Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-23 14:59:00.063 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40234 10 6452 1 2025-10-23 14:55:48.752 00:05:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 15:00:00.468 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50218 10 6452 1 2025-10-23 15:01:00.865 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58634 10 6452 1 2025-10-23 15:01:50.951 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 15:01:50.784 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:01:50.953 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 15:01:51.164 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 15:01:51.081 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:02:01.275 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46834 10 6452 1 2025-10-23 15:03:01.683 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:41066 10 6452 1 2025-10-23 15:04:02.112 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35630 10 6452 1 2025-10-23 15:00:48.752 00:05:00.345 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 15:05:02.518 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52956 10 6452 1 2025-10-23 15:01:48.755 00:05:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 15:06:02.921 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42906 10 6452 1 2025-10-23 15:06:51.296 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 15:06:51.247 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:06:51.126 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:06:51.297 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 15:06:51.210 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 15:07:03.286 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41930 10 6452 1 2025-10-23 15:08:03.692 00:00:10.729 TCP 1.101.0.1:3000 -> 23.104.0.1:33938 10 6452 1 2025-10-23 15:09:04.464 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50634 10 6452 1 2025-10-23 15:10:04.866 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34590 10 6452 1 2025-10-23 15:06:48.756 00:05:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 15:11:05.280 00:00:10.743 TCP 1.101.0.1:3000 -> 23.104.0.1:37608 10 6452 1 2025-10-23 15:11:50.832 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:07:48.758 00:05:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 15:11:51.162 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 15:11:51.095 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:11:51.304 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 15:11:51.185 00:00:00.015 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 15:12:06.065 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37448 10 6452 1 2025-10-23 15:13:06.472 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:37506 10 6452 1 2025-10-23 15:14:06.902 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54276 10 6452 1 2025-10-23 15:15:07.268 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56392 10 6452 1 2025-10-23 15:16:07.675 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38300 10 6452 1 2025-10-23 15:12:48.758 00:05:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 15:16:51.340 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 15:16:51.062 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 15:16:51.079 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:16:51.257 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:16:51.331 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 15:17:08.102 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46464 10 6452 1 2025-10-23 15:13:48.761 00:05:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 15:18:08.511 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:52968 10 6452 1 2025-10-23 15:19:08.882 00:00:10.828 TCP 1.101.0.1:3000 -> 23.104.0.1:57398 10 6452 1 2025-10-23 15:20:09.754 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44722 10 6452 1 2025-10-23 15:21:10.156 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:43174 10 6452 1 2025-10-23 15:21:51.851 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 15:21:51.729 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 15:21:51.552 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:21:51.768 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:21:51.680 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 15:22:10.543 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40792 12 6556 1 2025-10-23 15:18:48.759 00:05:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 15:23:10.945 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:39282 10 6452 1 2025-10-23 15:19:48.762 00:05:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 15:24:11.343 00:00:11.106 TCP 1.101.0.1:3000 -> 23.104.0.1:45094 10 6452 1 2025-10-23 15:25:12.493 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34888 10 6452 1 2025-10-23 15:26:12.894 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35922 10 6452 1 2025-10-23 15:26:51.413 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 15:26:51.339 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:26:51.552 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:26:51.408 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 15:26:51.634 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 15:27:13.310 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51234 10 6452 1 2025-10-23 15:28:13.714 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49808 10 6452 1 2025-10-23 15:24:48.760 00:05:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 15:29:14.104 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46182 10 6452 1 2025-10-23 15:25:48.763 00:05:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 15:30:14.503 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46582 10 6452 1 2025-10-23 15:31:14.905 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48218 12 6556 1 2025-10-23 15:31:51.554 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 15:31:51.581 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:31:51.694 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:31:51.701 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 15:31:51.776 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 15:32:15.316 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59082 10 6452 1 2025-10-23 15:33:15.684 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33116 10 6452 1 2025-10-23 15:34:16.048 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37086 11 6504 1 2025-10-23 15:30:48.760 00:05:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 15:35:16.472 00:00:11.119 TCP 1.101.0.1:3000 -> 23.104.0.1:56072 11 6504 1 2025-10-23 15:31:48.764 00:05:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 15:36:17.634 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:39714 10 6452 1 2025-10-23 15:36:51.762 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:36:51.713 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 15:36:51.639 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 15:36:51.516 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:36:51.846 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 15:37:18.000 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:42152 10 6452 1 2025-10-23 15:38:18.439 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38142 10 6452 1 2025-10-23 15:39:18.854 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54336 10 6452 1 2025-10-23 15:40:19.264 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37702 10 6452 1 2025-10-23 15:36:48.762 00:05:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 15:41:19.669 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47526 10 6452 1 2025-10-23 15:37:48.765 00:05:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 15:41:51.657 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 15:41:51.820 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:41:52.048 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:41:51.866 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 15:41:52.131 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 15:42:20.102 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58470 10 6452 1 2025-10-23 15:43:20.499 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53798 10 6452 1 2025-10-23 15:44:20.901 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54358 10 6452 1 2025-10-23 15:45:21.307 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50822 10 6452 1 2025-10-23 15:46:21.709 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34190 10 6452 1 2025-10-23 15:46:51.956 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 15:46:51.968 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:46:52.076 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:46:51.755 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 15:42:48.764 00:05:00.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 15:46:52.159 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 15:47:22.096 00:00:19.937 TCP 1.101.0.1:3000 -> 23.104.0.1:52274 10 6452 1 2025-10-23 15:43:48.767 00:05:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 15:48:32.104 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46610 10 6452 1 2025-10-23 15:49:32.507 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44934 10 6452 1 2025-10-23 15:50:32.872 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41102 10 6452 1 2025-10-23 15:51:33.289 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36074 10 6452 1 2025-10-23 15:51:52.121 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 15:51:51.767 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:51:52.163 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:51:51.904 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 15:51:52.246 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 15:52:33.690 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51130 10 6452 1 2025-10-23 15:48:48.764 00:05:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 15:53:34.108 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55044 10 6452 1 2025-10-23 15:49:48.769 00:05:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 15:54:34.503 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33902 10 6452 1 2025-10-23 15:55:34.900 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44354 10 6452 1 2025-10-23 15:56:35.305 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45858 10 6452 1 2025-10-23 15:56:52.135 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 15:56:52.089 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:56:51.949 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 15:56:52.060 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 15:56:52.032 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 15:57:35.713 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48724 10 6452 1 2025-10-23 15:54:48.766 00:05:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 15:58:36.119 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51682 10 6452 1 Summary: total flows: 140, total bytes: 417312, total packets: 1026, avg bps: 869, avg pps: 0, avg bpp: 406 Time window: 2025-10-23 14:55:48 - 2025-10-23 15:59:49 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0041s User: 0.0010s Wall: 0.0032s flows/second: 43291.3 Runtime: 0.0033s