Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 20:58:52.557 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53844 10 6452 1 2025-10-07 20:59:16.075 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 20:59:16.125 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 20:59:16.007 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 20:59:16.136 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 20:59:16.219 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 20:59:52.966 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:44218 10 6452 1 2025-10-07 21:00:53.331 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46732 10 6452 1 2025-10-07 21:01:53.692 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41568 10 6452 1 2025-10-07 20:58:40.831 00:05:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 21:02:54.112 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58244 10 6452 1 2025-10-07 20:59:40.834 00:05:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 21:03:54.521 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39664 10 6452 1 2025-10-07 21:04:15.941 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 21:04:15.944 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 21:04:16.011 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:04:15.941 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:04:16.024 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 21:04:54.928 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:35392 12 10369 1 2025-10-07 21:05:55.377 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57020 10 6452 1 2025-10-07 21:06:55.784 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43010 10 6452 1 2025-10-07 21:07:56.147 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44592 10 6452 1 2025-10-07 21:04:40.832 00:05:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 21:08:56.561 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35854 10 6452 1 2025-10-07 21:09:16.400 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 21:09:16.307 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 21:09:16.417 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:09:16.397 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:09:16.480 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 21:05:40.835 00:05:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 21:09:56.976 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33986 10 6452 1 2025-10-07 21:10:57.356 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55220 10 6452 1 2025-10-07 21:11:57.764 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:34476 10 6452 1 2025-10-07 21:12:58.182 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38988 10 6452 1 2025-10-07 21:13:58.550 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54434 10 6452 1 2025-10-07 21:14:16.460 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 21:14:16.293 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 21:14:16.434 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 21:14:16.140 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:14:16.377 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:10:40.835 00:05:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 21:14:58.962 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33416 10 6452 1 2025-10-07 21:11:40.838 00:05:00.324 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 21:15:59.361 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54016 10 6452 1 2025-10-07 21:16:59.761 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:54866 10 6452 1 2025-10-07 21:18:00.190 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37006 10 6452 1 2025-10-07 21:19:00.596 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40196 10 6452 1 2025-10-07 21:19:16.639 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 21:19:16.369 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 21:19:16.465 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:19:16.262 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:19:16.345 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 21:20:00.960 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52588 10 6452 1 2025-10-07 21:16:40.835 00:05:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 21:21:01.365 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33172 10 6452 1 2025-10-07 21:17:40.838 00:05:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 21:22:01.796 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53896 10 6452 1 2025-10-07 21:23:02.204 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42818 10 6452 1 2025-10-07 21:24:02.610 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57154 10 6452 1 2025-10-07 21:24:16.743 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 21:24:16.615 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 21:24:16.611 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 21:24:16.487 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:24:16.660 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:25:02.974 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53090 10 6452 1 2025-10-07 21:26:03.388 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:59438 10 6452 1 2025-10-07 21:22:40.836 00:05:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 21:27:03.759 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57620 10 6452 1 2025-10-07 21:23:40.839 00:05:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 21:28:04.175 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37648 10 6452 1 2025-10-07 21:29:16.850 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 21:29:16.750 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 21:29:16.349 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:29:16.797 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:29:04.579 00:00:10.824 TCP 1.101.0.1:3000 -> 23.104.0.1:44704 10 6452 1 2025-10-07 21:29:16.878 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 21:30:05.440 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47104 10 6452 1 2025-10-07 21:31:05.848 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:36114 12 6556 1 2025-10-07 21:32:06.284 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:33818 10 6452 1 2025-10-07 21:28:40.838 00:05:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 21:33:06.650 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36010 10 6452 1 2025-10-07 21:29:40.840 00:05:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 21:34:17.070 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 21:34:16.930 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 21:34:16.923 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 21:34:16.950 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:34:07.013 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43858 10 6452 1 2025-10-07 21:34:16.988 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:35:07.370 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37914 10 6452 1 2025-10-07 21:36:07.774 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45788 10 6452 1 2025-10-07 21:37:08.180 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:45974 10 6452 1 2025-10-07 21:38:08.582 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50346 10 6452 1 2025-10-07 21:34:40.840 00:05:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 21:39:16.966 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 21:39:16.868 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:39:16.898 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:39:08.985 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36424 10 6452 1 2025-10-07 21:39:16.955 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 21:39:16.980 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 21:35:40.841 00:05:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 21:40:09.404 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:55618 10 6452 1 2025-10-07 21:41:09.822 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45240 10 6452 1 2025-10-07 21:42:10.230 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:52478 10 6452 1 2025-10-07 21:43:10.596 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47086 10 6452 1 2025-10-07 21:44:16.990 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 21:44:17.209 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 21:44:16.722 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:44:17.096 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:44:17.180 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 21:44:11.006 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38852 10 6452 1 2025-10-07 21:40:40.841 00:05:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 21:45:11.368 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50314 10 6452 1 2025-10-07 21:41:40.843 00:05:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 21:46:11.774 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51144 10 6452 1 2025-10-07 21:47:12.152 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50864 10 6452 1 2025-10-07 21:48:12.555 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58426 10 6452 1 2025-10-07 21:49:16.979 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 21:49:17.076 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 21:49:16.833 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:49:16.887 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:49:16.969 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 21:49:12.957 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44074 10 6452 1 2025-10-07 21:50:13.408 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:49782 12 10375 1 2025-10-07 21:46:40.841 00:05:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 21:51:13.889 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:33408 12 6556 1 2025-10-07 21:47:40.845 00:05:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 21:52:14.312 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35302 10 6452 1 2025-10-07 21:53:14.718 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42206 10 6452 1 2025-10-07 21:54:17.138 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 21:54:17.189 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 21:54:16.976 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:54:17.276 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 21:54:17.358 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 21:54:15.132 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40490 10 6452 1 2025-10-07 21:55:15.539 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49514 10 6452 1 2025-10-07 21:56:15.953 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 10 6452 1 2025-10-07 21:52:40.843 00:05:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 21:57:16.364 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48156 10 6452 1 2025-10-07 21:53:40.845 00:05:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 21:58:16.769 00:00:10.427 TCP 1.101.0.1:3000 -> 23.104.0.1:44320 11 6504 1 Summary: total flows: 140, total bytes: 425100, total packets: 1029, avg bps: 944, avg pps: 0, avg bpp: 413 Time window: 2025-10-07 20:58:40 - 2025-10-07 21:58:41 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0051s User: 0.0000s Wall: 0.0023s flows/second: 61269.0 Runtime: 0.0023s