Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 13:59:06.843 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:39390 10 6452 1 2025-10-04 14:00:07.269 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52604 10 6452 1 2025-10-04 14:01:07.680 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50060 11 6492 1 2025-10-04 13:58:39.454 00:03:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 421 1 2025-10-04 14:02:08.116 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:37436 10 6452 1 2025-10-04 14:02:41.156 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 14:02:41.077 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 14:02:40.994 00:00:00.035 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:02:41.072 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:02:41.151 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 14:03:08.481 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:37846 10 6452 1 2025-10-04 14:04:08.899 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46438 12 6556 1 2025-10-04 13:59:39.102 00:06:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-04 14:05:09.318 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42808 10 6452 1 2025-10-04 14:06:09.731 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:43344 10 6452 1 2025-10-04 14:02:39.101 00:04:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 14:07:10.145 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46426 10 6452 1 2025-10-04 14:07:41.129 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:07:41.209 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 14:07:41.247 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 14:07:41.212 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:07:41.212 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 14:08:10.509 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43068 10 6452 1 2025-10-04 14:09:10.913 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55934 10 6452 1 2025-10-04 14:10:11.276 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57782 10 6452 1 2025-10-04 14:11:11.644 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34340 10 6452 1 2025-10-04 14:07:39.102 00:04:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 14:06:39.104 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-10-04 14:12:12.068 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51212 10 6452 1 2025-10-04 14:12:41.284 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 14:12:41.327 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 14:12:41.269 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 14:12:41.159 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:12:41.200 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:13:12.471 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43082 10 6452 1 2025-10-04 14:14:12.874 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39800 10 6452 1 2025-10-04 14:15:13.283 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:41300 10 6452 1 2025-10-04 14:16:13.706 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48626 10 6452 1 2025-10-04 14:12:39.102 00:04:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 14:17:14.118 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:54412 10 6452 1 2025-10-04 14:12:39.457 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-10-04 14:17:41.538 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 14:17:41.455 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 14:17:41.519 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 14:17:41.427 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:17:41.455 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:18:14.533 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40986 10 6452 1 2025-10-04 14:19:14.933 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:43196 10 6452 1 2025-10-04 14:20:15.307 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59726 10 6452 1 2025-10-04 14:19:39.106 00:01:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-04 14:21:15.709 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40916 10 6452 1 2025-10-04 14:22:16.115 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57112 10 6452 1 2025-10-04 14:17:39.104 00:06:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 14:22:41.538 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 14:22:41.579 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 14:22:41.459 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:22:41.494 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:22:41.577 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 14:23:16.520 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:38592 10 6452 1 2025-10-04 14:24:16.889 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:46242 12 6556 1 2025-10-04 14:25:17.363 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49130 10 6452 1 2025-10-04 14:21:39.108 00:04:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 14:26:17.762 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:51450 10 6452 1 2025-10-04 14:27:18.191 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58646 10 6452 1 2025-10-04 14:27:42.454 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 14:27:41.881 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:27:42.134 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:27:42.392 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 14:27:42.216 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 14:28:18.551 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42838 10 6452 1 2025-10-04 14:29:18.953 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:52132 10 6452 1 2025-10-04 14:24:39.105 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-10-04 14:30:19.322 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37508 10 6452 1 2025-10-04 14:26:39.107 00:04:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 14:31:19.726 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55844 10 6452 1 2025-10-04 14:32:20.135 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41902 10 6452 1 2025-10-04 14:32:41.828 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 14:32:41.858 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 14:32:41.851 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 14:32:41.832 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:32:41.746 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:33:20.576 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36412 10 6452 1 2025-10-04 14:30:39.468 00:03:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 421 1 2025-10-04 14:34:20.977 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52250 10 6452 1 2025-10-04 14:35:21.401 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:37932 10 6452 1 2025-10-04 14:36:21.759 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:36882 10 6452 1 2025-10-04 14:31:39.107 00:06:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-04 14:37:22.201 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44602 10 6452 1 2025-10-04 14:37:41.721 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 14:37:41.819 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 14:37:41.864 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 14:37:41.645 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:37:41.639 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:38:22.597 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:53620 12 10369 1 2025-10-04 14:34:39.105 00:04:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 14:39:23.106 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48960 10 6452 1 2025-10-04 14:40:23.470 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50368 10 6452 1 2025-10-04 14:41:23.829 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60322 10 6452 1 2025-10-04 14:42:24.235 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44628 10 6452 1 2025-10-04 14:42:41.857 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 14:42:41.686 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 14:42:41.845 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 14:42:41.718 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:42:41.774 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:39:39.106 00:04:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 14:38:39.108 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-10-04 14:43:24.635 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52276 10 6452 1 2025-10-04 14:44:25.039 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41572 10 6452 1 2025-10-04 14:45:25.445 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54760 10 6452 1 2025-10-04 14:46:25.849 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:38204 10 6452 1 2025-10-04 14:47:42.190 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 14:47:26.267 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39906 10 6452 1 2025-10-04 14:47:42.108 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 14:47:42.114 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 14:47:41.742 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:47:42.108 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:44:39.107 00:04:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 14:48:26.675 00:00:11.048 TCP 1.101.0.1:3000 -> 23.104.0.1:33606 10 6452 1 2025-10-04 14:44:39.466 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-10-04 14:49:27.759 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34920 10 6452 1 2025-10-04 14:50:28.178 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41482 10 6452 1 2025-10-04 14:51:28.581 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34834 10 6452 1 2025-10-04 14:51:39.111 00:01:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-04 14:52:28.990 00:00:10.757 TCP 1.101.0.1:3000 -> 23.104.0.1:36384 10 6452 1 2025-10-04 14:52:42.152 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 14:52:42.319 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 14:52:41.843 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:52:41.896 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:52:41.979 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 14:53:29.779 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48118 10 6452 1 2025-10-04 14:49:39.107 00:06:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 14:54:30.179 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41304 10 6452 1 2025-10-04 14:55:30.586 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59364 10 6452 1 2025-10-04 14:56:30.989 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59732 10 6452 1 2025-10-04 14:53:39.110 00:04:00.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 14:57:42.215 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 14:57:42.035 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 14:57:41.962 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:57:42.260 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 14:57:31.395 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55042 10 6452 1 2025-10-04 14:57:42.343 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 14:58:31.794 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54988 10 6452 1 Summary: total flows: 142, total bytes: 420725, total packets: 1020, avg bps: 934, avg pps: 0, avg bpp: 412 Time window: 2025-10-04 13:58:39 - 2025-10-04 14:58:42 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0049s User: 0.0000s Wall: 0.0028s flows/second: 51299.8 Runtime: 0.0028s