Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 00:59:01.485 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53122 10 6452 1 2025-10-20 01:00:07.851 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 01:00:07.683 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:00:07.760 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:00:07.612 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:00:07.768 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:00:01.842 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:51162 10 6452 1 2025-10-20 00:56:46.950 00:05:00.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-20 01:01:02.279 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45306 10 6452 1 2025-10-20 00:57:46.947 00:05:00.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-20 01:02:02.685 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:51572 10 6452 1 2025-10-20 01:03:03.069 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34860 10 6452 1 2025-10-20 01:04:03.470 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34598 10 6452 1 2025-10-20 01:05:08.446 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:05:08.510 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:05:08.202 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:05:08.490 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:05:08.573 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 01:05:03.867 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53744 10 6452 1 2025-10-20 01:06:04.280 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37254 10 6452 1 2025-10-20 01:02:46.950 00:05:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-20 01:07:04.685 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51480 10 6452 1 2025-10-20 01:03:46.948 00:05:00.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-20 01:08:05.112 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:36484 10 6452 1 2025-10-20 01:09:05.475 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47922 10 6452 1 2025-10-20 01:10:07.729 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 01:10:07.648 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:10:07.718 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:10:07.719 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:10:07.581 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:10:05.881 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:37808 12 6556 1 2025-10-20 01:11:06.317 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58836 10 6452 1 2025-10-20 01:12:06.721 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:43774 10 6452 1 2025-10-20 01:08:46.953 00:05:00.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-20 01:13:07.136 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:43000 11 6504 1 2025-10-20 01:09:46.952 00:05:00.255 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-20 01:14:07.593 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39342 10 6452 1 2025-10-20 01:15:07.895 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:15:07.555 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:15:07.853 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:15:07.740 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:15:07.822 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 01:15:07.997 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59066 10 6452 1 2025-10-20 01:16:08.400 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32882 10 6452 1 2025-10-20 01:17:08.802 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55290 10 6452 1 2025-10-20 01:18:09.213 00:00:10.795 TCP 1.101.0.1:3000 -> 23.104.0.1:57554 12 10375 1 2025-10-20 01:14:46.954 00:05:00.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-20 01:19:10.092 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:33064 10 6452 1 2025-10-20 01:15:46.951 00:05:00.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-20 01:20:08.075 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:20:07.975 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:20:08.201 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:20:07.638 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:20:08.157 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 01:20:10.473 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:53328 10 6452 1 2025-10-20 01:21:10.859 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58188 10 6452 1 2025-10-20 01:22:11.275 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56786 10 6452 1 2025-10-20 01:23:11.687 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59696 10 6452 1 2025-10-20 01:24:12.114 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51814 10 6452 1 2025-10-20 01:20:46.955 00:05:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-20 01:25:07.927 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 01:25:08.067 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:25:07.855 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:25:07.669 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:25:07.844 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:25:12.479 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:52732 10 6452 1 2025-10-20 01:21:46.953 00:05:00.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-20 01:26:12.851 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52890 10 6452 1 2025-10-20 01:27:13.268 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44452 10 6452 1 2025-10-20 01:28:13.631 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57534 10 6452 1 2025-10-20 01:29:14.031 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45508 10 6452 1 2025-10-20 01:30:08.246 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:30:08.378 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:30:08.118 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:30:08.151 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:30:08.328 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 01:30:14.393 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39210 10 6452 1 2025-10-20 01:26:46.957 00:05:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-20 01:31:14.799 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40566 10 6452 1 2025-10-20 01:27:46.956 00:05:00.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-20 01:32:15.216 00:00:10.573 TCP 1.101.0.1:3000 -> 23.104.0.1:35738 10 6452 1 2025-10-20 01:33:15.825 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33456 10 6452 1 2025-10-20 01:34:16.233 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:37258 10 6452 1 2025-10-20 01:35:08.394 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 01:35:08.312 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:35:08.245 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:35:08.313 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:35:07.932 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:35:16.655 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42862 10 6452 1 2025-10-20 01:36:17.064 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54776 10 6452 1 2025-10-20 01:32:46.960 00:05:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-20 01:37:17.475 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49786 10 6452 1 2025-10-20 01:33:46.956 00:05:00.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-20 01:38:17.839 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37606 10 6452 1 2025-10-20 01:39:18.246 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57614 10 6452 1 2025-10-20 01:40:08.355 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:40:08.290 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:40:08.218 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:40:08.290 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:40:08.372 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 01:40:18.609 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34752 10 6452 1 2025-10-20 01:41:19.022 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:34202 10 6452 1 2025-10-20 01:42:19.438 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:35948 10 6452 1 2025-10-20 01:38:46.959 00:05:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-20 01:43:19.814 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39502 10 6452 1 2025-10-20 01:39:46.957 00:05:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-20 01:44:20.214 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45876 10 6452 1 2025-10-20 01:45:08.418 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 01:45:08.500 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:45:08.339 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:45:08.342 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:45:08.336 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:45:20.610 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:49454 10 6452 1 2025-10-20 01:46:21.015 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39140 10 6452 1 2025-10-20 01:47:21.422 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32988 10 6452 1 2025-10-20 01:48:21.783 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49542 10 6452 1 2025-10-20 01:44:46.961 00:05:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-20 01:49:22.156 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44554 10 6452 1 2025-10-20 01:45:46.958 00:05:00.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-20 01:50:08.580 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:50:08.502 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:50:08.609 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:50:08.669 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:50:08.752 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 01:50:22.564 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53476 10 6452 1 2025-10-20 01:51:22.970 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:35180 10 6452 1 2025-10-20 01:52:23.351 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34516 10 6452 1 2025-10-20 01:53:23.761 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52888 10 6452 1 2025-10-20 01:54:24.122 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49764 10 6452 1 2025-10-20 01:50:46.965 00:05:00.249 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-20 01:55:08.725 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-20 01:55:08.688 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:55:08.726 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-20 01:55:08.724 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-20 01:55:08.808 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-20 01:55:24.525 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41074 10 6452 1 2025-10-20 01:51:46.963 00:05:00.255 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-20 01:56:24.929 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47928 10 6452 1 2025-10-20 01:57:25.335 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39516 10 6452 1 2025-10-20 01:58:25.741 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53930 10 6452 1 Summary: total flows: 140, total bytes: 421079, total packets: 1025, avg bps: 908, avg pps: 0, avg bpp: 410 Time window: 2025-10-20 00:56:46 - 2025-10-20 01:58:36 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0010s User: 0.0039s Wall: 0.0022s flows/second: 64098.1 Runtime: 0.0022s