Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 21:59:27.923 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57844 10 6452 1 2025-10-05 22:00:28.335 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58868 10 6452 1 2025-10-05 21:56:39.693 00:05:00.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 21:57:39.690 00:05:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:01:28.746 00:00:16.546 TCP 1.101.0.1:3000 -> 23.104.0.1:53498 10 6452 1 2025-10-05 22:02:35.340 00:00:10.960 TCP 1.101.0.1:3000 -> 23.104.0.1:33070 10 6452 1 2025-10-05 22:03:19.703 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:03:19.755 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:03:19.758 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:03:19.498 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:03:19.621 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:03:36.339 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58544 10 6452 1 2025-10-05 22:04:36.741 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35296 10 6452 1 2025-10-05 22:05:37.144 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56508 10 6452 1 2025-10-05 22:02:39.693 00:05:00.448 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:06:37.544 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33928 10 6452 1 2025-10-05 22:03:39.691 00:05:00.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:07:37.947 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44624 10 6452 1 2025-10-05 22:08:19.638 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:08:19.774 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:08:19.637 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:08:19.653 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:08:19.556 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:08:38.364 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:56448 12 10375 1 2025-10-05 22:09:38.801 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55108 10 6452 1 2025-10-05 22:10:39.202 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:55144 10 6452 1 2025-10-05 22:11:39.570 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59388 10 6452 1 2025-10-05 22:08:39.697 00:05:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:12:39.932 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45804 10 6452 1 2025-10-05 22:13:19.910 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:13:19.965 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:13:19.928 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:13:19.394 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:13:19.829 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:09:39.696 00:05:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:13:40.341 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58406 10 6452 1 2025-10-05 22:14:40.747 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54888 10 6452 1 2025-10-05 22:15:41.150 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40204 10 6452 1 2025-10-05 22:16:41.555 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42114 10 6452 1 2025-10-05 22:17:41.952 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40380 10 6452 1 2025-10-05 22:18:19.805 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:18:19.952 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:18:19.719 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:18:19.939 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:18:20.023 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:14:39.702 00:05:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:18:42.363 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38056 10 6452 1 2025-10-05 22:15:39.702 00:05:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:19:42.769 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:33198 10 6452 1 2025-10-05 22:20:43.141 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45894 10 6452 1 2025-10-05 22:21:43.540 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51802 10 6452 1 2025-10-05 22:22:43.902 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42814 10 6452 1 2025-10-05 22:23:19.819 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:23:19.762 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:23:19.725 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:23:20.084 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:23:20.169 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:23:44.323 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48506 10 6452 1 2025-10-05 22:20:39.704 00:05:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:24:44.686 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41944 10 6452 1 2025-10-05 22:21:39.701 00:05:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:25:45.107 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58442 10 6452 1 2025-10-05 22:26:45.470 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52670 10 6452 1 2025-10-05 22:27:45.883 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45414 10 6452 1 2025-10-05 22:28:20.149 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:28:20.097 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:28:20.149 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:28:20.204 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:28:20.233 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:28:46.286 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34968 10 6452 1 2025-10-05 22:29:46.696 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38308 10 6452 1 2025-10-05 22:26:39.704 00:05:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:30:47.110 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35600 10 6452 1 2025-10-05 22:27:39.702 00:05:00.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:31:47.485 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52504 10 6452 1 2025-10-05 22:32:47.887 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40634 12 6556 1 2025-10-05 22:33:19.950 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:33:20.245 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:33:20.289 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:33:20.239 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:33:20.323 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:33:48.307 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:38352 12 10369 1 2025-10-05 22:34:48.790 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46712 10 6452 1 2025-10-05 22:35:49.152 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60992 10 6452 1 2025-10-05 22:32:39.707 00:05:00.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:36:49.559 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33328 10 6452 1 2025-10-05 22:33:39.703 00:05:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:37:49.960 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52924 10 6452 1 2025-10-05 22:38:20.311 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:38:20.166 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:38:20.403 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:38:20.317 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:38:20.487 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:38:50.323 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35992 10 6452 1 2025-10-05 22:39:50.686 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37242 10 6452 1 2025-10-05 22:40:51.112 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:37712 10 6452 1 2025-10-05 22:41:51.486 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46300 10 6452 1 2025-10-05 22:38:39.714 00:05:00.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:42:51.887 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:55352 10 6452 1 2025-10-05 22:43:20.409 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:43:20.572 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:43:20.327 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:43:20.372 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:43:20.327 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:39:39.712 00:05:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:43:52.302 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34270 10 6452 1 2025-10-05 22:44:52.705 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53632 10 6452 1 2025-10-05 22:45:53.118 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:37308 10 6452 1 2025-10-05 22:46:53.469 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50348 10 6452 1 2025-10-05 22:47:53.873 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52276 10 6452 1 2025-10-05 22:48:20.751 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:48:20.806 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:48:20.587 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:48:20.333 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:48:20.835 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:44:39.715 00:05:00.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:48:54.282 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35734 10 6452 1 2025-10-05 22:45:39.714 00:05:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:49:54.689 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35900 10 6452 1 2025-10-05 22:50:55.113 00:00:10.431 TCP 1.101.0.1:3000 -> 23.104.0.1:39944 10 6452 1 2025-10-05 22:51:55.580 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43932 10 6452 1 2025-10-05 22:52:55.996 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38772 10 6452 1 2025-10-05 22:53:20.464 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:53:20.401 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:53:20.520 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:53:20.510 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:53:20.482 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:53:56.403 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44596 10 6452 1 2025-10-05 22:50:39.715 00:05:00.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:54:56.804 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:56728 10 6452 1 2025-10-05 22:51:39.714 00:05:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:55:57.173 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37000 10 6452 1 2025-10-05 22:56:57.581 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55824 10 6452 1 2025-10-05 22:57:57.946 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:35574 10 6452 1 2025-10-05 22:58:20.746 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:58:20.659 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:58:20.695 00:00:00.012 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:58:20.656 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:58:20.739 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 139, total bytes: 418492, total packets: 1016, avg bps: 904, avg pps: 0, avg bpp: 411 Time window: 2025-10-05 21:56:39 - 2025-10-05 22:58:20 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0038s User: 0.0009s Wall: 0.0022s flows/second: 62108.0 Runtime: 0.0023s