Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 19:59:26.868 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:55012 10 6452 1 2025-10-22 20:00:27.259 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59676 10 6452 1 2025-10-22 20:01:28.111 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:01:28.106 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:01:28.050 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:01:28.170 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:01:28.253 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:01:27.627 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59196 10 6452 1 2025-10-22 20:02:27.986 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41530 10 6452 1 2025-10-22 19:57:48.371 00:06:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:03:28.353 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49690 10 6452 1 2025-10-22 20:04:28.754 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:60978 10 6452 1 2025-10-22 20:05:29.118 00:00:10.891 TCP 1.101.0.1:3000 -> 23.104.0.1:58000 10 6452 1 2025-10-22 20:00:48.376 00:06:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:06:28.407 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:06:28.239 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:06:28.320 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:06:28.375 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:06:28.459 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:06:30.055 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54172 10 6452 1 2025-10-22 20:07:30.465 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:54526 10 6452 1 2025-10-22 20:08:30.849 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:54796 10 6452 1 2025-10-22 20:09:31.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42280 10 6452 1 2025-10-22 20:04:48.375 00:06:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:10:31.694 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48714 10 6452 1 2025-10-22 20:11:28.527 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:11:28.313 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:11:28.441 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:11:28.100 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:11:28.523 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:11:32.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38704 10 6452 1 2025-10-22 20:12:32.513 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50136 10 6452 1 2025-10-22 20:07:48.378 00:06:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:13:32.921 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51620 10 6452 1 2025-10-22 20:14:33.329 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48690 10 6452 1 2025-10-22 20:15:33.737 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53544 10 6452 1 2025-10-22 20:16:28.573 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:16:28.449 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:16:28.498 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:16:28.612 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:16:28.580 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:16:34.146 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40942 10 6452 1 2025-10-22 20:11:48.378 00:06:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:17:34.546 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58214 10 6452 1 2025-10-22 20:18:34.948 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60806 10 6452 1 2025-10-22 20:14:48.380 00:06:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:19:35.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50608 10 6452 1 2025-10-22 20:20:35.766 00:00:10.467 TCP 1.101.0.1:3000 -> 23.104.0.1:34642 10 6452 1 2025-10-22 20:21:28.545 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:21:28.532 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:21:28.576 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:21:28.410 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:21:28.462 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:21:36.281 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46904 10 6452 1 2025-10-22 20:22:36.686 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48044 10 6452 1 2025-10-22 20:18:48.379 00:06:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:23:37.119 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47864 10 6452 1 2025-10-22 20:24:37.523 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51318 10 6452 1 2025-10-22 20:25:37.932 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53860 10 6452 1 2025-10-22 20:26:28.691 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:26:28.627 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:26:28.608 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:26:28.291 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:26:28.606 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:21:48.382 00:06:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:26:38.353 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49708 10 6452 1 2025-10-22 20:27:38.766 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:32842 10 6452 1 2025-10-22 20:28:39.200 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40782 10 6452 1 2025-10-22 20:29:39.609 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45798 10 6452 1 2025-10-22 20:25:48.380 00:06:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:30:39.970 00:00:10.812 TCP 1.101.0.1:3000 -> 23.104.0.1:41294 10 6452 1 2025-10-22 20:31:28.868 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:31:28.840 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:31:28.783 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:31:28.635 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:31:28.785 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:31:40.820 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43500 10 6452 1 2025-10-22 20:32:41.223 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48580 10 6452 1 2025-10-22 20:28:48.388 00:06:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:33:41.628 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42192 10 6452 1 2025-10-22 20:34:41.996 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42200 10 6452 1 2025-10-22 20:35:42.399 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44742 10 6452 1 2025-10-22 20:36:28.969 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:36:29.084 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:36:29.115 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:36:28.887 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:36:29.219 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:36:42.804 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59642 10 6452 1 2025-10-22 20:32:48.387 00:06:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:37:43.205 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39704 10 6452 1 2025-10-22 20:38:43.573 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60670 10 6452 1 2025-10-22 20:39:43.942 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46024 10 6452 1 2025-10-22 20:35:48.389 00:06:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:40:44.357 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40450 10 6452 1 2025-10-22 20:41:28.940 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:41:28.928 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:41:28.886 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:41:29.052 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:41:29.135 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:41:44.777 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50344 10 6452 1 2025-10-22 20:42:45.189 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34414 10 6452 1 2025-10-22 20:43:45.593 00:00:10.481 TCP 1.101.0.1:3000 -> 23.104.0.1:47198 10 6452 1 2025-10-22 20:39:48.390 00:06:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:44:46.112 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36572 10 6452 1 2025-10-22 20:45:46.512 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59876 10 6452 1 2025-10-22 20:46:29.001 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:46:29.005 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:46:28.913 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:46:29.035 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:46:28.918 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:46:46.918 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44010 10 6452 1 2025-10-22 20:42:48.393 00:06:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:47:47.323 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44774 10 6452 1 2025-10-22 20:48:47.732 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:59102 10 6452 1 2025-10-22 20:49:48.149 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36542 10 6452 1 2025-10-22 20:50:48.547 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50742 10 6452 1 2025-10-22 20:51:29.619 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:51:29.621 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:51:29.680 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:51:29.677 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:51:29.760 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:46:48.391 00:06:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:51:48.956 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58538 10 6452 1 2025-10-22 20:52:49.358 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42552 10 6452 1 2025-10-22 20:53:49.761 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:59312 10 6452 1 2025-10-22 20:49:48.393 00:06:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:54:50.185 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:54064 10 6452 1 2025-10-22 20:55:50.544 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58644 10 6452 1 2025-10-22 20:56:29.285 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:56:28.968 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:56:29.330 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:56:29.326 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:56:29.202 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:56:50.907 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46604 10 6452 1 2025-10-22 20:57:51.307 00:00:11.093 TCP 1.101.0.1:3000 -> 23.104.0.1:59112 10 6452 1 2025-10-22 20:53:48.392 00:06:00.316 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 136, total bytes: 410425, total packets: 1008, avg bps: 882, avg pps: 0, avg bpp: 407 Time window: 2025-10-22 19:57:48 - 2025-10-22 20:59:48 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0024s User: 0.0024s Wall: 0.0022s flows/second: 60774.1 Runtime: 0.0023s