Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 15:59:24.398 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35690 10 6452 1 2025-10-20 15:54:47.262 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 16:00:25.716 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 16:00:25.635 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:00:25.487 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 16:00:25.480 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 16:00:25.589 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:00:24.802 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58184 10 6452 1 2025-10-20 16:01:25.209 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48538 10 6452 1 2025-10-20 16:02:25.608 00:00:17.137 TCP 1.101.0.1:3000 -> 23.104.0.1:56236 10 6452 1 2025-10-20 16:03:32.858 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:48994 10 6452 1 2025-10-20 16:04:33.281 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60778 10 6452 1 2025-10-20 15:59:47.265 00:06:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 16:05:25.432 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 16:05:25.655 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:05:25.779 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:05:25.696 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 16:05:25.863 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 16:05:33.684 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46296 10 6452 1 2025-10-20 16:06:34.111 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56098 10 6452 1 2025-10-20 16:01:47.263 00:06:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 16:07:34.516 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43036 10 6452 1 2025-10-20 16:08:34.925 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48968 10 6452 1 2025-10-20 16:09:35.291 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49426 10 6452 1 2025-10-20 16:10:25.782 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 16:10:25.759 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 16:10:25.609 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:10:25.699 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:10:25.615 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 16:10:35.695 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46892 10 6452 1 2025-10-20 16:11:36.114 00:00:14.195 TCP 1.101.0.1:3000 -> 23.104.0.1:56302 10 6452 1 2025-10-20 16:06:47.267 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 16:12:40.341 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50826 10 6452 1 2025-10-20 16:08:47.263 00:06:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 16:13:40.742 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34952 10 6452 1 2025-10-20 16:14:41.147 00:00:11.076 TCP 1.101.0.1:3000 -> 23.104.0.1:46854 10 6452 1 2025-10-20 16:15:25.877 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 16:15:25.802 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:15:25.954 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:15:26.037 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 16:15:25.992 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 16:15:42.262 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33204 10 6452 1 2025-10-20 16:16:42.666 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35002 10 6452 1 2025-10-20 16:17:43.083 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59072 10 6452 1 2025-10-20 16:13:47.269 00:06:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 16:18:43.485 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36066 10 6452 1 2025-10-20 16:19:43.887 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:56640 12 6556 1 2025-10-20 16:20:25.973 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 16:20:25.884 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 16:20:25.828 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:20:25.892 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:20:26.057 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 16:15:47.265 00:06:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 16:20:44.306 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43434 10 6452 1 2025-10-20 16:21:44.711 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36578 10 6452 1 2025-10-20 16:22:45.117 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37224 10 6452 1 2025-10-20 16:23:45.529 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:39312 10 6452 1 2025-10-20 16:24:45.950 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34014 10 6452 1 2025-10-20 16:25:26.202 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 16:25:26.058 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:25:26.117 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:25:25.988 00:00:00.055 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 16:25:26.200 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 16:20:47.270 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 16:25:46.369 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60650 10 6452 1 2025-10-20 16:26:46.769 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:36010 10 6452 1 2025-10-20 16:22:47.267 00:06:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 16:27:47.184 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47206 10 6452 1 2025-10-20 16:28:47.589 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38550 10 6452 1 2025-10-20 16:29:48.002 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44872 10 6452 1 2025-10-20 16:30:26.270 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 16:30:26.228 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 16:30:26.057 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:30:26.187 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:30:26.230 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 16:30:48.406 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33956 10 6452 1 2025-10-20 16:31:48.805 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:46116 10 6452 1 2025-10-20 16:27:47.271 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 16:32:49.176 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58704 10 6452 1 2025-10-20 16:33:49.580 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38834 10 6452 1 2025-10-20 16:29:47.269 00:06:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 16:34:49.982 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:50294 10 6452 1 2025-10-20 16:35:26.117 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 16:35:26.240 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:35:25.986 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:35:26.218 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 16:35:26.069 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 16:35:50.359 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52478 10 6452 1 2025-10-20 16:36:50.766 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39232 10 6452 1 2025-10-20 16:37:51.146 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58286 10 6452 1 2025-10-20 16:38:51.547 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46064 10 6452 1 2025-10-20 16:34:47.274 00:06:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 16:39:51.954 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38766 10 6452 1 2025-10-20 16:40:26.335 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 16:40:26.347 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:40:26.403 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:40:26.237 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 16:40:26.485 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 16:40:52.367 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57294 10 6452 1 2025-10-20 16:36:47.272 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 16:41:52.768 00:00:14.597 TCP 1.101.0.1:3000 -> 23.104.0.1:41334 10 6452 1 2025-10-20 16:42:57.435 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50018 10 6452 1 2025-10-20 16:43:57.834 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54686 10 6452 1 2025-10-20 16:44:58.233 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37810 10 6452 1 2025-10-20 16:45:26.521 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 16:45:26.591 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 16:45:26.061 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:45:26.438 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:45:26.498 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 16:45:58.634 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37686 10 6452 1 2025-10-20 16:41:47.275 00:06:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 16:46:59.037 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57088 10 6452 1 2025-10-20 16:47:59.441 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57530 10 6452 1 2025-10-20 16:43:47.275 00:06:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 16:48:59.848 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:38858 10 6452 1 2025-10-20 16:50:00.278 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48338 10 6452 1 2025-10-20 16:50:26.387 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 16:50:26.311 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:50:26.561 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:50:26.678 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 16:50:26.644 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 16:51:00.700 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48650 10 6452 1 2025-10-20 16:52:01.065 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53658 10 6452 1 2025-10-20 16:53:01.467 00:00:10.673 TCP 1.101.0.1:3000 -> 23.104.0.1:53708 10 6452 1 2025-10-20 16:48:47.277 00:06:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 16:54:02.181 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33662 10 6452 1 2025-10-20 16:55:02.545 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59556 10 6452 1 2025-10-20 16:55:26.697 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 16:55:26.768 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 16:55:26.704 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:55:26.614 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 16:55:26.686 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 16:50:47.274 00:06:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 16:56:02.948 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43696 12 6556 1 2025-10-20 16:57:03.356 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51636 10 6452 1 2025-10-20 16:58:03.761 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:41482 12 10375 1 Summary: total flows: 136, total bytes: 414556, total packets: 1014, avg bps: 871, avg pps: 0, avg bpp: 408 Time window: 2025-10-20 15:54:47 - 2025-10-20 16:58:14 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0022s User: 0.0015s Wall: 0.0016s flows/second: 84158.4 Runtime: 0.0016s