Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 20:59:27.958 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43354 10 6452 1 2025-10-15 21:00:28.369 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51890 10 6452 1 2025-10-15 21:01:28.773 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:54368 12 10369 1 2025-10-15 20:57:44.764 00:05:00.431 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 21:02:29.215 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49840 10 6452 1 2025-10-15 21:03:07.186 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:03:07.366 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 21:03:07.191 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 21:03:07.207 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:03:07.270 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 21:03:29.619 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34952 10 6452 1 2025-10-15 20:59:44.760 00:05:00.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 21:04:30.034 00:00:10.991 TCP 1.101.0.1:3000 -> 23.104.0.1:59358 10 6452 1 2025-10-15 21:05:31.085 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47382 10 6452 1 2025-10-15 21:06:31.494 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52872 10 6452 1 2025-10-15 21:07:31.895 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53554 12 6556 1 2025-10-15 21:03:44.763 00:05:00.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 21:08:07.570 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 21:08:07.397 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 21:08:07.316 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 21:08:07.271 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:08:07.487 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:08:32.305 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35912 10 6452 1 2025-10-15 21:09:32.713 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42078 10 6452 1 2025-10-15 21:05:44.762 00:05:00.438 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 21:10:33.117 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48020 10 6452 1 2025-10-15 21:11:33.519 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45904 10 6452 1 2025-10-15 21:12:33.926 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:44604 10 6452 1 2025-10-15 21:13:07.587 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 21:13:07.373 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 21:13:07.304 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:13:07.542 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:13:07.625 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 21:13:34.350 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53472 10 6452 1 2025-10-15 21:09:44.765 00:05:00.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 21:14:34.758 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45052 12 6556 1 2025-10-15 21:11:44.762 00:05:00.439 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 21:15:35.181 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40316 10 6452 1 2025-10-15 21:16:35.591 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59930 10 6452 1 2025-10-15 21:17:35.994 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45098 10 6452 1 2025-10-15 21:18:07.434 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 21:18:07.566 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 21:18:07.444 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:18:07.442 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:18:07.525 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 21:18:36.399 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34272 10 6452 1 2025-10-15 21:15:44.766 00:05:00.433 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 21:19:36.803 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:38688 10 6452 1 2025-10-15 21:20:37.179 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36464 10 6452 1 2025-10-15 21:21:37.582 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34388 10 6452 1 2025-10-15 21:17:44.767 00:05:00.436 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 21:22:37.981 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51562 10 6452 1 2025-10-15 21:23:07.671 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 21:23:07.604 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:23:07.589 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:23:07.497 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 21:23:07.507 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 21:23:38.391 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40224 10 6452 1 2025-10-15 21:24:38.761 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51848 10 6452 1 2025-10-15 21:21:44.771 00:05:00.428 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 21:25:39.176 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55038 10 6452 1 2025-10-15 21:26:39.580 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36452 10 6452 1 2025-10-15 21:23:44.768 00:05:00.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 21:27:39.977 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37094 10 6452 1 2025-10-15 21:28:07.835 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 21:28:07.759 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 21:28:07.751 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 21:28:07.732 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:28:07.752 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:28:40.385 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53762 10 6452 1 2025-10-15 21:29:40.789 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55944 10 6452 1 2025-10-15 21:30:41.190 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56174 10 6452 1 2025-10-15 21:27:44.772 00:05:00.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 21:31:41.590 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:48264 10 6452 1 2025-10-15 21:32:41.952 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:56642 10 6452 1 2025-10-15 21:33:07.819 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 21:33:07.831 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 21:33:07.829 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 21:33:07.740 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:33:07.737 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:29:44.770 00:05:00.433 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 21:33:42.335 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35340 10 6452 1 2025-10-15 21:34:42.744 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54734 10 6452 1 2025-10-15 21:35:43.153 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59146 10 6452 1 2025-10-15 21:36:43.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55570 10 6452 1 2025-10-15 21:33:44.773 00:05:00.431 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 21:37:43.920 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60214 10 6452 1 2025-10-15 21:38:08.268 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 21:38:07.920 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 21:38:08.297 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:38:08.186 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:38:08.168 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 21:38:44.332 00:00:10.931 TCP 1.101.0.1:3000 -> 23.104.0.1:50026 10 6452 1 2025-10-15 21:35:44.771 00:05:00.436 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 21:39:45.299 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49832 10 6452 1 2025-10-15 21:40:45.698 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41846 10 6452 1 2025-10-15 21:41:46.110 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47904 10 6452 1 2025-10-15 21:42:46.510 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57092 10 6452 1 2025-10-15 21:43:08.082 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 21:43:07.915 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:43:07.869 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:43:08.081 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 21:43:07.951 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 21:39:44.776 00:05:00.431 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 21:43:46.913 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34842 10 6452 1 2025-10-15 21:44:47.340 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50466 10 6452 1 2025-10-15 21:41:44.775 00:05:00.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 21:45:47.699 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:48720 10 6452 1 2025-10-15 21:46:48.156 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52580 10 6452 1 2025-10-15 21:47:48.563 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50404 10 6452 1 2025-10-15 21:48:08.012 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 21:48:07.946 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 21:48:08.157 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 21:48:08.097 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:48:07.929 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:48:48.971 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47610 10 6452 1 2025-10-15 21:45:44.777 00:05:00.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 21:49:49.383 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46014 10 6452 1 2025-10-15 21:50:49.791 00:00:10.493 TCP 1.101.0.1:3000 -> 23.104.0.1:51728 10 6452 1 2025-10-15 21:47:44.775 00:05:00.435 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 21:51:50.323 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52742 10 6452 1 2025-10-15 21:52:50.688 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:34480 10 6452 1 2025-10-15 21:53:08.119 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 21:53:08.124 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 21:53:08.206 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:53:08.500 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:53:08.582 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-15 21:53:51.065 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41096 12 6556 1 2025-10-15 21:54:51.469 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33358 10 6452 1 2025-10-15 21:51:44.777 00:05:00.432 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-15 21:55:51.879 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41432 10 6452 1 2025-10-15 21:56:52.285 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55018 10 6452 1 2025-10-15 21:53:44.775 00:05:00.436 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-15 21:57:52.687 00:00:10.660 TCP 1.101.0.1:3000 -> 23.104.0.1:49504 10 6452 1 2025-10-15 21:58:08.508 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-15 21:58:08.469 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-15 21:58:08.285 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:58:08.350 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-15 21:58:08.434 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 139, total bytes: 414777, total packets: 1018, avg bps: 906, avg pps: 0, avg bpp: 407 Time window: 2025-10-15 20:57:44 - 2025-10-15 21:58:45 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0035s User: 0.0012s Wall: 0.0019s flows/second: 72967.2 Runtime: 0.0019s