Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 21:55:38.750 00:05:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 21:59:32.950 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55950 10 6452 1 2025-10-03 22:00:33.357 00:00:10.885 TCP 1.101.0.1:3000 -> 23.104.0.1:33062 10 6452 1 2025-10-03 22:01:34.281 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35654 10 6452 1 2025-10-03 22:02:22.155 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:02:22.096 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 22:02:21.744 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 22:02:21.901 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:02:22.237 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 22:02:34.678 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42920 10 6452 1 2025-10-03 21:59:38.753 00:05:00.363 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 22:03:35.050 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52556 10 6452 1 2025-10-03 22:04:35.413 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58694 10 6452 1 2025-10-03 22:01:38.751 00:05:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 22:05:35.812 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53484 10 6452 1 2025-10-03 22:06:36.183 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55660 10 6452 1 2025-10-03 22:07:21.898 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 22:07:21.645 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:07:21.907 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:07:21.895 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 22:07:21.991 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 22:07:36.584 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52992 10 6452 1 2025-10-03 22:08:36.984 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57962 10 6452 1 2025-10-03 22:05:38.756 00:05:00.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 22:09:37.384 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57026 10 6452 1 2025-10-03 22:10:37.789 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38570 10 6452 1 2025-10-03 22:07:38.753 00:05:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 22:11:38.197 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59078 10 6452 1 2025-10-03 22:12:22.216 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 22:12:21.902 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:12:22.223 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:12:22.099 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 22:12:22.305 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 22:12:38.568 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45214 10 6452 1 2025-10-03 22:13:38.933 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:45218 12 10369 1 2025-10-03 22:14:39.420 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51438 10 6452 1 2025-10-03 22:11:38.757 00:05:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 22:15:39.830 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:37714 10 6452 1 2025-10-03 22:16:40.257 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45422 10 6452 1 2025-10-03 22:17:22.161 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 22:17:22.165 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:17:22.213 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:17:22.208 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 22:17:22.295 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 22:13:38.755 00:05:00.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 22:17:40.669 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33222 10 6452 1 2025-10-03 22:18:41.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37696 10 6452 1 2025-10-03 22:19:41.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55426 10 6452 1 2025-10-03 22:20:41.934 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:46656 10 6452 1 2025-10-03 22:17:38.761 00:05:00.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 22:21:42.359 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43344 10 6452 1 2025-10-03 22:22:22.496 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 22:22:22.362 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 22:22:22.191 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:22:22.415 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:22:22.359 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 22:22:42.727 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40170 10 6452 1 2025-10-03 22:19:38.759 00:05:00.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 22:23:43.139 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47856 10 6452 1 2025-10-03 22:24:43.498 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50640 10 6452 1 2025-10-03 22:25:43.901 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39204 12 6556 1 2025-10-03 22:26:44.316 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57888 10 6452 1 2025-10-03 22:27:22.906 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 22:27:22.735 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:27:22.996 00:00:00.047 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:27:22.994 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 22:27:23.079 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 22:23:38.763 00:05:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 22:27:44.727 00:00:10.931 TCP 1.101.0.1:3000 -> 23.104.0.1:51996 10 6452 1 2025-10-03 22:28:45.695 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55328 10 6452 1 2025-10-03 22:25:38.763 00:05:00.371 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 22:29:46.112 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33508 10 6452 1 2025-10-03 22:30:46.514 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33022 10 6452 1 2025-10-03 22:31:46.918 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56800 10 6452 1 2025-10-03 22:32:22.613 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 22:32:22.615 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 22:32:22.729 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:32:22.530 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:32:22.429 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 22:32:47.326 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:48494 10 6452 1 2025-10-03 22:29:38.765 00:05:00.365 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 22:33:47.722 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45974 10 6452 1 2025-10-03 22:34:48.108 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33986 10 6452 1 2025-10-03 22:31:38.763 00:05:00.371 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 22:35:48.511 00:00:13.461 TCP 1.101.0.1:3000 -> 23.104.0.1:55550 10 6452 1 2025-10-03 22:36:52.014 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51820 10 6452 1 2025-10-03 22:37:22.779 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 22:37:22.474 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 22:37:22.310 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:37:22.697 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:37:22.707 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 22:37:52.376 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52332 10 6452 1 2025-10-03 22:38:52.778 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:55310 10 6452 1 2025-10-03 22:35:38.766 00:05:00.366 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 22:39:53.182 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35196 10 6452 1 2025-10-03 22:40:53.546 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55118 10 6452 1 2025-10-03 22:37:38.764 00:05:00.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 22:41:53.958 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53500 10 6452 1 2025-10-03 22:42:22.869 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:42:22.740 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:42:22.732 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 22:42:22.648 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 22:42:22.823 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 22:42:54.402 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:45056 12 10375 1 2025-10-03 22:43:54.885 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:60744 10 6452 1 2025-10-03 22:44:55.287 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52594 10 6452 1 2025-10-03 22:41:38.766 00:05:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 22:45:55.692 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36690 10 6452 1 2025-10-03 22:46:56.065 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41642 10 6452 1 2025-10-03 22:47:23.280 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 22:47:23.282 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:47:23.212 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:47:23.280 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 22:47:23.295 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 22:43:38.764 00:05:00.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 22:47:56.469 00:00:10.472 TCP 1.101.0.1:3000 -> 23.104.0.1:53162 14 14292 1 2025-10-03 22:48:56.980 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57028 10 6452 1 2025-10-03 22:49:57.406 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55644 10 6452 1 2025-10-03 22:50:57.814 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46394 10 6452 1 2025-10-03 22:47:38.767 00:05:00.370 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 22:51:58.216 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40950 10 6452 1 2025-10-03 22:52:22.983 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 22:52:22.964 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 22:52:23.005 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:52:22.902 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:52:22.794 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 22:52:58.588 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34666 10 6452 1 2025-10-03 22:49:38.764 00:05:00.375 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-03 22:53:58.998 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:36840 11 6504 1 2025-10-03 22:54:59.448 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57152 10 6452 1 2025-10-03 22:55:59.852 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:36108 10 6452 1 2025-10-03 22:57:00.269 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59732 10 6452 1 2025-10-03 22:57:23.035 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-03 22:57:23.187 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-03 22:57:22.963 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:57:22.953 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-03 22:57:23.082 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-03 22:53:38.767 00:05:00.371 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-03 22:58:00.679 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:60000 12 10369 1 Summary: total flows: 139, total bytes: 430301, total packets: 1023, avg bps: 910, avg pps: 0, avg bpp: 420 Time window: 2025-10-03 21:55:38 - 2025-10-03 22:58:39 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0043s User: 0.0011s Wall: 0.0020s flows/second: 70770.6 Runtime: 0.0020s