Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 16:59:04.245 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57560 10 6452 1 2025-10-20 17:00:04.644 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33898 10 6452 1 2025-10-20 17:00:27.020 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 17:00:26.765 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 17:00:26.923 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:00:26.937 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:00:26.841 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 16:55:47.281 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 17:01:05.067 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57334 10 6452 1 2025-10-20 17:02:05.478 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44458 10 6452 1 2025-10-20 16:57:47.277 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 17:03:05.882 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40006 10 6452 1 2025-10-20 17:04:06.247 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52010 10 6452 1 2025-10-20 17:05:06.646 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57596 10 6452 1 2025-10-20 17:05:27.190 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 17:05:26.946 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 17:05:26.892 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:05:27.108 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:05:26.929 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 17:06:07.009 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51280 10 6452 1 2025-10-20 17:07:07.410 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35306 10 6452 1 2025-10-20 17:02:47.282 00:06:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 17:08:07.810 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50498 10 6452 1 2025-10-20 17:09:08.222 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34974 10 6452 1 2025-10-20 17:04:47.279 00:06:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 17:10:08.626 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52652 10 6452 1 2025-10-20 17:10:27.034 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 17:10:26.952 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 17:10:26.900 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:10:26.952 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:10:27.073 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 17:11:09.032 00:00:10.994 TCP 1.101.0.1:3000 -> 23.104.0.1:53026 10 6452 1 2025-10-20 17:12:10.088 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37676 10 6452 1 2025-10-20 17:13:10.452 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38532 10 6452 1 2025-10-20 17:14:10.853 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38004 10 6452 1 2025-10-20 17:09:47.283 00:06:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 17:15:11.267 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44378 10 6452 1 2025-10-20 17:15:27.083 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 17:15:26.894 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:15:27.083 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:15:27.225 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 17:15:27.166 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 17:16:11.663 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54764 10 6452 1 2025-10-20 17:11:47.289 00:06:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 17:17:12.071 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51184 10 6452 1 2025-10-20 17:18:12.473 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41962 10 6452 1 2025-10-20 17:19:12.871 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44924 10 6452 1 2025-10-20 17:20:13.278 00:00:11.592 TCP 1.101.0.1:3000 -> 23.104.0.1:52462 10 6452 1 2025-10-20 17:20:27.223 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 17:20:27.075 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:20:27.314 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:20:27.228 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 17:20:27.396 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 17:21:14.906 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39158 10 6452 1 2025-10-20 17:16:47.292 00:06:00.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 17:22:15.315 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50298 10 6452 1 2025-10-20 17:23:15.719 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:44924 10 6452 1 2025-10-20 17:18:47.289 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 17:24:16.149 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34126 10 6452 1 2025-10-20 17:25:27.317 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 17:25:27.234 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 17:25:27.428 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:25:27.234 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:25:27.380 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 17:25:16.559 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46854 10 6452 1 2025-10-20 17:26:16.921 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54532 10 6452 1 2025-10-20 17:27:17.337 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49440 10 6452 1 2025-10-20 17:28:17.744 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43236 10 6452 1 2025-10-20 17:23:47.295 00:06:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 17:29:18.148 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52380 10 6452 1 2025-10-20 17:30:18.555 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:49342 10 6452 1 2025-10-20 17:30:27.429 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 17:30:27.274 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:30:27.315 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:30:27.382 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 17:30:27.397 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 17:25:47.293 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 17:31:18.986 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48794 10 6452 1 2025-10-20 17:32:19.397 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36550 10 6452 1 2025-10-20 17:33:19.800 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35202 10 6452 1 2025-10-20 17:34:20.212 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46912 10 6452 1 2025-10-20 17:35:27.412 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 17:35:27.562 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:35:27.492 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:35:27.550 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 17:35:20.615 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45710 10 6452 1 2025-10-20 17:35:27.576 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 17:30:47.295 00:06:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 17:36:21.031 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38018 10 6452 1 2025-10-20 17:37:21.438 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40090 10 6452 1 2025-10-20 17:32:47.296 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 17:38:21.847 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:45346 10 6452 1 2025-10-20 17:39:22.268 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34156 10 6452 1 2025-10-20 17:40:28.141 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 17:40:28.172 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 17:40:28.039 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:40:28.057 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:40:28.110 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 17:40:22.674 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52976 10 6452 1 2025-10-20 17:41:23.105 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44616 10 6452 1 2025-10-20 17:42:23.517 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36120 10 6452 1 2025-10-20 17:37:47.299 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 17:43:23.879 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53742 10 6452 1 2025-10-20 17:44:24.285 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47048 10 6452 1 2025-10-20 17:39:47.298 00:06:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 17:45:27.723 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 17:45:27.636 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 17:45:27.470 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:45:27.639 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:45:27.702 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 17:45:24.689 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53736 10 6452 1 2025-10-20 17:46:25.107 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47732 10 6452 1 2025-10-20 17:47:25.506 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42494 10 6452 1 2025-10-20 17:48:25.908 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:39562 12 10375 1 2025-10-20 17:49:26.394 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59220 10 6452 1 2025-10-20 17:44:47.303 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 17:50:27.573 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 17:50:27.784 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:50:27.829 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:50:27.583 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 17:50:27.911 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 17:50:26.798 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34794 10 6452 1 2025-10-20 17:51:27.204 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42596 10 6452 1 2025-10-20 17:46:47.301 00:06:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 17:52:27.612 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34472 10 6452 1 2025-10-20 17:53:28.019 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58870 10 6452 1 2025-10-20 17:54:28.425 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56452 10 6452 1 2025-10-20 17:55:27.764 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 17:55:27.683 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 17:55:27.932 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:55:27.680 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 17:55:27.849 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 17:55:28.787 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:41850 10 6452 1 2025-10-20 17:56:29.234 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38640 10 6452 1 2025-10-20 17:51:47.304 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 17:57:29.594 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37202 10 6452 1 2025-10-20 17:58:29.997 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58328 10 6452 1 2025-10-20 17:53:47.301 00:06:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 138, total bytes: 421661, total packets: 1034, avg bps: 878, avg pps: 0, avg bpp: 407 Time window: 2025-10-20 16:55:47 - 2025-10-20 17:59:47 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0031s User: 0.0021s Wall: 0.0014s flows/second: 98571.9 Runtime: 0.0014s