Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 05:59:39.541 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37572 10 6452 1 2025-10-22 06:00:39.945 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:44542 10 6452 1 2025-10-22 06:01:11.372 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 06:01:11.321 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:01:11.272 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:01:11.406 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 06:01:11.355 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 05:56:48.099 00:06:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 06:01:40.318 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40892 10 6452 1 2025-10-22 05:57:48.101 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 06:02:40.677 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57986 10 6452 1 2025-10-22 06:03:41.064 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56240 10 6452 1 2025-10-22 06:04:41.463 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:45606 10 6452 1 2025-10-22 06:05:41.822 00:00:10.618 TCP 1.101.0.1:3000 -> 23.104.0.1:57862 10 6452 1 2025-10-22 06:06:11.876 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:06:12.109 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 06:06:12.001 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 06:06:12.113 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:06:11.958 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 06:06:42.476 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35710 10 6452 1 2025-10-22 06:07:42.875 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:40746 11 6504 1 2025-10-22 06:03:48.100 00:06:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 06:08:43.337 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35184 10 6452 1 2025-10-22 06:04:48.103 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 06:09:43.740 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40482 10 6452 1 2025-10-22 06:10:44.144 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:41738 10 6452 1 2025-10-22 06:11:11.584 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 06:11:11.331 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:11:11.584 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:11:11.548 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 06:11:11.666 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 06:11:44.602 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34388 10 6452 1 2025-10-22 06:12:45.007 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51314 10 6452 1 2025-10-22 06:13:45.403 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46438 10 6452 1 2025-10-22 06:14:45.806 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55076 10 6452 1 2025-10-22 06:10:48.103 00:06:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 06:15:46.174 00:00:16.702 TCP 1.101.0.1:3000 -> 23.104.0.1:34336 10 6452 1 2025-10-22 06:16:11.653 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 06:16:11.644 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 06:16:11.583 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:16:11.570 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:16:11.685 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 06:11:48.104 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 06:16:52.925 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:44180 10 6452 1 2025-10-22 06:17:53.305 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58946 10 6452 1 2025-10-22 06:18:53.707 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40088 10 6452 1 2025-10-22 06:19:54.095 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35644 10 6452 1 2025-10-22 06:20:54.498 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44416 10 6452 1 2025-10-22 06:21:11.658 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 06:21:11.837 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:21:11.729 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:21:11.573 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 06:21:11.813 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 06:21:54.905 00:00:12.553 TCP 1.101.0.1:3000 -> 23.104.0.1:35470 10 6452 1 2025-10-22 06:17:48.102 00:06:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 06:22:57.495 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54800 10 6452 1 2025-10-22 06:18:48.105 00:06:00.288 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 06:23:57.890 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:44942 10 6452 1 2025-10-22 06:24:58.267 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52876 10 6452 1 2025-10-22 06:25:58.675 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43886 10 6452 1 2025-10-22 06:26:11.833 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 06:26:12.069 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:26:12.100 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:26:12.001 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 06:26:12.182 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 06:26:59.108 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34596 10 6452 1 2025-10-22 06:27:59.515 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48180 10 6452 1 2025-10-22 06:28:59.919 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54080 10 6452 1 2025-10-22 06:24:48.106 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 06:30:00.323 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41228 10 6452 1 2025-10-22 06:25:48.110 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 06:31:11.894 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 06:31:11.790 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:31:11.611 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:31:11.976 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 06:31:00.728 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56894 10 6452 1 2025-10-22 06:31:11.694 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 06:32:01.137 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59098 10 6452 1 2025-10-22 06:33:01.545 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51356 10 6452 1 2025-10-22 06:34:01.959 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42476 10 6452 1 2025-10-22 06:35:02.369 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52768 10 6452 1 2025-10-22 06:36:12.258 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 06:36:12.010 00:00:00.064 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:36:12.177 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:36:11.949 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 06:36:02.774 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40418 10 6452 1 2025-10-22 06:36:11.951 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 06:31:48.107 00:06:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 06:37:03.181 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58622 10 6452 1 2025-10-22 06:32:48.110 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 06:38:03.583 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:42666 10 6452 1 2025-10-22 06:39:03.943 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:55484 10 6452 1 2025-10-22 06:40:04.356 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40688 10 6452 1 2025-10-22 06:41:12.276 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 06:41:12.012 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 06:41:11.977 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:41:12.193 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:41:12.030 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 06:41:04.760 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50106 10 6452 1 2025-10-22 06:42:05.179 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36752 10 6452 1 2025-10-22 06:43:05.542 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37546 10 6452 1 2025-10-22 06:38:48.108 00:06:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 06:44:05.944 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:36278 10 6452 1 2025-10-22 06:39:48.111 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 06:45:06.320 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36310 10 6452 1 2025-10-22 06:46:12.291 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 06:46:12.105 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:46:11.981 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:46:12.344 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 06:46:12.063 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 06:46:06.682 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39386 10 6452 1 2025-10-22 06:47:07.121 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37430 10 6452 1 2025-10-22 06:48:07.524 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38188 10 6452 1 2025-10-22 06:49:07.943 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36950 10 6452 1 2025-10-22 06:50:08.306 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49258 10 6452 1 2025-10-22 06:45:48.111 00:06:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 06:51:12.195 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 06:51:12.285 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:51:12.192 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:51:12.398 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 06:51:12.274 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 06:51:08.661 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34292 10 6452 1 2025-10-22 06:46:48.113 00:06:00.312 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 06:52:09.069 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33584 10 6452 1 2025-10-22 06:53:09.468 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32840 10 6452 1 2025-10-22 06:54:09.870 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43658 10 6452 1 2025-10-22 06:55:10.239 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50638 10 6452 1 2025-10-22 06:56:12.299 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 06:56:12.381 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 06:56:12.337 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:56:12.216 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 06:56:12.380 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 06:56:10.641 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59084 10 6452 1 2025-10-22 06:57:11.059 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:49530 10 6452 1 2025-10-22 06:52:48.112 00:06:00.316 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 06:58:11.459 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46472 10 6452 1 2025-10-22 06:53:48.115 00:06:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 137, total bytes: 411338, total packets: 1023, avg bps: 870, avg pps: 0, avg bpp: 402 Time window: 2025-10-22 05:56:48 - 2025-10-22 06:59:48 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0040s User: 0.0010s Wall: 0.0020s flows/second: 69089.8 Runtime: 0.0020s