Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 19:58:42.035 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45336 10 6452 1 2025-10-03 19:55:38.710 00:05:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 19:59:42.439 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42718 10 6452 1 2025-10-03 20:00:42.804 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37950 10 6452 1 2025-10-03 19:57:38.707 00:05:00.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:01:43.209 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33570 10 6452 1 2025-10-03 20:02:19.907 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:02:19.857 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:02:19.807 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:02:19.904 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:02:19.988 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:02:43.611 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55456 10 6452 1 2025-10-03 20:03:44.028 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38472 10 6452 1 2025-10-03 20:04:44.431 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36526 10 6452 1 2025-10-03 20:01:38.712 00:05:00.366 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:05:44.794 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40736 10 6452 1 2025-10-03 20:06:45.157 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58560 10 6452 1 2025-10-03 20:07:19.572 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:07:19.684 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:07:19.587 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:07:19.623 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:07:19.706 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:03:38.710 00:05:00.371 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:07:45.562 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47234 10 6452 1 2025-10-03 20:08:45.926 00:00:10.808 TCP 1.101.0.1:3000 -> 23.104.0.1:39028 10 6452 1 2025-10-03 20:09:46.769 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52550 10 6452 1 2025-10-03 20:10:47.147 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39566 10 6452 1 2025-10-03 20:07:38.713 00:05:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:11:47.552 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44234 10 6452 1 2025-10-03 20:12:19.502 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:12:19.783 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:12:19.646 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:12:19.838 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:12:19.922 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:12:47.974 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34536 10 6452 1 2025-10-03 20:09:38.711 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:13:48.379 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37302 10 6452 1 2025-10-03 20:14:48.779 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55888 10 6452 1 2025-10-03 20:15:49.190 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48476 10 6452 1 2025-10-03 20:16:49.553 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52312 10 6452 1 2025-10-03 20:17:19.879 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:17:19.882 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:17:19.847 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:17:19.829 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:17:19.912 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:13:38.714 00:05:00.369 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:17:49.954 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59858 10 6452 1 2025-10-03 20:18:50.360 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53426 10 6452 1 2025-10-03 20:15:38.711 00:05:00.374 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:19:50.759 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46760 10 6452 1 2025-10-03 20:20:51.179 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35526 10 6452 1 2025-10-03 20:21:51.580 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56366 10 6452 1 2025-10-03 20:22:19.914 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:22:19.804 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:22:19.793 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:22:20.107 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:22:20.197 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:22:51.986 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50040 10 6452 1 2025-10-03 20:19:38.719 00:05:00.364 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:23:52.352 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54580 10 6452 1 2025-10-03 20:24:52.765 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59686 10 6452 1 2025-10-03 20:21:38.716 00:05:00.370 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:25:53.177 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35838 10 6452 1 2025-10-03 20:26:53.585 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46350 10 6452 1 2025-10-03 20:27:20.463 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:27:20.458 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:27:20.317 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:27:20.425 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:27:20.508 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:27:53.951 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39194 10 6452 1 2025-10-03 20:28:54.378 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40170 10 6452 1 2025-10-03 20:25:38.719 00:05:00.364 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:29:54.782 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36752 10 6452 1 2025-10-03 20:30:55.215 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50912 10 6452 1 2025-10-03 20:27:38.719 00:05:00.371 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:31:55.579 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41656 10 6452 1 2025-10-03 20:32:19.856 00:00:00.016 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:32:20.181 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:32:20.049 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:32:20.218 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:32:20.301 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:32:55.989 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43050 10 6452 1 2025-10-03 20:33:56.366 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33054 10 6452 1 2025-10-03 20:34:56.729 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47474 10 6452 1 2025-10-03 20:31:38.722 00:05:00.366 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:35:57.135 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33326 10 6452 1 2025-10-03 20:36:57.571 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:54446 11 6504 1 2025-10-03 20:37:20.341 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:37:20.253 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:37:20.206 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:37:20.149 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:37:20.231 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:33:38.719 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:37:58.028 00:00:11.537 TCP 1.101.0.1:3000 -> 23.104.0.1:44354 10 6452 1 2025-10-03 20:38:59.600 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35034 10 6452 1 2025-10-03 20:39:59.997 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36206 10 6452 1 2025-10-03 20:41:00.404 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44054 10 6452 1 2025-10-03 20:37:38.722 00:05:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:42:00.804 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54038 10 6452 1 2025-10-03 20:42:20.435 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:42:20.727 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:42:20.509 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:42:20.765 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:42:20.810 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:43:01.213 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38006 10 6452 1 2025-10-03 20:39:38.721 00:05:00.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:44:01.623 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59236 10 6452 1 2025-10-03 20:45:02.034 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38658 10 6452 1 2025-10-03 20:46:02.441 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34872 12 6556 1 2025-10-03 20:47:02.841 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:55974 10 6452 1 2025-10-03 20:47:20.384 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:47:20.108 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:47:20.140 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:47:20.459 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:47:20.222 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:43:38.723 00:05:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:48:03.269 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38404 10 6452 1 2025-10-03 20:49:03.674 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45650 10 6452 1 2025-10-03 20:45:38.721 00:05:00.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:50:04.099 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52224 10 6452 1 2025-10-03 20:51:04.465 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:34258 10 6452 1 2025-10-03 20:52:04.871 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38472 10 6452 1 2025-10-03 20:52:20.645 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:52:20.570 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:52:20.467 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:52:20.531 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:52:20.562 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:53:05.276 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58058 10 6452 1 2025-10-03 20:49:38.724 00:05:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 20:54:05.677 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53094 10 6452 1 2025-10-03 20:55:06.040 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53818 10 6452 1 2025-10-03 20:51:38.723 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 20:56:06.411 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33942 10 6452 1 2025-10-03 20:57:06.822 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44846 10 6452 1 2025-10-03 20:57:20.530 00:00:00.014 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 20:57:20.289 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:57:20.694 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 20:57:20.615 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 20:57:20.779 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 20:58:07.218 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:50390 12 10375 1 Summary: total flows: 140, total bytes: 421079, total packets: 1025, avg bps: 896, avg pps: 0, avg bpp: 410 Time window: 2025-10-03 19:55:38 - 2025-10-03 20:58:17 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0024s User: 0.0012s Wall: 0.0060s flows/second: 23443.1 Runtime: 0.0060s