Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 14:59:30.745 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32784 10 6452 1 2025-10-19 14:59:55.648 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 14:59:55.566 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 14:59:55.402 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 14:59:55.308 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 14:59:55.441 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:00:31.150 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47564 10 6452 1 2025-10-19 15:01:31.556 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35936 10 6452 1 2025-10-19 14:56:46.750 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 15:02:31.963 00:00:10.509 TCP 1.101.0.1:3000 -> 23.104.0.1:47026 10 6452 1 2025-10-19 15:03:32.509 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39156 10 6452 1 2025-10-19 15:04:32.871 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43372 10 6452 1 2025-10-19 15:04:55.509 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 15:04:55.382 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 15:04:55.398 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:04:55.572 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:04:55.655 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 15:05:33.275 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58214 10 6452 1 2025-10-19 15:00:46.754 00:06:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 15:06:33.636 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60396 10 6452 1 2025-10-19 15:07:34.040 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46426 10 6452 1 2025-10-19 15:08:34.444 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56386 10 6452 1 2025-10-19 15:03:46.754 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 15:09:34.848 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:51860 10 6452 1 2025-10-19 15:09:55.791 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 15:09:55.581 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 15:09:55.660 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 15:09:55.514 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:09:55.709 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:10:35.270 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:39726 10 6452 1 2025-10-19 15:11:35.659 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39198 10 6452 1 2025-10-19 15:07:46.757 00:06:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 15:12:36.084 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34800 10 6452 1 2025-10-19 15:13:36.491 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:52228 11 6504 1 2025-10-19 15:14:36.947 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60802 10 6452 1 2025-10-19 15:14:55.936 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 15:14:55.727 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 15:14:55.725 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 15:14:55.669 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:14:55.853 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:10:46.756 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 15:15:37.361 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:53278 10 6452 1 2025-10-19 15:16:37.747 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59880 10 6452 1 2025-10-19 15:17:38.156 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39996 10 6452 1 2025-10-19 15:18:38.522 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:46736 12 10375 1 2025-10-19 15:14:46.759 00:06:00.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 15:19:38.959 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55718 10 6452 1 2025-10-19 15:19:55.878 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 15:19:55.914 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 15:19:55.868 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 15:19:55.810 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:19:55.795 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:20:39.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39546 10 6452 1 2025-10-19 15:21:39.764 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:48400 10 6452 1 2025-10-19 15:17:46.758 00:06:00.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 15:22:40.199 00:00:10.718 TCP 1.101.0.1:3000 -> 23.104.0.1:35448 10 6452 1 2025-10-19 15:23:40.955 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46136 10 6452 1 2025-10-19 15:24:41.365 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60896 10 6452 1 2025-10-19 15:24:56.209 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 15:24:56.126 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:24:56.115 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 15:24:55.934 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 15:24:56.202 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:25:41.768 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60814 10 6452 1 2025-10-19 15:21:46.760 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 15:26:42.180 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50808 10 6452 1 2025-10-19 15:27:42.582 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34428 10 6452 1 2025-10-19 15:28:42.990 00:00:11.067 TCP 1.101.0.1:3000 -> 23.104.0.1:51434 12 10369 1 2025-10-19 15:24:46.756 00:06:00.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 15:29:44.107 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41876 10 6452 1 2025-10-19 15:29:56.084 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 15:29:56.084 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 15:29:55.899 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:29:56.120 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:29:56.203 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 15:30:44.506 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49014 10 6452 1 2025-10-19 15:31:44.911 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53234 10 6452 1 2025-10-19 15:32:45.273 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44792 10 6452 1 2025-10-19 15:28:46.761 00:06:00.228 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 15:33:45.674 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45468 10 6452 1 2025-10-19 15:34:56.372 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 15:34:55.972 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 15:34:56.123 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:34:46.035 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57826 10 6452 1 2025-10-19 15:34:56.288 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:34:56.107 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 15:35:46.441 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:41324 10 6452 1 2025-10-19 15:31:46.757 00:06:00.234 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 15:36:46.837 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:60584 10 6452 1 2025-10-19 15:37:47.267 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50406 10 6452 1 2025-10-19 15:38:47.671 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49140 10 6452 1 2025-10-19 15:39:56.387 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 15:39:56.261 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 15:39:56.212 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:39:56.320 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:39:48.099 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37410 10 6452 1 2025-10-19 15:39:56.402 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 15:35:46.762 00:06:00.233 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 15:40:48.497 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47462 10 6452 1 2025-10-19 15:41:48.901 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45740 10 6452 1 2025-10-19 15:42:49.314 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49284 10 6452 1 2025-10-19 15:38:46.760 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 15:43:49.720 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57454 10 6452 1 2025-10-19 15:44:56.375 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:44:56.432 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 15:44:56.383 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 15:44:56.259 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:44:56.457 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 15:44:50.157 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58070 10 6452 1 2025-10-19 15:45:50.563 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46424 10 6452 1 2025-10-19 15:46:50.972 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35250 10 6452 1 2025-10-19 15:42:46.766 00:06:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 15:47:51.334 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56448 10 6452 1 2025-10-19 15:48:51.739 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:37896 10 6452 1 2025-10-19 15:45:46.765 00:05:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-19 15:49:56.657 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:49:56.540 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 15:49:56.714 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 15:49:56.346 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:49:56.738 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 15:49:52.186 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45588 10 6452 1 2025-10-19 15:50:52.596 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46598 10 6452 1 2025-10-19 15:51:52.992 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58818 10 6452 1 2025-10-19 15:52:53.398 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:39020 12 10375 1 2025-10-19 15:53:53.875 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41878 10 6452 1 2025-10-19 15:49:46.769 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 15:54:56.522 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:54:56.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 15:54:56.608 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 15:54:56.624 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:54:56.605 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 15:54:54.276 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:54892 10 6452 1 2025-10-19 15:51:46.767 00:05:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-19 15:55:54.761 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43852 10 6452 1 2025-10-19 15:56:55.132 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42266 10 6452 1 2025-10-19 15:57:55.534 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40480 10 6452 1 Summary: total flows: 136, total bytes: 421994, total packets: 1011, avg bps: 917, avg pps: 0, avg bpp: 417 Time window: 2025-10-19 14:56:46 - 2025-10-19 15:58:05 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0028s User: 0.0019s Wall: 0.0024s flows/second: 57311.9 Runtime: 0.0024s