Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 20:59:27.862 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59314 10 6452 1 2025-10-09 20:55:41.805 00:05:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 21:00:13.996 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 21:00:13.636 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:00:13.864 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:00:13.787 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 21:00:13.948 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 21:00:28.282 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:39926 11 6504 1 2025-10-09 21:01:28.743 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46500 10 6452 1 2025-10-09 21:02:29.117 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58822 10 6452 1 2025-10-09 20:58:41.808 00:05:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 21:03:29.531 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58958 10 6452 1 2025-10-09 21:04:29.934 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44512 10 6452 1 2025-10-09 21:05:14.000 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 21:05:13.857 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 21:05:13.796 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:05:13.915 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:05:13.973 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 21:05:30.346 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58980 10 6452 1 2025-10-09 21:01:41.807 00:05:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 21:06:30.749 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34620 10 6452 1 2025-10-09 21:07:31.167 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36270 10 6452 1 2025-10-09 21:04:41.812 00:05:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 21:08:31.529 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34382 10 6452 1 2025-10-09 21:09:31.944 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:56118 10 6452 1 2025-10-09 21:10:14.153 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 21:10:13.983 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 21:10:13.894 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:10:14.071 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:10:13.980 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 21:10:32.388 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47200 10 6452 1 2025-10-09 21:07:41.809 00:05:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 21:11:32.801 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34576 10 6452 1 2025-10-09 21:12:33.228 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42450 10 6452 1 2025-10-09 21:13:33.593 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48068 10 6452 1 2025-10-09 21:14:33.995 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41062 10 6452 1 2025-10-09 21:10:41.812 00:05:00.397 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 21:15:14.138 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 21:15:14.183 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 21:15:13.958 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:15:14.054 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:15:14.298 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 21:15:34.406 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:40500 10 6452 1 2025-10-09 21:16:34.768 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:40622 10 6452 1 2025-10-09 21:13:41.811 00:05:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 21:17:35.141 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58738 10 6452 1 2025-10-09 21:18:35.504 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55698 10 6452 1 2025-10-09 21:19:35.909 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52096 10 6452 1 2025-10-09 21:20:14.590 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 21:20:14.442 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 21:20:14.404 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:20:14.509 00:00:00.020 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:20:14.444 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 21:16:41.814 00:05:00.397 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 21:20:36.318 00:00:10.666 TCP 1.101.0.1:3000 -> 23.104.0.1:44170 10 6452 1 2025-10-09 21:21:37.025 00:00:10.641 TCP 1.101.0.1:3000 -> 23.104.0.1:43884 10 6452 1 2025-10-09 21:22:37.697 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33298 10 6452 1 2025-10-09 21:19:41.814 00:05:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 21:23:38.118 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36304 10 6452 1 2025-10-09 21:24:38.521 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57780 10 6452 1 2025-10-09 21:25:14.319 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 21:25:14.426 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 21:25:14.270 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:25:14.238 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:25:14.429 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 21:25:38.925 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:47904 10 6452 1 2025-10-09 21:22:41.817 00:05:00.394 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 21:26:39.351 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50202 10 6452 1 2025-10-09 21:27:39.757 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:35468 10 6452 1 2025-10-09 21:28:40.133 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55860 10 6452 1 2025-10-09 21:25:41.815 00:05:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 21:29:40.494 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39544 10 6452 1 2025-10-09 21:30:14.561 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 21:30:14.229 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:30:14.525 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:30:14.560 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 21:30:14.608 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 21:30:40.898 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:35798 10 6452 1 2025-10-09 21:31:41.316 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33674 10 6452 1 2025-10-09 21:28:41.825 00:05:00.389 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 21:32:41.721 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46404 10 6452 1 2025-10-09 21:33:42.134 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40068 10 6452 1 2025-10-09 21:34:42.538 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:56274 11 6504 1 2025-10-09 21:35:14.620 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 21:35:14.463 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 21:35:14.395 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:35:14.538 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:35:14.463 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 21:31:41.822 00:05:00.394 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 21:35:42.995 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49446 10 6452 1 2025-10-09 21:36:43.398 00:00:11.131 TCP 1.101.0.1:3000 -> 23.104.0.1:44206 10 6452 1 2025-10-09 21:37:44.569 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45706 10 6452 1 2025-10-09 21:34:41.825 00:05:00.389 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 21:38:44.971 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53760 10 6452 1 2025-10-09 21:39:45.377 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:38416 10 6452 1 2025-10-09 21:40:14.757 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 21:40:14.674 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 21:40:14.687 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:40:14.674 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:40:14.727 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 21:40:45.738 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51446 10 6452 1 2025-10-09 21:37:41.823 00:05:00.394 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 21:41:46.138 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52300 10 6452 1 2025-10-09 21:42:46.542 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43192 10 6452 1 2025-10-09 21:43:46.947 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56868 10 6452 1 2025-10-09 21:40:41.827 00:05:00.389 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 21:44:47.358 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32890 10 6452 1 2025-10-09 21:45:14.767 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 21:45:14.529 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:45:14.671 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:45:14.764 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 21:45:14.755 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 21:45:47.761 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:54842 10 6452 1 2025-10-09 21:46:48.188 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:44380 10 6452 1 2025-10-09 21:43:41.825 00:05:00.394 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 21:47:48.555 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47156 10 6452 1 2025-10-09 21:48:48.962 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47742 10 6452 1 2025-10-09 21:49:49.372 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35900 10 6452 1 2025-10-09 21:50:14.844 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 21:50:14.742 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:50:14.785 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:50:14.967 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 21:50:14.869 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 21:46:41.828 00:05:00.389 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 21:50:49.773 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:49694 12 10375 1 2025-10-09 21:51:50.257 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41174 10 6452 1 2025-10-09 21:52:50.657 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49650 10 6452 1 2025-10-09 21:49:41.826 00:05:00.395 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 21:53:51.078 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48968 10 6452 1 2025-10-09 21:54:51.483 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:52868 12 10375 1 2025-10-09 21:55:14.948 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 21:55:14.773 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 21:55:15.096 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:55:14.865 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 21:55:15.065 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 21:55:51.953 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38168 10 6452 1 2025-10-09 21:52:41.828 00:05:00.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 21:56:52.316 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60564 10 6452 1 2025-10-09 21:57:52.687 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59748 10 6452 1 Summary: total flows: 139, total bytes: 418498, total packets: 1016, avg bps: 894, avg pps: 0, avg bpp: 411 Time window: 2025-10-09 20:55:41 - 2025-10-09 21:58:03 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0044s User: 0.0015s Wall: 0.0029s flows/second: 47310.6 Runtime: 0.0030s