Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 14:59:05.601 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43786 10 6452 1 2025-10-11 14:55:42.599 00:05:00.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:00:06.037 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50992 10 6452 1 2025-10-11 15:01:04.401 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:01:04.105 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:01:04.356 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:01:04.291 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:01:04.373 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:01:06.450 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45650 10 6452 1 2025-10-11 15:02:06.855 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53770 10 6452 1 2025-10-11 15:03:07.269 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60148 10 6452 1 2025-10-11 15:04:07.682 00:00:10.540 TCP 1.101.0.1:3000 -> 23.104.0.1:49618 10 6452 1 2025-10-11 15:00:42.602 00:05:00.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:05:08.259 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:53860 10 6452 1 2025-10-11 15:01:42.601 00:05:00.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:06:04.466 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:06:04.599 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:06:04.366 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:06:04.398 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:06:04.548 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:06:08.758 00:00:10.520 TCP 1.101.0.1:3000 -> 23.104.0.1:58308 14 14286 1 2025-10-11 15:07:09.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38272 12 6556 1 2025-10-11 15:08:09.715 00:00:14.902 TCP 1.101.0.1:3000 -> 23.104.0.1:56340 10 6452 1 2025-10-11 15:09:14.658 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:40508 10 6452 1 2025-10-11 15:10:15.028 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36366 10 6452 1 2025-10-11 15:06:42.606 00:05:00.464 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:11:04.663 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:11:04.668 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:11:04.671 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:11:04.450 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:11:04.533 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:11:15.426 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58180 10 6452 1 2025-10-11 15:07:42.603 00:05:00.470 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:12:15.828 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46386 10 6452 1 2025-10-11 15:13:16.230 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58444 10 6452 1 2025-10-11 15:14:16.634 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49510 10 6452 1 2025-10-11 15:15:17.035 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41370 10 6452 1 2025-10-11 15:16:04.917 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:16:04.741 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:16:04.994 00:00:00.034 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:16:05.092 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:16:05.077 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:16:17.437 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53474 10 6452 1 2025-10-11 15:12:42.607 00:05:00.466 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:17:17.801 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33414 10 6452 1 2025-10-11 15:13:42.605 00:05:00.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:18:18.207 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49976 10 6452 1 2025-10-11 15:19:18.609 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36424 10 6452 1 2025-10-11 15:20:19.019 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49246 10 6452 1 2025-10-11 15:21:04.658 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:21:04.807 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:21:04.592 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:21:04.736 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:21:04.819 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:21:19.424 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42872 10 6452 1 2025-10-11 15:22:19.827 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35062 10 6452 1 2025-10-11 15:18:42.609 00:05:00.469 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:23:20.228 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53306 10 6452 1 2025-10-11 15:19:42.607 00:05:00.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:24:20.628 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:55186 10 6452 1 2025-10-11 15:25:21.005 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45628 10 6452 1 2025-10-11 15:26:04.931 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:26:04.936 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:26:04.932 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:26:05.060 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:26:05.015 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:26:21.408 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:52242 10 6452 1 2025-10-11 15:27:21.832 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:59202 10 6452 1 2025-10-11 15:28:22.216 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40938 10 6452 1 2025-10-11 15:24:42.610 00:05:00.471 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:29:22.617 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39582 10 6452 1 2025-10-11 15:25:42.607 00:05:00.476 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:30:22.973 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40932 10 6452 1 2025-10-11 15:31:04.859 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:31:04.907 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:31:04.979 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:31:05.120 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:31:05.202 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:31:23.404 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45178 10 6452 1 2025-10-11 15:32:23.815 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:38704 10 6452 1 2025-10-11 15:33:24.200 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55914 10 6452 1 2025-10-11 15:34:24.599 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54082 10 6452 1 2025-10-11 15:30:42.611 00:05:00.471 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:35:25.006 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56384 10 6452 1 2025-10-11 15:31:42.611 00:05:00.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:36:04.965 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:36:04.778 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:36:05.224 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:36:05.090 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:36:05.141 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:36:25.425 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48752 10 6452 1 2025-10-11 15:37:25.793 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49526 10 6452 1 2025-10-11 15:38:26.204 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38472 10 6452 1 2025-10-11 15:39:26.567 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36288 10 6452 1 2025-10-11 15:40:26.926 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54744 10 6452 1 2025-10-11 15:36:42.614 00:05:00.469 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:41:04.879 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:41:05.395 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:41:05.495 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:41:05.400 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:41:05.485 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:41:27.338 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35592 10 6452 1 2025-10-11 15:37:42.612 00:05:00.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:42:27.746 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47668 10 6452 1 2025-10-11 15:43:28.152 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49590 10 6452 1 2025-10-11 15:44:28.564 00:00:17.663 TCP 1.101.0.1:3000 -> 23.104.0.1:37986 10 6452 1 2025-10-11 15:45:36.269 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42624 10 6452 1 2025-10-11 15:46:05.377 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:46:05.228 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:46:05.292 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:46:05.296 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:46:05.118 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:42:42.615 00:05:00.469 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:46:36.669 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44440 10 6452 1 2025-10-11 15:43:42.612 00:05:00.475 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:47:37.099 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:41302 10 6452 1 2025-10-11 15:48:37.468 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37620 10 6452 1 2025-10-11 15:49:37.871 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46684 10 6452 1 2025-10-11 15:50:38.282 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50238 10 6452 1 2025-10-11 15:51:05.575 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:51:05.423 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:51:05.432 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:51:05.299 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:51:05.492 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:51:38.680 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39450 10 6452 1 2025-10-11 15:48:42.615 00:05:00.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:52:39.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47208 10 6452 1 2025-10-11 15:49:42.614 00:05:00.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:53:39.511 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37228 10 6452 1 2025-10-11 15:54:39.920 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56956 10 6452 1 2025-10-11 15:55:40.321 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37586 10 6452 1 2025-10-11 15:56:05.521 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:56:05.439 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:56:05.429 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:56:05.481 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:56:05.438 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:56:40.685 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35538 10 6452 1 2025-10-11 15:57:41.108 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48020 10 6452 1 2025-10-11 15:54:42.617 00:05:00.469 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 Summary: total flows: 139, total bytes: 418486, total packets: 1016, avg bps: 871, avg pps: 0, avg bpp: 411 Time window: 2025-10-11 14:55:42 - 2025-10-11 15:59:43 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0047s User: 0.0000s Wall: 0.0021s flows/second: 64923.0 Runtime: 0.0022s