Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 04:58:52.369 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41464 10 6452 1 2025-10-25 04:54:49.636 00:06:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 04:59:52.772 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44816 10 6452 1 2025-10-25 05:00:53.179 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55128 10 6452 1 2025-10-25 05:01:53.581 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35278 10 6452 1 2025-10-25 05:02:37.320 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 05:02:37.068 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 05:02:36.959 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:02:37.239 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:02:37.227 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 04:57:49.634 00:06:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 05:02:53.987 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44706 10 6452 1 2025-10-25 05:03:54.392 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:32884 10 6452 1 2025-10-25 05:04:54.825 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:60526 10 6452 1 2025-10-25 05:05:55.195 00:00:10.566 TCP 1.101.0.1:3000 -> 23.104.0.1:43416 10 6452 1 2025-10-25 05:01:49.637 00:06:00.243 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 05:06:55.797 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44238 10 6452 1 2025-10-25 05:07:37.335 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 05:07:37.260 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 05:07:37.143 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:07:37.252 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:07:37.185 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 05:07:56.207 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47926 10 6452 1 2025-10-25 05:08:56.616 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49630 10 6452 1 2025-10-25 05:04:49.635 00:06:00.249 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 05:09:57.019 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43398 10 6452 1 2025-10-25 05:10:57.416 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39470 10 6452 1 2025-10-25 05:11:57.820 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:51454 10 6452 1 2025-10-25 05:12:38.630 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 05:12:38.538 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 05:12:38.416 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:12:38.547 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:12:38.489 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 05:12:58.244 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34366 10 6452 1 2025-10-25 05:08:49.642 00:06:00.240 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 05:13:58.648 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34006 10 6452 1 2025-10-25 05:14:59.058 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50282 10 6452 1 2025-10-25 05:15:59.460 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39958 10 6452 1 2025-10-25 05:11:49.643 00:06:00.246 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 05:16:59.868 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48142 10 6452 1 2025-10-25 05:17:37.445 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 05:17:37.509 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:17:37.285 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:17:37.448 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 05:17:37.369 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 05:18:00.281 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56568 10 6452 1 2025-10-25 05:19:00.688 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44412 10 6452 1 2025-10-25 05:20:01.128 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59614 10 6452 1 2025-10-25 05:15:49.646 00:06:00.241 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 05:21:01.531 00:00:10.488 TCP 1.101.0.1:3000 -> 23.104.0.1:57136 10 6452 1 2025-10-25 05:22:02.069 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44292 10 6452 1 2025-10-25 05:22:37.580 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 05:22:37.494 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 05:22:37.417 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:22:37.498 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:22:37.657 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 05:23:02.476 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50090 10 6452 1 2025-10-25 05:18:49.646 00:06:00.249 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 05:24:02.878 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48256 10 6452 1 2025-10-25 05:25:03.286 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45996 10 6452 1 2025-10-25 05:26:03.651 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47598 10 6452 1 2025-10-25 05:27:04.068 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39268 10 6452 1 2025-10-25 05:27:37.755 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 05:27:37.671 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 05:27:37.760 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:27:37.673 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:27:37.744 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 05:22:49.652 00:06:00.242 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 05:28:04.483 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44440 10 6452 1 2025-10-25 05:29:04.883 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44780 10 6452 1 2025-10-25 05:30:05.287 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34578 10 6452 1 2025-10-25 05:25:49.650 00:06:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 05:31:05.699 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58734 10 6452 1 2025-10-25 05:32:06.110 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:45868 10 6452 1 2025-10-25 05:32:37.920 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 05:32:37.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 05:32:37.549 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:32:37.838 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:32:37.843 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 05:33:06.564 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33484 10 6452 1 2025-10-25 05:34:06.969 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34414 10 6452 1 2025-10-25 05:29:49.656 00:06:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 05:35:07.388 00:00:15.175 TCP 1.101.0.1:3000 -> 23.104.0.1:35736 10 6452 1 2025-10-25 05:36:12.606 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42572 10 6452 1 2025-10-25 05:37:12.970 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:57824 10 6452 1 2025-10-25 05:37:37.852 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 05:37:37.648 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:37:38.009 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:37:38.007 00:00:00.040 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 05:37:38.092 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 05:32:49.655 00:06:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 05:38:13.391 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52634 10 6452 1 2025-10-25 05:39:13.796 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58860 10 6452 1 2025-10-25 05:40:14.203 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46388 10 6452 1 2025-10-25 05:41:14.570 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52216 10 6452 1 2025-10-25 05:36:49.657 00:06:00.243 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 05:42:14.976 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:58430 10 6452 1 2025-10-25 05:42:38.648 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 05:42:38.483 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:42:38.776 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:42:38.546 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 05:42:38.859 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 05:43:15.346 00:00:10.910 TCP 1.101.0.1:3000 -> 23.104.0.1:58012 10 6452 1 2025-10-25 05:44:16.296 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38156 10 6452 1 2025-10-25 05:39:49.655 00:06:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 05:45:16.659 00:00:14.539 TCP 1.101.0.1:3000 -> 23.104.0.1:57100 10 6452 1 2025-10-25 05:46:21.261 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54140 10 6452 1 2025-10-25 05:47:21.619 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51610 10 6452 1 2025-10-25 05:47:38.138 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 05:47:37.967 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 05:47:37.704 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:47:38.054 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:47:37.959 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 05:48:22.027 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40912 10 6452 1 2025-10-25 05:43:49.660 00:06:00.243 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 05:49:22.425 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60094 10 6452 1 2025-10-25 05:50:22.829 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36996 10 6452 1 2025-10-25 05:51:23.231 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41360 10 6452 1 2025-10-25 05:46:49.656 00:06:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 05:52:37.905 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 05:52:23.632 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51466 10 6452 1 2025-10-25 05:52:38.137 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 05:52:37.989 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:52:37.823 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:52:38.060 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 05:53:24.002 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33660 10 6452 1 2025-10-25 05:54:24.414 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37366 10 6452 1 2025-10-25 05:55:24.818 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53714 10 6452 1 2025-10-25 05:50:49.661 00:06:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 05:56:25.229 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44686 10 6452 1 2025-10-25 05:57:25.629 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:40690 10 6452 1 2025-10-25 05:57:38.344 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 05:57:37.997 00:00:00.048 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:57:38.219 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 05:57:38.341 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 05:57:38.303 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 05:58:26.033 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49154 10 6452 1 2025-10-25 05:53:49.659 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 138, total bytes: 417738, total packets: 1032, avg bps: 856, avg pps: 0, avg bpp: 404 Time window: 2025-10-25 04:54:49 - 2025-10-25 05:59:49 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0028s User: 0.0019s Wall: 0.0018s flows/second: 78451.3 Runtime: 0.0018s