Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 10:58:44.956 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57866 10 6452 1 2025-10-09 10:54:41.601 00:06:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 10:59:45.360 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33078 10 6452 1 2025-10-09 11:00:01.850 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:00:01.524 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:00:01.769 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:00:01.855 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:00:01.903 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:00:45.763 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:37358 10 6452 1 2025-10-09 11:01:46.240 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46076 10 6452 1 2025-10-09 11:02:46.646 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60332 10 6452 1 2025-10-09 10:58:41.598 00:06:00.361 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:03:47.061 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35676 10 6452 1 2025-10-09 11:04:47.471 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58682 10 6452 1 2025-10-09 11:05:02.199 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:05:02.096 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:05:02.274 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:05:02.291 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:05:02.374 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:05:47.838 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:55852 10 6452 1 2025-10-09 11:01:41.601 00:06:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:06:48.226 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40196 10 6452 1 2025-10-09 11:07:48.628 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32954 10 6452 1 2025-10-09 11:08:49.030 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54626 10 6452 1 2025-10-09 11:09:49.432 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:37260 12 10375 1 2025-10-09 11:10:02.005 00:00:00.035 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:10:01.836 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:10:01.987 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:10:02.082 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:10:02.163 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:05:41.600 00:06:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:10:49.908 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33816 10 6452 1 2025-10-09 11:11:50.314 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40894 10 6452 1 2025-10-09 11:12:50.718 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44154 10 6452 1 2025-10-09 11:08:41.602 00:06:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:13:51.116 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59670 10 6452 1 2025-10-09 11:15:01.941 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:14:51.525 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59978 10 6452 1 2025-10-09 11:15:02.186 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:15:02.345 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:15:01.958 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:15:02.040 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:15:51.896 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48518 10 6452 1 2025-10-09 11:16:52.308 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34724 10 6452 1 2025-10-09 11:12:41.601 00:06:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:17:52.714 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40298 10 6452 1 2025-10-09 11:18:53.118 00:00:10.667 TCP 1.101.0.1:3000 -> 23.104.0.1:50152 10 6452 1 2025-10-09 11:20:02.303 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:20:02.217 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:20:02.029 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:20:01.978 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:20:02.221 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:19:53.823 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33674 10 6452 1 2025-10-09 11:15:41.603 00:06:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:20:54.229 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48970 10 6452 1 2025-10-09 11:21:54.587 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49710 10 6452 1 2025-10-09 11:22:54.988 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:43744 10 6452 1 2025-10-09 11:23:55.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33532 10 6452 1 2025-10-09 11:19:41.603 00:06:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:25:02.454 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:25:02.427 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:25:02.375 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:25:02.388 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:25:02.370 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:24:55.768 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38714 10 6452 1 2025-10-09 11:25:56.186 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45310 10 6452 1 2025-10-09 11:26:56.553 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:58030 10 6452 1 2025-10-09 11:22:41.610 00:06:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:27:56.999 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55978 10 6452 1 2025-10-09 11:28:57.401 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46286 10 6452 1 2025-10-09 11:30:02.482 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:30:02.331 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:30:02.248 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:30:02.332 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:30:02.414 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:29:57.812 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43346 10 6452 1 2025-10-09 11:30:58.233 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45146 10 6452 1 2025-10-09 11:26:41.606 00:06:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:31:58.593 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42694 10 6452 1 2025-10-09 11:32:58.997 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44020 10 6452 1 2025-10-09 11:33:59.400 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32984 10 6452 1 2025-10-09 11:29:41.609 00:06:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:35:02.677 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:35:02.658 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:35:02.662 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:35:02.378 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:35:02.460 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:34:59.805 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47056 10 6452 1 2025-10-09 11:36:00.221 00:00:10.479 TCP 1.101.0.1:3000 -> 23.104.0.1:38842 10 6452 1 2025-10-09 11:37:00.734 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52538 10 6452 1 2025-10-09 11:38:01.148 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42650 10 6452 1 2025-10-09 11:33:41.606 00:06:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:39:01.546 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59240 10 6452 1 2025-10-09 11:40:02.848 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:40:02.597 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:40:02.808 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:40:02.324 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:40:02.765 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:40:01.942 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:47590 10 6452 1 2025-10-09 11:41:02.325 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53154 10 6452 1 2025-10-09 11:36:41.614 00:06:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:42:02.726 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44044 10 6452 1 2025-10-09 11:43:03.140 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58276 10 6452 1 2025-10-09 11:44:03.540 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36080 10 6452 1 2025-10-09 11:45:02.796 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:45:02.795 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:45:02.797 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:45:02.592 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:45:02.878 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:45:03.902 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42950 12 6556 1 2025-10-09 11:40:41.610 00:06:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:46:04.304 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34542 10 6452 1 2025-10-09 11:47:04.707 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34902 10 6452 1 2025-10-09 11:48:05.105 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58748 10 6452 1 2025-10-09 11:43:41.615 00:06:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:49:05.514 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58490 10 6452 1 2025-10-09 11:50:02.971 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:50:02.726 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:50:03.181 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:50:03.103 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:50:02.888 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:50:05.931 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:49108 10 6452 1 2025-10-09 11:51:06.358 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46102 10 6452 1 2025-10-09 11:52:06.745 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58632 10 6452 1 2025-10-09 11:47:41.612 00:06:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:53:07.152 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:48684 10 6452 1 2025-10-09 11:54:07.569 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35452 10 6452 1 2025-10-09 11:55:02.906 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:55:02.663 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:55:02.844 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:55:02.991 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:55:02.926 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:55:07.975 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34582 10 6452 1 2025-10-09 11:50:41.616 00:06:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:56:08.387 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:47374 10 6452 1 2025-10-09 11:57:08.746 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54172 10 6452 1 2025-10-09 11:58:09.150 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51496 10 6452 1 Summary: total flows: 137, total bytes: 420904, total packets: 1022, avg bps: 881, avg pps: 0, avg bpp: 411 Time window: 2025-10-09 10:54:41 - 2025-10-09 11:58:19 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0040s User: 0.0010s Wall: 0.0018s flows/second: 74058.5 Runtime: 0.0019s