Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 15:58:41.510 00:00:12.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51108 10 6452 1 2025-10-11 15:59:43.889 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:34178 10 6452 1 2025-10-11 16:00:44.271 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57350 10 6452 1 2025-10-11 16:01:05.576 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 16:01:05.491 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 16:01:05.474 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:01:05.493 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:01:05.397 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 16:01:44.678 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58144 10 6452 1 2025-10-11 15:58:42.620 00:05:00.469 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 16:02:45.117 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45822 10 6452 1 2025-10-11 16:03:45.523 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51904 10 6452 1 2025-10-11 16:00:42.615 00:05:00.476 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 16:04:45.882 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40306 10 6452 1 2025-10-11 16:05:46.245 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33580 10 6452 1 2025-10-11 16:06:05.710 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 16:06:05.656 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:06:05.618 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:06:05.718 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 16:06:05.702 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 16:06:46.610 00:00:10.485 TCP 1.101.0.1:3000 -> 23.104.0.1:41568 10 6452 1 2025-10-11 16:07:47.149 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:53028 10 6452 1 2025-10-11 16:04:42.620 00:05:00.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 16:08:47.625 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54160 10 6452 1 2025-10-11 16:09:47.990 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58698 10 6452 1 2025-10-11 16:06:42.617 00:05:00.475 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 16:11:05.804 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 16:10:48.406 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41240 10 6452 1 2025-10-11 16:11:05.728 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 16:11:05.658 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:11:05.721 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:11:05.719 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 16:11:48.805 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46690 10 6452 1 2025-10-11 16:12:49.212 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:45872 10 6452 1 2025-10-11 16:13:49.595 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38946 10 6452 1 2025-10-11 16:10:42.621 00:05:00.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 16:14:50.006 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:46670 10 6452 1 2025-10-11 16:15:50.383 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48752 10 6452 1 2025-10-11 16:16:05.923 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 16:16:05.877 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:16:05.799 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:16:05.688 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 16:16:05.881 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 16:12:42.618 00:05:00.476 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 16:16:50.780 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41946 10 6452 1 2025-10-11 16:17:51.144 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36610 10 6452 1 2025-10-11 16:18:51.546 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40378 10 6452 1 2025-10-11 16:19:51.946 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45080 10 6452 1 2025-10-11 16:16:42.623 00:05:00.468 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 16:21:06.292 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 16:21:05.813 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:20:52.356 00:00:10.999 TCP 1.101.0.1:3000 -> 23.104.0.1:38028 10 6452 1 2025-10-11 16:21:06.202 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 16:21:06.209 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:21:06.151 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 16:21:53.392 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47742 10 6452 1 2025-10-11 16:18:42.620 00:05:00.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 16:22:53.802 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:59280 11 6504 1 2025-10-11 16:23:54.256 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55762 12 6556 1 2025-10-11 16:24:54.657 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44422 10 6452 1 2025-10-11 16:26:06.265 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 16:26:05.882 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 16:26:05.835 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:25:55.094 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37994 10 6452 1 2025-10-11 16:26:06.183 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:26:06.186 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 16:22:42.623 00:05:00.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 16:26:55.496 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46506 10 6452 1 2025-10-11 16:27:55.914 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40090 10 6452 1 2025-10-11 16:24:42.621 00:05:00.475 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 16:28:56.319 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58804 10 6452 1 2025-10-11 16:29:56.725 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41948 10 6452 1 2025-10-11 16:31:06.328 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 16:30:57.138 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52938 10 6452 1 2025-10-11 16:31:06.240 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 16:31:06.130 00:00:00.013 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:31:06.245 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:31:06.312 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 16:31:57.558 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57440 10 6452 1 2025-10-11 16:28:42.629 00:05:00.466 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 16:32:57.977 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54692 10 6452 1 2025-10-11 16:33:58.390 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40128 10 6452 1 2025-10-11 16:30:42.626 00:05:00.472 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 16:34:58.752 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44040 10 6452 1 2025-10-11 16:36:06.854 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 16:36:06.773 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:36:07.067 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:36:06.929 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 16:35:59.156 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40554 10 6452 1 2025-10-11 16:36:07.149 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 16:36:59.580 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:36180 10 6452 1 2025-10-11 16:37:59.955 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41042 10 6452 1 2025-10-11 16:34:42.629 00:05:00.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 16:39:00.365 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57702 10 6452 1 2025-10-11 16:40:00.741 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:37968 10 6452 1 2025-10-11 16:36:42.628 00:05:00.472 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 16:41:06.536 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 16:41:06.579 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:41:06.661 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:41:06.713 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 16:41:06.750 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 16:41:01.121 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57070 10 6452 1 2025-10-11 16:42:01.526 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52486 10 6452 1 2025-10-11 16:43:01.928 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:41218 10 6452 1 2025-10-11 16:44:02.352 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35272 10 6452 1 2025-10-11 16:40:42.631 00:05:00.468 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 16:45:02.722 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36976 10 6452 1 2025-10-11 16:46:06.300 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 16:46:06.428 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 16:46:06.503 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:46:06.219 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:46:06.564 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 16:46:03.135 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52638 10 6452 1 2025-10-11 16:42:42.629 00:05:00.473 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 16:47:03.502 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:54690 10 6452 1 2025-10-11 16:48:03.915 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60128 10 6452 1 2025-10-11 16:49:04.315 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48496 10 6452 1 2025-10-11 16:50:04.728 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:48436 10 6452 1 2025-10-11 16:46:42.635 00:05:00.465 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 16:51:06.599 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 16:51:06.406 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 16:51:06.645 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:51:06.516 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:51:06.513 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 16:51:05.142 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33022 10 6452 1 2025-10-11 16:52:05.544 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56200 10 6452 1 2025-10-11 16:48:42.634 00:05:00.468 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 16:53:05.910 00:00:10.661 TCP 1.101.0.1:3000 -> 23.104.0.1:47824 10 6452 1 2025-10-11 16:54:06.606 00:00:10.828 TCP 1.101.0.1:3000 -> 23.104.0.1:36506 10 6452 1 2025-10-11 16:55:07.475 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44440 10 6452 1 2025-10-11 16:56:07.665 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 16:56:07.330 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:56:07.789 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 16:56:07.590 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 16:56:07.872 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 16:56:07.878 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:36740 12 10375 1 2025-10-11 16:52:42.638 00:05:00.464 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 16:57:08.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33788 10 6452 1 2025-10-11 16:58:08.762 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36306 10 6452 1 2025-10-11 16:54:42.635 00:05:00.469 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 140, total bytes: 421079, total packets: 1025, avg bps: 919, avg pps: 0, avg bpp: 410 Time window: 2025-10-11 15:58:41 - 2025-10-11 16:59:43 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0039s User: 0.0010s Wall: 0.0032s flows/second: 44374.1 Runtime: 0.0032s