Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 20:59:02.443 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46330 10 6452 1 2025-10-05 21:00:02.861 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48002 10 6452 1 2025-10-05 20:56:39.680 00:05:00.442 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:01:03.231 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38818 10 6452 1 2025-10-05 20:57:39.679 00:05:00.447 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:02:03.595 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59376 10 6452 1 2025-10-05 21:03:04.005 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56944 10 6452 1 2025-10-05 21:03:18.425 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:03:18.411 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:03:18.465 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:03:18.438 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:03:18.520 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:04:04.411 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:56806 10 6452 1 2025-10-05 21:05:04.832 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:48034 10 6452 1 2025-10-05 21:06:05.264 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45458 10 6452 1 2025-10-05 21:02:39.682 00:05:00.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:07:05.662 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59178 10 6452 1 2025-10-05 21:03:39.679 00:05:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:08:18.537 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:08:06.073 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43460 10 6452 1 2025-10-05 21:08:18.531 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:08:18.543 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:08:18.621 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:08:18.704 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:09:06.475 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60870 10 6452 1 2025-10-05 21:10:06.837 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:42086 10 6452 1 2025-10-05 21:11:07.263 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42454 10 6452 1 2025-10-05 21:12:07.669 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50836 10 6452 1 2025-10-05 21:08:39.682 00:05:00.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:13:19.137 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:13:18.633 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:13:18.928 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:13:18.370 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:13:19.055 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:13:08.038 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40400 10 6452 1 2025-10-05 21:09:39.680 00:05:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:14:08.438 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35588 10 6452 1 2025-10-05 21:15:08.846 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33914 10 6452 1 2025-10-05 21:16:09.253 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42870 10 6452 1 2025-10-05 21:17:09.656 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48282 10 6452 1 2025-10-05 21:18:18.729 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:18:18.573 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:18:18.648 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:18:18.407 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:18:18.647 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:18:10.016 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47178 10 6452 1 2025-10-05 21:14:39.684 00:05:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:19:10.420 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53290 10 6452 1 2025-10-05 21:15:39.681 00:05:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:20:10.778 00:00:10.834 TCP 1.101.0.1:3000 -> 23.104.0.1:57838 10 6452 1 2025-10-05 21:21:11.652 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38084 10 6452 1 2025-10-05 21:22:12.061 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52580 10 6452 1 2025-10-05 21:23:18.653 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:23:19.058 00:00:00.020 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:23:18.941 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:23:18.626 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:23:18.571 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:23:12.466 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38296 10 6452 1 2025-10-05 21:24:12.867 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:51050 12 10375 1 2025-10-05 21:20:39.684 00:05:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:25:13.354 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47228 10 6452 1 2025-10-05 21:21:39.683 00:05:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:26:13.757 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:60552 10 6452 1 2025-10-05 21:27:14.180 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55986 10 6452 1 2025-10-05 21:28:18.975 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:28:18.962 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:28:18.773 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:28:18.974 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:28:19.058 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:28:14.542 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:58290 10 6452 1 2025-10-05 21:29:14.913 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51404 10 6452 1 2025-10-05 21:30:15.328 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55290 10 6452 1 2025-10-05 21:26:39.685 00:05:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:31:15.733 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57578 10 6452 1 2025-10-05 21:27:39.682 00:05:00.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:32:16.106 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57114 10 6452 1 2025-10-05 21:33:19.063 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:33:19.066 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:33:18.772 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:33:19.072 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:33:19.155 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:33:16.509 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57936 10 6452 1 2025-10-05 21:34:16.876 00:00:10.732 TCP 1.101.0.1:3000 -> 23.104.0.1:33136 10 6452 1 2025-10-05 21:35:17.645 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43130 10 6452 1 2025-10-05 21:36:18.051 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51952 10 6452 1 2025-10-05 21:32:39.686 00:05:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:37:18.453 00:00:11.115 TCP 1.101.0.1:3000 -> 23.104.0.1:55312 10 6452 1 2025-10-05 21:33:39.684 00:05:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:38:19.158 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:38:18.896 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:38:18.835 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:38:19.157 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:38:19.238 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:38:19.608 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50588 10 6452 1 2025-10-05 21:39:20.013 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:53732 12 10375 1 2025-10-05 21:40:20.498 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36394 10 6452 1 2025-10-05 21:41:20.859 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38926 10 6452 1 2025-10-05 21:42:21.228 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43242 10 6452 1 2025-10-05 21:38:39.688 00:05:00.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:43:19.228 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:43:19.110 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:43:19.141 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:43:19.295 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:43:19.377 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:43:21.592 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48614 10 6452 1 2025-10-05 21:39:39.685 00:05:00.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:44:21.997 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36516 10 6452 1 2025-10-05 21:45:22.401 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44178 10 6452 1 2025-10-05 21:46:22.802 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60112 10 6452 1 2025-10-05 21:47:23.212 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45598 10 6452 1 2025-10-05 21:48:19.251 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:48:19.169 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:48:19.264 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:48:19.344 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:48:19.293 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:48:23.611 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52610 10 6452 1 2025-10-05 21:44:39.690 00:05:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:49:24.013 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60456 10 6452 1 2025-10-05 21:45:39.688 00:05:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:50:24.420 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55966 10 6452 1 2025-10-05 21:51:24.827 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33442 10 6452 1 2025-10-05 21:52:25.231 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57210 10 6452 1 2025-10-05 21:53:19.462 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:53:19.356 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:53:19.295 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:53:19.233 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:53:19.315 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:53:25.591 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33676 10 6452 1 2025-10-05 21:54:25.955 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60788 10 6452 1 2025-10-05 21:50:39.690 00:05:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:55:26.370 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50080 10 6452 1 2025-10-05 21:51:39.688 00:05:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 21:56:26.776 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45854 10 6452 1 2025-10-05 21:57:27.147 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57740 10 6452 1 2025-10-05 21:58:19.639 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 21:58:19.624 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 21:58:19.396 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:58:19.373 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 21:58:19.456 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 21:58:27.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42832 10 6452 1 Summary: total flows: 140, total bytes: 424846, total packets: 1024, avg bps: 914, avg pps: 0, avg bpp: 414 Time window: 2025-10-05 20:56:39 - 2025-10-05 21:58:37 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0036s User: 0.0018s Wall: 0.0022s flows/second: 63515.7 Runtime: 0.0022s