Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 11:59:07.217 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44690 10 6452 1 2025-10-31 11:55:52.830 00:05:00.418 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 12:00:07.627 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35012 10 6452 1 2025-10-31 12:00:38.828 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 12:00:38.963 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 12:00:38.855 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:00:38.737 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:00:38.821 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 12:01:08.092 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46288 10 6452 1 2025-10-31 11:57:52.833 00:05:00.413 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 12:02:08.497 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51910 10 6452 1 2025-10-31 12:03:08.900 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45860 10 6452 1 2025-10-31 12:04:09.303 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47564 10 6452 1 2025-10-31 12:05:09.708 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38654 10 6452 1 2025-10-31 12:05:38.732 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 12:05:38.973 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 12:05:38.687 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:05:38.752 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:05:38.838 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 12:01:52.831 00:05:00.418 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 12:06:10.091 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38158 10 6452 1 2025-10-31 12:07:10.494 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35226 10 6452 1 2025-10-31 12:03:52.834 00:05:00.413 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 12:08:10.861 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42302 10 6452 1 2025-10-31 12:09:11.271 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37308 10 6452 1 2025-10-31 12:10:11.679 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:33170 10 6452 1 2025-10-31 12:10:38.991 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 12:10:39.233 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 12:10:39.153 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:10:39.122 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:10:39.205 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 12:11:12.101 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44208 10 6452 1 2025-10-31 12:07:52.832 00:05:00.419 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 12:12:12.500 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56030 10 6452 1 2025-10-31 12:13:12.908 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55196 10 6452 1 2025-10-31 12:09:52.835 00:05:00.414 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 12:14:13.312 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:38020 12 10375 1 2025-10-31 12:15:13.794 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52688 10 6452 1 2025-10-31 12:15:39.201 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 12:15:38.879 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 12:15:39.008 00:00:00.037 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:15:39.080 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:15:39.162 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 12:16:14.189 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:58720 10 6452 1 2025-10-31 12:17:14.615 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51144 10 6452 1 2025-10-31 12:13:52.835 00:05:00.419 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 12:18:15.021 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38720 10 6452 1 2025-10-31 12:19:15.439 00:00:10.427 TCP 1.101.0.1:3000 -> 23.104.0.1:53070 10 6452 1 2025-10-31 12:15:52.842 00:05:00.407 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 12:20:15.911 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35426 10 6452 1 2025-10-31 12:20:38.971 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 12:20:39.274 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 12:20:38.864 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:20:39.095 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:20:39.179 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 12:21:16.321 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47970 10 6452 1 2025-10-31 12:22:16.726 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43250 10 6452 1 2025-10-31 12:23:17.135 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43656 10 6452 1 2025-10-31 12:19:52.841 00:05:00.415 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 12:24:17.533 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33558 10 6452 1 2025-10-31 12:25:17.934 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:44282 10 6452 1 2025-10-31 12:25:39.213 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 12:25:39.224 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:25:39.402 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:25:39.213 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 12:25:39.485 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 12:21:52.843 00:05:00.410 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 12:26:18.322 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46436 10 6452 1 2025-10-31 12:27:18.725 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53062 10 6452 1 2025-10-31 12:28:19.143 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53372 10 6452 1 2025-10-31 12:29:19.544 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36886 10 6452 1 2025-10-31 12:25:52.849 00:05:00.410 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 12:30:19.952 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37640 10 6452 1 2025-10-31 12:30:39.670 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 12:30:39.399 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 12:30:39.218 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:30:39.588 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:30:39.446 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 12:31:20.367 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38100 10 6452 1 2025-10-31 12:27:52.852 00:05:00.405 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 12:32:20.768 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60336 10 6452 1 2025-10-31 12:33:21.175 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44304 10 6452 1 2025-10-31 12:34:21.577 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49316 10 6452 1 2025-10-31 12:35:21.977 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43192 10 6452 1 2025-10-31 12:35:39.775 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 12:35:39.256 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:35:39.774 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 12:35:40.062 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 12:35:39.979 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:31:52.849 00:05:00.413 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 12:36:22.383 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36280 10 6452 1 2025-10-31 12:37:22.746 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45868 10 6452 1 2025-10-31 12:33:52.853 00:05:00.409 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 12:38:23.151 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46570 10 6452 1 2025-10-31 12:39:23.518 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44134 10 6452 1 2025-10-31 12:40:23.923 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:44606 10 6452 1 2025-10-31 12:40:39.575 00:00:00.020 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 12:40:39.507 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 12:40:39.524 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:40:39.513 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:40:39.596 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 12:41:24.350 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37430 10 6452 1 2025-10-31 12:37:52.854 00:05:00.411 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 12:42:24.709 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34856 10 6452 1 2025-10-31 12:43:25.120 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:35030 12 10375 1 2025-10-31 12:39:52.856 00:05:00.408 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 12:44:25.560 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51888 10 6452 1 2025-10-31 12:45:39.596 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 12:45:39.765 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 12:45:39.615 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:45:25.923 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:45550 10 6452 1 2025-10-31 12:45:39.664 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:45:39.748 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 12:46:26.287 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54188 10 6452 1 2025-10-31 12:47:26.699 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56220 10 6452 1 2025-10-31 12:43:52.860 00:05:00.409 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 12:48:27.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47116 10 6452 1 2025-10-31 12:49:27.520 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41978 10 6452 1 2025-10-31 12:45:52.861 00:05:00.406 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 12:50:39.784 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 12:50:39.773 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 12:50:39.709 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 12:50:39.616 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:50:39.702 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:50:27.925 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:48620 10 6452 1 2025-10-31 12:51:28.349 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:32862 10 6452 1 2025-10-31 12:52:28.709 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49056 10 6452 1 2025-10-31 12:53:29.113 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56168 10 6452 1 2025-10-31 12:49:52.860 00:05:00.409 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 12:54:29.530 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37852 10 6452 1 2025-10-31 12:55:39.580 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:55:39.869 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 12:55:39.784 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 12:55:39.941 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 12:55:39.953 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 12:55:29.938 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49586 10 6452 1 2025-10-31 12:51:52.864 00:05:00.404 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 12:56:30.351 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56254 10 6452 1 2025-10-31 12:57:30.757 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:59304 10 6452 1 2025-10-31 12:58:31.141 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41688 10 6452 1 Summary: total flows: 140, total bytes: 424846, total packets: 1024, avg bps: 901, avg pps: 0, avg bpp: 414 Time window: 2025-10-31 11:55:52 - 2025-10-31 12:58:41 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0046s User: 0.0015s Wall: 0.0026s flows/second: 54245.0 Runtime: 0.0026s