Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 12:59:31.544 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34052 10 6452 1 2025-10-31 12:55:52.864 00:05:00.408 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 13:00:39.850 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 13:00:31.950 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47242 10 6452 1 2025-10-31 13:00:40.111 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 13:00:40.084 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:00:40.013 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:00:40.095 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 13:01:32.318 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:59536 10 6452 1 2025-10-31 12:57:52.865 00:05:00.405 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 13:02:32.678 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36072 10 6452 1 2025-10-31 13:03:33.049 00:00:10.517 TCP 1.101.0.1:3000 -> 23.104.0.1:55780 14 14292 1 2025-10-31 13:04:33.599 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35872 10 6452 1 2025-10-31 13:05:39.912 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 13:05:39.842 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:05:40.113 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 13:05:40.114 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:05:34.008 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41794 10 6452 1 2025-10-31 13:05:40.196 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 13:01:52.863 00:05:00.410 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 13:06:34.410 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54794 10 6452 1 2025-10-31 13:07:34.818 00:00:10.464 TCP 1.101.0.1:3000 -> 23.104.0.1:46894 10 6452 1 2025-10-31 13:03:52.866 00:05:00.406 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 13:08:35.318 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:32866 10 6452 1 2025-10-31 13:09:35.683 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48706 10 6452 1 2025-10-31 13:10:39.804 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:10:40.305 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 13:10:40.259 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 13:10:39.979 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 13:10:40.222 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:10:36.113 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55394 10 6452 1 2025-10-31 13:11:36.476 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40006 10 6452 1 2025-10-31 13:07:52.865 00:05:00.411 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 13:12:36.880 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:52708 10 6452 1 2025-10-31 13:13:37.256 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:43928 10 6452 1 2025-10-31 13:09:52.869 00:05:00.405 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 13:14:37.627 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:45366 10 6452 1 2025-10-31 13:15:40.347 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 13:15:40.277 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 13:15:40.569 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:15:40.265 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:15:40.599 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 13:15:38.057 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47898 10 6452 1 2025-10-31 13:16:38.461 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42114 10 6452 1 2025-10-31 13:17:38.869 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55142 10 6452 1 2025-10-31 13:13:52.867 00:05:00.410 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 13:18:39.285 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:48032 10 6452 1 2025-10-31 13:15:52.871 00:05:00.406 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 13:19:39.715 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:42770 10 6452 1 2025-10-31 13:20:40.055 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 13:20:40.327 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 13:20:40.298 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:20:40.044 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:20:40.127 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 13:20:40.150 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52928 10 6452 1 2025-10-31 13:21:40.550 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45912 10 6452 1 2025-10-31 13:22:40.950 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50290 10 6452 1 2025-10-31 13:19:52.871 00:05:00.410 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 13:23:41.363 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45392 10 6452 1 2025-10-31 13:24:41.768 00:00:10.476 TCP 1.101.0.1:3000 -> 23.104.0.1:49080 10 6452 1 2025-10-31 13:25:40.543 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 13:25:40.490 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 13:25:40.159 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:25:40.492 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:25:40.574 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 13:21:52.873 00:05:00.405 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 13:25:42.285 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52982 10 6452 1 2025-10-31 13:26:42.684 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50184 10 6452 1 2025-10-31 13:27:43.066 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36478 10 6452 1 2025-10-31 13:28:43.428 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51578 10 6452 1 2025-10-31 13:29:43.832 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:39000 10 6452 1 2025-10-31 13:25:52.873 00:05:00.409 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 13:30:40.624 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 13:30:40.566 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 13:30:40.370 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:30:40.553 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:30:40.637 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 13:30:44.264 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46042 10 6452 1 2025-10-31 13:27:52.875 00:05:00.404 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 13:31:44.672 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41104 10 6452 1 2025-10-31 13:32:45.106 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51186 10 6452 1 2025-10-31 13:33:45.513 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54342 10 6452 1 2025-10-31 13:34:45.912 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54754 12 6556 1 2025-10-31 13:35:40.831 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 13:35:40.547 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 13:35:40.697 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 13:35:40.629 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:35:40.748 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:31:52.873 00:05:00.409 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 13:35:46.316 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50212 10 6452 1 2025-10-31 13:36:46.713 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58058 10 6452 1 2025-10-31 13:33:52.875 00:05:00.405 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 13:37:47.119 00:00:10.659 TCP 1.101.0.1:3000 -> 23.104.0.1:45442 10 6452 1 2025-10-31 13:38:47.816 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52978 10 6452 1 2025-10-31 13:39:48.224 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40024 10 6452 1 2025-10-31 13:40:41.044 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 13:40:40.795 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 13:40:40.692 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 13:40:40.875 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:40:40.961 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:40:48.636 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48750 10 6452 1 2025-10-31 13:37:52.874 00:05:00.409 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 13:41:49.067 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33222 10 6452 1 2025-10-31 13:42:49.480 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45562 10 6452 1 2025-10-31 13:39:52.877 00:05:00.404 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 13:43:49.880 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:44150 10 6452 1 2025-10-31 13:44:50.329 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43262 10 6452 1 2025-10-31 13:45:40.940 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 13:45:40.981 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 13:45:40.610 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 13:45:40.734 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:45:40.857 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:45:50.734 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44652 10 6452 1 2025-10-31 13:46:51.151 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35292 10 6452 1 2025-10-31 13:43:52.874 00:05:00.409 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 13:47:51.562 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52790 10 6452 1 2025-10-31 13:48:51.967 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:37980 10 6452 1 2025-10-31 13:45:52.879 00:05:00.403 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 13:49:52.384 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53858 10 6452 1 2025-10-31 13:50:41.135 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 13:50:41.052 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:50:41.164 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 13:50:40.697 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 13:50:40.897 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:50:52.792 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57676 10 6452 1 2025-10-31 13:51:53.196 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49370 10 6452 1 2025-10-31 13:52:53.554 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59200 10 6452 1 2025-10-31 13:49:52.881 00:05:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 13:53:53.971 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:47240 10 6452 1 2025-10-31 13:54:54.395 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60310 10 6452 1 2025-10-31 13:55:41.202 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 13:55:40.859 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 13:55:40.969 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 13:55:41.130 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:55:41.120 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 13:51:52.880 00:05:00.402 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 13:55:54.795 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59672 10 6452 1 2025-10-31 13:56:55.208 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47732 10 6452 1 2025-10-31 13:57:55.614 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36814 10 6452 1 Summary: total flows: 139, total bytes: 418492, total packets: 1016, avg bps: 896, avg pps: 0, avg bpp: 411 Time window: 2025-10-31 12:55:52 - 2025-10-31 13:58:05 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0035s User: 0.0026s Wall: 0.0022s flows/second: 61890.5 Runtime: 0.0023s