Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 13:58:56.018 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:44854 12 10375 1 2025-10-31 13:55:52.880 00:05:00.406 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 13:59:56.501 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43784 10 6452 1 2025-10-31 14:00:41.631 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:00:41.608 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:00:41.436 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:00:41.616 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:00:41.699 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:00:56.908 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:33358 10 6452 1 2025-10-31 13:57:52.884 00:05:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:01:57.275 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59714 10 6452 1 2025-10-31 14:02:57.682 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60088 10 6452 1 2025-10-31 14:03:58.114 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47602 10 6452 1 2025-10-31 14:04:58.520 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55430 10 6452 1 2025-10-31 14:05:41.164 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:05:41.165 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:05:41.165 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:05:40.927 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:05:41.082 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:01:52.886 00:05:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:05:58.883 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:44226 10 6452 1 2025-10-31 14:06:59.309 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49318 10 6452 1 2025-10-31 14:03:52.888 00:05:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:07:59.709 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35738 10 6452 1 2025-10-31 14:09:00.097 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44974 10 6452 1 2025-10-31 14:10:00.500 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56810 10 6452 1 2025-10-31 14:10:41.601 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:10:41.215 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:10:41.468 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:10:41.322 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:10:41.518 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:11:00.907 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40054 10 6452 1 2025-10-31 14:07:52.886 00:05:00.405 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:12:01.309 00:00:10.796 TCP 1.101.0.1:3000 -> 23.104.0.1:38278 10 6452 1 2025-10-31 14:13:02.143 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32866 10 6452 1 2025-10-31 14:09:52.890 00:05:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:14:02.549 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38654 10 6452 1 2025-10-31 14:15:02.964 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52276 10 6452 1 2025-10-31 14:15:41.306 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:15:41.532 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:15:41.230 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:15:41.475 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:15:41.557 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:16:03.366 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47474 10 6452 1 2025-10-31 14:17:03.727 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39440 10 6452 1 2025-10-31 14:13:52.888 00:05:00.405 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:18:04.139 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45912 10 6452 1 2025-10-31 14:19:04.559 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38728 10 6452 1 2025-10-31 14:15:52.892 00:05:00.400 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:20:04.967 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35104 10 6452 1 2025-10-31 14:20:41.653 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:20:41.399 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:20:41.570 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:20:41.579 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:20:41.570 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:21:05.339 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50056 10 6452 1 2025-10-31 14:22:05.752 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51874 10 6452 1 2025-10-31 14:23:06.162 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52372 10 6452 1 2025-10-31 14:19:52.891 00:05:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:24:06.566 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36332 10 6452 1 2025-10-31 14:25:06.971 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51666 10 6452 1 2025-10-31 14:25:42.161 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:25:41.944 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:25:41.870 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:25:41.965 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:25:42.078 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:21:52.896 00:05:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:26:07.383 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51696 10 6452 1 2025-10-31 14:27:07.787 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37976 10 6452 1 2025-10-31 14:28:08.193 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:60722 10 6452 1 2025-10-31 14:29:08.557 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38746 10 6452 1 2025-10-31 14:25:52.893 00:05:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:30:08.959 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51278 10 6452 1 2025-10-31 14:30:41.927 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:30:41.703 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:30:41.743 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:30:41.742 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:30:41.826 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:31:09.358 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60760 10 6452 1 2025-10-31 14:27:52.896 00:05:00.400 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:32:09.759 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34944 10 6452 1 2025-10-31 14:33:10.126 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33338 10 6452 1 2025-10-31 14:34:10.483 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:43838 12 10369 1 2025-10-31 14:35:10.922 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:53924 10 6452 1 2025-10-31 14:35:41.683 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:35:41.940 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:35:41.591 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:35:41.829 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:35:41.911 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:31:52.893 00:05:00.407 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:36:11.317 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55528 10 6452 1 2025-10-31 14:37:11.682 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34750 10 6452 1 2025-10-31 14:33:52.898 00:05:00.400 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:38:12.102 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42954 10 6452 1 2025-10-31 14:39:12.504 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52884 10 6452 1 2025-10-31 14:40:12.905 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49890 10 6452 1 2025-10-31 14:40:41.969 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:40:41.807 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:40:41.655 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:40:41.975 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:40:42.058 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:41:13.320 00:00:12.409 TCP 1.101.0.1:3000 -> 23.104.0.1:37918 10 6452 1 2025-10-31 14:37:52.897 00:05:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:42:15.787 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55574 10 6452 1 2025-10-31 14:43:16.147 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33708 10 6452 1 2025-10-31 14:39:52.900 00:05:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:44:16.552 00:00:10.815 TCP 1.101.0.1:3000 -> 23.104.0.1:40246 10 6452 1 2025-10-31 14:45:17.402 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58670 10 6452 1 2025-10-31 14:45:42.170 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:45:41.978 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:45:41.863 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:45:42.087 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:45:42.171 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:46:17.760 00:00:10.634 TCP 1.101.0.1:3000 -> 23.104.0.1:39440 10 6452 1 2025-10-31 14:47:18.433 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47474 10 6452 1 2025-10-31 14:43:52.901 00:05:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:48:18.846 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:33004 10 6452 1 2025-10-31 14:49:19.270 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48406 10 6452 1 2025-10-31 14:45:52.904 00:05:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:50:19.668 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41820 10 6452 1 2025-10-31 14:50:42.308 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:50:42.269 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:50:42.314 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:50:42.212 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:50:42.225 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:51:20.097 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58444 10 6452 1 2025-10-31 14:52:20.494 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49638 10 6452 1 2025-10-31 14:53:20.909 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51006 10 6452 1 2025-10-31 14:49:52.901 00:05:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:54:21.314 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34204 10 6452 1 2025-10-31 14:55:21.718 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:35058 10 6452 1 2025-10-31 14:55:42.373 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:55:42.476 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:55:42.499 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:55:42.479 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:55:42.562 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:51:52.905 00:05:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:56:22.149 00:00:11.855 TCP 1.101.0.1:3000 -> 23.104.0.1:59452 10 6452 1 2025-10-31 14:57:24.040 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49556 10 6452 1 2025-10-31 14:58:24.442 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34474 10 6452 1 Summary: total flows: 140, total bytes: 424840, total packets: 1024, avg bps: 903, avg pps: 0, avg bpp: 414 Time window: 2025-10-31 13:55:52 - 2025-10-31 14:58:34 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0029s User: 0.0019s Wall: 0.0019s flows/second: 71978.7 Runtime: 0.0020s