Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 13:58:44.835 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:37436 10 6452 1 2025-10-08 13:59:36.469 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 13:59:36.303 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 13:59:36.520 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 13:59:36.478 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 13:59:36.602 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 13:59:45.256 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43768 10 6452 1 2025-10-08 14:00:45.660 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57696 10 6452 1 2025-10-08 13:56:41.214 00:06:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:01:46.063 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38506 10 6452 1 2025-10-08 14:02:46.468 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37730 10 6452 1 2025-10-08 14:03:46.872 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55228 10 6452 1 2025-10-08 14:04:36.583 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:04:36.567 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:04:36.360 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:04:36.500 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:04:36.400 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 13:59:41.216 00:06:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:04:47.276 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45924 10 6452 1 2025-10-08 14:05:47.677 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57102 10 6452 1 2025-10-08 14:06:48.036 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:36698 10 6452 1 2025-10-08 14:07:48.404 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52474 12 6556 1 2025-10-08 14:03:41.215 00:06:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:08:48.816 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54538 10 6452 1 2025-10-08 14:09:36.951 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:09:36.623 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:09:36.790 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:09:36.956 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:09:36.873 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:09:49.217 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45154 10 6452 1 2025-10-08 14:10:49.618 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35268 10 6452 1 2025-10-08 14:06:41.218 00:06:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:11:50.027 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50446 10 6452 1 2025-10-08 14:12:50.429 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52776 10 6452 1 2025-10-08 14:13:50.838 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:58772 10 6452 1 2025-10-08 14:14:36.886 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:14:36.896 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:14:36.668 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:14:36.805 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:14:36.727 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:14:51.235 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37902 10 6452 1 2025-10-08 14:10:41.218 00:06:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:15:51.642 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45420 10 6452 1 2025-10-08 14:16:52.063 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38640 10 6452 1 2025-10-08 14:17:52.462 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48756 10 6452 1 2025-10-08 14:13:41.220 00:06:00.313 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:18:52.866 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34428 10 6452 1 2025-10-08 14:19:37.241 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:19:37.050 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:19:36.826 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:19:37.153 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:19:36.944 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:19:53.277 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39996 10 6452 1 2025-10-08 14:20:53.681 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43960 10 6452 1 2025-10-08 14:21:54.115 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57776 10 6452 1 2025-10-08 14:17:41.219 00:06:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:22:54.527 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55112 10 6452 1 2025-10-08 14:23:54.936 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54110 10 6452 1 2025-10-08 14:24:37.133 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:24:37.053 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:24:36.977 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:24:37.051 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:24:37.052 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:24:55.358 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53740 10 6452 1 2025-10-08 14:20:41.222 00:06:00.312 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:25:55.788 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46520 10 6452 1 2025-10-08 14:26:56.202 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38336 10 6452 1 2025-10-08 14:27:56.608 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52078 10 6452 1 2025-10-08 14:28:56.973 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37012 10 6452 1 2025-10-08 14:29:38.210 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:29:37.925 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:29:38.041 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:29:38.128 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:29:37.839 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:24:41.221 00:06:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:29:57.342 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47466 10 6452 1 2025-10-08 14:30:57.747 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39324 10 6452 1 2025-10-08 14:31:58.151 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:46934 11 6504 1 2025-10-08 14:27:41.223 00:06:00.316 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:32:58.606 00:00:10.769 TCP 1.101.0.1:3000 -> 23.104.0.1:39488 10 6452 1 2025-10-08 14:33:59.415 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37488 10 6452 1 2025-10-08 14:34:37.210 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:34:37.193 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:34:37.293 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:34:37.127 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:34:37.130 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:34:59.823 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:57064 12 10369 1 2025-10-08 14:36:00.266 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45920 10 6452 1 2025-10-08 14:31:41.221 00:06:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:37:00.630 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58992 10 6452 1 2025-10-08 14:38:01.040 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46338 10 6452 1 2025-10-08 14:39:01.448 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39840 10 6452 1 2025-10-08 14:39:37.240 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:39:37.210 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:39:36.996 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:39:37.463 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:39:37.080 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:34:41.224 00:06:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:40:01.809 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44446 10 6452 1 2025-10-08 14:41:02.221 00:00:10.491 TCP 1.101.0.1:3000 -> 23.104.0.1:45876 10 6452 1 2025-10-08 14:42:02.754 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:56910 10 6452 1 2025-10-08 14:43:03.182 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53552 10 6452 1 2025-10-08 14:38:41.225 00:06:00.320 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:44:03.588 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44210 10 6452 1 2025-10-08 14:44:37.786 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:44:37.488 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:44:37.712 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:44:37.703 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:44:37.497 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:45:03.990 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37302 10 6452 1 2025-10-08 14:46:04.399 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57798 10 6452 1 2025-10-08 14:41:41.227 00:06:00.315 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:47:04.762 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48574 10 6452 1 2025-10-08 14:48:05.177 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50754 10 6452 1 2025-10-08 14:49:05.546 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50132 10 6452 1 2025-10-08 14:49:37.632 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:49:37.525 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:49:37.386 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:49:37.395 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:49:37.470 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:50:05.947 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39536 10 6452 1 2025-10-08 14:45:41.225 00:06:00.320 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:51:06.363 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41112 10 6452 1 2025-10-08 14:52:06.722 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36898 10 6452 1 2025-10-08 14:53:07.135 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33914 10 6452 1 2025-10-08 14:48:41.228 00:06:00.315 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 14:54:07.496 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41288 10 6452 1 2025-10-08 14:54:37.723 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:54:37.936 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:54:37.796 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:54:37.641 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:54:37.746 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:55:07.898 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:59646 10 6452 1 2025-10-08 14:56:08.279 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44004 10 6452 1 2025-10-08 14:57:08.711 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40856 10 6452 1 2025-10-08 14:52:41.228 00:06:00.320 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 14:58:09.116 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56686 10 6452 1 Summary: total flows: 137, total bytes: 420950, total packets: 1023, avg bps: 905, avg pps: 0, avg bpp: 411 Time window: 2025-10-08 13:56:41 - 2025-10-08 14:58:41 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0029s User: 0.0029s Wall: 0.0019s flows/second: 70757.3 Runtime: 0.0020s