Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 07:59:04.529 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46308 10 6452 1 2025-10-18 07:59:18.270 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 07:59:18.240 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 07:59:17.896 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 07:59:18.187 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 07:59:18.195 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 07:54:46.118 00:06:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:00:04.933 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47348 10 6452 1 2025-10-18 08:01:05.346 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57638 10 6452 1 2025-10-18 08:02:05.705 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53458 10 6452 1 2025-10-18 08:03:06.093 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59822 10 6452 1 2025-10-18 07:58:46.121 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:04:18.176 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:04:17.943 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:04:06.454 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41898 10 6452 1 2025-10-18 08:04:18.181 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:04:18.088 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:04:18.171 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:05:06.866 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41342 10 6452 1 2025-10-18 08:06:07.237 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45276 10 6452 1 2025-10-18 08:01:46.120 00:06:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:07:07.650 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37580 10 6452 1 2025-10-18 08:08:08.069 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33122 10 6452 1 2025-10-18 08:09:18.362 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:09:18.514 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:09:18.359 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:09:08.471 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:42394 10 6452 1 2025-10-18 08:09:18.279 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:09:18.507 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:10:08.904 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41106 12 6556 1 2025-10-18 08:05:46.122 00:06:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:11:09.319 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35424 10 6452 1 2025-10-18 08:12:09.723 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58428 10 6452 1 2025-10-18 08:13:10.119 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49716 10 6452 1 2025-10-18 08:08:46.121 00:06:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:14:18.469 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:14:18.405 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:14:18.233 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:14:18.557 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:14:18.639 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:14:10.484 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36118 10 6452 1 2025-10-18 08:15:10.889 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:48944 10 6452 1 2025-10-18 08:16:11.320 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44690 10 6452 1 2025-10-18 08:17:11.725 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:44646 10 6452 1 2025-10-18 08:12:46.129 00:06:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:18:12.106 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37142 10 6452 1 2025-10-18 08:19:18.587 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:19:18.586 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:19:18.139 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:19:18.543 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:19:18.626 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:19:12.512 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37994 10 6452 1 2025-10-18 08:20:12.873 00:00:10.543 TCP 1.101.0.1:3000 -> 23.104.0.1:54174 10 6452 1 2025-10-18 08:15:46.127 00:06:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:21:13.456 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49982 10 6452 1 2025-10-18 08:22:13.853 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:57766 10 6452 1 2025-10-18 08:23:14.235 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46398 10 6452 1 2025-10-18 08:24:18.600 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:24:18.495 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:24:18.669 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:24:18.599 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:24:18.682 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:24:14.636 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35634 10 6452 1 2025-10-18 08:19:46.129 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:25:14.995 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37964 10 6452 1 2025-10-18 08:26:15.400 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60468 10 6452 1 2025-10-18 08:27:15.803 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:35236 10 6452 1 2025-10-18 08:22:46.129 00:06:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:28:16.189 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:33520 12 10375 1 2025-10-18 08:29:18.940 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:29:18.577 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:29:18.386 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:29:18.859 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:29:18.818 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:29:16.665 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59054 10 6452 1 2025-10-18 08:30:17.102 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55238 10 6452 1 2025-10-18 08:31:17.516 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46202 10 6452 1 2025-10-18 08:26:46.132 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:32:17.926 00:00:18.476 TCP 1.101.0.1:3000 -> 23.104.0.1:44556 10 6452 1 2025-10-18 08:33:26.514 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33212 10 6452 1 2025-10-18 08:34:18.752 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:34:18.839 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:34:18.912 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:34:18.693 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:34:18.671 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:34:26.873 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33876 10 6452 1 2025-10-18 08:29:46.144 00:06:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:35:27.282 00:00:11.028 TCP 1.101.0.1:3000 -> 23.104.0.1:55162 10 6452 1 2025-10-18 08:36:28.352 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56146 10 6452 1 2025-10-18 08:37:28.756 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41522 10 6452 1 2025-10-18 08:33:46.138 00:06:00.277 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:38:29.160 00:00:15.881 TCP 1.101.0.1:3000 -> 23.104.0.1:55694 10 6452 1 2025-10-18 08:39:18.965 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:39:18.864 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:39:18.866 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:39:18.864 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:39:19.047 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:39:35.109 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:32818 12 6556 1 2025-10-18 08:40:35.507 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52752 10 6452 1 2025-10-18 08:41:35.908 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42900 12 6556 1 2025-10-18 08:36:46.136 00:06:00.283 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:42:36.319 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:41150 12 10369 1 2025-10-18 08:43:36.797 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41288 10 6452 1 2025-10-18 08:44:19.109 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:44:19.106 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:44:18.921 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:44:18.858 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:44:18.941 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:44:37.201 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57280 10 6452 1 2025-10-18 08:40:46.139 00:06:00.279 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:45:37.607 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42730 10 6452 1 2025-10-18 08:46:38.019 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55026 10 6452 1 2025-10-18 08:47:38.420 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40464 10 6452 1 2025-10-18 08:43:46.137 00:06:00.284 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:48:38.823 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45888 10 6452 1 2025-10-18 08:49:19.426 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:49:19.343 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:49:19.199 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:49:18.991 00:00:00.048 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:49:19.235 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:49:39.227 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55326 10 6452 1 2025-10-18 08:50:39.630 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57744 10 6452 1 2025-10-18 08:51:40.036 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36940 10 6452 1 2025-10-18 08:47:46.142 00:06:00.277 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:52:40.436 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36274 10 6452 1 2025-10-18 08:53:40.798 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52748 10 6452 1 2025-10-18 08:54:19.311 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:54:19.313 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:54:19.387 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:54:19.236 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:54:19.227 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:54:41.204 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58284 10 6452 1 2025-10-18 08:50:46.139 00:06:00.284 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 08:55:41.612 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49182 10 6452 1 2025-10-18 08:56:42.019 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49542 10 6452 1 2025-10-18 08:57:42.413 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37476 10 6452 1 Summary: total flows: 136, total bytes: 418577, total packets: 1018, avg bps: 884, avg pps: 0, avg bpp: 411 Time window: 2025-10-18 07:54:46 - 2025-10-18 08:57:52 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0035s User: 0.0017s Wall: 0.0017s flows/second: 78430.5 Runtime: 0.0018s