Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 11:59:27.688 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47822 10 6452 1 2025-10-22 11:54:48.221 00:06:00.296 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 12:00:28.114 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:40952 10 6452 1 2025-10-22 12:01:18.538 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 12:01:18.554 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 12:01:18.484 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:01:18.454 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:01:18.334 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 12:01:28.494 00:00:18.108 TCP 1.101.0.1:3000 -> 23.104.0.1:36118 10 6452 1 2025-10-22 12:02:36.670 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37036 10 6452 1 2025-10-22 12:03:37.099 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46612 10 6452 1 2025-10-22 12:04:37.504 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:57656 10 6452 1 2025-10-22 12:00:48.220 00:06:00.301 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 12:05:37.904 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51336 10 6452 1 2025-10-22 12:06:19.071 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 12:06:18.798 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:06:19.049 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:06:19.050 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 12:06:19.132 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 12:06:38.318 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49290 10 6452 1 2025-10-22 12:01:48.222 00:06:00.296 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 12:07:38.733 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57380 10 6452 1 2025-10-22 12:08:39.119 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35290 10 6452 1 2025-10-22 12:09:39.528 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:46754 10 6452 1 2025-10-22 12:10:39.898 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47418 10 6452 1 2025-10-22 12:11:18.853 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 12:11:18.579 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:11:18.621 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:11:18.852 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 12:11:18.703 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 12:11:40.268 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56478 10 6452 1 2025-10-22 12:07:48.222 00:06:00.300 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 12:12:40.672 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52646 10 6452 1 2025-10-22 12:08:48.225 00:06:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 12:13:41.105 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39108 10 6452 1 2025-10-22 12:14:41.511 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56042 10 6452 1 2025-10-22 12:15:41.920 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:40646 10 6452 1 2025-10-22 12:16:19.083 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 12:16:18.985 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:16:18.828 00:00:00.019 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:16:18.986 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 12:16:18.912 00:00:00.019 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 12:16:42.333 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38124 10 6452 1 2025-10-22 12:17:42.737 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59904 10 6452 1 2025-10-22 12:18:43.144 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45686 10 6452 1 2025-10-22 12:14:48.225 00:06:00.300 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 12:19:43.513 00:00:10.658 TCP 1.101.0.1:3000 -> 23.104.0.1:60110 12 10375 1 2025-10-22 12:15:48.229 00:06:00.294 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 12:20:44.209 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38968 10 6452 1 2025-10-22 12:21:18.716 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 12:21:18.848 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:21:18.814 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:21:18.986 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 12:21:18.896 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 12:21:44.611 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46934 12 6556 1 2025-10-22 12:22:45.016 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:42638 10 6452 1 2025-10-22 12:23:45.371 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43820 10 6452 1 2025-10-22 12:24:45.776 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:55076 11 6504 1 2025-10-22 12:25:46.241 00:00:11.078 TCP 1.101.0.1:3000 -> 23.104.0.1:56538 10 6452 1 2025-10-22 12:26:19.342 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 12:26:19.212 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:26:19.263 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:26:19.339 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 12:26:19.345 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 12:21:48.225 00:06:00.300 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 12:26:47.370 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46332 10 6452 1 2025-10-22 12:22:48.229 00:06:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 12:27:47.776 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47006 10 6452 1 2025-10-22 12:28:48.180 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56218 10 6452 1 2025-10-22 12:29:48.586 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57718 10 6452 1 2025-10-22 12:30:48.991 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36400 10 6452 1 2025-10-22 12:31:19.380 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 12:31:19.375 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 12:31:19.292 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:31:19.296 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:31:19.298 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 12:31:49.397 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56920 10 6452 1 2025-10-22 12:32:49.803 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45544 10 6452 1 2025-10-22 12:28:48.229 00:06:00.298 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 12:33:50.213 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60894 10 6452 1 2025-10-22 12:29:48.232 00:06:00.294 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 12:34:50.631 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52744 10 6452 1 2025-10-22 12:35:51.055 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40168 10 6452 1 2025-10-22 12:36:19.400 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 12:36:19.302 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:36:19.286 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:36:19.197 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 12:36:19.368 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 12:36:51.457 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58628 10 6452 1 2025-10-22 12:37:51.857 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:47472 10 6452 1 2025-10-22 12:38:52.277 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35074 10 6452 1 2025-10-22 12:39:52.652 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38916 10 6452 1 2025-10-22 12:35:48.234 00:06:00.295 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 12:40:53.067 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37078 10 6452 1 2025-10-22 12:41:19.252 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 12:41:19.113 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:41:19.488 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:41:19.253 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 12:41:19.570 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 12:36:48.234 00:06:00.291 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 12:41:53.472 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58000 10 6452 1 2025-10-22 12:42:53.831 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46704 10 6452 1 2025-10-22 12:43:54.192 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45950 10 6452 1 2025-10-22 12:44:54.598 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:41734 10 6452 1 2025-10-22 12:45:54.998 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36244 10 6452 1 2025-10-22 12:46:19.425 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 12:46:19.170 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:46:19.343 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:46:19.421 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 12:46:19.423 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 12:46:55.400 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44956 10 6452 1 2025-10-22 12:42:48.233 00:06:00.295 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 12:47:55.800 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46032 10 6452 1 2025-10-22 12:43:48.236 00:06:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 12:48:56.203 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37380 10 6452 1 2025-10-22 12:49:56.606 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57946 10 6452 1 2025-10-22 12:50:57.011 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:45342 10 6452 1 2025-10-22 12:51:19.684 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 12:51:19.458 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 12:51:19.199 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:51:19.603 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:51:19.461 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 12:51:57.419 00:00:11.235 TCP 1.101.0.1:3000 -> 23.104.0.1:43110 10 6452 1 2025-10-22 12:52:58.691 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57170 10 6452 1 2025-10-22 12:53:59.101 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38100 10 6452 1 2025-10-22 12:49:48.234 00:06:00.299 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 12:54:59.509 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52194 10 6452 1 2025-10-22 12:50:48.237 00:06:00.294 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 12:55:59.913 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50778 10 6452 1 2025-10-22 12:56:19.748 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 12:56:19.557 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 12:56:19.551 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:56:19.665 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 12:56:19.724 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 12:57:00.319 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50198 10 6452 1 2025-10-22 12:58:00.724 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:42830 10 6452 1 Summary: total flows: 136, total bytes: 414504, total packets: 1013, avg bps: 871, avg pps: 0, avg bpp: 409 Time window: 2025-10-22 11:54:48 - 2025-10-22 12:58:11 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0048s User: 0.0010s Wall: 0.0015s flows/second: 91708.3 Runtime: 0.0015s