Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 14:59:09.526 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35342 10 6452 1 2025-10-08 14:59:37.564 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 14:59:37.504 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:59:37.570 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 14:59:37.784 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 14:59:37.654 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 15:00:09.891 00:00:10.523 TCP 1.101.0.1:3000 -> 23.104.0.1:49022 10 6452 1 2025-10-08 14:55:41.230 00:06:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 15:01:10.457 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:43162 10 6452 1 2025-10-08 15:02:10.813 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55312 10 6452 1 2025-10-08 15:03:11.220 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46358 10 6452 1 2025-10-08 15:04:11.624 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59298 10 6452 1 2025-10-08 15:04:37.779 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 15:04:37.664 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:04:37.876 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:04:37.776 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 15:04:37.958 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 14:59:41.228 00:06:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 15:05:11.980 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:44634 12 10369 1 2025-10-08 15:06:12.458 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49940 10 6452 1 2025-10-08 15:07:12.871 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57620 10 6452 1 2025-10-08 15:02:41.231 00:06:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 15:08:13.290 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:47234 10 6452 1 2025-10-08 15:09:13.646 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46974 10 6452 1 2025-10-08 15:09:37.742 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 15:09:37.721 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:09:37.901 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:09:37.848 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 15:09:37.984 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 15:10:14.041 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52960 10 6452 1 2025-10-08 15:11:14.449 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44966 10 6452 1 2025-10-08 15:06:41.229 00:06:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 15:12:14.850 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:34964 10 6452 1 2025-10-08 15:13:15.277 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:45060 10 6452 1 2025-10-08 15:14:15.638 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36150 10 6452 1 2025-10-08 15:14:38.015 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 15:14:38.005 00:00:00.045 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 15:14:37.869 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:14:37.932 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:14:37.999 00:00:00.050 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 15:09:41.233 00:06:00.322 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 15:15:16.041 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58436 10 6452 1 2025-10-08 15:16:16.437 00:00:11.106 TCP 1.101.0.1:3000 -> 23.104.0.1:37588 10 6452 1 2025-10-08 15:17:17.580 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53470 10 6452 1 2025-10-08 15:18:17.987 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51966 10 6452 1 2025-10-08 15:13:41.230 00:06:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 15:19:18.349 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44220 10 6452 1 2025-10-08 15:19:38.284 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 15:19:38.344 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 15:19:38.207 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:19:38.203 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:19:38.203 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 15:20:18.752 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41116 10 6452 1 2025-10-08 15:21:19.157 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49326 10 6452 1 2025-10-08 15:16:41.233 00:06:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 15:22:19.572 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49996 10 6452 1 2025-10-08 15:23:19.971 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41664 10 6452 1 2025-10-08 15:24:20.376 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53266 10 6452 1 2025-10-08 15:24:38.250 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 15:24:37.879 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:24:38.180 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:24:38.259 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 15:24:38.263 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 15:25:20.737 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44096 10 6452 1 2025-10-08 15:20:41.232 00:06:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 15:26:21.143 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60630 10 6452 1 2025-10-08 15:27:21.551 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59146 10 6452 1 2025-10-08 15:28:21.911 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40202 10 6452 1 2025-10-08 15:23:41.235 00:06:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 15:29:22.319 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:49058 12 10375 1 2025-10-08 15:29:38.343 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 15:29:38.331 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 15:29:38.097 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:29:38.260 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:29:38.171 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 15:30:22.792 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41396 10 6452 1 2025-10-08 15:31:23.203 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38592 10 6452 1 2025-10-08 15:32:23.623 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57670 10 6452 1 2025-10-08 15:27:41.232 00:06:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 15:33:23.996 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45708 10 6452 1 2025-10-08 15:34:24.355 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56546 10 6452 1 2025-10-08 15:34:38.357 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 15:34:38.354 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 15:34:38.229 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:34:38.277 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:34:38.469 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 15:35:24.760 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35442 10 6452 1 2025-10-08 15:30:41.236 00:06:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 15:36:25.179 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49512 10 6452 1 2025-10-08 15:37:25.542 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38826 10 6452 1 2025-10-08 15:38:25.955 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:43966 10 6452 1 2025-10-08 15:39:38.803 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 15:39:38.822 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 15:39:38.486 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:39:38.720 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:39:38.830 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 15:39:26.391 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59230 10 6452 1 2025-10-08 15:34:41.235 00:06:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 15:40:26.756 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43668 10 6452 1 2025-10-08 15:41:27.156 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57224 10 6452 1 2025-10-08 15:42:27.528 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50182 10 6452 1 2025-10-08 15:37:41.239 00:06:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 15:43:27.936 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46718 10 6452 1 2025-10-08 15:44:38.837 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 15:44:28.339 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37060 10 6452 1 2025-10-08 15:44:38.506 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:44:38.622 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:44:38.718 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 15:44:38.705 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 15:45:28.697 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56238 10 6452 1 2025-10-08 15:46:29.110 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35834 10 6452 1 2025-10-08 15:41:41.237 00:06:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 15:47:29.511 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51622 10 6452 1 2025-10-08 15:48:29.915 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50532 10 6452 1 2025-10-08 15:49:38.634 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 15:49:38.664 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 15:49:38.676 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:49:30.325 00:00:10.607 TCP 1.101.0.1:3000 -> 23.104.0.1:37238 10 6452 1 2025-10-08 15:49:38.550 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:49:38.547 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 15:44:41.240 00:06:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 15:50:30.967 00:00:10.849 TCP 1.101.0.1:3000 -> 23.104.0.1:52930 10 6452 1 2025-10-08 15:51:31.883 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44034 12 6556 1 2025-10-08 15:52:32.288 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43640 10 6452 1 2025-10-08 15:48:41.239 00:06:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 15:53:32.693 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:32916 10 6452 1 2025-10-08 15:54:38.978 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 15:54:38.942 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:54:38.978 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:54:38.807 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 15:54:39.062 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 15:54:33.112 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44060 10 6452 1 2025-10-08 15:55:33.520 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58570 10 6452 1 2025-10-08 15:56:33.923 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35086 10 6452 1 2025-10-08 15:51:41.243 00:06:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 15:57:34.336 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38810 10 6452 1 2025-10-08 15:58:34.739 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53820 10 6452 1 Summary: total flows: 137, total bytes: 424821, total packets: 1024, avg bps: 898, avg pps: 0, avg bpp: 414 Time window: 2025-10-08 14:55:41 - 2025-10-08 15:58:45 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0043s User: 0.0011s Wall: 0.0016s flows/second: 86984.5 Runtime: 0.0016s