Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-21 05:59:00.360 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:48640 12 10375 1 2025-10-21 06:00:00.840 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:39642 10 6452 1 2025-10-21 06:00:42.324 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:00:42.230 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:00:42.266 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:00:42.395 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:00:42.476 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 05:55:47.550 00:06:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 05:55:47.549 00:06:00.300 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:01:01.271 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49998 10 6452 1 2025-10-21 06:02:01.681 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58398 10 6452 1 2025-10-21 06:03:02.102 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36956 10 6452 1 2025-10-21 06:04:02.505 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46370 10 6452 1 2025-10-21 06:05:02.905 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39658 10 6452 1 2025-10-21 06:05:42.799 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:05:42.758 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:05:42.723 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:05:42.471 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:05:42.717 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:06:03.268 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44888 10 6452 1 2025-10-21 06:07:03.637 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60652 10 6452 1 2025-10-21 06:02:47.548 00:06:00.304 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:02:47.552 00:06:00.299 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:08:03.997 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33682 10 6452 1 2025-10-21 06:09:04.412 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:51258 12 10369 1 2025-10-21 06:10:04.889 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43148 10 6452 1 2025-10-21 06:10:42.615 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:10:42.244 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:10:42.464 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:10:42.710 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:10:42.547 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:11:05.303 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44454 10 6452 1 2025-10-21 06:12:05.713 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53644 10 6452 1 2025-10-21 06:13:06.124 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46280 10 6452 1 2025-10-21 06:14:06.486 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50080 10 6452 1 2025-10-21 06:09:47.549 00:06:00.307 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:09:47.552 00:06:00.302 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:15:06.893 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:36366 10 6452 1 2025-10-21 06:15:42.798 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:15:42.619 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:15:42.716 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:15:42.651 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:15:42.564 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:16:07.266 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50810 10 6452 1 2025-10-21 06:17:07.669 00:00:10.979 TCP 1.101.0.1:3000 -> 23.104.0.1:43584 10 6452 1 2025-10-21 06:18:08.686 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58642 10 6452 1 2025-10-21 06:19:09.054 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52830 10 6452 1 2025-10-21 06:20:09.455 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45906 10 6452 1 2025-10-21 06:20:42.849 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:20:42.653 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:20:42.491 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:20:42.650 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:20:42.734 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:21:09.857 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59788 10 6452 1 2025-10-21 06:16:47.551 00:06:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:16:47.555 00:06:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:22:10.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43552 10 6452 1 2025-10-21 06:23:10.683 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35194 10 6452 1 2025-10-21 06:24:11.106 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45972 10 6452 1 2025-10-21 06:25:11.516 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38496 10 6452 1 2025-10-21 06:25:43.050 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:25:43.072 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:25:42.979 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:25:42.683 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:25:42.966 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:26:11.924 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:45452 10 6452 1 2025-10-21 06:27:12.355 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55826 10 6452 1 2025-10-21 06:28:12.757 00:00:12.781 TCP 1.101.0.1:3000 -> 23.104.0.1:38316 10 6452 1 2025-10-21 06:23:47.557 00:06:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:23:47.555 00:06:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:29:15.592 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:45206 12 10369 1 2025-10-21 06:30:16.112 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52912 10 6452 1 2025-10-21 06:30:43.190 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:30:43.142 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:30:42.953 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:30:43.101 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:30:43.108 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:31:16.511 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41714 10 6452 1 2025-10-21 06:32:16.913 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38260 12 6556 1 2025-10-21 06:33:17.320 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:60034 10 6452 1 2025-10-21 06:34:17.671 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35182 10 6452 1 2025-10-21 06:35:18.105 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55760 10 6452 1 2025-10-21 06:35:43.137 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:35:43.309 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:35:42.877 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:35:43.223 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:30:47.560 00:06:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:35:43.308 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:30:47.560 00:06:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:36:18.512 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42114 10 6452 1 2025-10-21 06:37:18.921 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48744 10 6452 1 2025-10-21 06:38:19.323 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50786 10 6452 1 2025-10-21 06:39:19.729 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42946 10 6452 1 2025-10-21 06:40:20.134 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41388 10 6452 1 2025-10-21 06:40:43.336 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:40:43.264 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:40:43.259 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:40:43.113 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:40:43.253 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:41:20.543 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:33984 10 6452 1 2025-10-21 06:42:20.902 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57238 12 6556 1 2025-10-21 06:37:47.563 00:06:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:37:47.562 00:06:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:43:21.311 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41328 10 6452 1 2025-10-21 06:44:21.729 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60088 10 6452 1 2025-10-21 06:45:22.135 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:35088 10 6452 1 2025-10-21 06:45:43.740 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:45:43.628 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:45:43.541 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:45:43.412 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:45:43.823 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:46:22.580 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41292 10 6452 1 2025-10-21 06:47:22.941 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:34344 10 6452 1 2025-10-21 06:48:23.312 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34400 10 6452 1 2025-10-21 06:49:23.712 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:41080 10 6452 1 2025-10-21 06:44:47.567 00:06:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:44:47.565 00:06:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:50:24.107 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36712 10 6452 1 2025-10-21 06:50:43.379 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:50:43.381 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:50:43.285 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:50:43.531 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:50:43.614 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:51:24.511 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46756 10 6452 1 2025-10-21 06:52:24.917 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45818 12 6556 1 2025-10-21 06:53:25.334 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49634 10 6452 1 2025-10-21 06:54:25.734 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56744 10 6452 1 2025-10-21 06:55:26.139 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44092 10 6452 1 2025-10-21 06:55:43.458 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 06:55:43.458 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 06:55:43.311 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:55:43.363 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 06:55:43.446 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 06:56:26.545 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38448 10 6452 1 2025-10-21 06:51:47.569 00:06:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-21 06:51:47.566 00:06:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-21 06:57:26.955 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44794 10 6452 1 2025-10-21 06:58:27.320 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58012 10 6452 1 Summary: total flows: 138, total bytes: 429807, total packets: 1044, avg bps: 912, avg pps: 0, avg bpp: 411 Time window: 2025-10-21 05:55:47 - 2025-10-21 06:58:37 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0036s User: 0.0018s Wall: 0.0018s flows/second: 76491.9 Runtime: 0.0018s