Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 20:59:07.690 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35268 10 6452 1 2025-10-03 20:55:38.726 00:05:00.369 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:00:08.108 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40562 10 6452 1 2025-10-03 21:01:08.518 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43662 10 6452 1 2025-10-03 20:57:38.724 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:02:08.918 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41142 10 6452 1 2025-10-03 21:02:20.763 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:02:20.674 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:02:20.684 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:02:20.547 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:02:20.681 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:03:09.278 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36596 10 6452 1 2025-10-03 21:04:09.633 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46278 10 6452 1 2025-10-03 21:05:10.048 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39054 10 6452 1 2025-10-03 21:01:38.729 00:05:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:06:10.448 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39754 10 6452 1 2025-10-03 21:07:20.897 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:07:20.809 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:07:20.658 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:07:10.854 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60344 10 6452 1 2025-10-03 21:07:20.815 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:07:20.869 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:03:38.725 00:05:00.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:08:11.272 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34996 10 6452 1 2025-10-03 21:09:11.675 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43682 10 6452 1 2025-10-03 21:10:12.110 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36200 10 6452 1 2025-10-03 21:11:12.511 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35246 10 6452 1 2025-10-03 21:07:38.728 00:05:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:12:21.094 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:12:20.926 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:12:20.920 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:12:20.753 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:12:21.012 00:00:00.042 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:12:12.924 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:34538 10 6452 1 2025-10-03 21:13:13.352 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59522 10 6452 1 2025-10-03 21:09:38.726 00:05:00.377 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:14:13.754 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:33866 10 6452 1 2025-10-03 21:15:14.175 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57414 10 6452 1 2025-10-03 21:16:14.584 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34156 10 6452 1 2025-10-03 21:17:21.091 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:17:20.922 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:17:20.930 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:17:20.952 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:17:21.009 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:17:14.986 00:00:10.766 TCP 1.101.0.1:3000 -> 23.104.0.1:39860 10 6452 1 2025-10-03 21:13:38.730 00:05:00.370 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:18:15.788 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50182 10 6452 1 2025-10-03 21:19:16.194 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53062 10 6452 1 2025-10-03 21:15:38.728 00:05:00.375 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:20:16.603 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32982 10 6452 1 2025-10-03 21:21:17.019 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47172 10 6452 1 2025-10-03 21:22:21.235 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:22:21.167 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:22:21.415 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:22:21.250 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:22:21.333 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:22:17.412 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59786 10 6452 1 2025-10-03 21:23:17.815 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:36444 12 10375 1 2025-10-03 21:19:38.733 00:05:00.369 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:24:18.296 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54254 10 6452 1 2025-10-03 21:25:18.707 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39940 10 6452 1 2025-10-03 21:21:38.730 00:05:00.374 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:26:19.115 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33006 10 6452 1 2025-10-03 21:27:21.266 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:27:21.061 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:27:21.182 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:27:21.173 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:27:21.293 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:27:19.515 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41430 10 6452 1 2025-10-03 21:28:19.918 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45874 10 6452 1 2025-10-03 21:29:20.320 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53498 10 6452 1 2025-10-03 21:25:38.733 00:05:00.370 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:30:20.731 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52836 10 6452 1 2025-10-03 21:31:21.147 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52570 10 6452 1 2025-10-03 21:27:38.731 00:05:00.375 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:32:21.271 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:32:20.994 00:00:00.047 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:32:21.300 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:32:21.458 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:32:21.384 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:32:21.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48578 10 6452 1 2025-10-03 21:33:21.928 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33674 10 6452 1 2025-10-03 21:34:22.343 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46582 10 6452 1 2025-10-03 21:35:22.710 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44910 10 6452 1 2025-10-03 21:31:38.734 00:05:00.370 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:36:23.119 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37312 10 6452 1 2025-10-03 21:37:21.718 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:37:21.675 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:37:21.390 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:37:21.427 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:37:21.634 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:37:23.484 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52294 10 6452 1 2025-10-03 21:33:38.732 00:05:00.376 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:38:23.886 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:55256 12 6556 1 2025-10-03 21:39:24.319 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35946 10 6452 1 2025-10-03 21:40:24.724 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33086 10 6452 1 2025-10-03 21:37:38.736 00:05:00.371 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:41:25.109 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43124 10 6452 1 2025-10-03 21:42:21.544 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:42:21.635 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:42:21.638 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:42:21.496 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:42:21.461 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:42:25.515 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41186 10 6452 1 2025-10-03 21:39:38.733 00:05:00.376 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:43:25.919 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36364 10 6452 1 2025-10-03 21:44:26.285 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35506 10 6452 1 2025-10-03 21:45:26.704 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:43958 10 6452 1 2025-10-03 21:46:27.104 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47702 10 6452 1 2025-10-03 21:47:21.702 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:47:21.635 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:47:21.490 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:47:21.665 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:47:21.785 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:43:38.737 00:05:00.370 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:47:27.535 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54326 10 6452 1 2025-10-03 21:48:27.947 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50414 10 6452 1 2025-10-03 21:49:28.353 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44608 10 6452 1 2025-10-03 21:45:38.734 00:05:00.376 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:50:28.715 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42678 10 6452 1 2025-10-03 21:51:29.125 00:00:10.883 TCP 1.101.0.1:3000 -> 23.104.0.1:46308 10 6452 1 2025-10-03 21:52:21.974 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:52:21.896 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:52:21.751 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:52:21.589 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:52:21.890 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:52:30.049 00:00:10.482 TCP 1.101.0.1:3000 -> 23.104.0.1:43780 10 6452 1 2025-10-03 21:49:38.738 00:05:00.374 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:53:30.571 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45116 10 6452 1 2025-10-03 21:54:30.971 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45908 10 6452 1 2025-10-03 21:51:38.737 00:05:00.378 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:55:31.374 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49026 10 6452 1 2025-10-03 21:56:31.735 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35768 10 6452 1 2025-10-03 21:57:21.781 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:57:21.639 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:57:21.716 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:57:21.827 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:57:21.798 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:57:32.143 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35292 10 6452 1 2025-10-03 21:58:32.547 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60382 10 6452 1 Summary: total flows: 140, total bytes: 421027, total packets: 1024, avg bps: 890, avg pps: 0, avg bpp: 411 Time window: 2025-10-03 20:55:38 - 2025-10-03 21:58:42 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0041s User: 0.0000s Wall: 0.0022s flows/second: 64133.1 Runtime: 0.0022s