Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 00:59:04.366 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58978 10 6452 1 2025-10-25 01:00:04.729 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48242 10 6452 1 2025-10-25 01:01:05.136 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:49268 10 6452 1 2025-10-25 00:56:49.540 00:06:00.238 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 01:02:05.506 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58642 10 6452 1 2025-10-25 01:02:32.175 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 01:02:32.221 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:02:32.351 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:02:32.360 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 01:02:32.433 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 01:03:05.918 00:00:11.078 TCP 1.101.0.1:3000 -> 23.104.0.1:50338 10 6452 1 2025-10-25 01:04:07.035 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50992 10 6452 1 2025-10-25 00:59:49.538 00:06:00.243 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 01:05:07.436 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36172 10 6452 1 2025-10-25 01:06:07.839 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:43444 10 6452 1 2025-10-25 01:07:08.230 00:00:10.507 TCP 1.101.0.1:3000 -> 23.104.0.1:32978 10 6452 1 2025-10-25 01:07:32.496 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 01:07:32.506 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:07:32.411 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:07:32.409 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 01:07:32.492 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 01:08:08.776 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38814 10 6452 1 2025-10-25 01:03:49.544 00:06:00.237 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 01:09:09.179 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55348 10 6452 1 2025-10-25 01:10:09.582 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57944 10 6452 1 2025-10-25 01:11:09.991 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56384 10 6452 1 2025-10-25 01:06:49.542 00:06:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 01:12:10.395 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43554 10 6452 1 2025-10-25 01:12:32.994 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 01:12:32.910 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 01:12:33.007 00:00:00.041 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:12:32.911 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:12:32.918 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 01:13:10.806 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48670 10 6452 1 2025-10-25 01:14:11.211 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36486 10 6452 1 2025-10-25 01:15:11.566 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51422 10 6452 1 2025-10-25 01:10:49.548 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 01:16:11.973 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:58222 10 6452 1 2025-10-25 01:17:12.393 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56294 10 6452 1 2025-10-25 01:17:32.843 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 01:17:32.762 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 01:17:32.877 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:17:32.760 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:17:32.945 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 01:18:12.795 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:50538 10 6452 1 2025-10-25 01:13:49.546 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 01:19:13.197 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60210 10 6452 1 2025-10-25 01:20:13.598 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55548 10 6452 1 2025-10-25 01:21:14.002 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60192 10 6452 1 2025-10-25 01:22:14.406 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:40184 10 6452 1 2025-10-25 01:22:32.908 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 01:22:32.778 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:22:32.787 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:22:32.712 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 01:22:32.871 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 01:17:49.554 00:06:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 01:23:14.781 00:00:10.452 TCP 1.101.0.1:3000 -> 23.104.0.1:34948 10 6452 1 2025-10-25 01:24:15.274 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45690 10 6452 1 2025-10-25 01:25:15.634 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56840 10 6452 1 2025-10-25 01:20:49.552 00:06:00.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 01:26:16.038 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47438 10 6452 1 2025-10-25 01:27:16.400 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58740 10 6452 1 2025-10-25 01:27:32.720 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:27:32.915 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:27:33.104 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 01:27:32.914 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 01:27:32.997 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 01:28:16.805 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44448 10 6452 1 2025-10-25 01:29:17.203 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50896 10 6452 1 2025-10-25 01:24:49.556 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 01:30:17.610 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51218 10 6452 1 2025-10-25 01:31:17.983 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36474 10 6452 1 2025-10-25 01:32:18.390 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54116 10 6452 1 2025-10-25 01:32:32.826 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 01:32:32.904 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:32:32.903 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:32:33.080 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 01:32:32.985 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 01:27:49.554 00:06:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 01:33:18.800 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37432 10 6452 1 2025-10-25 01:34:19.200 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53086 10 6452 1 2025-10-25 01:35:19.599 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46472 10 6452 1 2025-10-25 01:36:20.006 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47046 10 6452 1 2025-10-25 01:31:49.557 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 01:37:20.409 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39574 10 6452 1 2025-10-25 01:37:33.477 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 01:37:33.529 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 01:37:33.487 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:37:33.529 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:37:33.610 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 01:38:20.807 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:45830 10 6452 1 2025-10-25 01:39:21.186 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36240 10 6452 1 2025-10-25 01:34:49.555 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 01:40:21.596 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58578 10 6452 1 2025-10-25 01:41:22.000 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49666 10 6452 1 2025-10-25 01:42:33.326 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 01:42:22.403 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34392 10 6452 1 2025-10-25 01:42:33.179 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 01:42:33.249 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:42:33.179 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:42:33.262 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 01:43:22.807 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:56256 10 6452 1 2025-10-25 01:38:49.559 00:06:00.233 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 01:44:23.189 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36964 10 6452 1 2025-10-25 01:45:23.595 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37470 10 6452 1 2025-10-25 01:46:24.018 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:35830 11 6504 1 2025-10-25 01:41:49.557 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 01:47:33.257 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 01:47:33.367 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:47:33.125 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:47:33.259 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 01:47:24.472 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39240 10 6452 1 2025-10-25 01:47:33.208 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 01:48:24.880 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53870 10 6452 1 2025-10-25 01:49:25.284 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51964 10 6452 1 2025-10-25 01:50:25.682 00:00:10.633 TCP 1.101.0.1:3000 -> 23.104.0.1:54834 12 10369 1 2025-10-25 01:45:49.562 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 01:51:26.353 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52220 12 6556 1 2025-10-25 01:52:33.261 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 01:52:33.351 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 01:52:32.925 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:52:33.180 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:52:33.410 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 01:52:26.764 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52836 10 6452 1 2025-10-25 01:53:27.180 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36988 10 6452 1 2025-10-25 01:48:49.560 00:06:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 01:54:27.595 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46660 10 6452 1 2025-10-25 01:55:28.001 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43908 10 6452 1 2025-10-25 01:56:28.407 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49934 10 6452 1 2025-10-25 01:57:33.852 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 01:57:33.607 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 01:57:33.521 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:57:33.770 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 01:57:33.503 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 01:57:28.811 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34988 10 6452 1 2025-10-25 01:52:49.565 00:06:00.228 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 01:58:29.221 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35894 10 6452 1 Summary: total flows: 137, total bytes: 420950, total packets: 1023, avg bps: 905, avg pps: 0, avg bpp: 411 Time window: 2025-10-25 00:56:49 - 2025-10-25 01:58:49 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0031s User: 0.0008s Wall: 0.0013s flows/second: 106529.4 Runtime: 0.0013s