP 1.101.0.1:3000 -> 23.104.0.1:57544 10 6452 1 2025-10-31 02:45:07.459 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51204 10 6452 1 2025-10-31 02:45:27.566 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 02:45:27.566 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 02:45:27.493 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:45:27.562 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:45:27.646 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 02:40:52.613 00:06:00.372 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 02:46:07.860 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52208 10 6452 1 2025-10-31 02:47:08.276 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:47154 10 6452 1 2025-10-31 02:48:08.652 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46564 10 6452 1 2025-10-31 02:49:09.069 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48438 12 6556 1 2025-10-31 02:50:09.473 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33588 10 6452 1 2025-10-31 02:50:27.993 00:00:00.047 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:50:27.599 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 02:50:27.598 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 02:50:27.836 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:50:28.078 00:00:00.046 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 02:45:52.612 00:06:00.380 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 02:51:09.842 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34498 10 6452 1 2025-10-31 02:52:10.261 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37296 10 6452 1 2025-10-31 02:47:52.615 00:06:00.374 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 02:53:10.663 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:52130 10 6452 1 2025-10-31 02:54:11.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48928 10 6452 1 2025-10-31 02:55:11.509 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58986 10 6452 1 2025-10-31 02:55:27.751 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:55:27.842 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 02:55:27.751 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 02:55:27.680 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 02:55:27.833 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 02:56:11.917 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56012 10 6452 1 2025-10-31 02:57:12.315 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36702 10 6452 1 2025-10-31 02:52:52.613 00:06:00.379 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 02:58:12.717 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48800 10 6452 1 Summary: total flows: 137, total bytes: 420898, total packets: 1022, avg bps: 905, avg pps: 0, avg bpp: 411 Time window: 2025-10-31 01:56:52 - 2025-10-31 02:58:52 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0052s User: 0.0009s Wall: 0.0023s flows/second: 60112.9 Runtime: 0.0023s