Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 13:59:26.111 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57486 10 6452 1 2025-10-22 14:00:26.507 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45644 10 6452 1 2025-10-22 14:01:20.950 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 14:01:20.969 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 14:01:20.869 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:01:20.949 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 14:01:21.095 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:01:26.910 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51506 10 6452 1 2025-10-22 14:02:27.311 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47548 10 6452 1 2025-10-22 14:03:27.716 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48438 10 6452 1 2025-10-22 14:04:28.118 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35866 10 6452 1 2025-10-22 13:59:48.261 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 14:05:28.483 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51452 10 6452 1 2025-10-22 14:00:48.265 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 14:06:20.936 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 14:06:20.837 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 14:06:20.775 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:06:20.853 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:06:20.855 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 14:06:28.887 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:50412 10 6452 1 2025-10-22 14:07:29.324 00:00:10.426 TCP 1.101.0.1:3000 -> 23.104.0.1:42408 11 6504 1 2025-10-22 14:08:29.803 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47030 10 6452 1 2025-10-22 14:09:30.208 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51248 10 6452 1 2025-10-22 14:10:30.608 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58966 10 6452 1 2025-10-22 14:11:20.853 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:11:21.190 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 14:11:21.107 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 14:11:21.107 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:11:21.097 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 14:11:31.020 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55380 10 6452 1 2025-10-22 14:06:48.262 00:06:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 14:12:31.427 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39982 10 6452 1 2025-10-22 14:07:48.265 00:06:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 14:13:31.792 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57102 10 6452 1 2025-10-22 14:14:32.192 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:45566 12 10369 1 2025-10-22 14:15:32.671 00:00:10.995 TCP 1.101.0.1:3000 -> 23.104.0.1:53996 10 6452 1 2025-10-22 14:16:21.256 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 14:16:21.198 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:16:21.069 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:16:21.075 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 14:16:21.152 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 14:16:33.705 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54276 10 6452 1 2025-10-22 14:17:34.112 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:50688 10 6452 1 2025-10-22 14:18:34.531 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33296 10 6452 1 2025-10-22 14:13:48.264 00:06:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 14:19:34.896 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58974 12 6556 1 2025-10-22 14:14:48.267 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 14:20:35.314 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:60332 10 6452 1 2025-10-22 14:21:21.560 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 14:21:21.478 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:21:21.529 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 14:21:21.592 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 14:21:21.445 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:21:35.691 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39986 12 6556 1 2025-10-22 14:22:36.115 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41794 10 6452 1 2025-10-22 14:23:36.475 00:00:10.788 TCP 1.101.0.1:3000 -> 23.104.0.1:45934 10 6452 1 2025-10-22 14:24:37.300 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45030 10 6452 1 2025-10-22 14:20:48.264 00:06:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 14:25:37.664 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54164 10 6452 1 2025-10-22 14:26:21.331 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 14:26:21.427 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 14:26:21.453 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:26:21.248 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:26:21.553 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 14:26:38.082 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51420 10 6452 1 2025-10-22 14:21:48.268 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 14:27:38.484 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39646 10 6452 1 2025-10-22 14:28:38.887 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:46692 10 6452 1 2025-10-22 14:29:39.313 00:00:23.793 TCP 1.101.0.1:3000 -> 23.104.0.1:43686 10 6452 1 2025-10-22 14:30:53.149 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60078 10 6452 1 2025-10-22 14:31:21.519 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:31:21.524 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 14:31:21.559 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 14:31:21.455 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:31:21.602 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 14:31:53.555 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36356 10 6452 1 2025-10-22 14:27:48.268 00:06:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 14:32:53.958 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50744 10 6452 1 2025-10-22 14:28:48.269 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 14:33:54.321 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34022 10 6452 1 2025-10-22 14:34:54.729 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52720 10 6452 1 2025-10-22 14:35:55.134 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44918 10 6452 1 2025-10-22 14:36:21.380 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:36:21.535 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:36:21.532 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 14:36:21.328 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 14:36:21.619 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 14:36:55.537 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:57562 10 6452 1 2025-10-22 14:37:55.930 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:46542 10 6452 1 2025-10-22 14:38:56.356 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37350 10 6452 1 2025-10-22 14:34:48.268 00:06:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 14:39:56.762 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46906 10 6452 1 2025-10-22 14:35:48.271 00:06:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 14:40:57.183 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51364 10 6452 1 2025-10-22 14:41:21.882 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 14:41:21.660 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 14:41:21.675 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:41:21.800 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:41:21.796 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 14:41:57.594 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32902 10 6452 1 2025-10-22 14:42:58.002 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41694 10 6452 1 2025-10-22 14:43:58.407 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43964 10 6452 1 2025-10-22 14:44:58.816 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56912 10 6452 1 2025-10-22 14:45:59.226 00:00:10.764 TCP 1.101.0.1:3000 -> 23.104.0.1:33584 10 6452 1 2025-10-22 14:46:21.893 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 14:46:21.824 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 14:46:21.694 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:46:21.812 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:46:22.132 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 14:41:48.270 00:06:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 14:47:00.024 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39900 10 6452 1 2025-10-22 14:42:48.273 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 14:48:00.425 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44738 10 6452 1 2025-10-22 14:49:00.832 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44250 10 6452 1 2025-10-22 14:50:01.196 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59114 10 6452 1 2025-10-22 14:51:01.594 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35880 10 6452 1 2025-10-22 14:51:22.174 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 14:51:21.987 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 14:51:22.006 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:51:22.091 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:51:21.974 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 14:52:02.010 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53234 10 6452 1 2025-10-22 14:53:02.423 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41954 10 6452 1 2025-10-22 14:48:48.271 00:06:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 14:54:02.830 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56396 10 6452 1 2025-10-22 14:49:48.276 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 14:55:03.229 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36246 10 6452 1 2025-10-22 14:56:03.591 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53922 10 6452 1 2025-10-22 14:56:22.135 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 14:56:22.144 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 14:56:21.779 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:56:22.052 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 14:56:21.853 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 14:57:04.006 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33674 10 6452 1 2025-10-22 14:58:04.412 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54750 10 6452 1 Summary: total flows: 135, total bytes: 413741, total packets: 1001, avg bps: 938, avg pps: 0, avg bpp: 413 Time window: 2025-10-22 13:59:26 - 2025-10-22 14:58:14 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0026s User: 0.0026s Wall: 0.0029s flows/second: 46393.4 Runtime: 0.0029s