Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 13:59:15.981 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58374 10 6452 1 2025-10-14 14:00:16.386 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54276 10 6452 1 2025-10-14 14:01:16.789 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:32808 10 6452 1 2025-10-14 14:02:29.954 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 14:02:17.209 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:38246 11 6504 1 2025-10-14 14:02:29.880 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 14:02:29.651 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:02:29.871 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:02:30.231 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 13:57:44.104 00:06:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 14:03:17.679 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:59230 10 6452 1 2025-10-14 14:04:18.107 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33702 10 6452 1 2025-10-14 14:05:18.471 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60680 10 6452 1 2025-10-14 14:00:44.109 00:06:00.448 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 14:06:18.870 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32898 10 6452 1 2025-10-14 14:07:30.041 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 14:07:19.273 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36972 10 6452 1 2025-10-14 14:07:30.011 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:07:30.037 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:07:29.840 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 14:07:30.119 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 14:08:19.677 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60462 10 6452 1 2025-10-14 14:09:20.048 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52096 10 6452 1 2025-10-14 14:04:44.109 00:06:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 14:10:20.449 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46398 10 6452 1 2025-10-14 14:11:20.856 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:53316 10 6452 1 2025-10-14 14:12:30.228 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 14:12:30.237 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 14:12:29.924 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:12:30.145 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:12:29.810 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 14:12:21.228 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43484 10 6452 1 2025-10-14 14:07:44.111 00:06:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 14:13:21.633 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48752 10 6452 1 2025-10-14 14:14:22.040 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51210 10 6452 1 2025-10-14 14:15:22.402 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44376 10 6452 1 2025-10-14 14:16:22.766 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33498 10 6452 1 2025-10-14 14:11:44.109 00:06:00.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 14:17:30.312 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 14:17:30.226 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 14:17:30.109 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:17:30.229 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:17:30.227 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 14:17:23.178 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57216 10 6452 1 2025-10-14 14:18:23.540 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49276 10 6452 1 2025-10-14 14:19:23.944 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56112 10 6452 1 2025-10-14 14:14:44.113 00:06:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 14:20:24.364 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49386 10 6452 1 2025-10-14 14:21:24.773 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34958 10 6452 1 2025-10-14 14:22:30.284 00:00:00.019 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 14:22:30.312 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:22:30.347 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:22:30.284 00:00:00.018 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 14:22:30.430 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 14:22:25.183 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49074 10 6452 1 2025-10-14 14:23:25.608 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55334 10 6452 1 2025-10-14 14:18:44.110 00:06:00.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 14:24:25.972 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43678 10 6452 1 2025-10-14 14:25:26.374 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36590 10 6452 1 2025-10-14 14:26:26.774 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36208 10 6452 1 2025-10-14 14:21:44.114 00:06:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 14:27:30.478 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 14:27:30.451 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 14:27:30.267 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:27:30.396 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:27:30.317 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 14:27:27.177 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45914 10 6452 1 2025-10-14 14:28:27.533 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:43350 10 6452 1 2025-10-14 14:29:27.935 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:40836 10 6452 1 2025-10-14 14:30:28.361 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44226 10 6452 1 2025-10-14 14:25:44.116 00:06:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 14:31:28.767 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:51680 10 6452 1 2025-10-14 14:32:30.562 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 14:32:30.602 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:32:30.459 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:32:30.714 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 14:32:30.542 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 14:32:29.186 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60212 10 6452 1 2025-10-14 14:33:29.590 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:43846 10 6452 1 2025-10-14 14:28:44.119 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 14:34:30.031 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59274 10 6452 1 2025-10-14 14:35:30.400 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47248 10 6452 1 2025-10-14 14:36:30.804 00:00:10.527 TCP 1.101.0.1:3000 -> 23.104.0.1:52064 10 6452 1 2025-10-14 14:37:30.684 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 14:37:30.601 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:37:30.603 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 14:37:30.748 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 14:37:30.574 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:37:31.369 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57132 10 6452 1 2025-10-14 14:32:44.119 00:06:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 14:38:31.764 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54912 10 6452 1 2025-10-14 14:39:32.179 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54362 10 6452 1 2025-10-14 14:40:32.577 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38144 10 6452 1 2025-10-14 14:35:44.122 00:06:00.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 14:41:32.984 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41626 10 6452 1 2025-10-14 14:42:30.526 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 14:42:30.655 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:42:30.778 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:42:30.616 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 14:42:30.861 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 14:42:33.344 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42254 10 6452 1 2025-10-14 14:43:33.752 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54444 10 6452 1 2025-10-14 14:39:44.122 00:06:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 14:44:34.113 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36914 10 6452 1 2025-10-14 14:45:34.477 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51078 10 6452 1 2025-10-14 14:46:34.876 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40688 10 6452 1 2025-10-14 14:47:30.826 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 14:47:30.740 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 14:47:30.476 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:47:30.744 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:47:30.627 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 14:47:35.281 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51644 10 6452 1 2025-10-14 14:42:44.125 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 14:48:35.646 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51622 10 6452 1 2025-10-14 14:49:36.053 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58856 10 6452 1 2025-10-14 14:50:36.465 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52444 10 6452 1 2025-10-14 14:46:44.124 00:06:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 14:51:36.867 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36514 10 6452 1 2025-10-14 14:52:30.838 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:52:30.760 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 14:52:31.217 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 14:52:31.218 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:52:31.301 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 14:52:37.274 00:00:10.605 TCP 1.101.0.1:3000 -> 23.104.0.1:48880 10 6452 1 2025-10-14 14:53:37.918 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47838 10 6452 1 2025-10-14 14:49:44.126 00:06:00.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 14:54:38.321 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48924 10 6452 1 2025-10-14 14:55:38.728 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42998 10 6452 1 2025-10-14 14:56:39.108 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42632 10 6452 1 2025-10-14 14:57:30.818 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 14:57:30.826 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:57:30.903 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 14:57:30.986 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 14:57:30.986 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 14:57:39.513 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58278 10 6452 1 2025-10-14 14:53:44.124 00:06:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 14:58:39.918 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56236 10 6452 1 Summary: total flows: 137, total bytes: 416929, total packets: 1019, avg bps: 896, avg pps: 0, avg bpp: 409 Time window: 2025-10-14 13:57:44 - 2025-10-14 14:59:44 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0026s User: 0.0017s Wall: 0.0018s flows/second: 76028.0 Runtime: 0.0018s