Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 17:59:30.361 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57320 10 6452 1 2025-10-20 18:00:28.093 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 18:00:27.803 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:00:27.967 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:00:28.098 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 18:00:28.051 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 18:00:30.767 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59206 10 6452 1 2025-10-20 18:01:31.136 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60858 10 6452 1 2025-10-20 18:02:31.503 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53580 10 6452 1 2025-10-20 18:03:31.903 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57946 10 6452 1 2025-10-20 17:58:47.304 00:06:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 18:04:32.306 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38304 10 6452 1 2025-10-20 18:05:27.995 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 18:05:27.941 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:05:27.991 00:00:00.050 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:05:27.993 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 18:05:28.074 00:00:00.051 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 18:05:32.706 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40898 10 6452 1 2025-10-20 18:00:47.302 00:06:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 18:06:33.110 00:00:10.861 TCP 1.101.0.1:3000 -> 23.104.0.1:55710 10 6452 1 2025-10-20 18:07:34.010 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48980 10 6452 1 2025-10-20 18:08:34.412 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50972 10 6452 1 2025-10-20 18:09:34.814 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54276 10 6452 1 2025-10-20 18:10:28.315 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 18:10:28.485 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:10:28.315 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:10:28.315 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 18:10:28.397 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 18:10:35.218 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60454 10 6452 1 2025-10-20 18:05:47.310 00:06:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 18:11:35.622 00:00:11.239 TCP 1.101.0.1:3000 -> 23.104.0.1:45904 10 6452 1 2025-10-20 18:12:36.900 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44026 10 6452 1 2025-10-20 18:07:47.306 00:06:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 18:13:37.300 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36446 10 6452 1 2025-10-20 18:14:37.660 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52664 10 6452 1 2025-10-20 18:15:28.391 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 18:15:28.470 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 18:15:28.204 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:15:28.309 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:15:28.214 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 18:15:38.023 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44590 10 6452 1 2025-10-20 18:16:38.427 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48846 10 6452 1 2025-10-20 18:17:38.832 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:53804 10 6452 1 2025-10-20 18:12:47.310 00:06:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 18:18:39.274 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49372 10 6452 1 2025-10-20 18:19:39.675 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41628 10 6452 1 2025-10-20 18:14:47.308 00:06:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 18:20:28.476 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 18:20:28.526 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 18:20:28.432 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:20:28.394 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:20:28.476 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 18:20:40.035 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:56434 10 6452 1 2025-10-20 18:21:40.518 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36722 10 6452 1 2025-10-20 18:22:40.929 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:50850 10 6452 1 2025-10-20 18:23:41.347 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42232 10 6452 1 2025-10-20 18:19:47.311 00:06:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 18:24:41.759 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:52200 10 6452 1 2025-10-20 18:25:28.316 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 18:25:28.515 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 18:25:28.379 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:25:28.233 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:25:28.346 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 18:25:42.180 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:34878 10 6452 1 2025-10-20 18:21:47.309 00:06:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 18:26:42.620 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50384 10 6452 1 2025-10-20 18:27:43.025 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45466 10 6452 1 2025-10-20 18:28:43.424 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37898 10 6452 1 2025-10-20 18:29:43.831 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34886 10 6452 1 2025-10-20 18:30:28.830 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 18:30:28.911 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:30:28.673 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:30:28.837 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 18:30:28.756 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 18:30:44.245 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59874 10 6452 1 2025-10-20 18:26:47.317 00:06:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 18:31:44.649 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34660 10 6452 1 2025-10-20 18:32:45.013 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51394 10 6452 1 2025-10-20 18:28:47.314 00:06:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 18:33:45.417 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48786 10 6452 1 2025-10-20 18:34:45.818 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52752 10 6452 1 2025-10-20 18:35:28.934 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 18:35:28.798 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:35:28.993 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:35:28.933 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 18:35:29.077 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 18:35:46.231 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33940 10 6452 1 2025-10-20 18:36:46.637 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51804 10 6452 1 2025-10-20 18:37:47.002 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45316 10 6452 1 2025-10-20 18:33:47.323 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 18:38:47.406 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34516 10 6452 1 2025-10-20 18:39:47.816 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58626 10 6452 1 2025-10-20 18:40:28.857 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 18:40:28.909 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 18:40:28.862 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:40:28.775 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:40:28.836 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 18:35:47.320 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 18:40:48.217 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35978 10 6452 1 2025-10-20 18:41:48.576 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55044 10 6452 1 2025-10-20 18:42:48.940 00:00:10.789 TCP 1.101.0.1:3000 -> 23.104.0.1:33480 10 6452 1 2025-10-20 18:43:49.771 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56020 10 6452 1 2025-10-20 18:44:50.178 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38916 10 6452 1 2025-10-20 18:45:28.780 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 18:45:28.906 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 18:45:28.795 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:45:28.698 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:45:28.908 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 18:40:47.325 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 18:45:50.581 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56428 10 6452 1 2025-10-20 18:46:50.983 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42772 10 6452 1 2025-10-20 18:42:47.321 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 18:47:51.397 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35728 10 6452 1 2025-10-20 18:48:51.807 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:47940 12 10375 1 2025-10-20 18:49:52.291 00:00:10.693 TCP 1.101.0.1:3000 -> 23.104.0.1:46568 10 6452 1 2025-10-20 18:50:28.996 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 18:50:28.922 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 18:50:28.858 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:50:28.913 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:50:28.911 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 18:50:53.023 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34184 10 6452 1 2025-10-20 18:51:53.390 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55242 10 6452 1 2025-10-20 18:47:47.325 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-20 18:52:53.814 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52398 10 6452 1 2025-10-20 18:53:54.235 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53400 10 6452 1 2025-10-20 18:49:47.324 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-20 18:54:54.644 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36088 10 6452 1 2025-10-20 18:55:29.179 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 18:55:29.166 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 18:55:28.844 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:55:29.097 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 18:55:29.171 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 18:55:55.060 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39946 10 6452 1 2025-10-20 18:56:55.464 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42572 10 6452 1 2025-10-20 18:57:55.870 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53590 10 6452 1 Summary: total flows: 135, total bytes: 413487, total packets: 996, avg bps: 929, avg pps: 0, avg bpp: 415 Time window: 2025-10-20 17:58:47 - 2025-10-20 18:58:06 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0040s User: 0.0016s Wall: 0.0022s flows/second: 60617.8 Runtime: 0.0023s