Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-23 22:59:00.978 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:33148 10 6452 1 2025-10-23 22:55:48.911 00:05:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 23:00:01.357 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54780 10 6452 1 2025-10-23 23:01:01.757 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:60884 10 6452 1 2025-10-23 23:02:00.862 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:02:00.914 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:02:00.843 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 23:02:00.917 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 23:02:00.996 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 23:02:02.187 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54268 10 6452 1 2025-10-23 23:03:02.586 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60612 10 6452 1 2025-10-23 23:04:03.011 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52206 10 6452 1 2025-10-23 23:00:48.910 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 23:05:03.418 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44634 10 6452 1 2025-10-23 23:01:48.914 00:05:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 23:06:03.836 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34702 10 6452 1 2025-10-23 23:07:00.887 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 23:07:00.704 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:07:00.810 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:07:00.803 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 23:07:00.893 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 23:07:04.251 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58426 10 6452 1 2025-10-23 23:08:04.659 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34602 10 6452 1 2025-10-23 23:09:05.106 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54028 10 6452 1 2025-10-23 23:10:05.512 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:34406 12 10375 1 2025-10-23 23:06:48.910 00:05:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 23:11:05.992 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58844 10 6452 1 2025-10-23 23:07:48.914 00:05:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 23:12:00.936 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 23:12:00.693 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 23:12:00.714 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:12:00.852 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:12:00.697 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 23:12:06.364 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:54454 10 6452 1 2025-10-23 23:13:06.761 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:44918 10 6452 1 2025-10-23 23:14:07.157 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33194 10 6452 1 2025-10-23 23:15:07.523 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46094 10 6452 1 2025-10-23 23:16:07.919 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51818 10 6452 1 2025-10-23 23:12:48.913 00:05:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 23:17:00.847 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 23:17:00.775 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 23:17:00.965 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:17:00.764 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:17:00.772 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 23:17:08.330 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48384 10 6452 1 2025-10-23 23:13:48.919 00:05:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 23:18:08.736 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46230 10 6452 1 2025-10-23 23:19:09.110 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53790 10 6452 1 2025-10-23 23:20:09.506 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48440 10 6452 1 2025-10-23 23:21:09.912 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59220 10 6452 1 2025-10-23 23:22:00.709 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:22:01.282 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 23:22:01.074 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 23:22:01.199 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:22:01.291 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 23:22:10.313 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59696 10 6452 1 2025-10-23 23:18:48.918 00:05:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 23:23:10.677 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43192 10 6452 1 2025-10-23 23:19:48.921 00:05:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 23:24:11.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55070 10 6452 1 2025-10-23 23:25:11.513 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36242 10 6452 1 2025-10-23 23:26:11.922 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:51326 10 6452 1 2025-10-23 23:27:01.198 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 23:27:01.138 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:27:01.106 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:27:01.197 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 23:27:01.188 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 23:27:12.310 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54764 10 6452 1 2025-10-23 23:28:12.715 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32928 10 6452 1 2025-10-23 23:24:48.918 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 23:29:13.115 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37680 10 6452 1 2025-10-23 23:25:48.922 00:05:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 23:30:13.481 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44168 10 6452 1 2025-10-23 23:31:13.892 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54980 10 6452 1 2025-10-23 23:32:01.355 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 23:32:01.211 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 23:32:01.112 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:32:01.272 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:32:01.307 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 23:32:14.300 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58864 10 6452 1 2025-10-23 23:33:14.661 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38342 10 6452 1 2025-10-23 23:34:15.082 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41216 10 6452 1 2025-10-23 23:30:48.920 00:05:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 23:35:15.487 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51798 10 6452 1 2025-10-23 23:31:48.922 00:05:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 23:36:15.895 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49288 10 6452 1 2025-10-23 23:37:01.365 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:37:01.439 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 23:37:01.347 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 23:37:01.457 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:37:01.447 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 23:37:16.311 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37180 10 6452 1 2025-10-23 23:38:16.685 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34312 10 6452 1 2025-10-23 23:39:17.107 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58180 10 6452 1 2025-10-23 23:40:17.513 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37402 10 6452 1 2025-10-23 23:36:48.922 00:05:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 23:41:17.917 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59928 10 6452 1 2025-10-23 23:37:48.926 00:05:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 23:42:01.577 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 23:42:01.557 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:42:01.644 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:42:01.594 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 23:42:01.727 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 23:42:18.326 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42592 10 6452 1 2025-10-23 23:43:18.725 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36852 10 6452 1 2025-10-23 23:44:19.142 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36368 10 6452 1 2025-10-23 23:45:19.545 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:49502 12 10375 1 2025-10-23 23:46:20.027 00:00:15.840 TCP 1.101.0.1:3000 -> 23.104.0.1:38954 10 6452 1 2025-10-23 23:42:48.931 00:05:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 23:47:01.680 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 23:47:01.599 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:47:01.606 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 23:47:01.592 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 23:47:01.478 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:47:25.941 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33952 10 6452 1 2025-10-23 23:43:48.934 00:05:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 23:48:26.358 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59832 10 6452 1 2025-10-23 23:49:26.757 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:35012 10 6452 1 2025-10-23 23:50:27.187 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51282 10 6452 1 2025-10-23 23:51:27.598 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42760 10 6452 1 2025-10-23 23:52:01.793 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 23:52:01.807 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 23:52:01.431 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:52:01.710 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:52:01.613 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 23:52:28.001 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58466 10 6452 1 2025-10-23 23:48:48.933 00:05:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 23:53:28.360 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33542 10 6452 1 2025-10-23 23:49:48.936 00:05:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 23:54:28.760 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:50708 10 6452 1 2025-10-23 23:55:29.191 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55442 10 6452 1 2025-10-23 23:56:29.597 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40196 10 6452 1 2025-10-23 23:57:01.866 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 23:57:01.637 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:57:01.793 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 23:57:01.924 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 23:57:01.876 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 23:57:29.999 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36744 10 6452 1 2025-10-23 23:58:30.404 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41692 10 6452 1 2025-10-23 23:54:48.935 00:05:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 140, total bytes: 424846, total packets: 1024, avg bps: 885, avg pps: 0, avg bpp: 414 Time window: 2025-10-23 22:55:48 - 2025-10-23 23:59:49 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0033s User: 0.0017s Wall: 0.0019s flows/second: 75437.1 Runtime: 0.0019s