Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 07:59:00.479 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33142 10 6452 1 2025-10-12 07:55:42.921 00:05:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-12 08:00:00.885 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:43208 10 6452 1 2025-10-12 08:01:01.317 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32980 10 6452 1 2025-10-12 08:01:24.918 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 08:01:24.866 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 08:01:24.445 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:01:24.767 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:01:24.850 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 08:02:01.738 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51136 10 6452 1 2025-10-12 08:03:02.141 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49194 10 6452 1 2025-10-12 08:04:02.500 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51318 10 6452 1 2025-10-12 08:00:42.923 00:05:00.495 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-12 08:05:02.900 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38496 10 6452 1 2025-10-12 08:01:42.921 00:05:00.500 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-12 08:06:03.304 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46994 10 6452 1 2025-10-12 08:06:24.869 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 08:06:24.865 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 08:06:24.707 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:06:24.779 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:06:24.862 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 08:07:03.710 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41392 10 6452 1 2025-10-12 08:08:04.130 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42992 10 6452 1 2025-10-12 08:09:04.533 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53710 11 6492 1 2025-10-12 08:10:04.942 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:40182 11 6504 1 2025-10-12 08:06:42.927 00:05:00.493 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-12 08:11:05.417 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:51512 10 6452 1 2025-10-12 08:11:24.851 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:11:25.006 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 08:11:25.001 00:00:00.052 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 08:11:25.004 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:11:25.086 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 08:07:42.924 00:05:00.499 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-12 08:12:05.782 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50014 10 6452 1 2025-10-12 08:13:06.191 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57930 10 6452 1 2025-10-12 08:14:06.555 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50460 10 6452 1 2025-10-12 08:15:06.957 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44514 10 6452 1 2025-10-12 08:16:07.361 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:43404 11 6504 1 2025-10-12 08:16:25.146 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 08:16:25.403 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 08:16:24.989 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:16:25.148 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:16:25.232 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 08:12:42.927 00:05:00.495 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-12 08:17:07.780 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37752 10 6452 1 2025-10-12 08:13:42.925 00:05:00.500 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-12 08:18:08.185 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:38724 10 6452 1 2025-10-12 08:19:08.625 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45378 10 6452 1 2025-10-12 08:20:09.024 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37148 10 6452 1 2025-10-12 08:21:09.435 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47800 10 6452 1 2025-10-12 08:21:25.282 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 08:21:25.107 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 08:21:25.284 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 08:21:25.137 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:21:25.200 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:22:09.839 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:34190 10 6452 1 2025-10-12 08:18:42.929 00:05:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-12 08:23:10.268 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48726 10 6452 1 2025-10-12 08:19:42.926 00:05:00.502 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-12 08:24:10.679 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35594 10 6452 1 2025-10-12 08:25:11.113 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51606 10 6452 1 2025-10-12 08:26:11.547 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38244 10 6452 1 2025-10-12 08:26:25.359 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 08:26:25.162 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 08:26:25.159 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 08:26:25.294 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:26:25.277 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:27:11.955 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51590 10 6452 1 2025-10-12 08:28:12.350 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38338 10 6452 1 2025-10-12 08:24:42.931 00:05:00.499 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-12 08:29:12.755 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:48172 11 6504 1 2025-10-12 08:25:42.929 00:05:00.504 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-12 08:30:13.242 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48138 10 6452 1 2025-10-12 08:31:13.643 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:32992 12 10375 1 2025-10-12 08:31:25.473 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 08:31:25.237 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:31:25.568 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:31:25.461 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 08:31:25.651 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 08:32:14.107 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45324 10 6452 1 2025-10-12 08:33:14.517 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49266 10 6452 1 2025-10-12 08:34:14.886 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:48978 10 6452 1 2025-10-12 08:30:42.932 00:05:00.499 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-12 08:35:15.271 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:37526 10 6452 1 2025-10-12 08:31:42.930 00:05:00.504 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-12 08:36:25.892 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 08:36:25.592 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 08:36:25.720 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:36:15.693 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45082 10 6452 1 2025-10-12 08:36:25.685 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:36:25.768 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 08:37:16.117 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54052 10 6452 1 2025-10-12 08:38:16.519 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49308 10 6452 1 2025-10-12 08:39:16.924 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33264 10 6452 1 2025-10-12 08:40:17.339 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51690 10 6452 1 2025-10-12 08:36:42.935 00:05:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-12 08:41:25.589 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 08:41:25.812 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 08:41:25.482 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:41:25.582 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:41:17.703 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35706 10 6452 1 2025-10-12 08:41:25.665 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 08:37:42.933 00:05:00.502 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-12 08:42:18.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52450 10 6452 1 2025-10-12 08:43:18.515 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57472 10 6452 1 2025-10-12 08:44:18.920 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49582 10 6452 1 2025-10-12 08:45:19.319 00:00:10.552 TCP 1.101.0.1:3000 -> 23.104.0.1:45138 10 6452 1 2025-10-12 08:46:25.809 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 08:46:25.805 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 08:46:25.605 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:46:25.584 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:46:25.667 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 08:46:19.909 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51074 10 6452 1 2025-10-12 08:42:42.936 00:05:00.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-12 08:47:20.273 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49672 10 6452 1 2025-10-12 08:43:42.933 00:05:00.505 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-12 08:48:20.637 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42046 10 6452 1 2025-10-12 08:49:21.040 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34812 10 6452 1 2025-10-12 08:50:21.444 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41520 10 6452 1 2025-10-12 08:51:25.915 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 08:51:25.913 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 08:51:25.843 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:51:25.876 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:51:25.959 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 08:51:21.847 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:45872 10 6452 1 2025-10-12 08:52:22.271 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43072 10 6452 1 2025-10-12 08:48:42.939 00:05:00.503 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-12 08:53:22.677 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36936 10 6452 1 2025-10-12 08:49:42.935 00:05:00.504 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-12 08:54:23.107 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58836 10 6452 1 2025-10-12 08:55:23.507 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35588 10 6452 1 2025-10-12 08:56:26.175 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 08:56:26.143 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 08:56:26.102 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 08:56:25.809 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:56:26.094 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 08:56:23.868 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53110 10 6452 1 2025-10-12 08:57:24.276 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41602 10 6452 1 2025-10-12 08:58:24.647 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:58498 10 6452 1 2025-10-12 08:54:42.938 00:05:00.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 Summary: total flows: 140, total bytes: 421119, total packets: 1026, avg bps: 877, avg pps: 0, avg bpp: 410 Time window: 2025-10-12 07:55:42 - 2025-10-12 08:59:43 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0034s User: 0.0011s Wall: 0.0023s flows/second: 59802.7 Runtime: 0.0024s