Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 18:58:49.146 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38678 10 6452 1 2025-10-08 18:59:42.573 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 18:59:42.706 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 18:59:42.702 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 18:59:42.426 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 18:59:42.490 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 18:59:49.553 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59122 10 6452 1 2025-10-08 18:55:41.319 00:06:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 19:00:49.965 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33734 10 6452 1 2025-10-08 19:01:50.370 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50894 10 6452 1 2025-10-08 19:02:50.769 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:50962 10 6452 1 2025-10-08 19:03:51.192 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:44730 10 6452 1 2025-10-08 19:04:42.791 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:04:42.691 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 19:04:42.607 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 19:04:42.631 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 18:59:41.318 00:06:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 19:04:42.875 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 19:04:51.565 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53618 10 6452 1 2025-10-08 19:05:51.972 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50816 10 6452 1 2025-10-08 19:06:52.374 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40522 10 6452 1 2025-10-08 19:02:41.324 00:06:00.322 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 19:07:52.775 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:54236 10 6452 1 2025-10-08 19:08:53.145 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42622 10 6452 1 2025-10-08 19:09:43.324 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 19:09:43.121 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 19:09:43.338 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 19:09:42.557 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:09:43.241 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:09:53.551 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39152 10 6452 1 2025-10-08 19:10:53.969 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:52948 10 6452 1 2025-10-08 19:06:41.321 00:06:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 19:11:54.335 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50002 10 6452 1 2025-10-08 19:12:54.697 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56464 10 6452 1 2025-10-08 19:13:55.113 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37434 10 6452 1 2025-10-08 19:14:42.939 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 19:09:41.324 00:06:00.324 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 19:14:42.911 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 19:14:42.742 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:14:42.855 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:14:42.849 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 19:14:55.475 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33644 10 6452 1 2025-10-08 19:15:55.833 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44040 10 6452 1 2025-10-08 19:16:56.238 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51322 10 6452 1 2025-10-08 19:17:56.639 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46760 10 6452 1 2025-10-08 19:13:41.322 00:06:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 19:18:57.039 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:51536 10 6452 1 2025-10-08 19:19:42.973 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:19:42.974 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 19:19:42.825 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 19:19:42.725 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:19:43.057 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 19:19:57.429 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49242 10 6452 1 2025-10-08 19:20:57.835 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:38796 10 6452 1 2025-10-08 19:16:41.326 00:06:00.324 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 19:21:58.222 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46010 10 6452 1 2025-10-08 19:22:58.634 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39704 10 6452 1 2025-10-08 19:23:58.997 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33286 10 6452 1 2025-10-08 19:24:42.827 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:24:43.198 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:24:43.098 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 19:24:43.147 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 19:24:43.282 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 19:24:59.363 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38582 10 6452 1 2025-10-08 19:20:41.325 00:06:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 19:25:59.768 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42594 10 6452 1 2025-10-08 19:27:00.181 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54072 10 6452 1 2025-10-08 19:28:00.581 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36772 10 6452 1 2025-10-08 19:23:41.337 00:06:00.315 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 19:29:00.985 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58698 10 6452 1 2025-10-08 19:29:43.608 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 19:29:43.376 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 19:29:43.133 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:29:43.525 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:29:43.041 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 19:30:01.390 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59262 10 6452 1 2025-10-08 19:31:01.753 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60714 10 6452 1 2025-10-08 19:32:02.153 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52180 10 6452 1 2025-10-08 19:27:41.328 00:06:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 19:33:02.554 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52044 10 6452 1 2025-10-08 19:34:02.959 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33980 10 6452 1 2025-10-08 19:34:43.323 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 19:34:43.323 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 19:34:43.148 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:34:43.317 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:34:43.400 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 19:35:03.370 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45144 10 6452 1 2025-10-08 19:30:41.332 00:06:00.322 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 19:36:03.769 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45550 10 6452 1 2025-10-08 19:37:04.177 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59446 10 6452 1 2025-10-08 19:38:04.536 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52202 10 6452 1 2025-10-08 19:39:04.943 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50208 10 6452 1 2025-10-08 19:39:43.527 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 19:34:41.330 00:06:00.328 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 19:39:43.193 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 19:39:43.295 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 19:39:42.972 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:39:43.443 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:40:05.363 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54102 10 6452 1 2025-10-08 19:41:05.768 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56188 10 6452 1 2025-10-08 19:42:06.174 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50264 10 6452 1 2025-10-08 19:37:41.332 00:06:00.322 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 19:43:06.577 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:43278 10 6452 1 2025-10-08 19:44:06.993 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37898 10 6452 1 2025-10-08 19:44:43.461 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 19:44:43.390 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 19:44:43.479 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 19:44:43.494 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:44:43.377 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:45:07.401 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:60792 12 10375 1 2025-10-08 19:46:07.877 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35938 10 6452 1 2025-10-08 19:41:41.331 00:06:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 19:47:08.274 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48138 10 6452 1 2025-10-08 19:48:08.680 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48746 10 6452 1 2025-10-08 19:49:09.060 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56094 10 6452 1 2025-10-08 19:44:41.333 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 19:49:43.348 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 19:49:43.354 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:49:43.455 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:49:43.517 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 19:49:43.539 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 19:50:09.423 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52864 10 6452 1 2025-10-08 19:51:09.840 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:52056 10 6452 1 2025-10-08 19:52:10.237 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33886 10 6452 1 2025-10-08 19:53:10.639 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55270 10 6452 1 2025-10-08 19:48:41.331 00:06:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 19:54:11.021 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52326 10 6452 1 2025-10-08 19:54:43.948 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:54:43.938 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 19:54:43.868 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 19:54:43.558 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 19:54:44.031 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 19:55:11.421 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49276 10 6452 1 2025-10-08 19:56:11.829 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36034 10 6452 1 2025-10-08 19:51:41.335 00:06:00.324 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 19:57:12.233 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54078 10 6452 1 2025-10-08 19:58:12.604 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:53436 10 6452 1 Summary: total flows: 137, total bytes: 420800, total packets: 1020, avg bps: 894, avg pps: 0, avg bpp: 412 Time window: 2025-10-08 18:55:41 - 2025-10-08 19:58:22 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0057s User: 0.0000s Wall: 0.0025s flows/second: 54363.3 Runtime: 0.0025s