Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 20:59:07.691 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35268 10 6452 1 2025-10-03 20:55:38.724 00:05:00.374 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:00:08.109 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40562 10 6452 1 2025-10-03 21:01:08.517 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43662 10 6452 1 2025-10-03 21:02:20.763 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:02:08.918 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41142 10 6452 1 2025-10-03 21:02:20.673 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:02:20.547 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:02:20.680 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:02:20.683 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:03:09.278 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36596 10 6452 1 2025-10-03 20:59:38.727 00:05:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:04:09.633 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46278 10 6452 1 2025-10-03 21:05:10.048 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39054 10 6452 1 2025-10-03 21:01:38.724 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:06:10.446 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39754 10 6452 1 2025-10-03 21:07:20.869 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:07:20.658 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:07:20.815 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:07:20.809 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:07:20.898 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:07:10.855 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60344 10 6452 1 2025-10-03 21:08:11.272 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34996 10 6452 1 2025-10-03 21:09:11.675 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43682 10 6452 1 2025-10-03 21:05:38.727 00:05:00.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:10:12.110 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36200 10 6452 1 2025-10-03 21:11:12.510 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35246 10 6452 1 2025-10-03 21:07:38.726 00:05:00.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:12:20.927 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:12:20.754 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:12:20.921 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:12:21.013 00:00:00.041 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:12:12.925 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:34538 10 6452 1 2025-10-03 21:12:21.094 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:13:13.352 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59522 10 6452 1 2025-10-03 21:14:13.755 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:33866 10 6452 1 2025-10-03 21:15:14.175 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57414 10 6452 1 2025-10-03 21:11:38.729 00:05:00.372 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:16:14.584 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34156 10 6452 1 2025-10-03 21:17:20.923 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:17:20.952 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:17:20.931 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:17:21.090 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:17:21.008 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:17:14.986 00:00:10.765 TCP 1.101.0.1:3000 -> 23.104.0.1:39860 10 6452 1 2025-10-03 21:13:38.729 00:05:00.374 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:18:15.789 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50182 10 6452 1 2025-10-03 21:19:16.194 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53062 10 6452 1 2025-10-03 21:20:16.602 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32982 10 6452 1 2025-10-03 21:21:17.019 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47172 10 6452 1 2025-10-03 21:17:38.731 00:05:00.370 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:22:21.235 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:22:21.416 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:22:21.251 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:22:21.168 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:22:21.333 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:22:17.412 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59786 10 6452 1 2025-10-03 21:23:17.815 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:36444 12 10375 1 2025-10-03 21:19:38.729 00:05:00.375 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:24:18.295 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54254 10 6452 1 2025-10-03 21:25:18.707 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39940 10 6452 1 2025-10-03 21:26:19.114 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33006 10 6452 1 2025-10-03 21:27:21.174 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:27:21.061 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:27:21.183 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:27:21.294 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:27:21.265 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:27:19.515 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41430 10 6452 1 2025-10-03 21:23:38.732 00:05:00.370 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:28:19.918 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45874 10 6452 1 2025-10-03 21:29:20.319 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53498 10 6452 1 2025-10-03 21:25:38.730 00:05:00.375 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:30:20.731 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52836 10 6452 1 2025-10-03 21:31:21.147 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52570 10 6452 1 2025-10-03 21:32:21.459 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:32:20.995 00:00:00.047 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:32:21.301 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:32:21.272 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:32:21.383 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:32:21.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48578 10 6452 1 2025-10-03 21:33:21.927 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33674 10 6452 1 2025-10-03 21:29:38.733 00:05:00.370 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:34:22.343 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46582 10 6452 1 2025-10-03 21:35:22.710 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44910 10 6452 1 2025-10-03 21:31:38.731 00:05:00.375 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:36:23.119 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37312 10 6452 1 2025-10-03 21:37:21.719 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:37:21.675 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:37:21.427 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:37:21.635 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:37:21.390 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:37:23.484 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52294 10 6452 1 2025-10-03 21:38:23.886 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:55256 12 6556 1 2025-10-03 21:39:24.319 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35946 10 6452 1 2025-10-03 21:35:38.736 00:05:00.371 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:40:24.724 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33086 10 6452 1 2025-10-03 21:41:25.109 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43124 10 6452 1 2025-10-03 21:37:38.732 00:05:00.377 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:42:21.635 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:42:21.496 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:42:21.461 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:42:21.638 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:42:21.545 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:42:25.515 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41186 10 6452 1 2025-10-03 21:43:25.918 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36364 10 6452 1 2025-10-03 21:44:26.285 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35506 10 6452 1 2025-10-03 21:41:38.735 00:05:00.373 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:45:26.704 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:43958 10 6452 1 2025-10-03 21:46:27.104 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47702 10 6452 1 2025-10-03 21:47:21.635 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:47:21.665 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:47:21.702 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:47:21.490 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:47:21.785 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:47:27.536 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54326 10 6452 1 2025-10-03 21:43:38.734 00:05:00.376 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:48:27.948 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50414 10 6452 1 2025-10-03 21:49:28.353 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44608 10 6452 1 2025-10-03 21:50:28.714 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42678 10 6452 1 2025-10-03 21:51:29.124 00:00:10.883 TCP 1.101.0.1:3000 -> 23.104.0.1:46308 10 6452 1 2025-10-03 21:47:38.737 00:05:00.371 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:52:21.973 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:52:21.892 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:52:21.752 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:52:21.897 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:52:21.590 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:52:30.049 00:00:10.482 TCP 1.101.0.1:3000 -> 23.104.0.1:43780 10 6452 1 2025-10-03 21:53:30.570 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45116 10 6452 1 2025-10-03 21:49:38.735 00:05:00.379 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:54:30.971 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45908 10 6452 1 2025-10-03 21:55:31.375 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49026 10 6452 1 2025-10-03 21:56:31.736 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35768 10 6452 1 2025-10-03 21:57:21.799 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 21:57:21.827 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 21:57:21.639 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:57:21.716 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 21:57:21.781 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 21:53:38.751 00:05:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 21:57:32.142 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35292 10 6452 1 2025-10-03 21:58:32.548 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60382 10 6452 1 Summary: total flows: 140, total bytes: 421027, total packets: 1024, avg bps: 890, avg pps: 0, avg bpp: 411 Time window: 2025-10-03 20:55:38 - 2025-10-03 21:58:42 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0028s User: 0.0028s Wall: 0.0025s flows/second: 56429.2 Runtime: 0.0025s