Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 13:58:44.836 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:37436 10 6452 1 2025-10-08 13:59:36.468 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 13:59:36.477 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 13:59:36.302 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 13:59:36.519 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 13:59:36.602 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 13:54:41.217 00:06:00.313 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 13:59:45.256 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43768 10 6452 1 2025-10-08 14:00:45.660 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57696 10 6452 1 2025-10-08 14:01:46.064 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38506 10 6452 1 2025-10-08 14:02:46.469 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37730 10 6452 1 2025-10-08 13:58:41.214 00:06:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:03:46.872 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55228 10 6452 1 2025-10-08 14:04:36.585 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:04:36.401 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:04:36.360 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:04:36.501 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:04:36.568 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:04:47.277 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45924 10 6452 1 2025-10-08 14:05:47.677 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57102 10 6452 1 2025-10-08 14:01:41.217 00:06:00.313 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:06:48.035 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:36698 10 6452 1 2025-10-08 14:07:48.405 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52474 12 6556 1 2025-10-08 14:08:48.815 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54538 10 6452 1 2025-10-08 14:09:36.951 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:09:36.956 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:09:36.624 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:09:36.791 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:09:36.874 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:09:49.217 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45154 10 6452 1 2025-10-08 14:05:41.216 00:06:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:10:49.616 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35268 10 6452 1 2025-10-08 14:11:50.026 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50446 10 6452 1 2025-10-08 14:12:50.430 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52776 10 6452 1 2025-10-08 14:08:41.219 00:06:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:13:50.837 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:58772 10 6452 1 2025-10-08 14:14:36.804 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:14:36.895 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:14:36.725 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:14:36.667 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:14:36.886 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:14:51.235 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37902 10 6452 1 2025-10-08 14:15:51.642 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45420 10 6452 1 2025-10-08 14:16:52.064 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38640 10 6452 1 2025-10-08 14:12:41.218 00:06:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:17:52.463 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48756 10 6452 1 2025-10-08 14:18:52.866 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34428 10 6452 1 2025-10-08 14:19:37.051 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:19:36.945 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:19:36.827 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:19:37.154 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:19:37.240 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:19:53.277 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39996 10 6452 1 2025-10-08 14:15:41.222 00:06:00.312 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:20:53.681 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43960 10 6452 1 2025-10-08 14:21:54.114 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57776 10 6452 1 2025-10-08 14:22:54.528 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55112 10 6452 1 2025-10-08 14:23:54.936 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54110 10 6452 1 2025-10-08 14:24:37.133 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:24:37.053 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:24:37.052 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:24:36.977 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:24:37.050 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:19:41.219 00:06:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:24:55.358 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53740 10 6452 1 2025-10-08 14:25:55.789 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46520 10 6452 1 2025-10-08 14:26:56.202 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38336 10 6452 1 2025-10-08 14:22:41.224 00:06:00.313 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:27:56.608 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52078 10 6452 1 2025-10-08 14:28:56.973 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37012 10 6452 1 2025-10-08 14:29:37.925 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:29:37.839 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:29:38.041 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:29:38.128 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:29:38.211 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:29:57.342 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47466 10 6452 1 2025-10-08 14:30:57.747 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39324 10 6452 1 2025-10-08 14:26:41.220 00:06:00.322 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:31:58.151 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:46934 11 6504 1 2025-10-08 14:32:58.608 00:00:10.769 TCP 1.101.0.1:3000 -> 23.104.0.1:39488 10 6452 1 2025-10-08 14:33:59.415 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37488 10 6452 1 2025-10-08 14:34:37.192 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:34:37.129 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:34:37.292 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:34:37.126 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:34:37.209 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:29:41.223 00:06:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:34:59.820 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:57064 12 10369 1 2025-10-08 14:36:00.266 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45920 10 6452 1 2025-10-08 14:37:00.631 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58992 10 6452 1 2025-10-08 14:38:01.040 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46338 10 6452 1 2025-10-08 14:33:41.221 00:06:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:39:01.448 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39840 10 6452 1 2025-10-08 14:39:37.241 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:39:37.464 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:39:37.211 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:39:36.997 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:39:37.081 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:40:01.809 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44446 10 6452 1 2025-10-08 14:41:02.220 00:00:10.491 TCP 1.101.0.1:3000 -> 23.104.0.1:45876 10 6452 1 2025-10-08 14:36:41.233 00:06:00.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:42:02.754 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:56910 10 6452 1 2025-10-08 14:43:03.182 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53552 10 6452 1 2025-10-08 14:44:03.589 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44210 10 6452 1 2025-10-08 14:44:37.487 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:44:37.497 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:44:37.712 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:44:37.703 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:44:37.786 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:45:03.990 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37302 10 6452 1 2025-10-08 14:40:41.225 00:06:00.320 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:46:04.399 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57798 10 6452 1 2025-10-08 14:47:04.762 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48574 10 6452 1 2025-10-08 14:48:05.177 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50754 10 6452 1 2025-10-08 14:43:41.228 00:06:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:49:05.545 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50132 10 6452 1 2025-10-08 14:49:37.468 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:49:37.632 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:49:37.396 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:49:37.525 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:49:37.387 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:50:05.948 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39536 10 6452 1 2025-10-08 14:51:06.363 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41112 10 6452 1 2025-10-08 14:52:06.723 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36898 10 6452 1 2025-10-08 14:47:41.225 00:06:00.321 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:53:07.134 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33914 10 6452 1 2025-10-08 14:54:07.495 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41288 10 6452 1 2025-10-08 14:54:37.724 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:54:37.641 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:54:37.936 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:54:37.746 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:54:37.797 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:55:07.898 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:59646 10 6452 1 2025-10-08 14:50:41.229 00:06:00.315 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:56:08.280 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44004 10 6452 1 2025-10-08 14:57:08.712 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40856 10 6452 1 2025-10-08 14:58:09.118 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56686 10 6452 1 Summary: total flows: 137, total bytes: 420950, total packets: 1023, avg bps: 881, avg pps: 0, avg bpp: 411 Time window: 2025-10-08 13:54:41 - 2025-10-08 14:58:19 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0022s User: 0.0022s Wall: 0.0022s flows/second: 63158.9 Runtime: 0.0022s