Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 20:59:02.100 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34992 10 6452 1 2025-10-11 20:55:42.711 00:05:00.472 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 21:00:02.505 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55958 10 6452 1 2025-10-11 21:01:11.572 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 21:01:02.908 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:58188 12 10375 1 2025-10-11 21:01:11.458 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 21:01:11.395 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:01:11.675 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:01:11.757 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 21:02:03.396 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38634 10 6452 1 2025-10-11 21:03:03.760 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55658 10 6452 1 2025-10-11 21:04:04.168 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57844 10 6452 1 2025-10-11 21:00:42.714 00:05:00.466 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 21:05:04.582 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47764 10 6452 1 2025-10-11 21:01:42.712 00:05:00.472 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 21:06:11.854 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 21:06:11.782 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 21:06:11.805 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:06:11.588 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:06:11.671 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 21:06:04.987 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37532 10 6452 1 2025-10-11 21:07:05.398 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:55776 10 6452 1 2025-10-11 21:08:05.758 00:00:11.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34246 10 6452 1 2025-10-11 21:09:07.214 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:55312 10 6452 1 2025-10-11 21:10:07.572 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48510 12 6556 1 2025-10-11 21:06:42.715 00:05:00.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 21:11:11.838 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 21:11:11.985 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 21:11:11.597 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:11:11.937 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:11:12.025 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 21:11:07.980 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:41302 12 10369 1 2025-10-11 21:07:42.714 00:05:00.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 21:12:08.419 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43180 10 6452 1 2025-10-11 21:13:08.779 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41358 10 6452 1 2025-10-11 21:14:09.142 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44384 10 6452 1 2025-10-11 21:15:09.546 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:52140 10 6452 1 2025-10-11 21:16:11.998 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 21:16:11.992 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 21:16:11.862 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:16:11.916 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:16:11.721 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 21:16:09.905 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38040 10 6452 1 2025-10-11 21:12:42.720 00:05:00.465 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 21:17:10.316 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54878 10 6452 1 2025-10-11 21:13:42.718 00:05:00.470 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 21:18:10.714 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58664 10 6452 1 2025-10-11 21:19:11.106 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34042 10 6452 1 2025-10-11 21:20:11.512 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59034 10 6452 1 2025-10-11 21:21:12.008 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 21:21:11.896 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 21:21:11.964 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:21:12.010 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:21:12.093 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 21:21:11.868 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43496 10 6452 1 2025-10-11 21:22:12.235 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55852 10 6452 1 2025-10-11 21:18:42.721 00:05:00.468 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 21:23:12.635 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34842 10 6452 1 2025-10-11 21:19:42.719 00:05:00.473 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 21:24:13.005 00:00:10.432 TCP 1.101.0.1:3000 -> 23.104.0.1:34374 10 6452 1 2025-10-11 21:25:13.474 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42052 10 6452 1 2025-10-11 21:26:12.251 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 21:26:12.155 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 21:26:11.921 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 21:26:11.736 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:26:12.169 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:26:13.834 00:00:10.450 TCP 1.101.0.1:3000 -> 23.104.0.1:58416 12 10375 1 2025-10-11 21:27:14.325 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:47392 11 6504 1 2025-10-11 21:28:14.744 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44798 10 6452 1 2025-10-11 21:24:42.723 00:05:00.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 21:29:15.148 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:56038 10 6452 1 2025-10-11 21:25:42.722 00:05:00.472 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 21:30:15.582 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34090 10 6452 1 2025-10-11 21:31:12.003 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 21:31:12.213 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 21:31:12.229 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:31:11.982 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:31:12.064 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 21:31:15.985 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38986 10 6452 1 2025-10-11 21:32:16.396 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49346 10 6452 1 2025-10-11 21:33:16.818 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34290 10 6452 1 2025-10-11 21:34:17.232 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41578 10 6452 1 2025-10-11 21:30:42.724 00:05:00.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 21:35:17.630 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49238 10 6452 1 2025-10-11 21:31:42.722 00:05:00.472 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 21:36:12.470 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 21:36:12.306 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 21:36:12.307 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 21:36:12.099 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:36:12.387 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:36:18.037 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43180 10 6452 1 2025-10-11 21:37:18.440 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48052 10 6452 1 2025-10-11 21:38:18.841 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:35226 10 6452 1 2025-10-11 21:39:19.274 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53814 10 6452 1 2025-10-11 21:40:19.675 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58344 10 6452 1 2025-10-11 21:36:42.727 00:05:00.466 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 21:41:12.434 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:41:12.138 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 21:41:12.430 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 21:41:12.435 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:41:12.516 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 21:41:20.111 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42380 10 6452 1 2025-10-11 21:37:42.725 00:05:00.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 21:42:20.512 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33176 10 6452 1 2025-10-11 21:43:20.912 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59022 10 6452 1 2025-10-11 21:44:21.312 00:00:10.953 TCP 1.101.0.1:3000 -> 23.104.0.1:40636 10 6452 1 2025-10-11 21:45:22.304 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55254 10 6452 1 2025-10-11 21:46:12.430 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 21:46:12.507 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 21:46:12.386 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:46:12.347 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:46:12.349 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 21:46:22.702 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54240 10 6452 1 2025-10-11 21:42:42.733 00:05:00.461 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 21:47:23.115 00:00:15.207 TCP 1.101.0.1:3000 -> 23.104.0.1:59714 10 6452 1 2025-10-11 21:43:42.736 00:05:00.460 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 21:48:28.357 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42518 10 6452 1 2025-10-11 21:49:28.759 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58946 10 6452 1 2025-10-11 21:50:29.170 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:57480 10 6452 1 2025-10-11 21:51:12.565 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 21:51:12.954 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 21:51:12.839 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:51:12.557 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:51:12.639 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 21:51:29.595 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35010 10 6452 1 2025-10-11 21:48:42.734 00:05:00.466 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 21:52:30.000 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59854 10 6452 1 2025-10-11 21:53:30.403 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54600 10 6452 1 2025-10-11 21:49:42.734 00:05:00.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 21:54:30.804 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53214 10 6452 1 2025-10-11 21:55:31.209 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47580 10 6452 1 2025-10-11 21:56:12.678 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 21:56:12.508 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 21:56:12.640 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:56:12.596 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 21:56:12.680 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 21:56:31.611 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:55658 10 6452 1 2025-10-11 21:57:31.983 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55716 10 6452 1 2025-10-11 21:54:42.739 00:05:00.465 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 21:58:32.390 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52284 10 6452 1 Summary: total flows: 140, total bytes: 428919, total packets: 1029, avg bps: 893, avg pps: 0, avg bpp: 416 Time window: 2025-10-11 20:55:42 - 2025-10-11 21:59:43 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0041s User: 0.0000s Wall: 0.0016s flows/second: 88327.7 Runtime: 0.0016s