Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 15:58:55.898 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49376 10 6452 1 2025-10-19 15:59:56.673 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 15:59:56.712 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:59:56.521 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 15:59:56.672 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 15:59:56.604 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 15:59:56.272 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:39896 11 6504 1 2025-10-19 15:56:46.771 00:05:00.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-19 16:00:56.720 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34680 10 6452 1 2025-10-19 16:01:57.133 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:53570 10 6452 1 2025-10-19 16:02:57.510 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38682 10 6452 1 2025-10-19 16:03:57.912 00:00:10.740 TCP 1.101.0.1:3000 -> 23.104.0.1:51350 10 6452 1 2025-10-19 16:00:46.774 00:05:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-19 16:04:56.686 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 16:04:56.602 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:04:56.595 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 16:04:56.850 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 16:04:56.801 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:04:58.692 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52660 10 6452 1 2025-10-19 16:05:59.056 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45088 10 6452 1 2025-10-19 16:02:46.772 00:05:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-19 16:06:59.459 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:42860 10 6452 1 2025-10-19 16:07:59.842 00:00:10.468 TCP 1.101.0.1:3000 -> 23.104.0.1:44632 12 10375 1 2025-10-19 16:09:00.341 00:00:10.497 TCP 1.101.0.1:3000 -> 23.104.0.1:39084 10 6452 1 2025-10-19 16:09:56.866 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 16:09:56.872 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 16:09:56.837 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:09:56.784 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:09:56.688 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 16:10:00.879 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52060 10 6452 1 2025-10-19 16:06:46.776 00:05:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-19 16:11:01.280 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57096 10 6452 1 2025-10-19 16:12:01.648 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56888 10 6452 1 2025-10-19 16:08:46.773 00:05:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-19 16:13:02.048 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44678 10 6452 1 2025-10-19 16:14:02.452 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36874 10 6452 1 2025-10-19 16:14:57.230 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 16:14:56.882 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:14:57.149 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:14:57.181 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 16:14:57.150 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 16:15:02.817 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34846 10 6452 1 2025-10-19 16:16:03.224 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46146 10 6452 1 2025-10-19 16:12:46.776 00:05:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-19 16:17:03.588 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38496 10 6452 1 2025-10-19 16:18:03.950 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39754 10 6452 1 2025-10-19 16:14:46.775 00:05:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-19 16:19:04.360 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49840 10 6452 1 2025-10-19 16:19:57.085 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 16:19:57.002 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:19:57.164 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 16:19:56.897 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 16:19:56.786 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:20:04.762 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49746 10 6452 1 2025-10-19 16:21:05.173 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49022 10 6452 1 2025-10-19 16:22:05.574 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55156 10 6452 1 2025-10-19 16:18:46.778 00:05:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-19 16:23:05.976 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39238 10 6452 1 2025-10-19 16:24:06.381 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59062 10 6452 1 2025-10-19 16:20:46.776 00:05:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-19 16:24:57.111 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 16:24:56.988 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:24:57.236 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:24:57.178 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 16:24:57.320 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 16:25:06.782 00:00:11.094 TCP 1.101.0.1:3000 -> 23.104.0.1:39052 10 6452 1 2025-10-19 16:26:07.919 00:00:10.585 TCP 1.101.0.1:3000 -> 23.104.0.1:36528 10 6452 1 2025-10-19 16:27:08.545 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51762 10 6452 1 2025-10-19 16:28:08.945 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:47742 12 10369 1 2025-10-19 16:24:46.778 00:05:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-19 16:29:09.437 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46926 10 6452 1 2025-10-19 16:29:57.353 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 16:29:57.271 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 16:29:57.271 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 16:29:57.155 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:29:57.271 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:30:09.838 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:45742 10 6452 1 2025-10-19 16:26:46.777 00:05:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-19 16:31:10.215 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45646 10 6452 1 2025-10-19 16:32:10.619 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33280 10 6452 1 2025-10-19 16:33:11.027 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:56780 10 6452 1 2025-10-19 16:34:11.388 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57242 10 6452 1 2025-10-19 16:30:46.780 00:05:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-19 16:34:57.289 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 16:34:57.377 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 16:34:57.399 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:34:57.207 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:34:57.431 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 16:35:11.790 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44912 10 6452 1 2025-10-19 16:36:12.153 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57832 10 6452 1 2025-10-19 16:32:46.777 00:05:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-19 16:37:12.555 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55818 10 6452 1 2025-10-19 16:38:12.917 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47718 10 6452 1 2025-10-19 16:39:13.320 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:47172 11 6504 1 2025-10-19 16:39:57.336 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 16:39:57.244 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 16:39:57.460 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:39:57.253 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:39:57.437 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 16:40:13.774 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51332 10 6452 1 2025-10-19 16:36:46.781 00:05:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-19 16:41:14.188 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49668 10 6452 1 2025-10-19 16:42:14.594 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51932 10 6452 1 2025-10-19 16:38:46.780 00:05:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-19 16:43:15.006 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43610 10 6452 1 2025-10-19 16:44:15.409 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58490 10 6452 1 2025-10-19 16:44:57.701 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 16:44:57.618 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 16:44:57.506 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:44:57.619 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:44:57.722 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 16:45:15.814 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58872 10 6452 1 2025-10-19 16:46:16.217 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48588 10 6452 1 2025-10-19 16:42:46.783 00:05:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-19 16:47:16.617 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56710 10 6452 1 2025-10-19 16:48:17.022 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36646 10 6452 1 2025-10-19 16:44:46.780 00:05:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-19 16:49:17.440 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46774 10 6452 1 2025-10-19 16:49:57.779 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 16:49:57.701 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 16:49:57.486 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:49:57.698 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:49:57.751 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 16:50:17.839 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:35990 10 6452 1 2025-10-19 16:51:18.222 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52882 10 6452 1 2025-10-19 16:52:18.630 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47244 10 6452 1 2025-10-19 16:48:46.786 00:05:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-19 16:53:18.985 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59150 10 6452 1 2025-10-19 16:54:19.408 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41120 10 6452 1 2025-10-19 16:50:46.785 00:05:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-19 16:54:58.054 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-19 16:54:58.050 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:54:57.952 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-19 16:54:57.951 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-19 16:54:58.035 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-19 16:55:19.808 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:60760 10 6452 1 2025-10-19 16:56:20.199 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48390 10 6452 1 2025-10-19 16:57:20.601 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39508 10 6452 1 2025-10-19 16:58:21.006 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51660 10 6452 1 2025-10-19 16:54:46.787 00:05:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 Summary: total flows: 140, total bytes: 424944, total packets: 1026, avg bps: 899, avg pps: 0, avg bpp: 414 Time window: 2025-10-19 15:56:46 - 2025-10-19 16:59:47 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0043s User: 0.0011s Wall: 0.0029s flows/second: 47993.7 Runtime: 0.0029s