Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 14:59:05.602 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43786 10 6452 1 2025-10-11 15:00:06.037 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50992 10 6452 1 2025-10-11 15:01:04.373 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:01:04.401 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:01:04.356 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:01:04.291 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:01:04.105 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:01:06.449 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45650 10 6452 1 2025-10-11 15:02:06.855 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53770 10 6452 1 2025-10-11 14:58:42.603 00:05:00.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:03:07.269 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60148 10 6452 1 2025-10-11 15:04:07.683 00:00:10.540 TCP 1.101.0.1:3000 -> 23.104.0.1:49618 10 6452 1 2025-10-11 15:00:42.600 00:05:00.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:05:08.261 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:53860 10 6452 1 2025-10-11 15:06:04.548 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:06:04.598 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:06:04.397 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:06:04.465 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:06:04.365 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:06:08.757 00:00:10.520 TCP 1.101.0.1:3000 -> 23.104.0.1:58308 14 14286 1 2025-10-11 15:07:09.319 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38272 12 6556 1 2025-10-11 15:08:09.715 00:00:14.902 TCP 1.101.0.1:3000 -> 23.104.0.1:56340 10 6452 1 2025-10-11 15:04:42.605 00:05:00.465 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:09:14.657 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:40508 10 6452 1 2025-10-11 15:10:15.028 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36366 10 6452 1 2025-10-11 15:06:42.604 00:05:00.469 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:11:04.534 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:11:04.663 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:11:04.671 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:11:04.451 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:11:04.668 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:11:15.426 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58180 10 6452 1 2025-10-11 15:12:15.828 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46386 10 6452 1 2025-10-11 15:13:16.231 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58444 10 6452 1 2025-10-11 15:14:16.635 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49510 10 6452 1 2025-10-11 15:10:42.607 00:05:00.465 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:15:17.034 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41370 10 6452 1 2025-10-11 15:16:05.077 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:16:05.092 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:16:04.741 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:16:04.994 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:16:04.916 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:16:17.436 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53474 10 6452 1 2025-10-11 15:12:42.605 00:05:00.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:17:17.800 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33414 10 6452 1 2025-10-11 15:18:18.208 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49976 10 6452 1 2025-10-11 15:19:18.610 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36424 10 6452 1 2025-10-11 15:20:19.017 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49246 10 6452 1 2025-10-11 15:16:42.609 00:05:00.465 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:21:04.819 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:21:04.658 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:21:04.591 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:21:04.736 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:21:04.807 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:21:19.423 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42872 10 6452 1 2025-10-11 15:22:19.827 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35062 10 6452 1 2025-10-11 15:18:42.607 00:05:00.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:23:20.228 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53306 10 6452 1 2025-10-11 15:24:20.629 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:55186 10 6452 1 2025-10-11 15:25:21.005 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45628 10 6452 1 2025-10-11 15:26:05.059 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:26:04.936 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:26:04.931 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:26:04.930 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:26:05.015 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:26:21.409 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:52242 10 6452 1 2025-10-11 15:22:42.609 00:05:00.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:27:21.833 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:59202 10 6452 1 2025-10-11 15:28:22.216 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40938 10 6452 1 2025-10-11 15:24:42.607 00:05:00.475 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:29:22.617 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39582 10 6452 1 2025-10-11 15:30:22.973 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:40932 10 6452 1 2025-10-11 15:31:04.907 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:31:04.860 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:31:05.120 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:31:04.979 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:31:05.204 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:31:23.405 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45178 10 6452 1 2025-10-11 15:32:23.815 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:38704 10 6452 1 2025-10-11 15:28:42.610 00:05:00.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:33:24.201 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55914 10 6452 1 2025-10-11 15:34:24.599 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54082 10 6452 1 2025-10-11 15:30:42.608 00:05:00.476 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:35:25.006 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56384 10 6452 1 2025-10-11 15:36:05.224 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:36:05.091 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:36:04.779 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:36:05.142 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:36:04.966 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:36:25.424 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48752 10 6452 1 2025-10-11 15:37:25.793 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49526 10 6452 1 2025-10-11 15:38:26.204 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38472 10 6452 1 2025-10-11 15:34:42.613 00:05:00.468 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:39:26.567 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36288 10 6452 1 2025-10-11 15:40:26.926 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54744 10 6452 1 2025-10-11 15:36:42.612 00:05:00.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:41:05.395 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:41:04.879 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:41:05.401 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:41:05.496 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:41:05.483 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:41:27.338 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35592 10 6452 1 2025-10-11 15:42:27.747 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47668 10 6452 1 2025-10-11 15:43:28.152 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49590 10 6452 1 2025-10-11 15:40:42.614 00:05:00.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:44:28.564 00:00:17.663 TCP 1.101.0.1:3000 -> 23.104.0.1:37986 10 6452 1 2025-10-11 15:45:36.271 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42624 10 6452 1 2025-10-11 15:46:05.294 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:46:05.226 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:46:05.291 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:46:05.117 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:46:05.375 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:42:42.613 00:05:00.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:46:36.669 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44440 10 6452 1 2025-10-11 15:47:37.100 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:41302 10 6452 1 2025-10-11 15:48:37.468 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37620 10 6452 1 2025-10-11 15:49:37.870 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46684 10 6452 1 2025-10-11 15:46:42.616 00:05:00.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:50:38.283 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50238 10 6452 1 2025-10-11 15:51:05.423 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:51:05.299 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:51:05.492 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:51:05.432 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:51:05.575 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:51:38.680 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39450 10 6452 1 2025-10-11 15:48:42.613 00:05:00.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 15:52:39.112 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47208 10 6452 1 2025-10-11 15:53:39.512 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37228 10 6452 1 2025-10-11 15:54:39.920 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56956 10 6452 1 2025-10-11 15:55:40.321 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37586 10 6452 1 2025-10-11 15:56:05.522 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 15:56:05.440 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 15:56:05.482 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:56:05.439 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 15:56:05.430 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 15:52:42.617 00:05:00.468 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 15:56:40.684 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35538 10 6452 1 2025-10-11 15:57:41.110 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48020 10 6452 1 2025-10-11 15:54:42.615 00:05:00.473 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 418486, total packets: 1016, avg bps: 914, avg pps: 0, avg bpp: 411 Time window: 2025-10-11 14:58:42 - 2025-10-11 15:59:43 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0037s User: 0.0009s Wall: 0.0023s flows/second: 61694.0 Runtime: 0.0023s