Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 10:59:36.354 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:50782 10 6452 1 2025-10-19 10:59:50.554 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 10:59:50.553 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 10:59:50.364 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 10:59:50.548 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 10:59:50.472 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 10:55:46.686 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 11:00:36.765 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:51920 10 6452 1 2025-10-19 11:01:37.189 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37380 10 6452 1 2025-10-19 11:02:37.593 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57766 10 6452 1 2025-10-19 10:58:46.684 00:06:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 11:03:37.999 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34098 10 6452 1 2025-10-19 11:04:38.398 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36638 10 6452 1 2025-10-19 11:04:50.844 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 11:04:50.878 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 11:04:50.837 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 11:04:50.792 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:04:50.763 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:05:38.808 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39602 10 6452 1 2025-10-19 11:06:39.224 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59978 10 6452 1 2025-10-19 11:02:46.687 00:06:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 11:07:39.627 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34176 10 6452 1 2025-10-19 11:08:40.034 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33116 10 6452 1 2025-10-19 11:09:50.767 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 11:09:50.879 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 11:09:50.505 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:09:40.446 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37896 10 6452 1 2025-10-19 11:09:50.875 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:09:50.958 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 11:05:46.685 00:06:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 11:10:40.852 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:37588 10 6452 1 2025-10-19 11:11:41.286 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 10 6452 1 2025-10-19 11:12:41.660 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58220 10 6452 1 2025-10-19 11:13:42.083 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52200 10 6452 1 2025-10-19 11:09:46.688 00:06:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 11:14:51.250 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 11:14:50.792 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 11:14:51.168 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 11:14:51.125 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:14:51.168 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:14:42.486 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44804 10 6452 1 2025-10-19 11:15:42.857 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:51130 10 6452 1 2025-10-19 11:16:43.275 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45128 10 6452 1 2025-10-19 11:12:46.686 00:06:00.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 11:17:43.678 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34924 10 6452 1 2025-10-19 11:18:44.101 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58670 10 6452 1 2025-10-19 11:19:51.062 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 11:19:51.062 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 11:19:50.987 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 11:19:50.857 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:19:44.461 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38540 10 6452 1 2025-10-19 11:19:50.979 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:20:44.881 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:59836 10 6452 1 2025-10-19 11:16:46.690 00:06:00.210 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 11:21:45.247 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52952 10 6452 1 2025-10-19 11:22:45.660 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50070 10 6452 1 2025-10-19 11:23:46.093 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41632 10 6452 1 2025-10-19 11:24:51.217 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 11:24:51.210 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 11:24:51.017 00:00:00.049 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:24:50.885 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:19:46.688 00:06:00.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 11:24:50.967 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 11:24:46.492 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33236 10 6452 1 2025-10-19 11:25:46.898 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:49098 12 6556 1 2025-10-19 11:26:47.318 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55486 10 6452 1 2025-10-19 11:27:47.720 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34226 10 6452 1 2025-10-19 11:23:46.691 00:06:00.210 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 11:28:48.134 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60172 10 6452 1 2025-10-19 11:29:51.142 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 11:29:51.212 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 11:29:51.178 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:29:51.212 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:29:51.295 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 11:29:48.535 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41324 10 6452 1 2025-10-19 11:30:48.952 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:44626 10 6452 1 2025-10-19 11:26:46.688 00:06:00.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 11:31:49.378 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35440 10 6452 1 2025-10-19 11:32:49.788 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:60870 10 6452 1 2025-10-19 11:33:50.157 00:00:10.460 TCP 1.101.0.1:3000 -> 23.104.0.1:40276 10 6452 1 2025-10-19 11:34:51.425 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 11:34:51.418 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 11:34:51.391 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:34:51.462 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:34:51.545 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 11:34:50.653 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56006 10 6452 1 2025-10-19 11:30:46.694 00:06:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 11:35:51.021 00:00:10.851 TCP 1.101.0.1:3000 -> 23.104.0.1:52026 10 6452 1 2025-10-19 11:36:51.910 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38654 10 6452 1 2025-10-19 11:37:52.317 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44128 10 6452 1 2025-10-19 11:33:46.691 00:06:00.214 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 11:38:52.719 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39552 10 6452 1 2025-10-19 11:39:51.443 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 11:39:51.496 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 11:39:51.240 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:39:51.291 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:39:51.374 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 11:39:53.133 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40092 10 6452 1 2025-10-19 11:40:53.535 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33306 10 6452 1 2025-10-19 11:41:53.941 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:55916 10 6452 1 2025-10-19 11:37:46.694 00:06:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 11:42:54.357 00:00:10.473 TCP 1.101.0.1:3000 -> 23.104.0.1:44368 14 14292 1 2025-10-19 11:43:54.867 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40066 10 6452 1 2025-10-19 11:44:51.576 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 11:44:51.518 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:44:51.489 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:44:51.582 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 11:44:51.571 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 11:44:55.278 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42202 10 6452 1 2025-10-19 11:40:46.693 00:06:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 11:45:55.677 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:50394 12 6556 1 2025-10-19 11:46:56.110 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45754 10 6452 1 2025-10-19 11:47:56.513 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46920 10 6452 1 2025-10-19 11:48:56.910 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48232 10 6452 1 2025-10-19 11:44:46.697 00:06:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 11:49:51.553 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:49:51.642 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 11:49:51.725 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 11:49:51.751 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:49:51.636 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 11:49:57.276 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51980 10 6452 1 2025-10-19 11:50:57.645 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56494 10 6452 1 2025-10-19 11:51:58.010 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59476 10 6452 1 2025-10-19 11:47:46.695 00:06:00.214 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 11:52:58.412 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45756 10 6452 1 2025-10-19 11:53:58.823 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51112 10 6452 1 2025-10-19 11:54:52.248 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 11:54:52.092 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 11:54:51.993 00:00:00.051 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 11:54:51.607 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:54:52.167 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:54:59.223 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38250 10 6452 1 2025-10-19 11:55:59.633 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34508 10 6452 1 2025-10-19 11:51:46.700 00:06:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 11:57:00.033 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39336 10 6452 1 2025-10-19 11:58:00.439 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38572 10 6452 1 Summary: total flows: 136, total bytes: 418473, total packets: 1016, avg bps: 894, avg pps: 0, avg bpp: 411 Time window: 2025-10-19 10:55:46 - 2025-10-19 11:58:10 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0047s User: 0.0000s Wall: 0.0012s flows/second: 114474.3 Runtime: 0.0012s