Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 05:59:28.093 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:49380 10 6452 1 2025-10-20 06:00:13.233 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:00:13.252 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:00:13.302 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:00:13.278 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 06:00:13.384 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 06:00:28.468 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37120 10 6452 1 2025-10-20 06:01:28.870 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40220 10 6452 1 2025-10-20 06:02:29.276 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43602 10 6452 1 2025-10-20 05:57:47.082 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 06:03:29.637 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42392 10 6452 1 2025-10-20 06:04:30.001 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49436 10 6452 1 2025-10-20 05:59:47.079 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 06:05:13.429 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:05:13.596 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:05:13.496 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 06:05:13.604 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:05:13.677 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 06:05:30.404 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43784 10 6452 1 2025-10-20 06:06:30.836 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58120 10 6452 1 2025-10-20 06:07:31.250 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39186 10 6452 1 2025-10-20 06:08:31.659 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:60608 12 10375 1 2025-10-20 06:09:32.139 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57666 10 6452 1 2025-10-20 06:04:47.083 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 06:10:13.677 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:10:13.497 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:10:13.775 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:10:13.774 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 06:10:13.858 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 06:10:32.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60504 10 6452 1 2025-10-20 06:11:32.920 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:35640 10 6452 1 2025-10-20 06:06:47.080 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 06:12:33.299 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39956 10 6452 1 2025-10-20 06:13:33.698 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43660 10 6452 1 2025-10-20 06:14:34.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43998 10 6452 1 2025-10-20 06:15:13.782 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:15:13.924 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:15:13.869 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:15:13.781 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 06:15:13.951 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 06:15:34.514 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43448 10 6452 1 2025-10-20 06:16:34.918 00:00:11.032 TCP 1.101.0.1:3000 -> 23.104.0.1:48904 10 6452 1 2025-10-20 06:11:47.084 00:06:00.237 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 06:17:35.988 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53606 10 6452 1 2025-10-20 06:18:36.347 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48978 10 6452 1 2025-10-20 06:13:47.083 00:06:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 06:19:36.708 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50582 10 6452 1 2025-10-20 06:20:13.908 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:20:13.840 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:20:13.826 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:20:13.952 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 06:20:13.908 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 06:20:37.114 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33232 10 6452 1 2025-10-20 06:21:37.474 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60210 10 6452 1 2025-10-20 06:22:37.871 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48338 10 6452 1 2025-10-20 06:23:38.279 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36620 10 6452 1 2025-10-20 06:18:47.087 00:06:00.236 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 06:24:38.687 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54644 10 6452 1 2025-10-20 06:25:14.091 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 06:25:13.945 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:25:14.014 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:25:14.010 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:25:14.092 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 06:25:39.112 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54562 10 6452 1 2025-10-20 06:20:47.085 00:06:00.243 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 06:26:39.473 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46946 10 6452 1 2025-10-20 06:27:39.828 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:35070 10 6452 1 2025-10-20 06:28:40.255 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:37480 12 10375 1 2025-10-20 06:29:40.732 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46572 10 6452 1 2025-10-20 06:30:14.154 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:30:14.151 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:30:14.210 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:30:14.088 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 06:30:14.291 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 06:25:47.088 00:06:00.238 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 06:30:41.138 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55146 10 6452 1 2025-10-20 06:31:41.545 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49144 10 6452 1 2025-10-20 06:27:47.086 00:06:00.243 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 06:32:41.948 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44916 10 6452 1 2025-10-20 06:33:42.352 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36422 10 6452 1 2025-10-20 06:34:42.756 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:56484 10 6452 1 2025-10-20 06:35:14.556 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:35:14.517 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:35:14.499 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:35:14.409 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 06:35:14.581 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 06:35:43.196 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55184 10 6452 1 2025-10-20 06:36:43.595 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46054 10 6452 1 2025-10-20 06:32:47.089 00:06:00.237 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 06:37:43.964 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51600 10 6452 1 2025-10-20 06:38:44.327 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47358 10 6452 1 2025-10-20 06:34:47.087 00:06:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 06:39:44.739 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54068 10 6452 1 2025-10-20 06:40:14.359 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 06:40:14.347 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:40:14.316 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:40:14.276 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:40:14.351 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 06:40:45.115 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50666 10 6452 1 2025-10-20 06:41:45.516 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46268 10 6452 1 2025-10-20 06:42:45.913 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54722 10 6452 1 2025-10-20 06:43:46.320 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56232 10 6452 1 2025-10-20 06:39:47.094 00:06:00.233 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 06:44:46.685 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46396 10 6452 1 2025-10-20 06:45:14.224 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:45:14.459 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:45:14.535 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 06:45:14.390 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:45:14.541 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 06:45:47.153 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40474 10 6452 1 2025-10-20 06:41:47.092 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 06:46:47.556 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35444 10 6452 1 2025-10-20 06:47:47.958 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:45378 10 6452 1 2025-10-20 06:48:48.385 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59900 10 6452 1 2025-10-20 06:49:48.789 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59202 10 6452 1 2025-10-20 06:50:14.599 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:50:14.340 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:50:14.554 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:50:14.602 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 06:50:14.637 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 06:50:49.194 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37862 10 6452 1 2025-10-20 06:46:47.095 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 06:51:49.595 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44854 10 6452 1 2025-10-20 06:52:49.996 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55156 10 6452 1 2025-10-20 06:48:47.093 00:06:00.239 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 06:53:50.412 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53544 10 6452 1 2025-10-20 06:54:50.826 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52990 10 6452 1 2025-10-20 06:55:14.686 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 06:55:14.795 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:55:14.533 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 06:55:14.687 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 06:55:14.616 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 06:55:51.227 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58814 10 6452 1 2025-10-20 06:56:51.630 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37916 10 6452 1 2025-10-20 06:57:52.038 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33176 10 6452 1 2025-10-20 06:53:47.097 00:06:00.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 136, total bytes: 418271, total packets: 1012, avg bps: 899, avg pps: 0, avg bpp: 413 Time window: 2025-10-20 05:57:47 - 2025-10-20 06:59:47 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0043s User: 0.0032s Wall: 0.0138s flows/second: 9882.3 Runtime: 0.0138s