Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 11:59:00.861 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52440 10 6452 1 2025-10-19 11:59:51.923 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 11:59:51.842 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 11:59:51.979 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 11:59:51.966 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 11:59:51.924 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:00:01.230 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54584 10 6452 1 2025-10-19 12:01:01.652 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42390 10 6452 1 2025-10-19 11:56:46.700 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 12:02:02.057 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37126 10 6452 1 2025-10-19 12:03:02.424 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38674 10 6452 1 2025-10-19 12:04:02.789 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47040 10 6452 1 2025-10-19 11:59:46.699 00:06:00.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 12:04:51.979 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 12:04:51.949 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:04:51.858 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:04:51.897 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:04:51.991 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:05:03.203 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:55312 10 6452 1 2025-10-19 12:06:03.625 00:00:10.490 TCP 1.101.0.1:3000 -> 23.104.0.1:41184 10 6452 1 2025-10-19 12:07:04.156 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44974 10 6452 1 2025-10-19 12:08:04.563 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36388 10 6452 1 2025-10-19 12:03:46.704 00:06:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 12:09:04.985 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:43736 10 6452 1 2025-10-19 12:09:52.212 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 12:09:52.089 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:09:52.091 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:09:52.130 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:09:51.979 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:10:05.352 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56366 10 6452 1 2025-10-19 12:11:05.757 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48904 10 6452 1 2025-10-19 12:06:46.700 00:06:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 12:12:06.117 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58502 10 6452 1 2025-10-19 12:13:06.525 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42974 10 6452 1 2025-10-19 12:14:06.937 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:49554 10 6452 1 2025-10-19 12:14:52.112 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 12:14:51.918 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:14:52.076 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:14:52.031 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:14:52.160 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:15:07.366 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46820 10 6452 1 2025-10-19 12:10:46.707 00:06:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 12:16:07.771 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55038 10 6452 1 2025-10-19 12:17:08.181 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38230 10 6452 1 2025-10-19 12:18:08.539 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34588 10 6452 1 2025-10-19 12:13:46.704 00:06:00.209 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 12:19:08.948 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53302 10 6452 1 2025-10-19 12:19:52.358 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:19:52.102 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:19:52.036 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:19:52.294 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:19:52.118 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 12:20:09.351 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58168 10 6452 1 2025-10-19 12:21:09.749 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60140 10 6452 1 2025-10-19 12:22:10.150 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40382 10 6452 1 2025-10-19 12:17:46.708 00:06:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 12:23:10.514 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36762 10 6452 1 2025-10-19 12:24:10.918 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42430 12 6556 1 2025-10-19 12:24:52.324 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:24:52.155 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:24:52.275 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:24:52.457 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:24:52.236 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 12:25:11.322 00:00:10.776 TCP 1.101.0.1:3000 -> 23.104.0.1:39612 10 6452 1 2025-10-19 12:20:46.705 00:06:00.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 12:26:12.137 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36420 10 6452 1 2025-10-19 12:27:12.545 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37894 10 6452 1 2025-10-19 12:28:12.960 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35864 10 6452 1 2025-10-19 12:29:13.363 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33590 10 6452 1 2025-10-19 12:29:52.670 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 12:24:46.710 00:06:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 12:29:52.477 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:29:52.557 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:29:52.588 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:29:52.586 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:30:13.768 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51034 10 6452 1 2025-10-19 12:31:14.186 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33104 10 6452 1 2025-10-19 12:32:14.547 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33864 10 6452 1 2025-10-19 12:27:46.707 00:06:00.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 12:33:14.908 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51170 10 6452 1 2025-10-19 12:34:15.270 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:42028 10 6452 1 2025-10-19 12:34:52.627 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:34:52.645 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:34:52.623 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:34:52.685 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:34:52.705 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 12:35:15.646 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:44428 10 6452 1 2025-10-19 12:36:16.050 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42542 10 6452 1 2025-10-19 12:31:46.709 00:06:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 12:37:16.447 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47294 10 6452 1 2025-10-19 12:38:16.846 00:00:10.462 TCP 1.101.0.1:3000 -> 23.104.0.1:59696 12 10375 1 2025-10-19 12:39:17.350 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57102 10 6452 1 2025-10-19 12:34:46.707 00:06:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 12:39:52.843 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 12:39:52.842 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:39:52.672 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:39:52.762 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:39:52.760 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:40:17.755 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53832 10 6452 1 2025-10-19 12:41:18.157 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58392 10 6452 1 2025-10-19 12:42:18.560 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36010 10 6452 1 2025-10-19 12:43:18.964 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:35400 10 6452 1 2025-10-19 12:38:46.715 00:06:00.201 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 12:44:19.318 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52836 10 6452 1 2025-10-19 12:44:52.783 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 12:44:52.756 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:44:52.654 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:44:52.701 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:44:52.765 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:45:19.718 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47280 10 6452 1 2025-10-19 12:46:20.132 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59482 10 6452 1 2025-10-19 12:41:46.714 00:06:00.209 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 12:47:20.542 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34820 10 6452 1 2025-10-19 12:48:20.902 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50520 12 6556 1 2025-10-19 12:49:21.312 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47542 10 6452 1 2025-10-19 12:49:52.687 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:49:52.726 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:49:52.848 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:49:52.782 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:49:52.930 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 12:50:21.719 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37266 10 6452 1 2025-10-19 12:45:46.716 00:06:00.203 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 12:51:22.132 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54440 10 6452 1 2025-10-19 12:52:22.540 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44744 10 6452 1 2025-10-19 12:53:22.902 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:41382 10 6452 1 2025-10-19 12:48:46.715 00:06:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-19 12:54:23.274 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42660 10 6452 1 2025-10-19 12:54:52.875 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 12:54:52.821 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:54:52.955 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 12:54:53.119 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 12:54:53.037 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 12:55:23.680 00:00:10.670 TCP 1.101.0.1:3000 -> 23.104.0.1:50368 10 6452 1 2025-10-19 12:56:24.389 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57114 10 6452 1 2025-10-19 12:57:24.792 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47068 11 6504 1 2025-10-19 12:52:46.717 00:06:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-19 12:58:25.206 00:00:10.679 TCP 1.101.0.1:3000 -> 23.104.0.1:53716 10 6452 1 Summary: total flows: 137, total bytes: 421060, total packets: 1025, avg bps: 905, avg pps: 0, avg bpp: 410 Time window: 2025-10-19 11:56:46 - 2025-10-19 12:58:46 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0029s User: 0.0019s Wall: 0.0019s flows/second: 72224.7 Runtime: 0.0019s