Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 04:58:43.473 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44380 10 6452 1 2025-10-09 04:59:54.660 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 04:59:43.876 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49250 10 6452 1 2025-10-09 04:59:54.727 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 04:59:54.651 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 04:59:54.578 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 04:59:54.491 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 04:55:41.480 00:06:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 05:00:44.279 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60842 10 6452 1 2025-10-09 05:01:44.642 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51282 10 6452 1 2025-10-09 05:02:45.072 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39378 10 6452 1 2025-10-09 05:03:45.478 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39594 10 6452 1 2025-10-09 04:59:41.479 00:06:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 05:04:54.651 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 05:04:54.315 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:04:54.491 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:04:54.572 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 05:04:54.573 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 05:04:45.880 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43042 10 6452 1 2025-10-09 05:05:46.242 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57746 10 6452 1 2025-10-09 05:06:46.606 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36508 10 6452 1 2025-10-09 05:02:41.483 00:06:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 05:07:47.010 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56620 10 6452 1 2025-10-09 05:08:47.411 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38696 10 6452 1 2025-10-09 05:09:54.682 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 05:09:54.774 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 05:09:54.723 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:09:54.599 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:09:54.821 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 05:09:47.809 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57646 10 6452 1 2025-10-09 05:10:48.215 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43470 10 6452 1 2025-10-09 05:06:41.480 00:06:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 05:11:48.620 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39246 10 6452 1 2025-10-09 05:12:49.026 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58142 10 6452 1 2025-10-09 05:13:49.430 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40854 10 6452 1 2025-10-09 05:09:41.483 00:06:00.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 05:14:55.020 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 05:14:54.798 00:00:00.045 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 05:14:54.563 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:14:54.938 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:14:54.941 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 05:14:49.829 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:44934 10 6452 1 2025-10-09 05:15:50.264 00:00:10.631 TCP 1.101.0.1:3000 -> 23.104.0.1:46234 10 6452 1 2025-10-09 05:16:50.933 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55600 10 6452 1 2025-10-09 05:17:51.348 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34790 10 6452 1 2025-10-09 05:13:41.481 00:06:00.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 05:18:51.764 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58880 10 6452 1 2025-10-09 05:19:55.229 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 05:19:55.149 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 05:19:54.975 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:19:55.146 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:19:55.065 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 05:19:52.180 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47134 10 6452 1 2025-10-09 05:20:52.586 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37086 10 6452 1 2025-10-09 05:16:41.486 00:06:00.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 05:21:52.985 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48880 10 6452 1 2025-10-09 05:22:53.396 00:00:10.756 TCP 1.101.0.1:3000 -> 23.104.0.1:40868 10 6452 1 2025-10-09 05:23:54.191 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54102 10 6452 1 2025-10-09 05:24:55.059 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 05:24:54.942 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:24:55.203 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:24:54.824 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 05:24:55.285 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 05:24:54.588 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38222 10 6452 1 2025-10-09 05:20:41.483 00:06:00.365 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 05:25:54.990 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51820 10 6452 1 2025-10-09 05:26:55.397 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:51978 10 6452 1 2025-10-09 05:27:55.762 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36258 10 6452 1 2025-10-09 05:23:41.486 00:06:00.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 05:28:56.127 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47614 10 6452 1 2025-10-09 05:29:55.173 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 05:29:55.235 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 05:29:55.109 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:29:55.092 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:29:55.168 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 05:29:56.531 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53844 10 6452 1 2025-10-09 05:30:56.891 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49538 12 6556 1 2025-10-09 05:31:57.306 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40240 10 6452 1 2025-10-09 05:27:41.483 00:06:00.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 05:32:57.710 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37400 10 6452 1 2025-10-09 05:33:58.114 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39296 10 6452 1 2025-10-09 05:34:55.419 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 05:34:55.218 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 05:34:55.042 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:34:55.336 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:34:55.417 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 05:34:58.519 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36280 10 6452 1 2025-10-09 05:30:41.487 00:06:00.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 05:35:58.925 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:47232 10 6452 1 2025-10-09 05:36:59.347 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60216 10 6452 1 2025-10-09 05:37:59.753 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:41298 10 6452 1 2025-10-09 05:39:00.177 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53934 10 6452 1 2025-10-09 05:34:41.484 00:06:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 05:39:55.423 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 05:39:55.313 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:39:55.477 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:39:55.423 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 05:39:55.560 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 05:40:00.576 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50008 10 6452 1 2025-10-09 05:41:00.946 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33720 10 6452 1 2025-10-09 05:42:01.351 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42106 10 6452 1 2025-10-09 05:37:41.488 00:06:00.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 05:43:01.760 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47004 11 6492 1 2025-10-09 05:44:02.170 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54790 10 6452 1 2025-10-09 05:44:55.565 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 05:44:55.299 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:44:55.609 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:44:55.609 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 05:44:55.692 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 05:45:02.575 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60170 10 6452 1 2025-10-09 05:46:02.980 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49588 10 6452 1 2025-10-09 05:41:41.489 00:06:00.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 05:47:03.386 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44682 10 6452 1 2025-10-09 05:48:03.793 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50408 10 6452 1 2025-10-09 05:49:04.195 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47008 10 6452 1 2025-10-09 05:44:41.494 00:06:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 05:49:55.661 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 05:49:55.727 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:49:55.575 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:49:55.786 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 05:49:55.658 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 05:50:04.562 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59122 10 6452 1 2025-10-09 05:51:04.922 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51970 10 6452 1 2025-10-09 05:52:05.283 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35264 10 6452 1 2025-10-09 05:53:05.684 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:36092 10 6452 1 2025-10-09 05:48:41.490 00:06:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 05:54:06.063 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:37518 12 6556 1 2025-10-09 05:54:55.838 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 05:54:55.719 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 05:54:55.537 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:54:55.757 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 05:54:55.673 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 05:55:06.495 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50876 10 6452 1 2025-10-09 05:56:06.904 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50070 10 6452 1 2025-10-09 05:51:41.493 00:06:00.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 05:57:07.318 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38266 10 6452 1 2025-10-09 05:58:07.729 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:38072 10 6452 1 Summary: total flows: 137, total bytes: 417125, total packets: 1023, avg bps: 888, avg pps: 0, avg bpp: 407 Time window: 2025-10-09 04:55:41 - 2025-10-09 05:58:18 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0029s User: 0.0019s Wall: 0.0024s flows/second: 58295.6 Runtime: 0.0024s