Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 22:58:42.439 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47402 10 6452 1 2025-10-07 22:59:18.620 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 22:59:18.347 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 22:59:18.538 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 22:59:18.087 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 22:59:18.537 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 22:59:42.846 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:56816 10 6452 1 2025-10-07 23:00:43.235 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41882 10 6452 1 2025-10-07 23:01:43.633 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42124 10 6452 1 2025-10-07 22:58:40.874 00:05:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:02:44.045 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47758 10 6452 1 2025-10-07 22:59:40.877 00:05:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:03:44.444 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59760 10 6452 1 2025-10-07 23:04:18.842 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:04:18.623 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:04:18.724 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:04:18.577 00:00:00.020 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:04:18.759 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:04:44.853 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53596 10 6452 1 2025-10-07 23:05:45.275 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48804 10 6452 1 2025-10-07 23:06:45.678 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:40048 10 6452 1 2025-10-07 23:07:46.114 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46146 10 6452 1 2025-10-07 23:04:40.877 00:05:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:08:46.517 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44690 10 6452 1 2025-10-07 23:09:18.796 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:09:18.652 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:09:18.701 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:09:18.792 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:09:18.874 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:05:40.879 00:05:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:09:46.918 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56244 10 6452 1 2025-10-07 23:10:47.319 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44160 10 6452 1 2025-10-07 23:11:47.722 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48164 10 6452 1 2025-10-07 23:12:48.136 00:00:10.837 TCP 1.101.0.1:3000 -> 23.104.0.1:52258 10 6452 1 2025-10-07 23:13:49.007 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43596 10 6452 1 2025-10-07 23:14:18.768 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:14:18.711 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:14:18.899 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:14:18.602 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:14:18.686 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:10:40.878 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:14:49.405 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:35050 12 10369 1 2025-10-07 23:11:40.881 00:05:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:15:49.891 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:47820 10 6452 1 2025-10-07 23:16:50.313 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55564 10 6452 1 2025-10-07 23:17:50.717 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:39442 10 6452 1 2025-10-07 23:18:51.116 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:44232 10 6452 1 2025-10-07 23:19:18.775 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:19:18.868 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:19:18.703 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:19:19.220 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:19:19.302 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:19:51.483 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38476 10 6452 1 2025-10-07 23:16:40.883 00:05:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:20:51.892 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:38084 10 6452 1 2025-10-07 23:17:40.886 00:05:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:21:52.332 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57846 10 6452 1 2025-10-07 23:22:52.734 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40418 10 6452 1 2025-10-07 23:23:53.143 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52450 10 6452 1 2025-10-07 23:24:19.117 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:24:18.966 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:24:18.738 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:24:19.034 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:24:18.913 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:24:53.551 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55016 10 6452 1 2025-10-07 23:25:53.954 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51958 10 6452 1 2025-10-07 23:22:40.885 00:05:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:26:54.318 00:00:10.627 TCP 1.101.0.1:3000 -> 23.104.0.1:38612 10 6452 1 2025-10-07 23:23:40.888 00:05:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:27:54.986 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56540 10 6452 1 2025-10-07 23:28:55.393 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57368 10 6452 1 2025-10-07 23:29:19.178 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:29:18.951 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:29:19.181 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:29:19.124 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:29:19.207 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:29:55.817 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43650 10 6452 1 2025-10-07 23:30:56.236 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34654 10 6452 1 2025-10-07 23:31:56.647 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59050 10 6452 1 2025-10-07 23:28:40.885 00:05:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:32:57.057 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60280 10 6452 1 2025-10-07 23:29:40.889 00:05:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:33:57.464 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37244 10 6452 1 2025-10-07 23:34:19.240 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:34:19.497 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:34:19.288 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:34:19.245 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:34:19.328 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:34:57.865 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:45066 10 6452 1 2025-10-07 23:35:58.240 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42590 10 6452 1 2025-10-07 23:36:58.639 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51546 10 6452 1 2025-10-07 23:37:59.039 00:00:10.909 TCP 1.101.0.1:3000 -> 23.104.0.1:33790 10 6452 1 2025-10-07 23:34:40.886 00:05:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:38:59.986 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37218 10 6452 1 2025-10-07 23:39:19.531 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:39:19.642 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:39:19.677 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:39:19.069 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:39:19.614 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:35:40.890 00:05:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:40:00.400 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53594 10 6452 1 2025-10-07 23:41:00.805 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46800 10 6452 1 2025-10-07 23:42:01.207 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58470 10 6452 1 2025-10-07 23:43:01.611 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44572 10 6452 1 2025-10-07 23:44:02.012 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48610 10 6452 1 2025-10-07 23:44:19.452 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:44:19.197 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:44:19.373 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:44:19.373 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:44:19.455 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:40:40.888 00:05:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:45:02.416 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47104 10 6452 1 2025-10-07 23:41:40.890 00:05:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:46:02.823 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49654 10 6452 1 2025-10-07 23:47:03.236 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38554 10 6452 1 2025-10-07 23:48:03.642 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54650 10 6452 1 2025-10-07 23:49:04.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43828 10 6452 1 2025-10-07 23:49:19.422 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:49:19.422 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:49:19.446 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:49:19.419 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:49:19.502 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:50:04.516 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48082 10 6452 1 2025-10-07 23:46:40.889 00:05:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:51:04.930 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:36422 10 6452 1 2025-10-07 23:47:40.891 00:05:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:52:05.358 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40836 10 6452 1 2025-10-07 23:53:05.762 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56532 10 6452 1 2025-10-07 23:54:19.473 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 23:54:06.169 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:54884 10 6452 1 2025-10-07 23:54:19.545 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 23:54:19.386 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 23:54:19.319 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:54:19.391 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 23:55:06.538 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36718 10 6452 1 2025-10-07 23:56:06.938 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:41662 10 6452 1 2025-10-07 23:52:40.892 00:05:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 23:57:07.307 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59356 10 6452 1 2025-10-07 23:53:40.892 00:05:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 23:58:07.710 00:00:10.956 TCP 1.101.0.1:3000 -> 23.104.0.1:56480 10 6452 1 Summary: total flows: 140, total bytes: 420917, total packets: 1022, avg bps: 935, avg pps: 0, avg bpp: 411 Time window: 2025-10-07 22:58:40 - 2025-10-07 23:58:41 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0024s User: 0.0024s Wall: 0.0027s flows/second: 51527.1 Runtime: 0.0027s