Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 03:59:39.366 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56930 10 6452 1 2025-10-31 03:55:52.644 00:05:00.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 04:00:29.243 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 04:00:28.922 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 04:00:29.213 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 04:00:28.979 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:00:29.161 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:00:39.771 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54886 10 6452 1 2025-10-31 04:01:40.186 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43256 12 6556 1 2025-10-31 03:57:52.648 00:05:00.422 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 04:02:40.595 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60710 10 6452 1 2025-10-31 04:03:40.958 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42630 10 6452 1 2025-10-31 04:04:41.371 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46106 10 6452 1 2025-10-31 04:05:29.244 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 04:05:29.160 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 04:05:29.035 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 04:05:29.101 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:05:29.160 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:01:52.649 00:05:00.424 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 04:05:41.777 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57058 10 6452 1 2025-10-31 04:06:42.189 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:39120 10 6452 1 2025-10-31 04:03:52.651 00:05:00.420 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 04:07:42.613 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35408 10 6452 1 2025-10-31 04:08:43.020 00:00:11.179 TCP 1.101.0.1:3000 -> 23.104.0.1:44324 10 6452 1 2025-10-31 04:09:44.243 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58682 10 6452 1 2025-10-31 04:10:29.273 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 04:10:29.278 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 04:10:29.193 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 04:10:29.235 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:10:29.191 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:10:44.648 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44878 10 6452 1 2025-10-31 04:07:52.653 00:05:00.423 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 04:11:45.064 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33236 10 6452 1 2025-10-31 04:12:45.473 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:60598 10 6452 1 2025-10-31 04:09:52.655 00:05:00.420 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 04:13:45.842 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:50956 10 6452 1 2025-10-31 04:14:46.269 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52670 10 6452 1 2025-10-31 04:15:29.609 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 04:15:29.480 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 04:15:29.407 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 04:15:29.621 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:15:29.527 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:15:46.672 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35304 10 6452 1 2025-10-31 04:16:47.097 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53268 10 6452 1 2025-10-31 04:13:52.655 00:05:00.427 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 04:17:47.465 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44202 10 6452 1 2025-10-31 04:18:47.868 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48844 10 6452 1 2025-10-31 04:15:52.661 00:05:00.419 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 04:19:48.274 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55228 10 6452 1 2025-10-31 04:20:29.787 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 04:20:29.539 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 04:20:29.779 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 04:20:29.342 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:20:29.703 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:20:48.675 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:41168 10 6452 1 2025-10-31 04:21:49.050 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46762 10 6452 1 2025-10-31 04:22:49.458 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51246 10 6452 1 2025-10-31 04:19:52.658 00:05:00.426 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 04:23:49.859 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53632 10 6452 1 2025-10-31 04:24:50.274 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:48246 10 6452 1 2025-10-31 04:25:29.783 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 04:25:29.701 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:25:29.595 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 04:25:29.698 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 04:25:29.435 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:21:52.662 00:05:00.420 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 04:25:50.642 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38546 10 6452 1 2025-10-31 04:26:51.040 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53970 10 6452 1 2025-10-31 04:27:51.444 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55552 10 6452 1 2025-10-31 04:28:51.844 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:56672 10 6452 1 2025-10-31 04:25:52.664 00:05:00.425 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 04:29:52.273 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51306 10 6452 1 2025-10-31 04:30:29.809 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 04:30:29.724 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 04:30:29.728 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 04:30:29.500 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:30:29.726 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:30:52.677 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34138 10 6452 1 2025-10-31 04:27:52.665 00:05:00.420 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 04:31:53.113 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45222 10 6452 1 2025-10-31 04:32:53.487 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34954 10 6452 1 2025-10-31 04:33:53.850 00:00:11.120 TCP 1.101.0.1:3000 -> 23.104.0.1:40544 10 6452 1 2025-10-31 04:34:55.009 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55710 10 6452 1 2025-10-31 04:35:29.918 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 04:35:29.876 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:35:29.989 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 04:35:29.980 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:35:30.062 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 04:31:52.665 00:05:00.423 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 04:35:55.416 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41604 10 6452 1 2025-10-31 04:36:55.821 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39350 10 6452 1 2025-10-31 04:33:52.669 00:05:00.418 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 04:37:56.224 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32908 10 6452 1 2025-10-31 04:38:56.586 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42456 10 6452 1 2025-10-31 04:39:56.988 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46930 10 6452 1 2025-10-31 04:40:29.948 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 04:40:29.857 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 04:40:29.866 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 04:40:29.785 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:40:29.865 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:40:57.405 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55192 10 6452 1 2025-10-31 04:37:52.669 00:05:00.421 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 04:41:57.808 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:34432 10 6452 1 2025-10-31 04:42:58.199 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53444 10 6452 1 2025-10-31 04:39:52.673 00:05:00.415 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 04:43:58.601 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34322 10 6452 1 2025-10-31 04:44:59.000 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44294 10 6452 1 2025-10-31 04:45:29.948 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:45:30.126 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 04:45:30.136 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 04:45:30.137 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 04:45:30.045 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:45:59.363 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35070 10 6452 1 2025-10-31 04:46:59.765 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44422 10 6452 1 2025-10-31 04:43:52.672 00:05:00.420 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 04:48:00.181 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56654 10 6452 1 2025-10-31 04:49:00.585 00:00:10.529 TCP 1.101.0.1:3000 -> 23.104.0.1:57306 10 6452 1 2025-10-31 04:45:52.675 00:05:00.415 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 04:50:01.148 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47432 10 6452 1 2025-10-31 04:50:30.331 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 04:50:30.162 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 04:50:30.227 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:50:30.261 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:50:30.344 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 04:51:01.563 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45710 10 6452 1 2025-10-31 04:52:01.966 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:59368 10 6452 1 2025-10-31 04:53:02.378 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51342 10 6452 1 2025-10-31 04:49:52.673 00:05:00.421 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 04:54:02.789 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:42692 12 10375 1 2025-10-31 04:55:03.226 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39026 10 6452 1 2025-10-31 04:55:30.379 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 04:55:30.120 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 04:55:30.290 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 04:55:30.204 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:55:30.295 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 04:51:52.675 00:05:00.416 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 04:56:03.597 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46730 10 6452 1 2025-10-31 04:57:04.009 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:50236 10 6452 1 2025-10-31 04:58:04.429 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50084 10 6452 1 Summary: total flows: 139, total bytes: 414575, total packets: 1014, avg bps: 886, avg pps: 0, avg bpp: 408 Time window: 2025-10-31 03:55:52 - 2025-10-31 04:58:14 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0044s User: 0.0022s Wall: 0.0019s flows/second: 74363.3 Runtime: 0.0019s