Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 04:58:51.941 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:42386 10 6452 1 2025-10-19 04:59:43.579 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:59:43.573 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 04:59:43.306 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:59:43.496 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 04:59:43.439 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 04:59:52.316 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37466 10 6452 1 2025-10-19 05:00:52.724 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34290 10 6452 1 2025-10-19 04:56:46.544 00:06:00.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:01:53.136 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56034 10 6452 1 2025-10-19 05:02:53.547 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53958 10 6452 1 2025-10-19 05:03:53.963 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54154 10 6452 1 2025-10-19 05:04:43.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:04:43.671 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:04:43.580 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:04:43.788 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:04:43.662 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 04:59:46.544 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:04:54.365 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:49896 10 6452 1 2025-10-19 05:05:54.718 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45008 10 6452 1 2025-10-19 05:06:55.128 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41312 10 6452 1 2025-10-19 05:07:55.491 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42520 10 6452 1 2025-10-19 05:03:46.548 00:06:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:08:55.892 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37408 10 6452 1 2025-10-19 05:09:43.566 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:09:43.686 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:09:43.360 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:09:43.726 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:09:43.443 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:09:56.299 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42278 10 6452 1 2025-10-19 05:10:56.701 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34034 10 6452 1 2025-10-19 05:06:46.547 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:11:57.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38086 10 6452 1 2025-10-19 05:12:57.514 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47784 10 6452 1 2025-10-19 05:13:57.914 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34286 10 6452 1 2025-10-19 05:14:43.726 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:14:43.484 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:14:43.715 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:14:43.728 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:14:43.797 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:14:58.326 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33638 10 6452 1 2025-10-19 05:10:46.553 00:06:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:15:58.726 00:00:11.428 TCP 1.101.0.1:3000 -> 23.104.0.1:41230 10 6452 1 2025-10-19 05:17:00.192 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50662 10 6452 1 2025-10-19 05:18:00.594 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46898 10 6452 1 2025-10-19 05:13:46.551 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:19:00.995 00:00:10.520 TCP 1.101.0.1:3000 -> 23.104.0.1:40932 10 6452 1 2025-10-19 05:19:43.895 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:19:43.750 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:19:43.899 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:19:43.863 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:19:43.982 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:20:01.556 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:60366 10 6452 1 2025-10-19 05:21:01.964 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55088 10 6452 1 2025-10-19 05:22:02.369 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52486 10 6452 1 2025-10-19 05:17:46.555 00:06:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:23:02.773 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53176 10 6452 1 2025-10-19 05:24:03.181 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55450 10 6452 1 2025-10-19 05:24:43.942 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:24:43.905 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:24:43.751 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:24:43.860 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:24:43.799 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:25:03.586 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53082 10 6452 1 2025-10-19 05:20:46.553 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:26:03.989 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37626 10 6452 1 2025-10-19 05:27:04.360 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54494 10 6452 1 2025-10-19 05:28:04.761 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34174 10 6452 1 2025-10-19 05:29:05.128 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57592 10 6452 1 2025-10-19 05:29:44.040 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:29:44.188 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:29:43.886 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:29:43.956 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:29:43.748 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:24:46.557 00:06:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:30:05.532 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56354 10 6452 1 2025-10-19 05:31:05.930 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:50368 10 6452 1 2025-10-19 05:32:06.361 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43176 10 6452 1 2025-10-19 05:27:46.556 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:33:06.765 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59954 10 6452 1 2025-10-19 05:34:07.177 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46140 10 6452 1 2025-10-19 05:34:44.194 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:34:44.173 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:34:43.869 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:34:44.112 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:34:44.011 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:35:07.582 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43832 10 6452 1 2025-10-19 05:36:07.985 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52490 10 6452 1 2025-10-19 05:31:46.558 00:06:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:37:08.385 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42262 10 6452 1 2025-10-19 05:38:08.788 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40664 10 6452 1 2025-10-19 05:39:09.188 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52032 10 6452 1 2025-10-19 05:39:44.290 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:39:44.203 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:39:44.154 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:39:44.208 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:39:44.328 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:34:46.557 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:40:09.589 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:37620 10 6452 1 2025-10-19 05:41:09.974 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45996 10 6452 1 2025-10-19 05:42:10.342 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50788 10 6452 1 2025-10-19 05:43:10.746 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43132 10 6452 1 2025-10-19 05:38:46.560 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:44:11.117 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:36908 10 6452 1 2025-10-19 05:44:44.481 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:44:44.291 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:44:44.358 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:44:44.397 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:44:44.201 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:45:11.484 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48546 10 6452 1 2025-10-19 05:46:11.850 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:48420 10 6452 1 2025-10-19 05:41:46.558 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:47:12.229 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37436 10 6452 1 2025-10-19 05:48:12.634 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43238 10 6452 1 2025-10-19 05:49:13.040 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53332 10 6452 1 2025-10-19 05:49:44.586 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:49:44.563 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:49:44.525 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:49:44.503 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:49:44.640 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:50:13.434 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52918 10 6452 1 2025-10-19 05:45:46.565 00:06:00.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:51:13.842 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:33872 10 6452 1 2025-10-19 05:52:14.266 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42508 10 6452 1 2025-10-19 05:53:14.672 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33596 10 6452 1 2025-10-19 05:48:46.566 00:06:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 05:54:15.032 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:56250 10 6452 1 2025-10-19 05:54:44.558 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 05:54:44.318 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 05:54:44.495 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:54:44.476 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 05:54:44.411 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 05:55:15.476 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38466 10 6452 1 2025-10-19 05:56:15.879 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54062 10 6452 1 2025-10-19 05:57:16.287 00:00:11.018 TCP 1.101.0.1:3000 -> 23.104.0.1:58114 10 6452 1 2025-10-19 05:52:46.567 00:06:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 05:58:17.344 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52122 10 6452 1 Summary: total flows: 137, total bytes: 416877, total packets: 1018, avg bps: 896, avg pps: 0, avg bpp: 409 Time window: 2025-10-19 04:56:46 - 2025-10-19 05:58:46 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0035s User: 0.0012s Wall: 0.0018s flows/second: 76882.5 Runtime: 0.0018s