Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 12:59:15.187 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60830 10 6452 1 2025-10-11 12:54:42.568 00:06:00.415 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 13:00:15.597 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38440 10 6452 1 2025-10-11 13:01:01.881 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 13:01:01.691 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 13:01:01.769 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:01:01.880 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:01:01.962 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 13:01:16.005 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43222 10 6452 1 2025-10-11 12:56:42.566 00:06:00.421 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 13:02:16.405 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51076 10 6452 1 2025-10-11 13:03:16.772 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57272 10 6452 1 2025-10-11 13:04:17.188 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58950 10 6452 1 2025-10-11 13:05:17.594 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34276 10 6452 1 2025-10-11 13:06:02.017 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 13:06:02.211 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 13:06:02.185 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:06:01.934 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:06:02.215 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 13:06:18.010 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:51978 10 6452 1 2025-10-11 13:01:42.568 00:06:00.417 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 13:07:18.441 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52306 10 6452 1 2025-10-11 13:08:18.877 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48906 10 6452 1 2025-10-11 13:03:42.567 00:06:00.422 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 13:09:19.240 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43538 10 6452 1 2025-10-11 13:10:19.636 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44568 10 6452 1 2025-10-11 13:11:02.131 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 13:11:02.246 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 13:11:02.200 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:11:02.251 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:11:02.334 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 13:11:20.042 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53112 10 6452 1 2025-10-11 13:12:20.407 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60740 10 6452 1 2025-10-11 13:13:20.770 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35864 10 6452 1 2025-10-11 13:08:42.569 00:06:00.419 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 13:14:21.143 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35432 10 6452 1 2025-10-11 13:15:21.503 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52908 10 6452 1 2025-10-11 13:10:42.568 00:06:00.422 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 13:16:02.422 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 13:16:01.972 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 13:16:02.167 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:16:02.339 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:16:01.990 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 13:16:21.905 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:48696 10 6452 1 2025-10-11 13:17:22.281 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37754 10 6452 1 2025-10-11 13:18:22.680 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57388 10 6452 1 2025-10-11 13:19:23.074 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60358 10 6452 1 2025-10-11 13:20:23.484 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:57624 10 6452 1 2025-10-11 13:15:42.571 00:06:00.418 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 13:21:03.138 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 13:21:03.055 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 13:21:03.057 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 13:21:02.930 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:21:03.057 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:21:23.921 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36468 10 6452 1 2025-10-11 13:22:24.289 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:53782 10 6452 1 2025-10-11 13:17:42.569 00:06:00.423 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 13:23:24.689 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35402 10 6452 1 2025-10-11 13:24:25.112 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52702 10 6452 1 2025-10-11 13:25:25.523 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44858 10 6452 1 2025-10-11 13:26:02.545 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 13:26:02.441 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 13:26:02.434 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:26:02.505 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:26:02.588 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 13:26:25.925 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:39126 10 6452 1 2025-10-11 13:27:26.348 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41718 10 6452 1 2025-10-11 13:22:42.572 00:06:00.419 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 13:28:26.719 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37078 10 6452 1 2025-10-11 13:29:27.139 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:34292 10 6452 1 2025-10-11 13:24:42.571 00:06:00.423 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-11 13:30:27.570 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41390 10 6452 1 2025-10-11 13:31:02.437 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:31:02.662 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:31:02.545 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 13:31:02.670 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 13:31:02.746 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 13:31:27.978 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52996 10 6452 1 2025-10-11 13:32:28.382 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47876 10 6452 1 2025-10-11 13:33:28.792 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49366 10 6452 1 2025-10-11 13:34:29.194 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:59880 10 6452 1 2025-10-11 13:29:42.574 00:06:00.428 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-11 13:31:42.572 00:05:00.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 13:35:29.593 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:42914 12 10375 1 2025-10-11 13:36:02.782 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 13:36:02.698 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 13:36:02.702 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 13:36:02.455 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:36:02.700 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:36:30.104 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:34076 10 6452 1 2025-10-11 13:37:30.482 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35082 10 6452 1 2025-10-11 13:38:30.888 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:56038 12 6556 1 2025-10-11 13:39:31.309 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58206 10 6452 1 2025-10-11 13:36:42.574 00:05:00.441 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 13:40:31.717 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56096 10 6452 1 2025-10-11 13:41:02.710 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 13:41:02.713 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 13:41:02.714 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 13:41:02.797 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:41:02.627 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:41:32.116 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53842 10 6452 1 2025-10-11 13:37:42.573 00:05:00.462 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 13:42:32.522 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55836 10 6452 1 2025-10-11 13:43:32.923 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:43174 10 6452 1 2025-10-11 13:44:33.338 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55174 10 6452 1 2025-10-11 13:45:33.743 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:35024 12 10369 1 2025-10-11 13:46:02.767 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 13:46:02.693 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 13:46:02.679 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:46:02.843 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:46:02.925 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 13:46:34.219 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34710 10 6452 1 2025-10-11 13:42:42.576 00:05:00.461 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 13:47:34.622 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41672 10 6452 1 2025-10-11 13:43:42.574 00:05:00.466 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 13:48:35.025 00:00:10.873 TCP 1.101.0.1:3000 -> 23.104.0.1:44380 10 6452 1 2025-10-11 13:49:35.938 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51574 10 6452 1 2025-10-11 13:50:36.351 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58996 10 6452 1 2025-10-11 13:51:02.955 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 13:51:03.098 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 13:51:02.735 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:51:02.687 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:51:02.769 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 13:51:36.751 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41796 10 6452 1 2025-10-11 13:48:42.578 00:05:00.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 13:52:37.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52274 10 6452 1 2025-10-11 13:49:42.577 00:05:00.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 13:53:37.510 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53808 10 6452 1 2025-10-11 13:54:37.872 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35294 10 6452 1 2025-10-11 13:55:38.280 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45944 10 6452 1 2025-10-11 13:56:03.429 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 13:56:03.220 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 13:56:02.629 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:56:03.218 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 13:56:03.302 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 13:56:38.680 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41124 10 6452 1 2025-10-11 13:57:39.107 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52226 10 6452 1 2025-10-11 13:54:42.581 00:05:00.457 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 13:58:39.519 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57900 10 6452 1 Summary: total flows: 139, total bytes: 425559, total packets: 1036, avg bps: 872, avg pps: 0, avg bpp: 410 Time window: 2025-10-11 12:54:42 - 2025-10-11 13:59:43 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0030s User: 0.0010s Wall: 0.0013s flows/second: 104276.2 Runtime: 0.0013s