Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 10:59:01.388 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44614 10 6452 1 2025-10-14 11:00:01.800 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57400 10 6452 1 2025-10-14 10:55:44.063 00:06:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 11:01:02.197 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46498 10 6452 1 2025-10-14 11:02:02.606 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38952 10 6452 1 2025-10-14 11:02:26.274 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 11:02:26.319 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 11:02:26.224 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:02:26.191 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:02:26.188 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 11:03:03.008 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51162 10 6452 1 2025-10-14 10:58:44.066 00:06:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 11:04:03.406 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60718 10 6452 1 2025-10-14 11:05:03.772 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39802 10 6452 1 2025-10-14 11:06:04.179 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:36942 12 10375 1 2025-10-14 11:07:04.607 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57906 10 6452 1 2025-10-14 11:07:26.399 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 11:07:26.329 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 11:07:26.259 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:07:26.318 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:07:26.416 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 11:02:44.065 00:06:00.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 11:08:05.010 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42020 10 6452 1 2025-10-14 11:09:05.410 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40918 10 6452 1 2025-10-14 11:10:05.808 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38078 10 6452 1 2025-10-14 11:05:44.071 00:06:00.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 11:11:06.209 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43602 10 6452 1 2025-10-14 11:12:06.616 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54450 10 6452 1 2025-10-14 11:12:26.600 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 11:12:26.727 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 11:12:26.420 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:12:26.518 00:00:00.042 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:12:26.528 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 11:13:06.981 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43072 10 6452 1 2025-10-14 11:14:07.388 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48534 10 6452 1 2025-10-14 11:09:44.067 00:06:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 11:15:07.749 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58138 10 6452 1 2025-10-14 11:16:08.154 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57984 10 6452 1 2025-10-14 11:17:08.553 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45126 10 6452 1 2025-10-14 11:17:26.741 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 11:17:26.665 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 11:17:26.307 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:17:26.660 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:17:26.662 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 11:12:44.070 00:06:00.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 11:18:08.952 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40126 10 6452 1 2025-10-14 11:19:09.365 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51134 10 6452 1 2025-10-14 11:20:09.768 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50570 10 6452 1 2025-10-14 11:21:10.191 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45244 10 6452 1 2025-10-14 11:16:44.068 00:06:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 11:22:10.593 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41904 10 6452 1 2025-10-14 11:22:26.761 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 11:22:26.807 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 11:22:26.451 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:22:26.680 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:22:26.587 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 11:23:11.022 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42962 10 6452 1 2025-10-14 11:24:11.433 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37324 10 6452 1 2025-10-14 11:19:44.071 00:06:00.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 11:25:11.841 00:00:10.471 TCP 1.101.0.1:3000 -> 23.104.0.1:47486 10 6452 1 2025-10-14 11:26:12.352 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55704 10 6452 1 2025-10-14 11:27:12.756 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:55600 10 6452 1 2025-10-14 11:27:27.057 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 11:27:26.806 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 11:27:26.641 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:27:26.975 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:27:26.618 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 11:28:13.146 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43756 10 6452 1 2025-10-14 11:23:44.070 00:06:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 11:29:13.551 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33800 10 6452 1 2025-10-14 11:30:13.964 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37770 10 6452 1 2025-10-14 11:31:14.371 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42474 10 6452 1 2025-10-14 11:26:44.072 00:06:00.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 11:32:14.743 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45958 10 6452 1 2025-10-14 11:32:27.132 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 11:32:26.738 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:32:27.134 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:32:27.034 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 11:32:27.219 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 11:33:15.146 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42754 10 6452 1 2025-10-14 11:34:15.541 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57070 10 6452 1 2025-10-14 11:35:15.945 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:51416 10 6452 1 2025-10-14 11:30:44.069 00:06:00.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 11:36:16.365 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53778 10 6452 1 2025-10-14 11:37:26.882 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 11:37:16.760 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:56750 10 6452 1 2025-10-14 11:37:26.746 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:37:26.958 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:37:26.893 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 11:37:27.040 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 11:38:17.129 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48230 10 6452 1 2025-10-14 11:33:44.073 00:06:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 11:39:17.493 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33398 10 6452 1 2025-10-14 11:40:17.860 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51442 10 6452 1 2025-10-14 11:41:18.274 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42190 10 6452 1 2025-10-14 11:42:27.164 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 11:42:27.086 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 11:42:26.932 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:42:27.081 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:42:27.089 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 11:42:18.676 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:57370 10 6452 1 2025-10-14 11:37:44.072 00:06:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 11:43:19.116 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41158 10 6452 1 2025-10-14 11:44:19.521 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57702 10 6452 1 2025-10-14 11:45:19.921 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56456 10 6452 1 2025-10-14 11:40:44.076 00:06:00.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 11:46:20.342 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:40310 10 6452 1 2025-10-14 11:47:27.095 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 11:47:26.917 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:47:27.091 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:47:26.976 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 11:47:27.173 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 11:47:20.697 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51556 10 6452 1 2025-10-14 11:48:21.106 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55638 10 6452 1 2025-10-14 11:49:21.512 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53298 10 6452 1 2025-10-14 11:44:44.076 00:06:00.437 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 11:50:21.917 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55742 11 6492 1 2025-10-14 11:51:22.337 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:43708 11 6504 1 2025-10-14 11:52:27.446 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 11:52:27.238 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 11:52:27.174 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:52:27.363 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:52:27.247 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 11:52:22.818 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58910 10 6452 1 2025-10-14 11:47:44.081 00:06:00.434 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 11:53:23.223 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47174 10 6452 1 2025-10-14 11:54:23.629 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39910 10 6452 1 2025-10-14 11:55:24.052 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:53604 10 6452 1 2025-10-14 11:56:24.547 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37696 10 6452 1 2025-10-14 11:51:44.079 00:06:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 11:57:27.519 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 11:57:27.440 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 11:57:27.196 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:57:27.436 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 11:57:27.440 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 11:57:24.950 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34910 10 6452 1 2025-10-14 11:58:25.366 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35710 10 6452 1 Summary: total flows: 137, total bytes: 420892, total packets: 1022, avg bps: 892, avg pps: 0, avg bpp: 411 Time window: 2025-10-14 10:55:44 - 2025-10-14 11:58:35 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0038s User: 0.0009s Wall: 0.0029s flows/second: 47371.8 Runtime: 0.0029s