Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 21:59:27.925 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57844 10 6452 1 2025-10-05 22:00:28.336 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58868 10 6452 1 2025-10-05 21:56:39.693 00:05:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:01:28.747 00:00:16.546 TCP 1.101.0.1:3000 -> 23.104.0.1:53498 10 6452 1 2025-10-05 22:02:35.340 00:00:10.960 TCP 1.101.0.1:3000 -> 23.104.0.1:33070 10 6452 1 2025-10-05 22:03:19.754 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:03:19.497 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:03:19.620 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:03:19.757 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:03:19.705 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:03:36.339 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58544 10 6452 1 2025-10-05 22:00:39.690 00:05:00.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:04:36.741 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35296 10 6452 1 2025-10-05 22:05:37.146 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56508 10 6452 1 2025-10-05 22:02:39.694 00:05:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:06:37.544 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33928 10 6452 1 2025-10-05 22:07:37.948 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44624 10 6452 1 2025-10-05 22:08:19.774 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:08:19.653 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:08:19.556 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:08:19.637 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:08:19.638 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:08:38.364 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:56448 12 10375 1 2025-10-05 22:09:38.802 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55108 10 6452 1 2025-10-05 22:06:39.694 00:05:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:10:39.202 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:55144 10 6452 1 2025-10-05 22:11:39.569 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59388 10 6452 1 2025-10-05 22:08:39.698 00:05:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:12:39.933 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45804 10 6452 1 2025-10-05 22:13:19.911 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:13:19.965 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:13:19.394 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:13:19.830 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:13:19.928 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:13:40.341 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58406 10 6452 1 2025-10-05 22:14:40.748 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54888 10 6452 1 2025-10-05 22:15:41.152 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40204 10 6452 1 2025-10-05 22:12:39.696 00:05:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:16:41.557 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42114 10 6452 1 2025-10-05 22:17:41.952 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40380 10 6452 1 2025-10-05 22:18:19.806 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:18:19.720 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:18:19.940 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:18:19.953 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:18:20.023 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:14:39.702 00:05:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:18:42.363 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38056 10 6452 1 2025-10-05 22:19:42.770 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:33198 10 6452 1 2025-10-05 22:20:43.143 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45894 10 6452 1 2025-10-05 22:21:43.540 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51802 10 6452 1 2025-10-05 22:18:39.700 00:05:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:22:43.902 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42814 10 6452 1 2025-10-05 22:23:19.725 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:23:19.761 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:23:20.084 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:23:19.819 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:23:20.168 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:23:44.323 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48506 10 6452 1 2025-10-05 22:20:39.703 00:05:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:24:44.686 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41944 10 6452 1 2025-10-05 22:25:45.107 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58442 10 6452 1 2025-10-05 22:26:45.471 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52670 10 6452 1 2025-10-05 22:27:45.882 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45414 10 6452 1 2025-10-05 22:28:20.232 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:28:20.204 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:28:20.097 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:28:20.150 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:28:20.149 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:24:39.701 00:05:00.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:28:46.285 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34968 10 6452 1 2025-10-05 22:29:46.696 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38308 10 6452 1 2025-10-05 22:26:39.704 00:05:00.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:30:47.109 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35600 10 6452 1 2025-10-05 22:31:47.485 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52504 10 6452 1 2025-10-05 22:32:47.887 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40634 12 6556 1 2025-10-05 22:33:20.246 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:33:19.950 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:33:20.239 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:33:20.289 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:33:20.322 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:33:48.307 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:38352 12 10369 1 2025-10-05 22:30:39.703 00:05:00.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:34:48.790 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46712 10 6452 1 2025-10-05 22:35:49.151 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60992 10 6452 1 2025-10-05 22:32:39.707 00:05:00.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:36:49.558 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33328 10 6452 1 2025-10-05 22:37:49.961 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52924 10 6452 1 2025-10-05 22:38:20.485 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:38:20.317 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:38:20.166 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:38:20.403 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:38:20.311 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:38:50.322 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35992 10 6452 1 2025-10-05 22:39:50.685 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37242 10 6452 1 2025-10-05 22:36:39.711 00:05:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:40:51.113 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:37712 10 6452 1 2025-10-05 22:41:51.487 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46300 10 6452 1 2025-10-05 22:38:39.714 00:05:00.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:42:51.886 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:55352 10 6452 1 2025-10-05 22:43:20.571 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:43:20.371 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:43:20.326 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:43:20.326 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:43:20.409 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:43:52.301 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34270 10 6452 1 2025-10-05 22:44:52.704 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53632 10 6452 1 2025-10-05 22:45:53.116 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:37308 10 6452 1 2025-10-05 22:42:39.712 00:05:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:46:53.469 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50348 10 6452 1 2025-10-05 22:47:53.872 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52276 10 6452 1 2025-10-05 22:48:20.835 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:48:20.806 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:48:20.333 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:48:20.751 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:48:20.587 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:44:39.715 00:05:00.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:48:54.282 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35734 10 6452 1 2025-10-05 22:49:54.688 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35900 10 6452 1 2025-10-05 22:50:55.113 00:00:10.431 TCP 1.101.0.1:3000 -> 23.104.0.1:39944 10 6452 1 2025-10-05 22:51:55.579 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43932 10 6452 1 2025-10-05 22:48:39.712 00:05:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-05 22:52:55.997 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38772 10 6452 1 2025-10-05 22:53:20.519 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:53:20.463 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:53:20.400 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:53:20.509 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:53:20.482 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:53:56.403 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44596 10 6452 1 2025-10-05 22:50:39.715 00:05:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-05 22:54:56.805 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56728 10 6452 1 2025-10-05 22:55:57.174 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37000 10 6452 1 2025-10-05 22:56:57.581 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55824 10 6452 1 2025-10-05 22:57:57.946 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:35574 10 6452 1 2025-10-05 22:58:20.739 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 22:58:20.746 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 22:58:20.695 00:00:00.012 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:58:20.656 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 22:58:20.659 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 22:54:39.716 00:05:00.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 418492, total packets: 1016, avg bps: 885, avg pps: 0, avg bpp: 411 Time window: 2025-10-05 21:56:39 - 2025-10-05 22:59:40 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0036s User: 0.0018s Wall: 0.0024s flows/second: 58747.3 Runtime: 0.0024s