Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 13:59:07.231 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53300 10 6452 1 2025-10-03 14:00:07.633 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:43608 10 6452 1 2025-10-03 14:01:08.058 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34386 10 6452 1 2025-10-03 14:02:12.289 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:02:12.543 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 14:02:12.412 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 14:02:12.321 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:02:12.372 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 14:02:08.463 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50146 10 6452 1 2025-10-03 13:57:38.570 00:06:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 14:03:08.872 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48944 10 6452 1 2025-10-03 14:04:09.281 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40408 10 6452 1 2025-10-03 14:05:09.684 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55436 10 6452 1 2025-10-03 14:00:38.572 00:06:00.336 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 14:06:10.047 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43130 10 6452 1 2025-10-03 14:07:12.702 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 14:07:12.709 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 14:07:12.784 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 14:07:12.676 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:07:12.619 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:07:10.450 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60328 10 6452 1 2025-10-03 14:08:10.810 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42656 10 6452 1 2025-10-03 14:09:11.209 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54034 10 6452 1 2025-10-03 14:04:38.570 00:06:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 14:10:11.607 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49614 10 6452 1 2025-10-03 14:11:12.009 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59042 10 6452 1 2025-10-03 14:12:12.850 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 14:12:12.800 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 14:12:12.825 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:12:12.929 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:12:13.013 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 14:12:12.417 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55218 10 6452 1 2025-10-03 14:07:38.573 00:06:00.338 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 14:13:12.782 00:00:10.493 TCP 1.101.0.1:3000 -> 23.104.0.1:37930 12 10375 1 2025-10-03 14:14:13.333 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33606 10 6452 1 2025-10-03 14:15:13.697 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42494 10 6452 1 2025-10-03 14:16:14.133 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34974 10 6452 1 2025-10-03 14:11:38.571 00:06:00.345 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 14:17:12.498 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 14:17:12.518 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 14:17:12.724 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 14:17:12.539 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:17:12.415 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:17:14.490 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38116 10 6452 1 2025-10-03 14:18:14.894 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48136 12 6556 1 2025-10-03 14:19:15.311 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54710 10 6452 1 2025-10-03 14:14:38.575 00:06:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 14:20:15.716 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48434 10 6452 1 2025-10-03 14:21:16.104 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43872 10 6452 1 2025-10-03 14:22:12.714 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 14:22:12.738 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 14:22:12.545 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 14:22:12.722 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:22:12.632 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:22:16.508 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49744 10 6452 1 2025-10-03 14:23:16.921 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50590 10 6452 1 2025-10-03 14:18:38.572 00:06:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 14:24:17.287 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50066 10 6452 1 2025-10-03 14:25:17.692 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46634 10 6452 1 2025-10-03 14:26:18.106 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37872 10 6452 1 2025-10-03 14:21:38.582 00:06:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 14:27:13.014 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 14:27:12.678 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 14:27:12.931 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 14:27:12.833 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:27:12.930 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:27:18.509 00:00:11.510 TCP 1.101.0.1:3000 -> 23.104.0.1:50646 10 6452 1 2025-10-03 14:28:20.075 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41504 10 6452 1 2025-10-03 14:29:20.481 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53278 10 6452 1 2025-10-03 14:30:20.878 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55164 10 6452 1 2025-10-03 14:25:38.582 00:06:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 14:31:21.281 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40162 10 6452 1 2025-10-03 14:32:12.817 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 14:32:12.913 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 14:32:12.834 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 14:32:12.991 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:32:12.735 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:32:21.684 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59960 10 6452 1 2025-10-03 14:33:22.125 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47818 10 6452 1 2025-10-03 14:28:38.586 00:06:00.335 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 14:34:22.534 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37496 10 6452 1 2025-10-03 14:35:22.959 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59728 10 6452 1 2025-10-03 14:36:23.368 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60862 10 6452 1 2025-10-03 14:37:13.140 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 14:37:12.820 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 14:37:12.653 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:37:13.061 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:37:13.144 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 14:37:23.768 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:50662 10 6452 1 2025-10-03 14:32:38.590 00:06:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 14:38:24.189 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41048 10 6452 1 2025-10-03 14:39:24.553 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55496 10 6452 1 2025-10-03 14:35:38.594 00:06:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 14:40:24.916 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48064 10 6452 1 2025-10-03 14:41:25.317 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48140 10 6452 1 2025-10-03 14:42:13.331 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 14:42:13.095 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 14:42:13.162 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 14:42:13.156 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:42:13.249 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:42:25.692 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42292 10 6452 1 2025-10-03 14:43:26.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56962 10 6452 1 2025-10-03 14:44:26.518 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55852 10 6452 1 2025-10-03 14:39:38.594 00:06:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 14:45:26.924 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:42416 10 6452 1 2025-10-03 14:46:27.296 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46986 10 6452 1 2025-10-03 14:47:13.290 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 14:47:13.527 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 14:47:13.382 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:47:13.497 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:47:13.580 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 14:42:38.594 00:06:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 14:47:27.700 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58724 10 6452 1 2025-10-03 14:48:28.121 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:35368 10 6452 1 2025-10-03 14:49:28.520 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45542 10 6452 1 2025-10-03 14:50:28.881 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38278 10 6452 1 2025-10-03 14:51:29.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59538 10 6452 1 2025-10-03 14:46:38.593 00:06:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 14:52:13.231 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 14:52:13.254 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:52:13.364 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:52:13.238 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 14:52:13.444 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 14:52:29.680 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37802 10 6452 1 2025-10-03 14:53:30.112 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46136 10 6452 1 2025-10-03 14:49:38.595 00:06:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 14:54:30.517 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46566 10 6452 1 2025-10-03 14:55:30.921 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52256 10 6452 1 2025-10-03 14:56:31.337 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41056 10 6452 1 2025-10-03 14:57:13.671 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 14:57:13.743 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 14:57:13.472 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:57:13.588 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 14:57:13.698 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 14:57:31.745 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36032 10 6452 1 2025-10-03 14:53:38.593 00:06:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 14:58:32.110 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:42976 12 10375 1 Summary: total flows: 137, total bytes: 424827, total packets: 1024, avg bps: 913, avg pps: 0, avg bpp: 414 Time window: 2025-10-03 13:57:38 - 2025-10-03 14:59:38 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0029s User: 0.0019s Wall: 0.0027s flows/second: 50591.6 Runtime: 0.0027s