Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 09:58:40.264 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59852 10 6452 1 2025-10-08 09:59:31.676 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 09:59:31.655 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 09:59:32.179 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 09:59:31.989 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 09:59:31.737 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 09:59:40.665 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48820 10 6452 1 2025-10-08 10:00:41.028 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58368 10 6452 1 2025-10-08 09:56:41.128 00:06:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 10:01:41.388 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44516 10 6452 1 2025-10-08 10:02:41.784 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60540 10 6452 1 2025-10-08 10:03:42.192 00:00:10.700 TCP 1.101.0.1:3000 -> 23.104.0.1:58384 10 6452 1 2025-10-08 10:04:31.922 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 10:04:31.505 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:04:31.860 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:04:31.763 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 10:04:31.944 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 10:04:42.934 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:54788 10 6452 1 2025-10-08 10:00:41.128 00:06:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 10:05:43.311 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42154 10 6452 1 2025-10-08 10:06:43.712 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54382 10 6452 1 2025-10-08 10:07:44.117 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60954 10 6452 1 2025-10-08 10:03:41.129 00:06:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 10:08:44.527 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37478 10 6452 1 2025-10-08 10:09:32.038 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 10:09:31.676 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 10:09:31.760 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 10:09:31.811 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:09:31.955 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:09:44.933 00:00:25.286 TCP 1.101.0.1:3000 -> 23.104.0.1:41058 10 6452 1 2025-10-08 10:11:00.283 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53036 10 6452 1 2025-10-08 10:12:00.685 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57714 10 6452 1 2025-10-08 10:07:41.129 00:06:00.316 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 10:13:01.121 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39006 10 6452 1 2025-10-08 10:14:01.485 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52616 10 6452 1 2025-10-08 10:14:31.923 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 10:14:31.989 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 10:14:31.762 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:14:31.747 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:14:31.831 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 10:15:01.854 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:60548 10 6452 1 2025-10-08 10:10:41.132 00:06:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 10:16:02.231 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56286 10 6452 1 2025-10-08 10:17:02.635 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39506 10 6452 1 2025-10-08 10:18:03.004 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51460 10 6452 1 2025-10-08 10:19:03.404 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58568 10 6452 1 2025-10-08 10:19:32.018 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 10:19:32.004 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 10:19:31.881 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:19:31.936 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:19:31.930 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 10:14:41.130 00:06:00.317 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 10:20:03.811 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:34082 10 6452 1 2025-10-08 10:21:04.187 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39680 10 6452 1 2025-10-08 10:22:04.589 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34634 10 6452 1 2025-10-08 10:17:41.135 00:06:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 10:23:04.948 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55072 10 6452 1 2025-10-08 10:24:05.350 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33884 10 6452 1 2025-10-08 10:24:32.150 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 10:24:32.056 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 10:24:32.313 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 10:24:32.093 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:24:32.067 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:25:05.714 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33344 10 6452 1 2025-10-08 10:26:06.106 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:37832 11 6504 1 2025-10-08 10:21:41.133 00:06:00.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 10:27:06.567 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41780 10 6452 1 2025-10-08 10:28:06.967 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60588 10 6452 1 2025-10-08 10:29:07.371 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45268 10 6452 1 2025-10-08 10:29:32.451 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 10:29:32.239 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 10:29:32.081 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 10:29:32.097 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:29:32.369 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:24:41.138 00:06:00.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 10:30:07.775 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56010 10 6452 1 2025-10-08 10:31:08.183 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40772 10 6452 1 2025-10-08 10:32:08.585 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40596 10 6452 1 2025-10-08 10:33:08.987 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42484 10 6452 1 2025-10-08 10:28:41.135 00:06:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 10:34:09.389 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56992 10 6452 1 2025-10-08 10:34:32.417 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 10:34:32.476 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 10:34:32.491 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:34:32.526 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:34:32.610 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 10:35:09.794 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36844 10 6452 1 2025-10-08 10:36:10.220 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33776 10 6452 1 2025-10-08 10:31:41.139 00:06:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 10:37:10.624 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44804 10 6452 1 2025-10-08 10:38:11.037 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34650 10 6452 1 2025-10-08 10:39:11.443 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36906 10 6452 1 2025-10-08 10:39:32.500 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 10:39:32.230 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 10:39:32.524 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:39:32.508 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:39:32.591 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 10:40:11.815 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45682 10 6452 1 2025-10-08 10:35:41.136 00:06:00.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 10:41:12.215 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59864 10 6452 1 2025-10-08 10:42:12.620 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45288 10 6452 1 2025-10-08 10:43:12.976 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35234 10 6452 1 2025-10-08 10:38:41.140 00:06:00.309 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 10:44:13.389 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37360 10 6452 1 2025-10-08 10:44:32.652 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 10:44:32.531 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:44:32.651 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:44:32.650 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 10:44:32.735 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 10:45:13.756 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:39500 12 10375 1 2025-10-08 10:46:14.228 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37696 10 6452 1 2025-10-08 10:47:14.639 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40666 10 6452 1 2025-10-08 10:42:41.138 00:06:00.317 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 10:48:15.002 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57548 10 6452 1 2025-10-08 10:49:15.399 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44282 10 6452 1 2025-10-08 10:49:32.756 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 10:49:32.711 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 10:49:32.648 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:49:32.633 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:49:32.715 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 10:50:15.764 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54314 10 6452 1 2025-10-08 10:45:41.143 00:06:00.312 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 10:51:16.178 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58172 10 6452 1 2025-10-08 10:52:16.547 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60880 10 6452 1 2025-10-08 10:53:16.956 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45134 10 6452 1 2025-10-08 10:54:17.364 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59720 10 6452 1 2025-10-08 10:54:32.935 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 10:54:32.696 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 10:54:32.826 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:54:33.031 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 10:54:33.112 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 10:49:41.141 00:06:00.316 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 10:55:17.765 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35770 10 6452 1 2025-10-08 10:56:18.177 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40408 10 6452 1 2025-10-08 10:57:18.592 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47838 10 6452 1 2025-10-08 10:52:41.143 00:06:00.312 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 10:58:19.003 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46634 10 6452 1 Summary: total flows: 137, total bytes: 420852, total packets: 1021, avg bps: 904, avg pps: 0, avg bpp: 412 Time window: 2025-10-08 09:56:41 - 2025-10-08 10:58:41 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0039s User: 0.0010s Wall: 0.0022s flows/second: 63048.0 Runtime: 0.0022s