Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 02:59:21.522 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42224 10 6452 1 2025-10-09 02:59:52.252 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 02:59:52.274 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 02:59:52.248 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 02:59:52.251 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 02:59:52.331 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 03:00:21.923 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40958 10 6452 1 2025-10-09 03:01:22.330 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57368 10 6452 1 2025-10-09 02:56:41.452 00:06:00.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 03:02:22.752 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54756 10 6452 1 2025-10-09 03:03:23.157 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43620 10 6452 1 2025-10-09 03:04:23.581 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:34750 10 6452 1 2025-10-09 03:04:52.339 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 03:04:52.194 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 03:04:52.110 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:04:52.256 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:04:52.110 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 03:05:23.966 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41732 10 6452 1 2025-10-09 03:00:41.451 00:06:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 03:06:24.375 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45482 10 6452 1 2025-10-09 03:07:24.778 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42384 10 6452 1 2025-10-09 03:08:25.181 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42010 10 6452 1 2025-10-09 03:03:41.453 00:06:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 03:09:25.586 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47746 10 6452 1 2025-10-09 03:09:52.397 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 03:09:52.355 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:09:52.217 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:09:52.451 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 03:09:52.299 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 03:10:25.996 00:00:11.609 TCP 1.101.0.1:3000 -> 23.104.0.1:40888 10 6452 1 2025-10-09 03:11:27.644 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36706 10 6452 1 2025-10-09 03:12:28.064 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40692 10 6452 1 2025-10-09 03:07:41.450 00:06:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 03:13:28.467 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57198 10 6452 1 2025-10-09 03:14:28.873 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60404 10 6452 1 2025-10-09 03:14:52.578 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 03:14:52.129 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:14:52.542 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:14:52.545 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 03:14:52.626 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 03:15:29.279 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51488 10 6452 1 2025-10-09 03:10:41.455 00:06:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 03:16:29.676 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39460 10 6452 1 2025-10-09 03:17:30.112 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51340 10 6452 1 2025-10-09 03:18:30.517 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36786 10 6452 1 2025-10-09 03:14:41.454 00:06:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 03:19:30.921 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40328 10 6452 1 2025-10-09 03:19:52.483 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 03:19:52.600 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 03:19:52.663 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:19:52.399 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:19:52.679 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 03:20:31.329 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39460 10 6452 1 2025-10-09 03:21:31.732 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34212 10 6452 1 2025-10-09 03:22:32.147 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54876 10 6452 1 2025-10-09 03:17:41.457 00:06:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 03:23:32.572 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38406 10 6452 1 2025-10-09 03:24:32.989 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:52064 10 6452 1 2025-10-09 03:24:52.641 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 03:24:52.504 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:24:52.561 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:24:52.744 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 03:24:52.644 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 03:25:33.414 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34040 10 6452 1 2025-10-09 03:21:41.455 00:06:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 03:26:33.820 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35138 10 6452 1 2025-10-09 03:27:34.226 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:34832 10 6452 1 2025-10-09 03:28:34.647 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54562 10 6452 1 2025-10-09 03:24:41.458 00:06:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 03:29:35.063 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41712 10 6452 1 2025-10-09 03:29:52.830 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 03:29:52.747 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 03:29:52.785 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:29:52.746 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:29:52.671 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 03:30:35.465 00:00:11.341 TCP 1.101.0.1:3000 -> 23.104.0.1:56816 10 6452 1 2025-10-09 03:31:36.843 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:38004 10 6452 1 2025-10-09 03:32:37.266 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40426 10 6452 1 2025-10-09 03:28:41.456 00:06:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 03:33:37.627 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33422 10 6452 1 2025-10-09 03:34:52.924 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 03:34:38.034 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:55672 10 6452 1 2025-10-09 03:34:52.946 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 03:34:52.487 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:34:52.842 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:34:52.776 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 03:35:38.391 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50280 10 6452 1 2025-10-09 03:31:41.459 00:06:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 03:36:38.798 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59242 10 6452 1 2025-10-09 03:37:39.207 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55294 10 6452 1 2025-10-09 03:38:39.607 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47282 10 6452 1 2025-10-09 03:39:40.015 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59658 10 6452 1 2025-10-09 03:39:53.019 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 03:39:52.840 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 03:39:52.651 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:39:52.936 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:39:52.843 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 03:35:41.457 00:06:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 03:40:40.417 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58410 10 6452 1 2025-10-09 03:41:40.824 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38768 10 6452 1 2025-10-09 03:42:41.227 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51942 10 6452 1 2025-10-09 03:38:41.460 00:06:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 03:43:41.588 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59984 10 6452 1 2025-10-09 03:44:54.990 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 03:44:54.909 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:44:55.049 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 03:44:55.094 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 03:44:55.003 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:44:41.991 00:00:26.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34736 10 6452 1 2025-10-09 03:45:58.409 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40088 10 6452 1 2025-10-09 03:46:58.814 00:00:10.664 TCP 1.101.0.1:3000 -> 23.104.0.1:51752 10 6452 1 2025-10-09 03:42:41.459 00:06:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 03:47:59.509 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38628 10 6452 1 2025-10-09 03:48:59.926 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:59816 10 6452 1 2025-10-09 03:49:53.205 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 03:49:53.179 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 03:49:53.064 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:49:53.113 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:49:53.213 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 03:50:00.299 00:00:10.913 TCP 1.101.0.1:3000 -> 23.104.0.1:49474 10 6452 1 2025-10-09 03:45:41.462 00:06:00.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 03:51:01.248 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55730 10 6452 1 2025-10-09 03:52:01.610 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:35770 10 6452 1 2025-10-09 03:53:02.031 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58942 10 6452 1 2025-10-09 03:54:02.410 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48458 10 6452 1 2025-10-09 03:49:41.460 00:06:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 03:54:53.469 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 03:54:53.471 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 03:54:53.143 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:54:53.386 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 03:54:53.388 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 03:55:02.823 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:34680 12 10369 1 2025-10-09 03:56:03.304 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50284 10 6452 1 2025-10-09 03:57:03.663 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51300 10 6452 1 2025-10-09 03:52:41.463 00:06:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 03:58:04.025 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57266 10 6452 1 Summary: total flows: 136, total bytes: 414342, total packets: 1010, avg bps: 890, avg pps: 0, avg bpp: 410 Time window: 2025-10-09 02:56:41 - 2025-10-09 03:58:41 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0023s User: 0.0023s Wall: 0.0019s flows/second: 72187.5 Runtime: 0.0019s