Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 20:59:07.958 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60626 10 6452 1 2025-10-18 20:59:33.759 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 20:59:33.764 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 20:59:33.576 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 20:59:33.757 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 20:59:33.840 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:00:08.363 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41450 10 6452 1 2025-10-18 20:55:46.390 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:01:08.761 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:38332 10 6452 1 2025-10-18 21:02:09.186 00:00:10.963 TCP 1.101.0.1:3000 -> 23.104.0.1:54440 10 6452 1 2025-10-18 21:03:10.184 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36830 10 6452 1 2025-10-18 20:58:46.390 00:06:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:04:10.586 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43762 10 6452 1 2025-10-18 21:04:34.031 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:04:33.898 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:04:33.859 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:04:33.948 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:04:33.897 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:05:10.990 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58160 10 6452 1 2025-10-18 21:06:11.395 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60542 10 6452 1 2025-10-18 21:07:11.791 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57912 10 6452 1 2025-10-18 21:02:46.396 00:06:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:08:12.200 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55432 10 6452 1 2025-10-18 21:09:12.605 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52638 10 6452 1 2025-10-18 21:09:34.009 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:09:33.802 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:09:33.923 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:09:33.839 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:09:34.091 00:00:00.046 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:10:13.016 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50726 10 6452 1 2025-10-18 21:05:46.393 00:06:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:11:13.413 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42096 10 6452 1 2025-10-18 21:12:13.813 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:37876 10 6452 1 2025-10-18 21:13:14.185 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50350 10 6452 1 2025-10-18 21:14:14.587 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44412 10 6452 1 2025-10-18 21:14:33.995 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:14:33.906 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:14:34.003 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:14:33.951 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:14:33.913 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:09:46.396 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:15:14.990 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:48166 10 6452 1 2025-10-18 21:16:15.361 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49830 10 6452 1 2025-10-18 21:17:15.763 00:00:10.726 TCP 1.101.0.1:3000 -> 23.104.0.1:38652 10 6452 1 2025-10-18 21:12:46.395 00:06:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:18:16.528 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39160 10 6452 1 2025-10-18 21:19:16.928 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:55738 10 6452 1 2025-10-18 21:19:34.229 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:19:34.172 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:19:33.894 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:19:34.171 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:19:34.254 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:20:17.367 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55054 10 6452 1 2025-10-18 21:21:17.745 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60480 10 6452 1 2025-10-18 21:16:46.398 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:22:18.146 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47984 10 6452 1 2025-10-18 21:23:18.551 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:56048 10 6452 1 2025-10-18 21:24:18.911 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35990 10 6452 1 2025-10-18 21:24:34.116 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:24:34.258 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:24:33.975 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:24:34.033 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:24:34.245 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:19:46.396 00:06:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:25:19.315 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55462 10 6452 1 2025-10-18 21:26:19.717 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:55550 10 6452 1 2025-10-18 21:27:20.148 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53630 10 6452 1 2025-10-18 21:28:20.552 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:38690 12 10375 1 2025-10-18 21:23:46.401 00:06:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:29:34.533 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:29:34.330 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:29:34.329 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:29:34.450 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:29:21.032 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60634 10 6452 1 2025-10-18 21:29:34.451 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:30:21.430 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34140 10 6452 1 2025-10-18 21:31:21.834 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:56606 10 6452 1 2025-10-18 21:26:46.401 00:06:00.234 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:32:22.225 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49510 10 6452 1 2025-10-18 21:33:22.629 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34878 10 6452 1 2025-10-18 21:34:34.434 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:34:34.545 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:34:23.033 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49790 10 6452 1 2025-10-18 21:34:34.613 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:34:34.345 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:34:34.342 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:35:23.440 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45954 10 6452 1 2025-10-18 21:30:46.404 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:36:23.847 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:34950 10 6452 1 2025-10-18 21:37:24.270 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49532 10 6452 1 2025-10-18 21:38:24.672 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53894 10 6452 1 2025-10-18 21:33:46.402 00:06:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:39:34.806 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:39:34.601 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:39:34.602 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:39:34.691 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:39:34.724 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:39:25.036 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:45170 11 6504 1 2025-10-18 21:40:25.491 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47166 10 6452 1 2025-10-18 21:41:25.893 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49550 12 6556 1 2025-10-18 21:42:26.307 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37228 10 6452 1 2025-10-18 21:37:46.405 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:43:26.708 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46072 10 6452 1 2025-10-18 21:44:34.744 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:44:34.605 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:44:34.646 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:44:27.113 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55956 10 6452 1 2025-10-18 21:44:35.201 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:44:35.283 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:45:27.473 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34670 10 6452 1 2025-10-18 21:40:46.403 00:06:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:46:27.874 00:00:11.064 TCP 1.101.0.1:3000 -> 23.104.0.1:50890 11 6504 1 2025-10-18 21:47:28.980 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:56010 10 6452 1 2025-10-18 21:48:29.352 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60620 10 6452 1 2025-10-18 21:49:34.761 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:49:34.609 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:49:34.752 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:49:34.642 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:49:34.843 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:49:29.759 00:00:10.429 TCP 1.101.0.1:3000 -> 23.104.0.1:33994 11 6504 1 2025-10-18 21:44:46.407 00:06:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:50:30.220 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34290 10 6452 1 2025-10-18 21:51:30.589 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51300 10 6452 1 2025-10-18 21:52:30.994 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58420 10 6452 1 2025-10-18 21:47:46.406 00:06:00.234 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:53:31.436 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:50098 12 10369 1 2025-10-18 21:54:34.956 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:54:34.896 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:54:34.806 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:54:34.892 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:54:34.975 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:54:31.918 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45996 10 6452 1 2025-10-18 21:55:32.278 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45660 10 6452 1 2025-10-18 21:56:32.694 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35236 10 6452 1 2025-10-18 21:51:46.412 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:57:33.108 00:00:10.904 TCP 1.101.0.1:3000 -> 23.104.0.1:55880 10 6452 1 2025-10-18 21:58:34.065 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:34430 12 10369 1 Summary: total flows: 137, total bytes: 428894, total packets: 1029, avg bps: 908, avg pps: 0, avg bpp: 416 Time window: 2025-10-18 20:55:46 - 2025-10-18 21:58:44 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0025s User: 0.0013s Wall: 0.0012s flows/second: 116390.4 Runtime: 0.0012s