Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 15:59:02.356 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58264 10 6452 1 2025-10-09 15:55:41.722 00:05:00.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 16:00:09.431 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 16:00:09.495 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 16:00:09.413 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:00:09.350 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:00:09.447 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 16:00:02.721 00:00:14.209 TCP 1.101.0.1:3000 -> 23.104.0.1:59530 12 10375 1 2025-10-09 16:01:07.033 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52358 10 6452 1 2025-10-09 16:02:07.436 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42164 10 6452 1 2025-10-09 15:58:41.725 00:05:00.369 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 16:03:07.845 00:00:10.790 TCP 1.101.0.1:3000 -> 23.104.0.1:34072 10 6452 1 2025-10-09 16:04:08.674 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34760 10 6452 1 2025-10-09 16:05:07.959 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 16:05:07.877 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:05:07.975 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 16:05:07.625 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 16:05:07.843 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:05:09.101 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:37148 12 10375 1 2025-10-09 16:01:41.723 00:05:00.376 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 16:06:09.546 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50066 10 6452 1 2025-10-09 16:07:09.953 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37876 10 6452 1 2025-10-09 16:08:10.363 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49858 10 6452 1 2025-10-09 16:04:41.727 00:05:00.371 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 16:09:10.767 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45088 10 6452 1 2025-10-09 16:10:07.917 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 16:10:07.853 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:10:07.990 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:10:08.157 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 16:10:08.073 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 16:10:11.180 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:44646 12 10369 1 2025-10-09 16:11:11.657 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48010 10 6452 1 2025-10-09 16:07:41.723 00:05:00.376 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 16:12:12.065 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60618 10 6452 1 2025-10-09 16:13:12.470 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43072 10 6452 1 2025-10-09 16:14:12.876 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39406 10 6452 1 2025-10-09 16:10:41.726 00:05:00.371 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 16:15:08.203 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 16:15:07.757 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:15:08.121 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:15:07.911 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 16:15:08.028 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 16:15:13.284 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40814 10 6452 1 2025-10-09 16:16:13.692 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46074 10 6452 1 2025-10-09 16:17:14.110 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51638 10 6452 1 2025-10-09 16:13:41.724 00:05:00.376 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 16:18:14.509 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45060 10 6452 1 2025-10-09 16:19:14.915 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35638 10 6452 1 2025-10-09 16:20:08.451 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 16:20:08.599 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 16:20:08.215 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:20:08.369 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:20:08.372 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 16:20:15.322 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35354 10 6452 1 2025-10-09 16:16:41.729 00:05:00.375 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 16:21:15.723 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37160 10 6452 1 2025-10-09 16:22:16.131 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52906 10 6452 1 2025-10-09 16:23:16.540 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:60780 10 6452 1 2025-10-09 16:19:41.725 00:05:00.381 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 16:24:16.954 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:41956 10 6452 1 2025-10-09 16:25:08.374 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 16:25:08.093 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:25:08.245 00:00:00.038 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:25:08.232 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 16:25:08.328 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 16:25:17.372 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44644 10 6452 1 2025-10-09 16:26:17.733 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56616 10 6452 1 2025-10-09 16:22:41.729 00:05:00.375 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 16:27:18.154 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53916 10 6452 1 2025-10-09 16:28:18.553 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36784 10 6452 1 2025-10-09 16:29:18.969 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47854 10 6452 1 2025-10-09 16:25:41.727 00:05:00.380 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 16:30:08.384 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 16:30:08.226 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:30:08.389 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:30:08.393 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 16:30:08.472 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 16:30:19.377 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50818 10 6452 1 2025-10-09 16:31:19.734 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37788 10 6452 1 2025-10-09 16:32:20.154 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54144 10 6452 1 2025-10-09 16:28:41.729 00:05:00.376 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 16:33:20.556 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36154 10 6452 1 2025-10-09 16:34:20.951 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34602 10 6452 1 2025-10-09 16:35:08.540 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 16:35:08.572 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 16:35:08.480 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:35:08.458 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:35:08.622 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 16:35:21.353 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35208 10 6452 1 2025-10-09 16:31:41.727 00:05:00.381 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 16:36:21.718 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40496 10 6452 1 2025-10-09 16:37:22.107 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33238 10 6452 1 2025-10-09 16:38:22.510 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43060 10 6452 1 2025-10-09 16:34:41.730 00:05:00.376 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 16:39:22.915 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36096 10 6452 1 2025-10-09 16:40:09.357 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 16:40:09.076 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:40:09.582 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:40:09.545 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 16:40:09.664 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 16:40:23.282 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34060 10 6452 1 2025-10-09 16:41:23.681 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33178 10 6452 1 2025-10-09 16:37:41.728 00:05:00.382 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 16:42:24.106 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49316 10 6452 1 2025-10-09 16:43:24.513 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35210 10 6452 1 2025-10-09 16:44:24.914 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51174 10 6452 1 2025-10-09 16:40:41.732 00:05:00.377 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 16:45:08.724 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 16:45:08.726 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 16:45:08.552 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:45:08.641 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:45:08.717 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 16:45:25.322 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52382 10 6452 1 2025-10-09 16:46:25.720 00:00:10.972 TCP 1.101.0.1:3000 -> 23.104.0.1:42562 10 6452 1 2025-10-09 16:47:26.729 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47184 10 6452 1 2025-10-09 16:43:41.733 00:05:00.379 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 16:48:27.140 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50574 10 6452 1 2025-10-09 16:49:27.504 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44534 10 6452 1 2025-10-09 16:50:08.966 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 16:50:08.729 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:50:08.860 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:50:08.916 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 16:50:08.942 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 16:50:27.912 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53144 10 6452 1 2025-10-09 16:46:41.735 00:05:00.374 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 16:51:28.278 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42570 10 6452 1 2025-10-09 16:52:28.682 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38392 10 6452 1 2025-10-09 16:53:29.111 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:56720 10 6452 1 2025-10-09 16:49:41.736 00:05:00.377 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 16:54:29.471 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:43436 10 6452 1 2025-10-09 16:55:09.059 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 16:55:09.036 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 16:55:08.820 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:55:08.976 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 16:55:09.021 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 16:55:29.913 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:54948 14 10473 1 2025-10-09 16:56:30.408 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52920 10 6452 1 2025-10-09 16:52:41.739 00:05:00.372 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 16:57:30.780 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54792 10 6452 1 2025-10-09 16:58:31.208 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58126 10 6452 1 Summary: total flows: 140, total bytes: 432784, total packets: 1030, avg bps: 915, avg pps: 0, avg bpp: 420 Time window: 2025-10-09 15:55:41 - 2025-10-09 16:58:41 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0029s User: 0.0020s Wall: 0.0015s flows/second: 91450.3 Runtime: 0.0015s