Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 07:59:41.023 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43302 10 6452 1 2025-10-22 07:55:48.145 00:06:00.305 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 08:00:41.428 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50072 10 6452 1 2025-10-22 08:01:13.741 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:01:13.503 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:01:13.681 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:01:13.592 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:01:13.764 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 07:56:48.148 00:06:00.300 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 08:01:41.828 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59264 10 6452 1 2025-10-22 08:02:42.230 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42266 10 6452 1 2025-10-22 08:03:42.631 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46874 10 6452 1 2025-10-22 08:04:43.037 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60066 10 6452 1 2025-10-22 08:05:43.434 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49824 10 6452 1 2025-10-22 08:06:14.096 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:06:13.912 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:06:13.810 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:06:14.061 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:06:13.893 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 08:06:43.838 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:51152 10 6452 1 2025-10-22 08:02:48.146 00:06:00.307 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 08:07:44.194 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58534 10 6452 1 2025-10-22 08:03:48.149 00:06:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 08:08:44.605 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57288 10 6452 1 2025-10-22 08:09:45.012 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36884 10 6452 1 2025-10-22 08:10:45.416 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58778 10 6452 1 2025-10-22 08:11:14.100 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:11:13.801 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:11:14.056 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:11:14.046 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:11:14.141 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 08:11:45.825 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44660 10 6452 1 2025-10-22 08:12:46.189 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46654 10 6452 1 2025-10-22 08:13:46.589 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:36304 10 6452 1 2025-10-22 08:09:48.154 00:06:00.302 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 08:14:46.963 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39036 10 6452 1 2025-10-22 08:10:48.152 00:06:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 08:15:47.365 00:00:10.531 TCP 1.101.0.1:3000 -> 23.104.0.1:49958 10 6452 1 2025-10-22 08:16:13.917 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:16:13.850 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:16:13.987 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:16:13.983 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:16:14.070 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 08:16:47.938 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:54778 10 6452 1 2025-10-22 08:17:48.366 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45734 10 6452 1 2025-10-22 08:18:48.769 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:34690 12 10375 1 2025-10-22 08:19:49.257 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44828 10 6452 1 2025-10-22 08:20:49.661 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:40690 10 6452 1 2025-10-22 08:21:14.644 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 08:21:14.106 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:21:14.562 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:21:14.361 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:21:14.374 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:16:48.150 00:06:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 08:21:50.022 00:00:10.720 TCP 1.101.0.1:3000 -> 23.104.0.1:54110 10 6452 1 2025-10-22 08:17:48.155 00:06:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 08:22:50.778 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44298 10 6452 1 2025-10-22 08:23:51.184 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44634 10 6452 1 2025-10-22 08:24:51.551 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33086 10 6452 1 2025-10-22 08:25:51.953 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41898 10 6452 1 2025-10-22 08:26:14.318 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 08:26:14.169 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:26:13.959 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:26:14.238 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:26:14.171 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:26:52.367 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48028 10 6452 1 2025-10-22 08:27:52.775 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:49518 10 6452 1 2025-10-22 08:23:48.153 00:06:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 08:28:53.145 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38216 10 6452 1 2025-10-22 08:24:48.154 00:06:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 08:29:53.546 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37576 10 6452 1 2025-10-22 08:30:53.949 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60138 10 6452 1 2025-10-22 08:31:14.238 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:31:14.178 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:31:14.328 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:31:14.374 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:31:14.410 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 08:31:54.359 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60400 10 6452 1 2025-10-22 08:32:54.761 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40712 10 6452 1 2025-10-22 08:33:55.174 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36164 10 6452 1 2025-10-22 08:34:55.579 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40336 10 6452 1 2025-10-22 08:30:48.154 00:06:00.305 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 08:36:14.710 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 08:35:55.978 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35888 10 6452 1 2025-10-22 08:36:14.483 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:36:14.296 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:36:14.627 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:36:14.634 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:31:48.157 00:06:00.300 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 08:36:56.387 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:38592 10 6452 1 2025-10-22 08:37:56.744 00:00:17.218 TCP 1.101.0.1:3000 -> 23.104.0.1:43836 10 6452 1 2025-10-22 08:39:04.000 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:44218 10 6452 1 2025-10-22 08:40:04.399 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42046 10 6452 1 2025-10-22 08:41:14.681 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 08:41:14.459 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:41:04.798 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50028 10 6452 1 2025-10-22 08:41:14.575 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:41:14.599 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:41:14.596 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:42:05.204 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46414 10 6452 1 2025-10-22 08:37:48.155 00:06:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 08:43:05.571 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55170 10 6452 1 2025-10-22 08:38:48.158 00:06:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 08:44:05.974 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60354 10 6452 1 2025-10-22 08:45:06.393 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37230 10 6452 1 2025-10-22 08:46:14.638 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 08:46:14.431 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:46:14.705 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:46:14.556 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:46:14.551 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:46:06.753 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:48394 10 6452 1 2025-10-22 08:47:07.172 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52384 10 6452 1 2025-10-22 08:48:07.578 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47118 10 6452 1 2025-10-22 08:49:07.941 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60594 10 6452 1 2025-10-22 08:44:48.158 00:06:00.304 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 08:50:08.354 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58164 10 6452 1 2025-10-22 08:45:48.160 00:06:00.299 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 08:51:14.727 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 08:51:14.640 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:51:14.431 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:51:14.644 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:51:14.759 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:51:08.754 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:49358 10 6452 1 2025-10-22 08:52:09.181 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47098 10 6452 1 2025-10-22 08:53:09.590 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46852 10 6452 1 2025-10-22 08:54:09.997 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:48272 10 6452 1 2025-10-22 08:55:10.414 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49696 10 6452 1 2025-10-22 08:56:14.966 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 08:56:14.896 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 08:56:14.721 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:56:14.882 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 08:56:14.940 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 08:56:10.826 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:38014 10 6452 1 2025-10-22 08:51:48.159 00:06:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 08:57:11.208 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33220 10 6452 1 2025-10-22 08:52:48.162 00:06:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 08:58:11.612 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41134 10 6452 1 Summary: total flows: 137, total bytes: 415209, total packets: 1024, avg bps: 878, avg pps: 0, avg bpp: 405 Time window: 2025-10-22 07:55:48 - 2025-10-22 08:58:48 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0045s User: 0.0000s Wall: 0.0016s flows/second: 86162.8 Runtime: 0.0016s