Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 13:59:11.259 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45388 10 6452 1 2025-10-20 14:00:23.494 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:00:23.252 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:00:23.274 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:00:23.125 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:00:11.670 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38594 10 6452 1 2025-10-20 14:00:23.357 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 13:55:47.229 00:06:00.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:01:12.105 00:00:16.754 TCP 1.101.0.1:3000 -> 23.104.0.1:50264 10 6452 1 2025-10-20 14:02:18.896 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40368 12 6556 1 2025-10-20 14:03:19.315 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37644 10 6452 1 2025-10-20 14:04:19.720 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53712 10 6452 1 2025-10-20 14:05:23.214 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:05:23.189 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:05:23.161 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:05:23.299 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:05:23.243 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:05:20.135 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32850 10 6452 1 2025-10-20 14:00:47.233 00:06:00.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:06:20.541 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57730 10 6452 1 2025-10-20 14:07:20.898 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36626 12 6556 1 2025-10-20 14:02:47.229 00:06:00.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:08:21.305 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43208 10 6452 1 2025-10-20 14:09:21.673 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36044 10 6452 1 2025-10-20 14:10:23.282 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:10:23.233 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:10:23.472 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:10:23.202 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:10:23.555 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:10:22.105 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45104 10 6452 1 2025-10-20 14:11:22.512 00:00:14.528 TCP 1.101.0.1:3000 -> 23.104.0.1:35768 10 6452 1 2025-10-20 14:12:27.116 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34834 10 6452 1 2025-10-20 14:07:47.233 00:06:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:13:27.514 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47788 10 6452 1 2025-10-20 14:14:27.918 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:35290 10 6452 1 2025-10-20 14:09:47.231 00:06:00.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:15:23.376 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:15:23.312 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:15:23.371 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:15:23.457 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:15:23.453 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:15:28.353 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47702 10 6452 1 2025-10-20 14:16:28.719 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40968 10 6452 1 2025-10-20 14:17:29.104 00:00:10.530 TCP 1.101.0.1:3000 -> 23.104.0.1:43456 10 6452 1 2025-10-20 14:18:29.676 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57576 10 6452 1 2025-10-20 14:19:30.110 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46552 10 6452 1 2025-10-20 14:14:47.234 00:06:00.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:20:23.687 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:20:23.401 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:20:23.600 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:20:23.604 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:20:23.524 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:20:30.477 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51642 10 6452 1 2025-10-20 14:21:30.872 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52944 10 6452 1 2025-10-20 14:16:47.234 00:06:00.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:22:31.238 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51410 10 6452 1 2025-10-20 14:23:31.636 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47428 10 6452 1 2025-10-20 14:24:32.036 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42710 10 6452 1 2025-10-20 14:25:23.493 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:25:23.593 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:25:23.496 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:25:23.649 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:25:23.579 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:25:32.446 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59080 10 6452 1 2025-10-20 14:26:32.846 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:36798 10 6452 1 2025-10-20 14:21:47.236 00:06:00.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:27:33.243 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41830 10 6452 1 2025-10-20 14:28:33.646 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34760 10 6452 1 2025-10-20 14:23:47.234 00:06:00.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:29:34.071 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45474 10 6452 1 2025-10-20 14:30:23.901 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:30:23.592 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:30:23.851 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:30:23.820 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:30:23.883 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:30:34.476 00:00:10.777 TCP 1.101.0.1:3000 -> 23.104.0.1:45062 10 6452 1 2025-10-20 14:31:35.295 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52834 10 6452 1 2025-10-20 14:32:35.696 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57516 10 6452 1 2025-10-20 14:33:36.104 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38224 10 6452 1 2025-10-20 14:28:47.238 00:06:00.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:34:36.480 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35484 10 6452 1 2025-10-20 14:35:23.973 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:35:23.532 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:35:24.001 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:35:23.925 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:35:24.084 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:30:47.235 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:35:36.889 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:36368 12 6556 1 2025-10-20 14:36:37.312 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:56614 10 6452 1 2025-10-20 14:37:37.740 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47152 10 6452 1 2025-10-20 14:38:38.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34782 10 6452 1 2025-10-20 14:39:38.551 00:00:21.250 TCP 1.101.0.1:3000 -> 23.104.0.1:51624 10 6452 1 2025-10-20 14:40:24.372 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:40:24.006 00:00:00.047 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:40:24.204 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:40:24.333 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:40:24.289 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:35:47.239 00:06:00.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:40:49.852 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48120 10 6452 1 2025-10-20 14:41:50.268 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41608 10 6452 1 2025-10-20 14:37:47.237 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:42:50.667 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47840 10 6452 1 2025-10-20 14:43:51.096 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43598 10 6452 1 2025-10-20 14:44:51.500 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43166 10 6452 1 2025-10-20 14:45:24.072 00:00:00.056 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:45:24.094 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:45:24.109 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:45:23.989 00:00:00.055 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:45:24.100 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:45:51.907 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56010 10 6452 1 2025-10-20 14:46:52.269 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50994 10 6452 1 2025-10-20 14:42:47.241 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:47:52.673 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60876 10 6452 1 2025-10-20 14:48:53.100 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56620 10 6452 1 2025-10-20 14:44:47.237 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:49:53.462 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:58096 10 6452 1 2025-10-20 14:50:24.220 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:50:24.143 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:50:24.150 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:50:24.041 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:50:24.233 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:50:53.947 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41650 10 6452 1 2025-10-20 14:51:54.358 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47602 10 6452 1 2025-10-20 14:52:54.759 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:50924 10 6452 1 2025-10-20 14:53:55.186 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44542 10 6452 1 2025-10-20 14:49:47.242 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 14:54:55.593 00:00:10.606 TCP 1.101.0.1:3000 -> 23.104.0.1:55172 10 6452 1 2025-10-20 14:55:24.113 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 14:55:24.285 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:55:24.194 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 14:55:24.182 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 14:55:24.278 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 14:55:56.232 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59232 10 6452 1 2025-10-20 14:51:47.242 00:06:00.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 14:56:56.637 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58606 10 6452 1 2025-10-20 14:57:56.999 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58914 10 6452 1 Summary: total flows: 136, total bytes: 410737, total packets: 1014, avg bps: 878, avg pps: 0, avg bpp: 405 Time window: 2025-10-20 13:55:47 - 2025-10-20 14:58:07 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0028s User: 0.0018s Wall: 0.0017s flows/second: 78798.9 Runtime: 0.0017s