Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 16:58:59.556 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44262 10 6452 1 2025-10-08 16:59:40.178 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 16:59:39.982 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:59:40.124 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:59:40.177 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 16:59:40.206 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 16:59:59.920 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42660 10 6452 1 2025-10-08 17:01:00.342 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56992 10 6452 1 2025-10-08 16:56:41.261 00:06:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 17:02:00.745 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42412 10 6452 1 2025-10-08 17:03:01.146 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34284 10 6452 1 2025-10-08 17:04:01.549 00:00:10.707 TCP 1.101.0.1:3000 -> 23.104.0.1:34134 10 6452 1 2025-10-08 17:04:39.950 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:04:40.324 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 17:04:40.239 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 17:04:40.251 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 17:04:40.241 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:05:02.293 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:41708 12 10375 1 2025-10-08 17:00:41.260 00:06:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 17:06:02.781 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42512 10 6452 1 2025-10-08 17:07:03.186 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40228 10 6452 1 2025-10-08 17:08:03.588 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36638 10 6452 1 2025-10-08 17:03:41.263 00:06:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 17:09:03.990 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44518 10 6452 1 2025-10-08 17:09:40.415 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 17:09:40.407 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 17:09:40.308 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:09:40.351 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:09:40.434 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 17:10:04.392 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:59746 10 6452 1 2025-10-08 17:11:04.753 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38926 10 6452 1 2025-10-08 17:12:05.157 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:56710 10 6452 1 2025-10-08 17:07:41.263 00:06:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 17:13:05.553 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57160 10 6452 1 2025-10-08 17:14:05.921 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58658 10 6452 1 2025-10-08 17:14:40.211 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 17:14:40.399 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 17:14:40.321 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:14:40.401 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:14:40.484 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 17:15:06.336 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59394 10 6452 1 2025-10-08 17:10:41.266 00:06:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 17:16:06.749 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48096 10 6452 1 2025-10-08 17:17:07.151 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59498 10 6452 1 2025-10-08 17:18:07.552 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34284 10 6452 1 2025-10-08 17:19:07.952 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46582 10 6452 1 2025-10-08 17:19:40.684 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 17:14:41.265 00:06:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 17:19:40.813 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 17:19:40.609 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 17:19:40.774 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:19:40.600 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:20:08.371 00:00:10.511 TCP 1.101.0.1:3000 -> 23.104.0.1:41764 14 14298 1 2025-10-08 17:21:08.923 00:00:10.428 TCP 1.101.0.1:3000 -> 23.104.0.1:52638 11 6504 1 2025-10-08 17:22:09.390 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33516 10 6452 1 2025-10-08 17:17:41.272 00:06:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 17:23:09.794 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47720 10 6452 1 2025-10-08 17:24:10.199 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52450 10 6452 1 2025-10-08 17:24:40.695 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 17:24:40.729 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 17:24:40.313 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:24:40.707 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:24:40.790 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 17:25:10.566 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37894 10 6452 1 2025-10-08 17:26:10.974 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43096 10 6452 1 2025-10-08 17:21:41.269 00:06:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 17:27:11.380 00:00:10.551 TCP 1.101.0.1:3000 -> 23.104.0.1:49276 10 6452 1 2025-10-08 17:28:11.965 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:48800 10 6452 1 2025-10-08 17:29:12.368 00:00:10.770 TCP 1.101.0.1:3000 -> 23.104.0.1:58304 10 6452 1 2025-10-08 17:29:40.837 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 17:24:41.291 00:06:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 17:29:40.778 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 17:29:40.841 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:29:40.618 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:29:40.703 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 17:30:13.177 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:39850 10 6452 1 2025-10-08 17:31:13.576 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48648 10 6452 1 2025-10-08 17:32:13.933 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:39004 10 6452 1 2025-10-08 17:33:14.363 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38672 10 6452 1 2025-10-08 17:28:41.293 00:06:00.320 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 17:34:14.768 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57114 10 6452 1 2025-10-08 17:34:40.799 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 17:34:40.733 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:34:40.919 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:34:40.966 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 17:34:41.004 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 17:35:15.182 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40188 10 6452 1 2025-10-08 17:36:15.582 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55846 10 6452 1 2025-10-08 17:31:41.296 00:06:00.315 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 17:37:15.950 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56916 10 6452 1 2025-10-08 17:38:16.359 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39782 10 6452 1 2025-10-08 17:39:16.762 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54318 10 6452 1 2025-10-08 17:39:41.364 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 17:39:41.505 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 17:39:40.823 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:39:41.437 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:39:41.521 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 17:40:17.179 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49466 10 6452 1 2025-10-08 17:35:41.294 00:06:00.321 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 17:41:17.587 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57720 10 6452 1 2025-10-08 17:42:17.990 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51674 10 6452 1 2025-10-08 17:43:18.402 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57648 10 6452 1 2025-10-08 17:38:41.296 00:06:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 17:44:18.809 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57960 10 6452 1 2025-10-08 17:44:41.259 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 17:44:41.110 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:44:41.412 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:44:41.377 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 17:44:41.496 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 17:45:19.231 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57840 10 6452 1 2025-10-08 17:46:19.635 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56404 10 6452 1 2025-10-08 17:47:20.067 00:00:10.597 TCP 1.101.0.1:3000 -> 23.104.0.1:48820 10 6452 1 2025-10-08 17:42:41.297 00:06:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 17:48:20.708 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34104 10 6452 1 2025-10-08 17:49:21.107 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42330 10 6452 1 2025-10-08 17:49:41.058 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 17:49:41.144 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 17:49:40.973 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:49:41.059 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:49:41.142 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 17:50:21.479 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51250 10 6452 1 2025-10-08 17:45:41.301 00:06:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 17:51:21.877 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:44126 10 6452 1 2025-10-08 17:52:22.237 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53724 10 6452 1 2025-10-08 17:53:22.598 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58568 10 6452 1 2025-10-08 17:54:23.004 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57268 10 6452 1 2025-10-08 17:54:41.312 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 17:49:41.301 00:06:00.316 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 17:54:41.043 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 17:54:41.144 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 17:54:41.171 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:54:41.229 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 17:55:23.402 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38346 10 6452 1 2025-10-08 17:56:23.796 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45730 10 6452 1 2025-10-08 17:57:24.204 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55594 10 6452 1 2025-10-08 17:52:41.305 00:06:00.313 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 17:58:24.604 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59276 10 6452 1 Summary: total flows: 137, total bytes: 428698, total packets: 1025, avg bps: 921, avg pps: 0, avg bpp: 418 Time window: 2025-10-08 16:56:41 - 2025-10-08 17:58:41 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0035s User: 0.0012s Wall: 0.0025s flows/second: 55626.3 Runtime: 0.0025s