Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 10:58:44.956 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57866 10 6452 1 2025-10-09 10:59:45.362 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33078 10 6452 1 2025-10-09 11:00:01.850 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:00:01.855 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:00:01.524 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:00:01.769 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:00:01.903 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:00:45.763 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:37358 10 6452 1 2025-10-09 10:56:41.598 00:06:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:01:46.242 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46076 10 6452 1 2025-10-09 11:02:46.646 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60332 10 6452 1 2025-10-09 11:03:47.061 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35676 10 6452 1 2025-10-09 10:59:41.602 00:06:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:04:47.471 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58682 10 6452 1 2025-10-09 11:05:02.373 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:05:02.199 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:05:02.274 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:05:02.291 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:05:02.096 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:05:47.837 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:55852 10 6452 1 2025-10-09 11:06:48.227 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40196 10 6452 1 2025-10-09 11:07:48.628 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32954 10 6452 1 2025-10-09 11:03:41.599 00:06:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:08:49.029 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54626 10 6452 1 2025-10-09 11:09:49.432 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:37260 12 10375 1 2025-10-09 11:10:02.164 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:10:02.005 00:00:00.035 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:10:01.986 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:10:02.081 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:10:01.835 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:10:49.908 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33816 10 6452 1 2025-10-09 11:06:41.603 00:06:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:11:50.313 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40894 10 6452 1 2025-10-09 11:12:50.717 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44154 10 6452 1 2025-10-09 11:13:51.117 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59670 10 6452 1 2025-10-09 11:15:01.939 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:15:02.344 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:14:51.523 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59978 10 6452 1 2025-10-09 11:15:01.956 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:15:02.184 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:15:02.039 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:10:41.600 00:06:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:15:51.896 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48518 10 6452 1 2025-10-09 11:16:52.308 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34724 10 6452 1 2025-10-09 11:17:52.713 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40298 10 6452 1 2025-10-09 11:13:41.603 00:06:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:18:53.118 00:00:10.667 TCP 1.101.0.1:3000 -> 23.104.0.1:50152 10 6452 1 2025-10-09 11:20:02.303 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:20:02.216 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:20:01.978 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:20:02.220 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:20:02.027 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:19:53.823 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33674 10 6452 1 2025-10-09 11:20:54.229 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48970 10 6452 1 2025-10-09 11:21:54.587 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49710 10 6452 1 2025-10-09 11:17:41.602 00:06:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:22:54.988 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:43744 10 6452 1 2025-10-09 11:23:55.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33532 10 6452 1 2025-10-09 11:25:02.453 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:25:02.427 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:25:02.388 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:25:02.370 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:25:02.375 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:24:55.767 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38714 10 6452 1 2025-10-09 11:20:41.607 00:06:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:25:56.187 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45310 10 6452 1 2025-10-09 11:26:56.552 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:58030 10 6452 1 2025-10-09 11:27:56.998 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55978 10 6452 1 2025-10-09 11:28:57.402 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46286 10 6452 1 2025-10-09 11:24:41.605 00:06:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:30:02.482 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:30:02.248 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:30:02.331 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:30:02.330 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:30:02.415 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:29:57.813 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43346 10 6452 1 2025-10-09 11:30:58.234 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45146 10 6452 1 2025-10-09 11:31:58.591 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42694 10 6452 1 2025-10-09 11:27:41.608 00:06:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:32:58.997 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44020 10 6452 1 2025-10-09 11:33:59.400 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32984 10 6452 1 2025-10-09 11:35:02.459 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:35:02.676 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:35:02.660 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:35:02.377 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:35:02.657 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:34:59.806 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47056 10 6452 1 2025-10-09 11:36:00.220 00:00:10.480 TCP 1.101.0.1:3000 -> 23.104.0.1:38842 10 6452 1 2025-10-09 11:31:41.606 00:06:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:37:00.734 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52538 10 6452 1 2025-10-09 11:38:01.149 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42650 10 6452 1 2025-10-09 11:39:01.547 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59240 10 6452 1 2025-10-09 11:34:41.610 00:06:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:40:02.847 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:40:02.596 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:40:02.324 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:40:02.764 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:40:02.808 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:40:01.943 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:47590 10 6452 1 2025-10-09 11:41:02.326 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53154 10 6452 1 2025-10-09 11:42:02.727 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44044 10 6452 1 2025-10-09 11:43:03.141 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58276 10 6452 1 2025-10-09 11:38:41.609 00:06:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:44:03.540 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36080 10 6452 1 2025-10-09 11:45:02.878 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:45:02.796 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:45:02.593 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:45:02.797 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:45:02.797 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:45:03.903 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42950 12 6556 1 2025-10-09 11:46:04.305 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34542 10 6452 1 2025-10-09 11:41:41.612 00:06:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:47:04.708 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34902 10 6452 1 2025-10-09 11:48:05.105 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58748 10 6452 1 2025-10-09 11:49:05.512 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58490 10 6452 1 2025-10-09 11:50:02.972 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:50:02.726 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:50:03.103 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:50:02.889 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:50:03.181 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:50:05.930 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:49108 10 6452 1 2025-10-09 11:45:41.611 00:06:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:51:06.357 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46102 10 6452 1 2025-10-09 11:52:06.745 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58632 10 6452 1 2025-10-09 11:53:07.152 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48684 10 6452 1 2025-10-09 11:48:41.615 00:06:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-09 11:54:07.569 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35452 10 6452 1 2025-10-09 11:55:02.991 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 11:55:02.663 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:55:02.844 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 11:55:02.905 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 11:55:02.927 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 11:55:07.977 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34582 10 6452 1 2025-10-09 11:56:08.385 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:47374 10 6452 1 2025-10-09 11:57:08.746 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54172 10 6452 1 2025-10-09 11:52:41.613 00:06:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-09 11:58:09.149 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51496 10 6452 1 Summary: total flows: 137, total bytes: 420904, total packets: 1022, avg bps: 905, avg pps: 0, avg bpp: 411 Time window: 2025-10-09 10:56:41 - 2025-10-09 11:58:41 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0024s User: 0.0024s Wall: 0.0020s flows/second: 68293.3 Runtime: 0.0020s