Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 04:58:51.941 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:42386 10 6452 1 2025-10-19 04:59:43.496 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:59:43.573 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 04:59:43.439 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 04:59:43.306 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:59:43.579 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:54:46.541 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 04:59:52.315 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37466 10 6452 1 2025-10-19 05:00:52.724 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34290 10 6452 1 2025-10-19 05:01:53.134 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56034 10 6452 1 2025-10-19 05:02:53.545 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53958 10 6452 1 2025-10-19 04:58:46.546 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:03:53.963 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54154 10 6452 1 2025-10-19 05:04:43.663 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:04:43.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:04:43.787 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:04:43.671 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:04:43.579 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:04:54.363 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49896 10 6452 1 2025-10-19 05:05:54.719 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45008 10 6452 1 2025-10-19 05:01:46.546 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:06:55.128 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41312 10 6452 1 2025-10-19 05:07:55.490 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42520 10 6452 1 2025-10-19 05:08:55.892 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37408 10 6452 1 2025-10-19 05:09:43.442 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:09:43.725 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:09:43.685 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:09:43.359 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:09:43.565 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:09:56.299 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42278 10 6452 1 2025-10-19 05:05:46.550 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:10:56.700 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34034 10 6452 1 2025-10-19 05:11:57.107 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38086 10 6452 1 2025-10-19 05:12:57.513 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47784 10 6452 1 2025-10-19 05:08:46.550 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:13:57.914 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34286 10 6452 1 2025-10-19 05:14:43.796 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:14:43.725 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:14:43.727 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:14:43.482 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:14:43.713 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:14:58.328 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33638 10 6452 1 2025-10-19 05:15:58.725 00:00:11.428 TCP 1.101.0.1:3000 -> 23.104.0.1:41230 10 6452 1 2025-10-19 05:17:00.193 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50662 10 6452 1 2025-10-19 05:12:46.558 00:06:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:18:00.594 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46898 10 6452 1 2025-10-19 05:19:00.995 00:00:10.521 TCP 1.101.0.1:3000 -> 23.104.0.1:40932 10 6452 1 2025-10-19 05:19:43.982 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:19:43.895 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:19:43.863 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:19:43.749 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:19:43.899 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:20:01.557 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:60366 10 6452 1 2025-10-19 05:15:46.554 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:21:01.964 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55088 10 6452 1 2025-10-19 05:22:02.371 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52486 10 6452 1 2025-10-19 05:23:02.773 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53176 10 6452 1 2025-10-19 05:24:03.181 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55450 10 6452 1 2025-10-19 05:24:43.904 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:24:43.799 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:24:43.750 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:24:43.859 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:24:43.943 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:19:46.556 00:06:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:25:03.584 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53082 10 6452 1 2025-10-19 05:26:03.989 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37626 10 6452 1 2025-10-19 05:27:04.360 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54494 10 6452 1 2025-10-19 05:22:46.554 00:06:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:28:04.761 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34174 10 6452 1 2025-10-19 05:29:05.128 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57592 10 6452 1 2025-10-19 05:29:44.040 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:29:44.189 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:29:43.749 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:29:43.886 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:29:43.957 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:30:05.532 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56354 10 6452 1 2025-10-19 05:31:05.929 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:50368 10 6452 1 2025-10-19 05:26:46.558 00:06:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:32:06.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43176 10 6452 1 2025-10-19 05:33:06.765 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59954 10 6452 1 2025-10-19 05:34:07.178 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46140 10 6452 1 2025-10-19 05:34:44.173 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:34:44.011 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:34:43.869 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:34:44.111 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:34:44.194 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:29:46.556 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:35:07.581 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43832 10 6452 1 2025-10-19 05:36:07.986 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52490 10 6452 1 2025-10-19 05:37:08.386 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42262 10 6452 1 2025-10-19 05:38:08.787 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40664 10 6452 1 2025-10-19 05:33:46.559 00:06:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:39:09.187 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52032 10 6452 1 2025-10-19 05:39:44.203 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:39:44.328 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:39:44.154 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:39:44.208 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:39:44.290 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:40:09.590 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:37620 10 6452 1 2025-10-19 05:41:09.973 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45996 10 6452 1 2025-10-19 05:36:46.559 00:06:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:42:10.343 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50788 10 6452 1 2025-10-19 05:43:10.748 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43132 10 6452 1 2025-10-19 05:44:11.117 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36908 10 6452 1 2025-10-19 05:44:44.291 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:44:44.201 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:44:44.359 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:44:44.398 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:44:44.482 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:45:11.484 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48546 10 6452 1 2025-10-19 05:40:46.561 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:46:11.850 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:48420 10 6452 1 2025-10-19 05:47:12.231 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37436 10 6452 1 2025-10-19 05:48:12.635 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43238 10 6452 1 2025-10-19 05:43:46.561 00:06:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:49:13.039 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53332 10 6452 1 2025-10-19 05:49:44.586 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:49:44.641 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:49:44.525 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:49:44.504 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:49:44.563 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:50:13.435 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52918 10 6452 1 2025-10-19 05:51:13.841 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:33872 10 6452 1 2025-10-19 05:52:14.268 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42508 10 6452 1 2025-10-19 05:47:46.568 00:06:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:53:14.672 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33596 10 6452 1 2025-10-19 05:54:15.032 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:56250 10 6452 1 2025-10-19 05:54:44.411 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:54:44.495 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:54:44.476 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:54:44.318 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:54:44.560 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:55:15.476 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38466 10 6452 1 2025-10-19 05:50:46.564 00:06:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:56:15.879 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54062 10 6452 1 2025-10-19 05:57:16.286 00:00:11.018 TCP 1.101.0.1:3000 -> 23.104.0.1:58114 10 6452 1 2025-10-19 05:58:17.344 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52122 10 6452 1 Summary: total flows: 137, total bytes: 416877, total packets: 1018, avg bps: 872, avg pps: 0, avg bpp: 409 Time window: 2025-10-19 04:54:46 - 2025-10-19 05:58:27 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0055s User: 0.0000s Wall: 0.0018s flows/second: 77840.6 Runtime: 0.0018s