Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-21 21:59:26.437 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56336 10 6452 1 2025-10-21 22:00:26.840 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:32836 10 6452 1 2025-10-21 22:01:01.401 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:01:01.770 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 22:01:01.658 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 22:01:01.643 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:01:01.485 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 22:01:27.263 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51076 10 6452 1 2025-10-21 21:57:47.919 00:05:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 22:02:27.660 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40138 10 6452 1 2025-10-21 22:03:28.051 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54684 10 6452 1 2025-10-21 21:59:47.920 00:05:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 22:04:28.458 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44752 10 6452 1 2025-10-21 22:05:28.866 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51626 10 6452 1 2025-10-21 22:06:01.635 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 22:06:01.898 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:06:01.820 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:06:01.881 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 22:06:01.903 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 22:06:29.277 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48630 10 6452 1 2025-10-21 22:07:29.678 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48816 10 6452 1 2025-10-21 22:03:47.920 00:05:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 22:08:30.109 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50858 10 6452 1 2025-10-21 22:09:30.526 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49268 10 6452 1 2025-10-21 22:05:47.923 00:05:00.322 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 22:10:30.935 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39752 10 6452 1 2025-10-21 22:11:01.831 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 22:11:02.361 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 22:11:02.190 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:11:02.097 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:11:02.181 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 22:11:31.368 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48320 10 6452 1 2025-10-21 22:12:31.770 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:57618 10 6452 1 2025-10-21 22:13:32.138 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45924 12 6556 1 2025-10-21 22:09:47.920 00:05:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 22:14:32.547 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:43222 10 6452 1 2025-10-21 22:15:32.911 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43614 10 6452 1 2025-10-21 22:11:47.924 00:05:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 22:16:01.915 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 22:16:01.921 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 22:16:01.936 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 22:16:02.136 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:16:01.832 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:16:33.320 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41878 10 6452 1 2025-10-21 22:17:33.683 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53910 10 6452 1 2025-10-21 22:18:34.105 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43740 10 6452 1 2025-10-21 22:19:34.509 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57688 10 6452 1 2025-10-21 22:15:47.921 00:05:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 22:20:34.913 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44518 10 6452 1 2025-10-21 22:21:02.234 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 22:21:02.152 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:21:02.007 00:00:00.037 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 22:21:02.113 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 22:21:02.080 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:17:47.924 00:05:00.322 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 22:21:35.318 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60752 10 6452 1 2025-10-21 22:22:35.683 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36842 10 6452 1 2025-10-21 22:23:36.101 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47202 10 6452 1 2025-10-21 22:24:36.506 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57716 10 6452 1 2025-10-21 22:25:36.909 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:58700 10 6452 1 2025-10-21 22:21:47.923 00:05:00.328 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 22:26:02.279 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 22:26:02.158 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 22:26:02.121 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:26:02.228 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:26:02.311 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 22:26:37.400 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49516 10 6452 1 2025-10-21 22:27:37.801 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42744 10 6452 1 2025-10-21 22:23:47.926 00:05:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 22:28:38.211 00:00:10.809 TCP 1.101.0.1:3000 -> 23.104.0.1:44530 10 6452 1 2025-10-21 22:29:39.067 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54544 10 6452 1 2025-10-21 22:30:39.467 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33370 10 6452 1 2025-10-21 22:31:02.413 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 22:31:02.449 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 22:31:02.298 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 22:31:02.308 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:31:02.330 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:27:47.924 00:05:00.328 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 22:31:39.872 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56598 10 6452 1 2025-10-21 22:32:40.279 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41702 10 6452 1 2025-10-21 22:29:47.927 00:05:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 22:33:40.683 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45260 10 6452 1 2025-10-21 22:34:41.068 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45594 10 6452 1 2025-10-21 22:35:41.474 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48920 10 6452 1 2025-10-21 22:36:02.462 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:36:02.328 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 22:36:02.594 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 22:36:02.385 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:36:02.545 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 22:36:41.875 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42882 10 6452 1 2025-10-21 22:33:47.928 00:05:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 22:37:42.277 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57284 10 6452 1 2025-10-21 22:38:42.680 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58392 10 6452 1 2025-10-21 22:35:47.931 00:05:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 22:39:43.110 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48876 10 6452 1 2025-10-21 22:40:43.517 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60110 10 6452 1 2025-10-21 22:41:02.507 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 22:41:02.509 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 22:41:02.488 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:41:02.442 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:41:02.526 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 22:41:43.919 00:00:10.593 TCP 1.101.0.1:3000 -> 23.104.0.1:43600 10 6452 1 2025-10-21 22:42:44.549 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34428 10 6452 1 2025-10-21 22:39:47.928 00:05:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 22:43:44.917 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:58252 12 10369 1 2025-10-21 22:44:45.400 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44942 10 6452 1 2025-10-21 22:41:47.931 00:05:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 22:45:45.803 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60844 10 6452 1 2025-10-21 22:46:02.851 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 22:46:03.059 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 22:46:02.838 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:46:02.968 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:46:03.050 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 22:46:46.202 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60648 10 6452 1 2025-10-21 22:47:46.609 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37594 10 6452 1 2025-10-21 22:48:47.016 00:00:10.590 TCP 1.101.0.1:3000 -> 23.104.0.1:52378 16 18424 1 2025-10-21 22:45:47.931 00:05:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 22:49:47.644 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59580 10 6661 1 2025-10-21 22:50:48.056 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39652 10 6661 1 2025-10-21 22:51:02.712 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 22:51:02.588 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 22:51:02.547 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:51:02.710 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:51:02.793 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 22:47:47.932 00:05:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 22:51:48.461 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52122 10 6661 1 2025-10-21 22:52:48.822 00:00:10.560 TCP 1.101.0.1:3000 -> 23.104.0.1:59012 10 6661 1 2025-10-21 22:53:49.419 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41568 10 6661 1 2025-10-21 22:54:49.824 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40984 10 6661 1 2025-10-21 22:51:47.930 00:05:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 22:56:02.790 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 22:56:02.841 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 22:56:02.850 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:56:02.841 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 22:55:50.189 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58926 10 6661 1 2025-10-21 22:56:02.923 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 22:56:50.588 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48400 10 6661 1 2025-10-21 22:53:47.933 00:05:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 22:57:51.002 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56738 10 6661 1 Summary: total flows: 139, total bytes: 428422, total packets: 1020, avg bps: 936, avg pps: 0, avg bpp: 420 Time window: 2025-10-21 21:57:47 - 2025-10-21 22:58:48 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0032s User: 0.0016s Wall: 0.0024s flows/second: 56940.0 Runtime: 0.0025s