Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 01:59:32.888 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:41538 10 6452 1 2025-10-24 01:55:48.991 00:05:00.304 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-24 02:00:33.273 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47840 10 6452 1 2025-10-24 02:01:33.644 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51834 10 6452 1 2025-10-24 02:02:05.387 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 02:02:05.339 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:02:05.113 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:02:05.393 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 02:02:05.197 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 02:02:34.060 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40222 10 6452 1 2025-10-24 02:03:34.472 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41834 10 6452 1 2025-10-24 02:04:34.874 00:00:11.033 TCP 1.101.0.1:3000 -> 23.104.0.1:60864 10 6452 1 2025-10-24 02:00:48.989 00:05:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-24 02:05:35.947 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:59476 10 6452 1 2025-10-24 02:01:48.992 00:05:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-24 02:06:36.325 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53470 10 6452 1 2025-10-24 02:07:04.484 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 02:07:04.383 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:07:04.483 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:07:04.421 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 02:07:04.566 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 02:07:36.723 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53500 10 6452 1 2025-10-24 02:08:37.143 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58386 10 6452 1 2025-10-24 02:09:37.504 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53622 10 6452 1 2025-10-24 02:10:37.908 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50870 10 6452 1 2025-10-24 02:06:48.991 00:05:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-24 02:11:38.311 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39154 10 6452 1 2025-10-24 02:07:48.994 00:05:00.304 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-24 02:12:04.567 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 02:12:04.485 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:12:04.554 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 02:12:04.461 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 02:12:04.366 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:12:38.722 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38772 10 6452 1 2025-10-24 02:13:39.114 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59660 10 6452 1 2025-10-24 02:14:39.518 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50108 10 6452 1 2025-10-24 02:15:39.925 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51026 10 6452 1 2025-10-24 02:12:48.993 00:05:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-24 02:16:40.337 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34684 10 6452 1 2025-10-24 02:17:04.774 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 02:17:04.702 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:17:04.863 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:17:04.929 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 02:17:04.944 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 02:13:48.994 00:05:00.304 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-24 02:17:40.743 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57084 10 6452 1 2025-10-24 02:18:41.147 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33876 10 6452 1 2025-10-24 02:19:41.559 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56574 10 6452 1 2025-10-24 02:20:41.960 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58976 10 6452 1 2025-10-24 02:21:42.325 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48000 10 6452 1 2025-10-24 02:22:04.719 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 02:22:04.677 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:22:04.800 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:22:04.673 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 02:22:04.883 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 02:18:48.993 00:05:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-24 02:22:42.753 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:43780 10 6452 1 2025-10-24 02:19:48.997 00:05:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-24 02:23:43.194 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50460 10 6452 1 2025-10-24 02:24:43.593 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34560 10 6452 1 2025-10-24 02:25:43.965 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33238 10 6452 1 2025-10-24 02:26:44.368 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:49612 10 6452 1 2025-10-24 02:27:04.798 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 02:27:04.448 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:27:04.798 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:27:04.797 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 02:27:04.880 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 02:27:44.743 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43808 10 6452 1 2025-10-24 02:24:48.995 00:05:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-24 02:28:45.149 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42522 10 6452 1 2025-10-24 02:29:45.567 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:59000 12 10375 1 2025-10-24 02:25:49.002 00:06:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 02:30:46.056 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51486 10 6452 1 2025-10-24 02:31:46.460 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40436 10 6452 1 2025-10-24 02:32:04.826 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 02:32:04.822 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 02:32:04.736 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:32:04.743 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:32:04.870 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 02:32:46.861 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33776 10 6452 1 2025-10-24 02:33:47.270 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47900 10 6452 1 2025-10-24 02:30:48.997 00:05:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-24 02:34:47.666 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46590 10 6452 1 2025-10-24 02:35:48.096 00:00:10.621 TCP 1.101.0.1:3000 -> 23.104.0.1:38968 10 6452 1 2025-10-24 02:36:48.747 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55816 10 6452 1 2025-10-24 02:37:05.586 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 02:37:05.399 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 02:37:05.262 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:37:05.504 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:37:05.458 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 02:32:49.001 00:06:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 02:37:49.147 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44956 10 6452 1 2025-10-24 02:38:49.555 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58936 10 6452 1 2025-10-24 02:39:49.957 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57938 10 6452 1 2025-10-24 02:36:48.998 00:05:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-24 02:40:50.366 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43712 10 6452 1 2025-10-24 02:42:05.245 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 02:42:05.163 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:42:05.160 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 02:41:50.732 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53028 10 6452 1 2025-10-24 02:42:04.935 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 02:42:05.232 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:42:51.145 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:54598 10 6452 1 2025-10-24 02:43:51.507 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57214 10 6452 1 2025-10-24 02:39:49.005 00:06:00.302 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 02:44:51.910 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58718 10 6452 1 2025-10-24 02:45:52.311 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42556 10 6452 1 2025-10-24 02:47:04.956 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 02:47:05.001 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:47:05.202 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:47:05.259 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 02:46:52.677 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35376 10 6452 1 2025-10-24 02:47:05.285 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 02:42:49.003 00:06:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 02:47:53.110 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59304 10 6452 1 2025-10-24 02:48:53.515 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50206 10 6452 1 2025-10-24 02:49:53.919 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41756 10 6452 1 2025-10-24 02:50:54.320 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38708 10 6452 1 2025-10-24 02:46:49.022 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 02:52:05.097 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 02:52:04.962 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:51:54.684 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49560 10 6452 1 2025-10-24 02:52:05.260 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:52:05.185 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 02:52:05.343 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 02:52:55.111 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58970 10 6452 1 2025-10-24 02:53:55.530 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56452 10 6452 1 2025-10-24 02:49:49.027 00:06:00.285 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 02:54:55.929 00:00:10.670 TCP 1.101.0.1:3000 -> 23.104.0.1:55722 14 14298 1 2025-10-24 02:55:56.639 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:44780 10 6452 1 2025-10-24 02:57:05.690 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 02:57:05.477 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:57:05.500 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 02:57:05.584 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 02:57:05.583 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 02:56:57.004 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:45374 10 6452 1 2025-10-24 02:57:57.399 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55832 10 6452 1 2025-10-24 02:53:49.035 00:06:00.277 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 138, total bytes: 422440, total packets: 1018, avg bps: 880, avg pps: 0, avg bpp: 414 Time window: 2025-10-24 01:55:48 - 2025-10-24 02:59:49 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0044s User: 0.0011s Wall: 0.0022s flows/second: 61661.2 Runtime: 0.0023s