Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 09:58:45.800 00:00:11.569 TCP 1.101.0.1:3000 -> 23.104.0.1:60154 10 6452 1 2025-10-24 09:59:47.406 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48954 10 6452 1 2025-10-24 10:00:47.824 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:35084 10 6452 1 2025-10-24 09:56:49.206 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 10:01:48.277 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54710 10 6452 1 2025-10-24 10:02:13.889 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:02:13.791 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:02:14.075 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:02:13.887 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:02:14.158 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:02:48.677 00:00:10.676 TCP 1.101.0.1:3000 -> 23.104.0.1:37132 10 6452 1 2025-10-24 10:03:49.393 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33160 10 6452 1 2025-10-24 10:04:49.795 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50524 10 6452 1 2025-10-24 10:00:49.212 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 10:05:50.197 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53298 10 6452 1 2025-10-24 10:06:50.599 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56580 10 6452 1 2025-10-24 10:07:14.068 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:07:13.878 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:07:13.863 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:07:13.933 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:07:13.946 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:07:50.968 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60408 10 6452 1 2025-10-24 10:03:49.209 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 10:08:51.374 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44024 10 6452 1 2025-10-24 10:09:51.770 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59822 10 6452 1 2025-10-24 10:10:52.176 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52254 10 6452 1 2025-10-24 10:11:52.582 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41420 10 6452 1 2025-10-24 10:12:13.886 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:12:14.101 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:12:14.104 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:12:14.063 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:12:14.188 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:07:49.212 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 10:12:52.983 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44042 10 6452 1 2025-10-24 10:13:53.389 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36548 10 6452 1 2025-10-24 10:14:53.785 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35400 10 6452 1 2025-10-24 10:10:49.212 00:06:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 10:15:54.193 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36850 10 6452 1 2025-10-24 10:16:54.594 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59706 10 6452 1 2025-10-24 10:17:14.318 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:17:14.112 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:17:13.873 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:17:14.235 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:17:13.997 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:17:55.002 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39308 10 6452 1 2025-10-24 10:18:55.366 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:34922 11 6504 1 2025-10-24 10:14:49.215 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 10:19:55.821 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40962 10 6452 1 2025-10-24 10:20:56.225 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34268 10 6452 1 2025-10-24 10:21:56.588 00:00:10.832 TCP 1.101.0.1:3000 -> 23.104.0.1:41626 10 6452 1 2025-10-24 10:22:14.068 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:22:13.785 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:22:14.224 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:22:14.069 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:22:14.308 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:17:49.214 00:06:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 10:22:57.459 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34524 10 6452 1 2025-10-24 10:23:57.859 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35766 10 6452 1 2025-10-24 10:24:58.298 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33922 10 6452 1 2025-10-24 10:25:58.702 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53766 10 6452 1 2025-10-24 10:21:49.220 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 10:26:59.109 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46224 10 6452 1 2025-10-24 10:27:14.254 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:27:14.480 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:27:14.379 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:27:14.557 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:27:14.461 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:27:59.512 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34452 10 6452 1 2025-10-24 10:28:59.914 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55104 10 6452 1 2025-10-24 10:24:49.217 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 10:30:00.312 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44664 10 6452 1 2025-10-24 10:31:00.670 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34210 10 6452 1 2025-10-24 10:32:14.528 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:32:14.477 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:32:01.102 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45764 10 6452 1 2025-10-24 10:32:14.612 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:32:14.443 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:32:14.611 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:33:01.463 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38730 10 6452 1 2025-10-24 10:28:49.221 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 10:34:01.825 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:39838 10 6452 1 2025-10-24 10:35:02.217 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41400 10 6452 1 2025-10-24 10:36:02.580 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:40760 10 6452 1 2025-10-24 10:31:49.220 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 10:37:14.584 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:37:14.562 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:37:02.995 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39952 10 6452 1 2025-10-24 10:37:14.587 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:37:14.581 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:37:14.670 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:38:03.357 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52750 10 6452 1 2025-10-24 10:39:03.756 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:48710 10 6452 1 2025-10-24 10:40:04.172 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53054 10 6452 1 2025-10-24 10:35:49.223 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 10:41:04.572 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36778 10 6452 1 2025-10-24 10:42:14.765 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:42:14.631 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:42:14.816 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:42:14.816 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:42:04.981 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:38574 10 6452 1 2025-10-24 10:42:14.897 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:43:05.360 00:00:10.789 TCP 1.101.0.1:3000 -> 23.104.0.1:59774 10 6452 1 2025-10-24 10:38:49.221 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 10:44:06.185 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56606 10 6452 1 2025-10-24 10:45:06.589 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41920 10 6452 1 2025-10-24 10:46:06.996 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41726 10 6452 1 2025-10-24 10:47:14.856 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:47:14.864 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:47:14.858 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:47:14.534 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:47:14.941 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:47:07.357 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57682 10 6452 1 2025-10-24 10:42:49.224 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 10:48:07.758 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48836 10 6452 1 2025-10-24 10:49:08.171 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47640 10 6452 1 2025-10-24 10:50:08.564 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38282 10 6452 1 2025-10-24 10:45:49.221 00:06:00.239 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 10:51:08.966 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52178 10 6452 1 2025-10-24 10:52:15.067 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:52:15.064 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:52:14.601 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:52:14.984 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:52:14.934 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:52:09.330 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50376 10 6452 1 2025-10-24 10:53:09.738 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35002 10 6452 1 2025-10-24 10:54:10.144 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55870 10 6452 1 2025-10-24 10:49:49.225 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 10:55:10.547 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40768 10 6452 1 2025-10-24 10:56:10.948 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54528 10 6452 1 2025-10-24 10:57:14.987 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:57:14.979 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:57:14.979 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:57:14.977 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:57:15.063 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:57:11.367 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51458 10 6452 1 2025-10-24 10:52:49.225 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-24 10:58:11.771 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55890 10 6452 1 Summary: total flows: 137, total bytes: 416929, total packets: 1019, avg bps: 896, avg pps: 0, avg bpp: 409 Time window: 2025-10-24 09:56:49 - 2025-10-24 10:58:49 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0041s User: 0.0016s Wall: 0.0021s flows/second: 65648.3 Runtime: 0.0021s