Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 11:59:18.509 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59512 10 6452 1 2025-10-03 11:54:38.541 00:06:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:00:18.909 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44424 10 6452 1 2025-10-03 12:01:19.312 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53472 10 6452 1 2025-10-03 12:02:09.809 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:02:09.728 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:02:09.818 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:02:09.821 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:02:09.726 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:02:19.712 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46160 10 6452 1 2025-10-03 12:03:20.123 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44800 10 6452 1 2025-10-03 11:58:38.539 00:06:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:04:20.530 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45158 10 6452 1 2025-10-03 12:05:20.930 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:33496 10 6452 1 2025-10-03 12:06:21.370 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41520 10 6452 1 2025-10-03 12:01:38.542 00:06:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:07:09.956 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:07:09.960 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:07:10.141 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:07:10.112 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:07:10.041 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:07:21.776 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36538 10 6452 1 2025-10-03 12:08:22.192 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41190 10 6452 1 2025-10-03 12:09:22.596 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:40790 10 6452 1 2025-10-03 12:10:22.971 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38232 10 6452 1 2025-10-03 12:05:38.541 00:06:00.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:11:23.386 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:47332 10 6452 1 2025-10-03 12:12:09.945 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:12:10.183 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:12:10.212 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:12:10.213 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:12:10.099 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:12:23.819 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43304 10 6452 1 2025-10-03 12:13:24.224 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41596 10 6452 1 2025-10-03 12:08:38.549 00:06:00.304 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:14:24.587 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42648 10 6452 1 2025-10-03 12:15:24.988 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54846 10 6452 1 2025-10-03 12:16:25.400 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40566 10 6452 1 2025-10-03 12:17:10.607 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:17:10.450 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:17:10.366 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:17:10.550 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:17:10.524 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:17:25.811 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50558 10 6452 1 2025-10-03 12:12:38.548 00:06:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:18:26.179 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:37822 12 10375 1 2025-10-03 12:19:26.659 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54064 10 6452 1 2025-10-03 12:15:38.550 00:06:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:20:27.096 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33508 10 6452 1 2025-10-03 12:21:27.494 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54342 10 6452 1 2025-10-03 12:22:10.696 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:22:10.642 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:22:10.671 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:22:10.216 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:22:10.613 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:22:27.900 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57024 12 6556 1 2025-10-03 12:23:28.319 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51206 10 6452 1 2025-10-03 12:19:38.548 00:06:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:24:28.722 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:58970 10 6452 1 2025-10-03 12:25:29.111 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38848 10 6452 1 2025-10-03 12:26:29.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51666 10 6452 1 2025-10-03 12:27:10.459 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:27:10.117 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:27:10.377 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:27:10.459 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:27:10.461 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:22:38.551 00:06:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:27:29.919 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48354 10 6452 1 2025-10-03 12:28:30.335 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58842 10 6452 1 2025-10-03 12:29:30.742 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39126 10 6452 1 2025-10-03 12:30:31.145 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51984 10 6452 1 2025-10-03 12:26:38.548 00:06:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:31:31.513 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35002 10 6452 1 2025-10-03 12:32:10.554 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:32:10.485 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:32:10.324 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:32:10.504 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:32:10.587 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:32:31.925 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41444 10 6452 1 2025-10-03 12:33:32.346 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46120 10 6452 1 2025-10-03 12:29:38.555 00:06:00.302 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:34:32.752 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55910 10 6452 1 2025-10-03 12:35:33.157 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:54670 10 6452 1 2025-10-03 12:36:33.533 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52678 10 6452 1 2025-10-03 12:37:10.658 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:37:10.497 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:37:10.679 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:37:10.418 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:37:10.576 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:37:33.937 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:33858 10 6452 1 2025-10-03 12:33:38.554 00:06:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:38:34.331 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40866 10 6452 1 2025-10-03 12:39:34.736 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40900 10 6452 1 2025-10-03 12:40:35.146 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50642 10 6452 1 2025-10-03 12:36:38.556 00:06:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:41:35.550 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51254 12 6556 1 2025-10-03 12:42:10.959 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:42:11.144 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:42:10.803 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:42:11.346 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:42:11.427 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:42:35.959 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48732 10 6452 1 2025-10-03 12:43:36.371 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42300 10 6452 1 2025-10-03 12:44:36.776 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48292 10 6452 1 2025-10-03 12:40:38.555 00:06:00.311 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:45:37.147 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57098 10 6452 1 2025-10-03 12:46:37.582 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:59524 10 6452 1 2025-10-03 12:47:11.112 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:47:11.115 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:47:10.858 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:47:11.184 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:47:11.267 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:47:37.939 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49000 10 6452 1 2025-10-03 12:43:38.559 00:06:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:48:38.342 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34980 10 6452 1 2025-10-03 12:49:38.744 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47320 10 6452 1 2025-10-03 12:50:39.153 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53946 10 6452 1 2025-10-03 12:51:39.557 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33520 10 6452 1 2025-10-03 12:52:11.064 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:52:10.842 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:52:10.710 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:52:10.847 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:52:10.929 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:47:38.556 00:06:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:52:39.956 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38166 10 6452 1 2025-10-03 12:53:40.373 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38326 10 6452 1 2025-10-03 12:54:40.776 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38146 10 6452 1 2025-10-03 12:50:38.558 00:06:00.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:55:41.187 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44474 10 6452 1 2025-10-03 12:56:41.586 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52564 10 6452 1 2025-10-03 12:57:11.166 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:57:10.919 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:57:10.878 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:57:11.118 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:57:11.201 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:57:41.997 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45374 10 6452 1 Summary: total flows: 136, total bytes: 414556, total packets: 1014, avg bps: 874, avg pps: 0, avg bpp: 408 Time window: 2025-10-03 11:54:38 - 2025-10-03 12:57:52 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0030s User: 0.0010s Wall: 0.0032s flows/second: 42914.9 Runtime: 0.0032s