Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 08:58:50.897 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42624 10 6452 1 2025-10-31 08:55:52.754 00:05:00.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 08:59:51.310 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58188 10 6452 1 2025-10-31 09:00:35.071 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 09:00:35.186 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 09:00:35.099 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:00:35.145 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:00:35.229 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 09:00:51.719 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:48100 10 6452 1 2025-10-31 08:57:52.763 00:05:00.432 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 09:01:52.133 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54622 10 6452 1 2025-10-31 09:02:52.546 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50660 10 6452 1 2025-10-31 09:03:52.949 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:57334 12 10375 1 2025-10-31 09:04:53.433 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48038 10 6452 1 2025-10-31 09:05:35.361 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 09:05:35.359 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 09:05:35.278 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:05:35.123 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:05:35.208 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 09:01:52.761 00:05:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 09:05:53.836 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:54050 10 6452 1 2025-10-31 09:06:54.223 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47560 10 6452 1 2025-10-31 09:03:52.765 00:05:00.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 09:07:54.628 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46808 10 6452 1 2025-10-31 09:08:55.029 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:40600 10 6452 1 2025-10-31 09:09:55.423 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45804 10 6452 1 2025-10-31 09:10:35.402 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 09:10:35.294 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:10:35.363 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:10:35.181 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 09:10:35.445 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 09:10:55.784 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34112 10 6452 1 2025-10-31 09:07:52.764 00:05:00.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 09:11:56.191 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59360 10 6452 1 2025-10-31 09:12:56.598 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45358 10 6452 1 2025-10-31 09:09:52.766 00:05:00.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 09:13:56.968 00:00:11.030 TCP 1.101.0.1:3000 -> 23.104.0.1:44506 12 10369 1 2025-10-31 09:14:58.102 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:34022 10 6452 1 2025-10-31 09:15:35.522 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 09:15:35.388 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 09:15:35.431 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:15:35.477 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:15:35.561 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 09:15:58.502 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43644 10 6452 1 2025-10-31 09:16:58.909 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42374 10 6452 1 2025-10-31 09:13:52.764 00:05:00.442 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 09:17:59.318 00:00:11.075 TCP 1.101.0.1:3000 -> 23.104.0.1:60142 10 6452 1 2025-10-31 09:19:00.434 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41364 10 6452 1 2025-10-31 09:15:52.768 00:05:00.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 09:20:00.837 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:35638 10 6452 1 2025-10-31 09:20:35.467 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 09:20:35.403 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 09:20:35.506 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:20:35.643 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:20:35.727 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 09:21:01.276 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40852 10 6452 1 2025-10-31 09:22:01.685 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36536 10 6452 1 2025-10-31 09:23:02.113 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34708 10 6452 1 2025-10-31 09:19:52.766 00:05:00.442 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 09:24:02.522 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52940 10 6452 1 2025-10-31 09:25:02.925 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33394 10 6452 1 2025-10-31 09:25:35.643 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 09:25:35.689 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 09:25:35.597 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:25:35.644 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:25:35.727 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 09:21:52.769 00:05:00.438 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 09:26:03.333 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:37224 10 6452 1 2025-10-31 09:27:03.744 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42984 10 6452 1 2025-10-31 09:28:04.147 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59684 10 6452 1 2025-10-31 09:29:04.550 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34372 10 6452 1 2025-10-31 09:25:52.768 00:05:00.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 09:30:04.954 00:00:11.122 TCP 1.101.0.1:3000 -> 23.104.0.1:40604 10 6452 1 2025-10-31 09:30:35.864 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 09:30:35.734 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 09:30:35.648 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 09:30:35.576 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:30:35.781 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:31:06.117 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54388 10 6452 1 2025-10-31 09:27:52.771 00:05:00.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 09:32:06.520 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47390 10 6452 1 2025-10-31 09:33:06.921 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46052 10 6452 1 2025-10-31 09:34:07.278 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59002 10 6452 1 2025-10-31 09:35:07.681 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:54762 10 6452 1 2025-10-31 09:35:36.214 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 09:35:36.396 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 09:35:36.287 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:35:35.689 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:35:35.772 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 09:31:52.775 00:05:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 09:36:08.060 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58138 10 6452 1 2025-10-31 09:37:08.468 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57646 10 6452 1 2025-10-31 09:33:52.777 00:05:00.438 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 09:38:08.840 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:43718 10 6452 1 2025-10-31 09:39:09.234 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34004 10 6452 1 2025-10-31 09:40:09.596 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43616 10 6452 1 2025-10-31 09:40:36.017 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 09:40:35.866 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 09:40:36.010 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 09:40:35.761 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:40:35.934 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:41:10.001 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45736 10 6452 1 2025-10-31 09:37:52.776 00:05:00.442 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 09:42:10.364 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40880 10 6452 1 2025-10-31 09:43:10.733 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47494 10 6452 1 2025-10-31 09:39:52.779 00:05:00.436 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 09:44:11.150 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46544 10 6452 1 2025-10-31 09:45:11.518 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46838 10 6452 1 2025-10-31 09:45:36.111 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 09:45:36.048 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 09:45:35.894 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:45:36.037 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:45:36.120 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 09:46:11.882 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41192 10 6452 1 2025-10-31 09:47:12.287 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45030 10 6452 1 2025-10-31 09:43:52.778 00:05:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 09:48:12.688 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56710 10 6452 1 2025-10-31 09:49:13.065 00:00:10.797 TCP 1.101.0.1:3000 -> 23.104.0.1:41964 10 6452 1 2025-10-31 09:45:52.779 00:05:00.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 09:50:13.901 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56656 10 6452 1 2025-10-31 09:50:35.995 00:00:00.048 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 09:50:36.070 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:50:36.261 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:50:36.260 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 09:50:36.344 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 09:51:14.302 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56302 10 6452 1 2025-10-31 09:52:14.709 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53714 10 6452 1 2025-10-31 09:53:15.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 10 6452 1 2025-10-31 09:49:52.778 00:05:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 09:54:15.512 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33124 10 6452 1 2025-10-31 09:55:15.875 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41166 10 6452 1 2025-10-31 09:55:36.386 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 09:55:35.953 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 09:55:36.207 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 09:55:36.243 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:55:36.304 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 09:51:52.781 00:05:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 09:56:16.283 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35866 10 6452 1 2025-10-31 09:57:16.682 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38012 10 6452 1 2025-10-31 09:58:17.104 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60732 10 6452 1 Summary: total flows: 140, total bytes: 424840, total packets: 1024, avg bps: 905, avg pps: 0, avg bpp: 414 Time window: 2025-10-31 08:55:52 - 2025-10-31 09:58:27 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0021s User: 0.0021s Wall: 0.0017s flows/second: 81589.9 Runtime: 0.0017s