Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 20:59:36.927 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55968 10 6452 1 2025-10-25 21:00:37.336 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35350 10 6452 1 2025-10-25 21:01:37.751 00:00:11.016 TCP 1.101.0.1:3000 -> 23.104.0.1:54546 10 6452 1 2025-10-25 20:57:49.997 00:05:00.276 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 21:02:56.613 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 21:02:38.804 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36058 10 6452 1 2025-10-25 20:57:50.000 00:06:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 21:02:56.737 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 21:02:56.602 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 21:02:56.592 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:02:56.529 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:03:39.213 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41304 10 6452 1 2025-10-25 21:04:39.617 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:51028 10 6452 1 2025-10-25 21:05:40.041 00:00:10.797 TCP 1.101.0.1:3000 -> 23.104.0.1:48088 10 6452 1 2025-10-25 21:06:40.878 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50722 10 6452 1 2025-10-25 21:03:49.998 00:05:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 21:07:41.317 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:58432 10 6452 1 2025-10-25 21:07:56.557 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 21:07:56.655 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 21:07:56.340 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:07:56.558 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:07:56.640 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 21:08:41.762 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41746 10 6452 1 2025-10-25 21:04:50.002 00:06:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 21:09:42.186 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53962 10 6452 1 2025-10-25 21:10:42.550 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39654 10 6452 1 2025-10-25 21:11:42.954 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57196 10 6452 1 2025-10-25 21:12:43.362 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:60074 10 6452 1 2025-10-25 21:12:56.593 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 21:12:56.593 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 21:12:56.540 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:12:56.666 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:12:56.748 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 21:13:43.763 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:45644 10 6452 1 2025-10-25 21:14:44.179 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:48140 11 6504 1 2025-10-25 21:09:50.002 00:06:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 21:15:44.638 00:00:10.511 TCP 1.101.0.1:3000 -> 23.104.0.1:58466 10 6452 1 2025-10-25 21:11:50.005 00:06:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 21:16:45.198 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51158 10 6452 1 2025-10-25 21:17:56.717 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 21:17:56.647 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 21:17:56.662 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:17:45.561 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51766 10 6452 1 2025-10-25 21:17:56.719 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:17:56.801 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 21:18:45.967 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54782 10 6452 1 2025-10-25 21:19:46.372 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43668 10 6452 1 2025-10-25 21:20:46.782 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44282 10 6452 1 2025-10-25 21:16:50.002 00:06:00.279 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 21:21:47.191 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55558 10 6452 1 2025-10-25 21:22:56.928 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 21:22:47.554 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59064 10 6452 1 2025-10-25 21:22:56.832 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 21:22:56.552 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 21:22:56.739 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:22:56.846 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:18:50.033 00:06:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 21:23:47.963 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36020 10 6452 1 2025-10-25 21:24:48.368 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46072 10 6452 1 2025-10-25 21:25:48.774 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36034 10 6452 1 2025-10-25 21:26:49.188 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59136 10 6452 1 2025-10-25 21:27:56.831 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 21:27:56.830 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 21:27:56.659 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:27:56.995 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:27:49.551 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37290 10 6452 1 2025-10-25 21:27:57.077 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 21:23:50.032 00:06:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 21:28:49.907 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36868 10 6452 1 2025-10-25 21:29:50.315 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58450 10 6452 1 2025-10-25 21:25:50.035 00:06:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 21:30:50.719 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40500 10 6452 1 2025-10-25 21:31:51.129 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39126 10 6452 1 2025-10-25 21:32:57.482 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 21:32:57.674 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 21:32:57.584 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 21:32:57.506 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:32:57.400 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:32:51.529 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60844 10 6452 1 2025-10-25 21:33:51.933 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55292 10 6452 1 2025-10-25 21:34:52.352 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47012 10 6452 1 2025-10-25 21:30:50.035 00:06:00.253 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 21:35:52.756 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:40858 12 10369 1 2025-10-25 21:36:53.251 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49580 10 6452 1 2025-10-25 21:32:50.041 00:06:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 21:37:57.220 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 21:37:57.088 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 21:37:57.183 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 21:37:56.703 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:37:57.137 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:37:53.608 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43832 10 6452 1 2025-10-25 21:38:54.011 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48908 10 6452 1 2025-10-25 21:39:54.419 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46738 10 6452 1 2025-10-25 21:40:54.825 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:60850 10 6452 1 2025-10-25 21:41:55.284 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41340 10 6452 1 2025-10-25 21:37:50.042 00:06:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 21:42:57.417 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 21:42:57.337 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 21:42:57.136 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 21:42:57.366 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:42:57.335 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:42:55.696 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58122 10 6452 1 2025-10-25 21:43:56.114 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47096 10 6452 1 2025-10-25 21:39:50.046 00:06:00.242 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 21:44:56.516 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34072 10 6452 1 2025-10-25 21:45:56.923 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:51368 10 6452 1 2025-10-25 21:46:57.349 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49856 10 6452 1 2025-10-25 21:47:57.309 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 21:47:57.203 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 21:47:57.149 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:47:57.265 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:47:57.349 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 21:47:57.784 00:00:10.963 TCP 1.101.0.1:3000 -> 23.104.0.1:58716 10 6452 1 2025-10-25 21:48:58.785 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56534 10 6452 1 2025-10-25 21:44:50.050 00:06:00.244 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 21:49:59.196 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57966 10 6452 1 2025-10-25 21:50:59.601 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52926 10 6452 1 2025-10-25 21:46:50.052 00:06:00.237 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 21:52:00.003 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:35880 10 6452 1 2025-10-25 21:52:57.520 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 21:52:57.333 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 21:52:57.343 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 21:52:57.229 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:52:57.437 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:53:00.462 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52038 10 6452 1 2025-10-25 21:54:00.863 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57132 10 6452 1 2025-10-25 21:55:01.276 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33946 10 6452 1 2025-10-25 21:56:01.681 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36332 10 6452 1 2025-10-25 21:51:50.051 00:06:00.244 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 21:57:02.102 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50126 10 6452 1 2025-10-25 21:57:57.385 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 21:57:57.477 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 21:57:57.477 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 21:57:57.434 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:57:57.304 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 21:58:02.506 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56508 10 6452 1 Summary: total flows: 136, total bytes: 414148, total packets: 1007, avg bps: 914, avg pps: 0, avg bpp: 411 Time window: 2025-10-25 20:57:49 - 2025-10-25 21:58:12 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0051s User: 0.0009s Wall: 0.0027s flows/second: 51301.9 Runtime: 0.0027s