Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 05:58:56.544 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39302 10 6452 1 2025-10-18 05:59:15.640 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:59:15.534 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:59:15.350 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:59:15.763 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:59:15.847 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:59:56.957 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56902 10 6452 1 2025-10-18 05:55:46.084 00:06:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 06:00:57.363 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33088 10 6452 1 2025-10-18 06:01:57.728 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53406 10 6452 1 2025-10-18 06:02:58.139 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40416 10 6452 1 2025-10-18 06:03:58.539 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33142 10 6452 1 2025-10-18 06:04:15.670 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 06:04:15.947 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 06:04:15.808 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 06:04:15.773 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:04:15.589 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:59:46.085 00:06:00.289 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 06:04:58.900 00:00:11.024 TCP 1.101.0.1:3000 -> 23.104.0.1:46440 10 6452 1 2025-10-18 06:05:59.964 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35308 10 6452 1 2025-10-18 06:07:00.368 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33370 10 6452 1 2025-10-18 06:02:46.084 00:06:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 06:08:00.766 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54544 10 6452 1 2025-10-18 06:09:01.128 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60134 10 6452 1 2025-10-18 06:09:15.921 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 06:09:15.758 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:09:15.965 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:09:16.006 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 06:09:16.049 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 06:10:01.529 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57508 10 6452 1 2025-10-18 06:11:01.936 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:39320 10 6452 1 2025-10-18 06:06:46.088 00:06:00.288 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 06:12:02.325 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55612 10 6452 1 2025-10-18 06:13:02.740 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:53330 12 10369 1 2025-10-18 06:14:03.185 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41576 10 6452 1 2025-10-18 06:14:16.073 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 06:14:15.911 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 06:14:15.731 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:14:16.111 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:14:16.195 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 06:09:46.090 00:06:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 06:15:03.591 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35292 10 6452 1 2025-10-18 06:16:03.998 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:60480 10 6452 1 2025-10-18 06:17:04.381 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50284 10 6452 1 2025-10-18 06:18:04.748 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:48952 10 6452 1 2025-10-18 06:13:46.091 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 06:19:16.095 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 06:19:16.089 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 06:19:16.175 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:19:05.115 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44520 10 6452 1 2025-10-18 06:19:16.090 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:19:16.171 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 06:20:05.481 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55364 10 6452 1 2025-10-18 06:21:05.884 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35836 10 6452 1 2025-10-18 06:16:46.089 00:06:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 06:22:06.289 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54346 10 6452 1 2025-10-18 06:23:06.699 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35850 10 6452 1 2025-10-18 06:24:16.729 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 06:24:16.657 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 06:24:16.431 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 06:24:16.419 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:24:07.110 00:00:10.640 TCP 1.101.0.1:3000 -> 23.104.0.1:38310 10 6452 1 2025-10-18 06:24:16.645 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:25:07.786 00:00:11.091 TCP 1.101.0.1:3000 -> 23.104.0.1:37674 10 6452 1 2025-10-18 06:20:46.094 00:06:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 06:26:08.920 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34610 10 6452 1 2025-10-18 06:27:09.327 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46154 10 6452 1 2025-10-18 06:28:09.734 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58016 10 6452 1 2025-10-18 06:23:46.093 00:06:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 06:29:16.342 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:29:16.268 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 06:29:16.434 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 06:29:16.156 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:29:16.436 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 06:29:10.140 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43902 10 6452 1 2025-10-18 06:30:10.539 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47432 10 6452 1 2025-10-18 06:31:10.936 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53644 10 6452 1 2025-10-18 06:32:11.361 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:43422 10 6452 1 2025-10-18 06:27:46.097 00:06:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 06:33:11.734 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47008 10 6452 1 2025-10-18 06:34:16.574 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 06:34:16.425 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 06:34:16.376 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:34:16.493 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:34:16.338 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 06:34:12.149 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40460 10 6452 1 2025-10-18 06:35:12.555 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40394 10 6452 1 2025-10-18 06:30:46.097 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 06:36:12.912 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57162 10 6452 1 2025-10-18 06:37:13.315 00:00:12.882 TCP 1.101.0.1:3000 -> 23.104.0.1:40990 10 6452 1 2025-10-18 06:38:16.241 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58206 10 6452 1 2025-10-18 06:39:16.643 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 06:39:16.600 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 06:39:16.514 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:39:16.552 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:39:16.635 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 06:39:16.649 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33676 10 6452 1 2025-10-18 06:34:46.098 00:06:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 06:40:17.056 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32854 10 6452 1 2025-10-18 06:41:17.459 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55488 10 6452 1 2025-10-18 06:42:17.867 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44122 10 6452 1 2025-10-18 06:37:46.097 00:06:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 06:43:18.292 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33646 10 6452 1 2025-10-18 06:44:16.941 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 06:44:16.669 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:44:16.663 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:44:16.570 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 06:44:16.747 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 06:44:18.694 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:36522 10 6452 1 2025-10-18 06:45:19.067 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47854 10 6452 1 2025-10-18 06:46:19.477 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34286 10 6452 1 2025-10-18 06:41:46.101 00:06:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 06:47:19.887 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:37108 10 6452 1 2025-10-18 06:48:20.317 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39352 10 6452 1 2025-10-18 06:49:16.863 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 06:49:16.724 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 06:49:16.743 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:49:16.781 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:49:16.626 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 06:49:20.720 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47600 10 6452 1 2025-10-18 06:44:46.099 00:06:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 06:50:21.131 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36396 10 6452 1 2025-10-18 06:51:21.538 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43902 10 6452 1 2025-10-18 06:52:21.946 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59196 10 6452 1 2025-10-18 06:53:22.359 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44892 10 6452 1 2025-10-18 06:48:46.102 00:06:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 06:54:16.916 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 06:54:16.731 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 06:54:16.433 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:54:17.193 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 06:54:17.277 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 06:54:22.763 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:37104 10 6452 1 2025-10-18 06:55:23.189 00:00:11.809 TCP 1.101.0.1:3000 -> 23.104.0.1:37496 10 6452 1 2025-10-18 06:56:25.039 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40352 10 6452 1 2025-10-18 06:51:46.102 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 06:57:25.435 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48242 10 6452 1 2025-10-18 06:58:25.839 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:35572 10 6452 1 Summary: total flows: 137, total bytes: 420794, total packets: 1020, avg bps: 892, avg pps: 0, avg bpp: 412 Time window: 2025-10-18 05:55:46 - 2025-10-18 06:58:36 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0034s User: 0.0022s Wall: 0.0021s flows/second: 63754.5 Runtime: 0.0022s