Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 08:58:42.817 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48512 10 6452 1 2025-10-18 08:59:19.402 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 08:59:19.455 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 08:59:19.319 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 08:59:19.233 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:59:19.319 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 08:54:46.143 00:06:00.279 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 08:59:43.221 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37432 10 6452 1 2025-10-18 09:00:43.631 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53618 10 6452 1 2025-10-18 09:01:43.994 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50004 10 6452 1 2025-10-18 08:57:46.142 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 09:02:44.411 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51286 10 6452 1 2025-10-18 09:03:44.823 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60826 10 6452 1 2025-10-18 09:04:19.571 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 09:04:19.377 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 09:04:19.483 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 09:04:19.304 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:04:19.488 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:04:45.232 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:44092 10 6452 1 2025-10-18 09:05:45.654 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52678 10 6452 1 2025-10-18 09:01:46.146 00:06:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 09:06:46.069 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53090 10 6452 1 2025-10-18 09:07:46.493 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:41234 11 6504 1 2025-10-18 09:08:46.918 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36332 10 6452 1 2025-10-18 09:09:19.781 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:09:19.831 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:09:19.678 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 09:09:19.914 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 09:09:20.049 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 09:04:46.143 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 09:09:47.336 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39064 10 6452 1 2025-10-18 09:10:47.762 00:00:10.791 TCP 1.101.0.1:3000 -> 23.104.0.1:57362 10 6452 1 2025-10-18 09:11:48.590 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39842 10 6452 1 2025-10-18 09:12:48.992 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33600 10 6452 1 2025-10-18 09:08:46.150 00:06:00.279 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 09:13:49.401 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51798 10 6452 1 2025-10-18 09:14:19.557 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:14:19.562 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:14:19.709 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 09:14:19.689 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 09:14:19.645 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 09:14:49.806 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:60560 10 6452 1 2025-10-18 09:15:50.183 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:42626 10 6452 1 2025-10-18 09:11:46.147 00:06:00.285 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 09:16:50.549 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:44976 10 6452 1 2025-10-18 09:17:50.903 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:42422 10 6452 1 2025-10-18 09:18:51.269 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34660 10 6452 1 2025-10-18 09:19:19.901 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 09:19:19.819 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:19:19.657 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 09:19:19.741 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 09:19:19.598 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:19:51.673 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44840 10 6452 1 2025-10-18 09:15:46.151 00:06:00.279 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 09:20:52.094 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46368 10 6452 1 2025-10-18 09:21:52.497 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56712 10 6452 1 2025-10-18 09:22:52.858 00:00:10.753 TCP 1.101.0.1:3000 -> 23.104.0.1:39460 10 6452 1 2025-10-18 09:18:46.149 00:06:00.283 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 09:23:53.652 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56286 10 6452 1 2025-10-18 09:24:19.872 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 09:24:19.921 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 09:24:19.786 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:24:19.927 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:24:20.013 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 09:24:54.067 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55274 10 6452 1 2025-10-18 09:25:54.435 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49188 10 6452 1 2025-10-18 09:26:54.834 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51866 10 6452 1 2025-10-18 09:22:46.152 00:06:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 09:27:55.232 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50724 10 6452 1 2025-10-18 09:28:55.632 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34214 10 6452 1 2025-10-18 09:29:19.820 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 09:29:19.906 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 09:29:19.859 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:29:19.896 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:29:19.980 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 09:29:55.995 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:39296 10 6452 1 2025-10-18 09:25:46.150 00:06:00.284 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 09:30:56.367 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52968 10 6452 1 2025-10-18 09:31:56.769 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39200 10 6452 1 2025-10-18 09:32:57.181 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49602 10 6452 1 2025-10-18 09:33:57.589 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54110 10 6452 1 2025-10-18 09:34:20.379 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 09:34:20.328 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 09:34:20.371 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:34:20.237 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:34:20.319 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 09:29:46.155 00:06:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 09:34:57.953 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51668 10 6452 1 2025-10-18 09:35:58.319 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33840 10 6452 1 2025-10-18 09:36:58.719 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35226 10 6452 1 2025-10-18 09:32:46.150 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 09:37:59.137 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60470 10 6452 1 2025-10-18 09:38:59.538 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48642 10 6452 1 2025-10-18 09:39:20.285 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 09:39:20.203 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 09:39:20.115 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 09:39:20.061 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:39:20.201 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:39:59.940 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:47418 10 6452 1 2025-10-18 09:41:00.324 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36532 10 6452 1 2025-10-18 09:36:46.156 00:06:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 09:42:00.732 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41776 10 6452 1 2025-10-18 09:43:01.146 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49246 10 6452 1 2025-10-18 09:44:01.557 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59454 10 6452 1 2025-10-18 09:44:20.161 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 09:44:20.237 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 09:44:20.189 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:44:20.283 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:44:20.365 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 09:39:46.152 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 09:45:01.958 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60410 10 6452 1 2025-10-18 09:46:02.328 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36946 10 6452 1 2025-10-18 09:47:02.733 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47096 10 6452 1 2025-10-18 09:48:03.141 00:00:11.178 TCP 1.101.0.1:3000 -> 23.104.0.1:37844 10 6452 1 2025-10-18 09:43:46.155 00:06:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 09:49:04.356 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52694 10 6452 1 2025-10-18 09:49:20.495 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 09:49:20.411 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 09:49:20.365 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 09:49:20.146 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:49:20.412 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:50:04.757 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:44412 10 6452 1 2025-10-18 09:51:05.179 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42880 10 6452 1 2025-10-18 09:46:46.154 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 09:52:05.587 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:45628 10 6452 1 2025-10-18 09:53:05.948 00:00:10.452 TCP 1.101.0.1:3000 -> 23.104.0.1:58630 13 13955 1 2025-10-18 09:54:06.438 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39696 10 6452 1 2025-10-18 09:54:20.397 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 09:54:20.466 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 09:54:20.357 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:54:20.551 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 09:54:20.634 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 09:55:06.846 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:43550 10 6452 1 2025-10-18 09:50:46.158 00:06:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 09:56:07.226 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60102 10 6452 1 2025-10-18 09:57:07.630 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:57282 10 6452 1 2025-10-18 09:58:07.992 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51364 10 6452 1 2025-10-18 09:53:46.155 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 138, total bytes: 425293, total packets: 1036, avg bps: 872, avg pps: 0, avg bpp: 410 Time window: 2025-10-18 08:54:46 - 2025-10-18 09:59:46 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0033s User: 0.0011s Wall: 0.0014s flows/second: 95973.1 Runtime: 0.0015s