Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 08:59:03.229 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42784 10 6452 1 2025-10-20 08:54:47.119 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 09:00:03.630 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50976 10 6452 1 2025-10-20 09:00:17.350 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:00:17.187 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:00:17.239 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:00:17.227 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 09:00:17.322 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 09:01:04.030 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:46590 10 6452 1 2025-10-20 09:02:04.477 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59088 10 6452 1 2025-10-20 09:03:04.885 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:54466 12 6556 1 2025-10-20 09:04:05.319 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:46980 10 6452 1 2025-10-20 08:59:47.124 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 09:05:17.316 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 09:05:05.699 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:32800 10 6452 1 2025-10-20 09:05:17.377 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:05:17.056 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:05:17.234 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:05:17.135 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 09:06:06.124 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40282 10 6452 1 2025-10-20 09:01:47.121 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 09:07:06.528 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40112 10 6452 1 2025-10-20 09:08:06.893 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:57234 12 6556 1 2025-10-20 09:09:07.306 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49936 10 6452 1 2025-10-20 09:10:17.606 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 09:10:17.585 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:10:07.710 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42556 10 6452 1 2025-10-20 09:10:17.391 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:10:17.524 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:10:17.514 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 09:11:08.135 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39590 10 6452 1 2025-10-20 09:06:47.125 00:06:00.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 09:12:08.539 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50634 10 6452 1 2025-10-20 09:13:08.941 00:00:10.522 TCP 1.101.0.1:3000 -> 23.104.0.1:54378 14 14292 1 2025-10-20 09:08:47.123 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 09:14:09.500 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59750 10 6452 1 2025-10-20 09:15:17.446 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:15:17.278 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:15:17.345 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:15:17.510 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 09:15:09.902 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55796 10 6452 1 2025-10-20 09:15:17.427 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 09:16:10.309 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36120 10 6452 1 2025-10-20 09:17:10.714 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45610 10 6452 1 2025-10-20 09:18:11.115 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36462 10 6452 1 2025-10-20 09:13:47.127 00:06:00.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 09:19:11.519 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49396 10 6452 1 2025-10-20 09:20:17.688 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 09:20:17.499 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:20:17.632 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:20:17.605 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:20:17.606 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 09:20:11.931 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:41330 10 6452 1 2025-10-20 09:15:47.124 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 09:21:12.362 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48562 10 6452 1 2025-10-20 09:22:12.771 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:51456 10 6452 1 2025-10-20 09:23:13.143 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:45610 10 6452 1 2025-10-20 09:24:13.506 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:58148 10 6452 1 2025-10-20 09:25:17.857 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 09:25:17.769 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:25:17.793 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:25:17.774 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:25:17.770 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 09:25:13.907 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35526 12 6556 1 2025-10-20 09:20:47.128 00:06:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 09:26:14.311 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54020 10 6452 1 2025-10-20 09:27:14.716 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60038 10 6452 1 2025-10-20 09:22:47.127 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 09:28:15.132 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55836 10 6452 1 2025-10-20 09:29:15.540 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47700 10 6452 1 2025-10-20 09:30:17.930 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 09:30:17.848 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:30:17.898 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:30:17.847 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:30:17.848 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 09:30:15.948 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46774 10 6452 1 2025-10-20 09:31:16.365 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54870 10 6452 1 2025-10-20 09:32:16.729 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43326 10 6452 1 2025-10-20 09:27:47.133 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 09:33:17.108 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51322 10 6452 1 2025-10-20 09:34:17.511 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33714 10 6452 1 2025-10-20 09:29:47.130 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 09:35:17.844 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:35:17.765 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:35:17.740 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:35:17.736 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 09:35:17.822 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 09:35:17.941 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58066 10 6452 1 2025-10-20 09:36:18.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52346 10 6452 1 2025-10-20 09:37:18.767 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:46338 10 6452 1 2025-10-20 09:38:19.177 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36776 10 6452 1 2025-10-20 09:39:19.542 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39608 10 6452 1 2025-10-20 09:34:47.132 00:06:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 09:40:17.736 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:40:17.660 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:40:17.842 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:40:17.959 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 09:40:17.925 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 09:40:19.939 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:51252 10 6452 1 2025-10-20 09:41:20.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35390 10 6452 1 2025-10-20 09:36:47.131 00:06:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 09:42:20.759 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34822 10 6452 1 2025-10-20 09:43:21.174 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45020 10 6452 1 2025-10-20 09:44:21.537 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60498 10 6452 1 2025-10-20 09:45:17.862 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 09:45:18.081 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:45:17.887 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:45:17.781 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:45:18.124 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 09:45:21.938 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:48364 10 6452 1 2025-10-20 09:46:22.314 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52014 10 6452 1 2025-10-20 09:41:47.134 00:06:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 09:47:22.714 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53844 10 6452 1 2025-10-20 09:48:23.132 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:60084 12 10369 1 2025-10-20 09:43:47.131 00:06:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 09:49:23.610 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39000 10 6452 1 2025-10-20 09:50:18.221 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:50:17.983 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:50:18.222 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:50:18.221 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 09:50:18.306 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 09:50:24.018 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:44034 10 6452 1 2025-10-20 09:51:24.383 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51044 10 6452 1 2025-10-20 09:52:24.797 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35978 10 6452 1 2025-10-20 09:53:25.207 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58804 10 6452 1 2025-10-20 09:48:47.136 00:06:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 09:54:25.571 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60874 10 6452 1 2025-10-20 09:55:18.371 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 09:55:18.218 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 09:55:18.106 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:55:18.289 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 09:55:18.223 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 09:55:25.973 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33060 10 6452 1 2025-10-20 09:50:47.134 00:06:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 09:56:26.387 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39964 10 6452 1 2025-10-20 09:57:26.790 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44110 10 6452 1 2025-10-20 09:58:27.193 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:38154 12 10369 1 Summary: total flows: 137, total bytes: 432863, total packets: 1032, avg bps: 904, avg pps: 0, avg bpp: 419 Time window: 2025-10-20 08:54:47 - 2025-10-20 09:58:37 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0036s User: 0.0012s Wall: 0.0031s flows/second: 44495.9 Runtime: 0.0031s