Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 08:58:40.751 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51746 10 6452 1 2025-10-19 08:59:48.164 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 08:59:48.157 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 08:59:48.193 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 08:59:48.160 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 08:59:48.243 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 08:59:41.152 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44500 10 6452 1 2025-10-19 09:00:41.554 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48344 10 6452 1 2025-10-19 08:56:46.647 00:06:00.200 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 09:01:41.916 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:44452 10 6452 1 2025-10-19 09:02:42.350 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53502 10 6452 1 2025-10-19 09:03:42.712 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:51942 10 6452 1 2025-10-19 09:04:48.236 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:04:48.242 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:04:48.299 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:04:48.296 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:04:48.379 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 08:59:46.646 00:06:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 09:04:43.140 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54038 10 6452 1 2025-10-19 09:05:43.562 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51874 10 6452 1 2025-10-19 09:06:43.964 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46036 10 6452 1 2025-10-19 09:07:44.372 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39640 10 6452 1 2025-10-19 09:03:46.649 00:06:00.203 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 09:08:44.734 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59956 10 6452 1 2025-10-19 09:09:48.536 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 09:09:48.619 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:09:48.360 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:09:48.276 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:09:48.454 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:09:45.149 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53518 10 6452 1 2025-10-19 09:10:45.509 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53546 10 6452 1 2025-10-19 09:06:46.646 00:06:00.208 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 09:11:45.916 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53230 10 6452 1 2025-10-19 09:12:46.312 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36696 10 6452 1 2025-10-19 09:13:46.673 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46002 10 6452 1 2025-10-19 09:14:48.484 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:14:48.558 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:14:48.487 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:14:48.471 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:14:48.567 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 09:14:47.102 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50712 10 6452 1 2025-10-19 09:10:46.650 00:06:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 09:15:47.466 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33474 10 6452 1 2025-10-19 09:16:47.827 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58638 10 6452 1 2025-10-19 09:17:48.224 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34258 10 6452 1 2025-10-19 09:13:46.648 00:06:00.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 09:18:48.625 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60538 10 6452 1 2025-10-19 09:19:48.785 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 09:19:48.702 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:19:48.472 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:19:48.589 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:19:48.702 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:19:48.992 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57058 10 6452 1 2025-10-19 09:20:49.358 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57612 10 6452 1 2025-10-19 09:21:49.722 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43632 10 6452 1 2025-10-19 09:17:46.650 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 09:22:50.131 00:00:11.150 TCP 1.101.0.1:3000 -> 23.104.0.1:60372 10 6452 1 2025-10-19 09:23:51.316 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45966 10 6452 1 2025-10-19 09:24:48.591 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:24:48.776 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:24:48.515 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:24:48.696 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:24:48.779 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 09:24:51.714 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:46538 10 6452 1 2025-10-19 09:20:46.648 00:06:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 09:25:52.119 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56432 10 6452 1 2025-10-19 09:26:52.527 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54484 10 6452 1 2025-10-19 09:27:52.929 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:54234 10 6452 1 2025-10-19 09:28:53.344 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53832 10 6452 1 2025-10-19 09:29:49.117 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:24:46.654 00:06:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 09:29:48.949 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:29:48.821 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:29:48.847 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:29:48.930 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 09:29:53.746 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40754 10 6452 1 2025-10-19 09:30:54.145 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34592 10 6452 1 2025-10-19 09:31:54.553 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40122 10 6452 1 2025-10-19 09:27:46.652 00:06:00.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 09:32:54.952 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57732 10 6452 1 2025-10-19 09:33:55.366 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49706 10 6452 1 2025-10-19 09:34:48.859 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:34:49.060 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:34:48.885 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:34:48.929 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:34:49.014 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 09:34:55.766 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:35910 10 6452 1 2025-10-19 09:35:56.135 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53446 10 6452 1 2025-10-19 09:31:46.659 00:06:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 09:36:56.510 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42236 10 6452 1 2025-10-19 09:37:56.918 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:48946 10 6452 1 2025-10-19 09:38:57.340 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50362 10 6452 1 2025-10-19 09:39:49.149 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:39:48.963 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:39:48.797 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:39:49.144 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:39:49.227 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 09:34:46.655 00:06:00.209 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 09:39:57.753 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40342 10 6452 1 2025-10-19 09:40:58.169 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59850 10 6452 1 2025-10-19 09:41:58.574 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43318 10 6452 1 2025-10-19 09:42:58.977 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33856 10 6452 1 2025-10-19 09:38:46.661 00:06:00.202 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 09:43:59.400 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54458 10 6452 1 2025-10-19 09:44:49.104 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:44:48.919 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:44:48.924 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:44:49.009 00:00:00.044 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:44:49.091 00:00:00.045 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 09:44:59.807 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53754 10 6452 1 2025-10-19 09:46:00.214 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43604 10 6452 1 2025-10-19 09:41:46.659 00:06:00.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 09:47:00.568 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36382 10 6452 1 2025-10-19 09:48:00.979 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54398 10 6452 1 2025-10-19 09:49:01.394 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32912 10 6452 1 2025-10-19 09:49:49.373 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 09:49:49.288 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:49:49.361 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:49:49.065 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:49:49.291 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:50:01.798 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53080 10 6452 1 2025-10-19 09:45:46.662 00:06:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 09:51:02.210 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42790 10 6452 1 2025-10-19 09:52:02.611 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54004 10 6452 1 2025-10-19 09:53:03.017 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48274 10 6452 1 2025-10-19 09:48:46.659 00:06:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 09:54:03.432 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59076 10 6452 1 2025-10-19 09:54:49.136 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 09:54:49.587 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:54:49.391 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 09:54:49.424 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 09:54:49.474 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 09:55:03.831 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:52160 10 6452 1 2025-10-19 09:56:04.258 00:00:16.756 TCP 1.101.0.1:3000 -> 23.104.0.1:41680 10 6452 1 2025-10-19 09:57:11.062 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58476 10 6452 1 2025-10-19 09:52:46.665 00:06:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 09:58:11.420 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36482 10 6452 1 Summary: total flows: 137, total bytes: 416877, total packets: 1018, avg bps: 896, avg pps: 0, avg bpp: 409 Time window: 2025-10-19 08:56:46 - 2025-10-19 09:58:46 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0026s User: 0.0026s Wall: 0.0025s flows/second: 55896.9 Runtime: 0.0025s