Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-21 20:58:52.693 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:60710 12 10375 1 2025-10-21 20:59:53.182 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39468 10 6452 1 2025-10-21 21:01:00.594 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 21:01:00.500 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 21:01:00.381 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:00:53.587 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36546 10 6452 1 2025-10-21 21:01:00.503 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:01:00.586 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 20:57:47.904 00:05:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 21:01:53.990 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49202 10 6452 1 2025-10-21 21:02:54.396 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39616 10 6452 1 2025-10-21 20:59:47.908 00:05:00.302 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 21:03:54.810 00:00:10.470 TCP 1.101.0.1:3000 -> 23.104.0.1:59044 12 10375 1 2025-10-21 21:04:55.321 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39810 10 6452 1 2025-10-21 21:06:00.630 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 21:06:00.674 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 21:06:00.597 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:06:00.587 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:06:00.670 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 21:05:55.729 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44824 10 6452 1 2025-10-21 21:06:56.112 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38858 10 6452 1 2025-10-21 21:03:47.907 00:05:00.307 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 21:07:56.475 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44614 10 6452 1 2025-10-21 21:08:56.885 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:39610 10 6452 1 2025-10-21 21:05:47.911 00:05:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 21:09:57.256 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60724 10 6452 1 2025-10-21 21:11:00.740 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 21:11:00.908 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 21:11:00.582 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:11:00.870 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:11:00.952 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 21:10:57.656 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41788 10 6452 1 2025-10-21 21:11:58.064 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33596 10 6452 1 2025-10-21 21:12:58.481 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51250 10 6452 1 2025-10-21 21:09:47.909 00:05:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 21:13:58.907 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51210 10 6452 1 2025-10-21 21:14:59.311 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52666 10 6452 1 2025-10-21 21:11:47.913 00:05:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 21:16:02.176 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 21:16:01.934 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:16:01.992 00:00:00.039 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:16:01.993 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 21:16:02.074 00:00:00.039 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 21:15:59.723 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53296 10 6452 1 2025-10-21 21:17:00.139 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42120 10 6452 1 2025-10-21 21:18:00.546 00:00:10.882 TCP 1.101.0.1:3000 -> 23.104.0.1:43578 10 6452 1 2025-10-21 21:19:01.470 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55888 10 6452 1 2025-10-21 21:15:47.911 00:05:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 21:20:01.889 00:00:10.752 TCP 1.101.0.1:3000 -> 23.104.0.1:56036 10 6452 1 2025-10-21 21:21:00.971 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 21:21:00.828 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 21:21:00.825 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 21:21:00.714 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:21:00.887 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:21:02.686 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35084 10 6452 1 2025-10-21 21:17:47.913 00:05:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 21:22:03.112 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48476 10 6452 1 2025-10-21 21:23:03.525 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47658 10 6452 1 2025-10-21 21:24:03.931 00:00:18.093 TCP 1.101.0.1:3000 -> 23.104.0.1:55536 10 6452 1 2025-10-21 21:25:12.101 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34988 10 6452 1 2025-10-21 21:21:47.912 00:05:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 21:26:00.886 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 21:26:00.946 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 21:26:00.834 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:26:01.137 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:26:01.222 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 21:26:12.505 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38502 10 6452 1 2025-10-21 21:27:12.912 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57752 10 6452 1 2025-10-21 21:23:47.915 00:05:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 21:28:13.316 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35156 10 6452 1 2025-10-21 21:29:13.722 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51466 10 6452 1 2025-10-21 21:30:14.137 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34210 10 6452 1 2025-10-21 21:31:01.225 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 21:31:01.148 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 21:31:00.942 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:31:00.923 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:31:01.006 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 21:31:14.538 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57850 10 6452 1 2025-10-21 21:27:47.912 00:05:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 21:32:14.950 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49988 10 6452 1 2025-10-21 21:33:15.311 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48770 10 6452 1 2025-10-21 21:29:47.916 00:05:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 21:34:15.715 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50634 10 6452 1 2025-10-21 21:35:16.133 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40048 10 6452 1 2025-10-21 21:36:01.767 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 21:36:01.431 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 21:36:01.287 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 21:36:01.573 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:36:01.685 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:36:16.543 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37982 10 6452 1 2025-10-21 21:37:16.900 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57562 10 6452 1 2025-10-21 21:33:47.914 00:05:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 21:38:17.321 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51122 10 6452 1 2025-10-21 21:39:17.725 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37556 10 6452 1 2025-10-21 21:35:47.918 00:05:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 21:40:18.131 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54478 10 6452 1 2025-10-21 21:41:01.219 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 21:41:01.066 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:41:01.334 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:41:01.388 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 21:41:01.417 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 21:41:18.533 00:00:10.703 TCP 1.101.0.1:3000 -> 23.104.0.1:42568 10 6452 1 2025-10-21 21:42:19.276 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56570 10 6452 1 2025-10-21 21:43:19.679 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41010 10 6452 1 2025-10-21 21:39:47.915 00:05:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 21:44:20.113 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:57546 12 10375 1 2025-10-21 21:45:20.591 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48364 10 6452 1 2025-10-21 21:41:47.919 00:05:00.320 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 21:46:01.510 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 21:46:01.325 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 21:46:01.158 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:46:01.322 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:46:01.405 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 21:46:20.986 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38392 10 6452 1 2025-10-21 21:47:21.352 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52666 10 6452 1 2025-10-21 21:48:21.756 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:45190 10 6452 1 2025-10-21 21:49:22.188 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50688 10 6452 1 2025-10-21 21:45:47.917 00:05:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 21:50:22.593 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33214 10 6452 1 2025-10-21 21:51:02.597 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 21:51:02.519 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 21:51:02.314 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 21:51:02.499 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:51:02.516 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:51:23.001 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33238 10 6452 1 2025-10-21 21:47:47.920 00:05:00.322 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 21:52:23.406 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38610 10 6452 1 2025-10-21 21:53:23.766 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56232 10 6452 1 2025-10-21 21:54:24.134 00:00:10.539 TCP 1.101.0.1:3000 -> 23.104.0.1:43654 10 6452 1 2025-10-21 21:55:24.711 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52264 10 6452 1 2025-10-21 21:51:47.918 00:05:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 21:56:01.500 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 21:56:01.599 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 21:56:01.526 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 21:56:01.544 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:56:01.418 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 21:56:25.117 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45738 10 6452 1 2025-10-21 21:57:25.526 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36618 10 6452 1 2025-10-21 21:53:47.922 00:05:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 21:58:25.886 00:00:10.506 TCP 1.101.0.1:3000 -> 23.104.0.1:47908 10 6452 1 Summary: total flows: 140, total bytes: 428769, total packets: 1026, avg bps: 937, avg pps: 0, avg bpp: 417 Time window: 2025-10-21 20:57:47 - 2025-10-21 21:58:48 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0028s User: 0.0018s Wall: 0.0013s flows/second: 109206.4 Runtime: 0.0013s