Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-21 23:58:42.148 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53874 10 6452 1 2025-10-21 23:59:42.547 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:55678 10 6452 1 2025-10-22 00:00:42.943 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37434 10 6452 1 2025-10-22 00:01:03.929 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:01:03.934 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:01:04.076 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:01:04.145 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:01:04.015 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 23:57:47.950 00:05:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:01:43.363 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50520 10 6452 1 2025-10-22 00:02:43.771 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59218 10 6452 1 2025-10-21 23:59:47.952 00:05:00.324 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:03:44.186 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44552 10 6452 1 2025-10-22 00:04:44.549 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:52100 12 10375 1 2025-10-22 00:05:45.026 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:48382 10 6452 1 2025-10-22 00:06:04.259 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:06:04.302 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:06:04.212 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:06:03.825 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:06:04.342 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:06:45.420 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37156 10 6452 1 2025-10-22 00:03:47.952 00:05:00.328 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:07:45.824 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:49858 11 6504 1 2025-10-22 00:08:46.275 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34528 10 6452 1 2025-10-22 00:05:47.956 00:05:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:09:46.678 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39904 10 6452 1 2025-10-22 00:10:47.102 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35696 10 6452 1 2025-10-22 00:11:04.830 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:11:04.316 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:11:04.527 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:11:04.240 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:11:04.749 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:11:47.464 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48362 10 6452 1 2025-10-22 00:12:47.831 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42982 10 6452 1 2025-10-22 00:09:47.957 00:05:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:13:48.236 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46788 10 6452 1 2025-10-22 00:14:48.601 00:00:10.769 TCP 1.101.0.1:3000 -> 23.104.0.1:42236 10 6452 1 2025-10-22 00:11:47.962 00:05:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:15:49.403 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42142 10 6452 1 2025-10-22 00:16:04.377 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:16:04.510 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:16:04.199 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:16:04.287 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:16:04.371 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:16:49.772 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47040 10 6452 1 2025-10-22 00:17:50.187 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46618 10 6452 1 2025-10-22 00:18:50.586 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53756 10 6452 1 2025-10-22 00:15:47.960 00:05:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:19:50.991 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49402 10 6452 1 2025-10-22 00:21:04.931 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:20:51.354 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57890 10 6452 1 2025-10-22 00:21:04.685 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:21:04.816 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:21:04.899 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:21:05.101 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:17:47.963 00:05:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:21:51.758 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56212 10 6452 1 2025-10-22 00:22:52.179 00:00:10.935 TCP 1.101.0.1:3000 -> 23.104.0.1:37228 10 6452 1 2025-10-22 00:23:53.149 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53646 10 6452 1 2025-10-22 00:24:53.559 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47708 10 6452 1 2025-10-22 00:21:47.961 00:05:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:26:04.545 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:26:04.356 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:26:04.655 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:25:53.926 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51568 10 6452 1 2025-10-22 00:26:04.657 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:26:04.737 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:26:54.334 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:58476 10 6452 1 2025-10-22 00:23:47.964 00:05:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:27:54.715 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:33134 10 6452 1 2025-10-22 00:28:55.116 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58976 10 6452 1 2025-10-22 00:29:55.518 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59102 10 6452 1 2025-10-22 00:31:04.646 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:31:04.650 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:31:04.642 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:31:04.722 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:31:04.804 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:30:55.929 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:37606 10 6452 1 2025-10-22 00:27:47.962 00:05:00.322 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:31:56.357 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34368 10 6452 1 2025-10-22 00:32:56.762 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:36272 10 6452 1 2025-10-22 00:29:47.965 00:05:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:33:57.133 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56170 10 6452 1 2025-10-22 00:34:57.535 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52328 10 6452 1 2025-10-22 00:36:04.853 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:36:04.916 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:36:04.819 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:36:04.857 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:36:04.941 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:35:57.935 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:56268 10 6452 1 2025-10-22 00:36:58.366 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:53860 10 6452 1 2025-10-22 00:33:47.963 00:05:00.322 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:37:58.757 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49866 10 6452 1 2025-10-22 00:38:59.130 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58528 10 6452 1 2025-10-22 00:35:47.967 00:05:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:39:59.535 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54198 10 6452 1 2025-10-22 00:41:04.855 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:41:04.949 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:41:04.909 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:41:04.772 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:41:05.098 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:40:59.946 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37538 10 6452 1 2025-10-22 00:42:00.361 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43228 10 6452 1 2025-10-22 00:43:00.758 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59578 10 6452 1 2025-10-22 00:39:47.964 00:05:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:44:01.172 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:39636 10 6452 1 2025-10-22 00:45:01.546 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54142 10 6452 1 2025-10-22 00:41:47.967 00:05:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:46:04.944 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:46:05.145 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:46:05.138 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:46:04.985 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:46:05.063 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:46:01.945 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48254 10 6452 1 2025-10-22 00:47:02.319 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57646 10 6452 1 2025-10-22 00:48:02.724 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47304 10 6452 1 2025-10-22 00:49:03.135 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50004 10 6452 1 2025-10-22 00:45:47.965 00:05:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:50:03.543 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55362 10 6452 1 2025-10-22 00:51:05.221 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:51:05.104 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:51:05.095 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:51:05.166 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:51:05.177 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:51:03.946 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45366 10 6452 1 2025-10-22 00:47:47.967 00:05:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:52:04.355 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39500 10 6452 1 2025-10-22 00:53:04.752 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46022 10 6452 1 2025-10-22 00:54:05.126 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51966 10 6452 1 2025-10-22 00:55:05.534 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53254 10 6452 1 2025-10-22 00:51:47.965 00:05:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:56:05.359 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:56:05.107 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:56:05.296 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:56:05.080 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:56:05.442 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:56:05.943 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:43990 10 6452 1 2025-10-22 00:57:06.312 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32974 10 6452 1 2025-10-22 00:53:47.973 00:05:00.316 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:58:06.720 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51772 10 6452 1 Summary: total flows: 140, total bytes: 420975, total packets: 1023, avg bps: 920, avg pps: 0, avg bpp: 411 Time window: 2025-10-21 23:57:47 - 2025-10-22 00:58:48 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0017s User: 0.0034s Wall: 0.0023s flows/second: 61377.9 Runtime: 0.0023s