Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 11:59:18.508 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59512 10 6452 1 2025-10-03 12:00:18.909 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44424 10 6452 1 2025-10-03 12:01:19.313 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53472 10 6452 1 2025-10-03 11:56:38.539 00:06:00.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:02:09.728 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:02:09.821 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:02:09.726 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:02:09.818 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:02:09.809 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:02:19.713 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46160 10 6452 1 2025-10-03 12:03:20.121 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44800 10 6452 1 2025-10-03 12:04:20.531 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45158 10 6452 1 2025-10-03 11:59:38.542 00:06:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:05:20.930 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:33496 10 6452 1 2025-10-03 12:06:21.370 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41520 10 6452 1 2025-10-03 12:07:10.142 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:07:10.113 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:07:09.958 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:07:09.955 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:07:10.042 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:07:21.775 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36538 10 6452 1 2025-10-03 12:08:22.192 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41190 10 6452 1 2025-10-03 12:03:38.540 00:06:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:09:22.595 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:40790 10 6452 1 2025-10-03 12:10:22.971 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38232 10 6452 1 2025-10-03 12:11:23.386 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:47332 10 6452 1 2025-10-03 12:06:38.544 00:06:00.309 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:12:10.183 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:12:10.213 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:12:09.946 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:12:10.101 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:12:10.214 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:12:23.819 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43304 10 6452 1 2025-10-03 12:13:24.225 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41596 10 6452 1 2025-10-03 12:14:24.587 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42648 10 6452 1 2025-10-03 12:15:24.988 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54846 10 6452 1 2025-10-03 12:10:38.547 00:06:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:16:25.401 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40566 10 6452 1 2025-10-03 12:17:10.451 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:17:10.551 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:17:10.525 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:17:10.367 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:17:10.607 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:17:25.810 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50558 10 6452 1 2025-10-03 12:18:26.181 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:37822 12 10375 1 2025-10-03 12:13:38.550 00:06:00.304 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:19:26.660 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54064 10 6452 1 2025-10-03 12:20:27.096 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33508 10 6452 1 2025-10-03 12:21:27.495 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54342 10 6452 1 2025-10-03 12:22:10.696 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:22:10.643 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:22:10.216 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:22:10.613 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:22:10.671 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:17:38.547 00:06:00.311 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:22:27.899 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57024 12 6556 1 2025-10-03 12:23:28.318 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51206 10 6452 1 2025-10-03 12:24:28.722 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:58970 10 6452 1 2025-10-03 12:25:29.111 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38848 10 6452 1 2025-10-03 12:20:38.550 00:06:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:26:29.515 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51666 10 6452 1 2025-10-03 12:27:10.460 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:27:10.459 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:27:10.117 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:27:10.377 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:27:10.459 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:27:29.920 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48354 10 6452 1 2025-10-03 12:28:30.334 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58842 10 6452 1 2025-10-03 12:24:38.549 00:06:00.311 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:29:30.742 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39126 10 6452 1 2025-10-03 12:30:31.146 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51984 10 6452 1 2025-10-03 12:31:31.514 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35002 10 6452 1 2025-10-03 12:32:10.554 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:32:10.324 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:32:10.504 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:32:10.485 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:32:10.587 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:27:38.551 00:06:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:32:31.925 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41444 10 6452 1 2025-10-03 12:33:32.345 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46120 10 6452 1 2025-10-03 12:34:32.751 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55910 10 6452 1 2025-10-03 12:35:33.157 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:54670 10 6452 1 2025-10-03 12:31:38.553 00:06:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:36:33.534 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52678 10 6452 1 2025-10-03 12:37:10.658 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:37:10.497 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:37:10.417 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:37:10.576 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:37:10.679 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:37:33.937 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:33858 10 6452 1 2025-10-03 12:38:34.331 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40866 10 6452 1 2025-10-03 12:34:38.556 00:06:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:39:34.736 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40900 10 6452 1 2025-10-03 12:40:35.145 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50642 10 6452 1 2025-10-03 12:41:35.551 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51254 12 6556 1 2025-10-03 12:42:10.959 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:42:10.802 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:42:11.345 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:42:11.143 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:42:11.428 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:42:35.961 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48732 10 6452 1 2025-10-03 12:38:38.553 00:06:00.311 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:43:36.370 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42300 10 6452 1 2025-10-03 12:44:36.775 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48292 10 6452 1 2025-10-03 12:45:37.147 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57098 10 6452 1 2025-10-03 12:41:38.557 00:06:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:46:37.581 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:59524 10 6452 1 2025-10-03 12:47:10.858 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:47:11.112 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:47:11.184 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:47:11.115 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:47:11.267 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:47:37.940 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49000 10 6452 1 2025-10-03 12:48:38.343 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34980 10 6452 1 2025-10-03 12:49:38.744 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47320 10 6452 1 2025-10-03 12:45:38.556 00:06:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:50:39.152 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53946 10 6452 1 2025-10-03 12:51:39.556 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33520 10 6452 1 2025-10-03 12:52:10.710 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:52:10.847 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:52:10.842 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:52:10.930 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:52:11.064 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:52:39.956 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38166 10 6452 1 2025-10-03 12:48:38.558 00:06:00.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-03 12:53:40.372 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38326 10 6452 1 2025-10-03 12:54:40.776 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38146 10 6452 1 2025-10-03 12:55:41.186 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44474 10 6452 1 2025-10-03 12:56:41.586 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52564 10 6452 1 2025-10-03 12:57:10.879 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:57:10.919 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 12:57:11.166 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 12:57:11.118 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 12:57:11.202 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 12:52:38.556 00:06:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-03 12:57:41.998 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45374 10 6452 1 Summary: total flows: 136, total bytes: 414556, total packets: 1014, avg bps: 891, avg pps: 0, avg bpp: 408 Time window: 2025-10-03 11:56:38 - 2025-10-03 12:58:38 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0042s User: 0.0010s Wall: 0.0019s flows/second: 73112.7 Runtime: 0.0019s