Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 07:58:54.711 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39242 10 6452 1 2025-10-29 07:59:36.208 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:59:36.252 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:59:35.991 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:59:36.211 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:59:36.294 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:59:55.119 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39624 10 6452 1 2025-10-29 07:56:51.754 00:05:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 08:00:55.527 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49148 10 6452 1 2025-10-29 07:57:51.751 00:05:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 08:01:55.893 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:35822 10 6452 1 2025-10-29 08:02:56.311 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38462 10 6452 1 2025-10-29 08:03:56.677 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36508 10 6452 1 2025-10-29 08:04:36.448 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 08:04:36.271 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 08:04:35.870 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:04:36.364 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:04:36.217 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 08:04:57.107 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35570 10 6452 1 2025-10-29 08:05:57.510 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44456 10 6452 1 2025-10-29 08:02:51.754 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 08:06:57.909 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33560 10 6452 1 2025-10-29 08:03:51.753 00:05:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 08:07:58.319 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41412 10 6452 1 2025-10-29 08:08:58.726 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41686 10 6452 1 2025-10-29 08:09:36.442 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 08:09:36.056 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 08:09:36.289 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 08:09:36.330 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:09:36.359 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:09:59.135 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37778 10 6452 1 2025-10-29 08:10:59.500 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53456 10 6452 1 2025-10-29 08:11:59.903 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38832 10 6452 1 2025-10-29 08:08:51.759 00:05:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 08:13:00.305 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:35182 12 10369 1 2025-10-29 08:09:51.753 00:05:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 08:14:00.799 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:57348 10 6452 1 2025-10-29 08:14:36.497 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 08:14:36.409 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 08:14:36.501 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:14:36.562 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:14:36.644 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 08:15:01.183 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54126 10 6452 1 2025-10-29 08:16:01.595 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54404 10 6452 1 2025-10-29 08:17:01.997 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40646 10 6452 1 2025-10-29 08:18:02.372 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:43460 12 10375 1 2025-10-29 08:14:51.755 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 08:19:02.849 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:54796 10 6452 1 2025-10-29 08:19:36.719 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 08:19:36.763 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 08:19:36.548 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:19:36.671 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:19:36.755 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 08:15:51.755 00:05:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 08:20:03.276 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56320 10 6452 1 2025-10-29 08:21:03.688 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39428 10 6452 1 2025-10-29 08:22:04.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60308 10 6452 1 2025-10-29 08:23:04.518 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58230 10 6452 1 2025-10-29 08:24:04.928 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:55454 11 6504 1 2025-10-29 08:24:36.753 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 08:24:36.671 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:24:36.587 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 08:24:36.669 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 08:24:36.521 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:20:51.757 00:05:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 08:25:05.399 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43992 10 6452 1 2025-10-29 08:21:51.754 00:05:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 08:26:05.805 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60478 10 6452 1 2025-10-29 08:27:06.206 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51430 10 6452 1 2025-10-29 08:28:06.608 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:37954 12 10369 1 2025-10-29 08:29:07.108 00:00:11.394 TCP 1.101.0.1:3000 -> 23.104.0.1:49752 10 6452 1 2025-10-29 08:29:36.784 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:29:36.876 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 08:29:36.831 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 08:29:36.791 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:29:36.868 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 08:30:08.542 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39066 10 6452 1 2025-10-29 08:26:51.758 00:05:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 08:31:08.903 00:00:10.723 TCP 1.101.0.1:3000 -> 23.104.0.1:37006 12 6556 1 2025-10-29 08:27:51.756 00:05:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 08:32:09.668 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34744 10 6452 1 2025-10-29 08:33:10.103 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:39264 12 10584 1 2025-10-29 08:34:10.541 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32850 10 6661 1 2025-10-29 08:34:36.768 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 08:34:36.848 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 08:34:36.835 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:34:36.770 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:34:36.852 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 08:35:10.952 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:58760 10 6661 1 2025-10-29 08:36:11.370 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33276 10 6661 1 2025-10-29 08:32:51.759 00:05:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 08:37:11.768 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55568 10 6661 1 2025-10-29 08:33:51.756 00:05:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 08:38:12.186 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34488 10 6661 1 2025-10-29 08:39:12.593 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52832 10 6661 1 2025-10-29 08:39:36.823 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 08:39:36.815 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 08:39:36.524 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:39:36.812 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:39:36.896 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 08:40:13.004 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:51476 10 6661 1 2025-10-29 08:41:13.467 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40186 10 6661 1 2025-10-29 08:42:13.865 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43464 10 6661 1 2025-10-29 08:38:51.761 00:05:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 08:43:14.275 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59316 10 6661 1 2025-10-29 08:39:51.760 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 08:44:14.677 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53742 10 6661 1 2025-10-29 08:44:37.174 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 08:44:37.091 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 08:44:37.191 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 08:44:37.005 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:44:37.092 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:45:15.107 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37492 10 6661 1 2025-10-29 08:46:15.509 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39788 10 6661 1 2025-10-29 08:47:15.910 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42004 10 6661 1 2025-10-29 08:48:16.314 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54180 10 6661 1 2025-10-29 08:44:51.766 00:05:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 08:49:16.717 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43868 10 6661 1 2025-10-29 08:49:37.425 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 08:49:37.257 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 08:49:37.253 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 08:49:37.309 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:49:37.345 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:45:51.764 00:05:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 08:50:17.116 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48572 10 6661 1 2025-10-29 08:51:17.531 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48288 10 6661 1 2025-10-29 08:52:17.939 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:58548 10 6661 1 2025-10-29 08:53:18.317 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55402 10 6661 1 2025-10-29 08:54:18.684 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40442 10 6661 1 2025-10-29 08:54:37.322 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 08:54:36.990 00:00:00.053 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 08:54:37.294 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:54:37.250 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:54:37.332 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 08:50:51.768 00:05:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 08:55:19.105 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46446 10 6661 1 2025-10-29 08:51:51.765 00:05:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 08:56:19.503 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34152 10 6661 1 2025-10-29 08:57:19.909 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:46560 12 10375 1 2025-10-29 08:58:20.397 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46666 10 6452 1 Summary: total flows: 140, total bytes: 441775, total packets: 1033, avg bps: 955, avg pps: 0, avg bpp: 427 Time window: 2025-10-29 07:56:51 - 2025-10-29 08:58:30 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0039s User: 0.0019s Wall: 0.0020s flows/second: 71575.2 Runtime: 0.0020s