Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 21:58:41.541 00:00:10.716 TCP 1.101.0.1:3000 -> 23.104.0.1:33288 10 6452 1 2025-10-14 21:59:42.294 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52516 10 6452 1 2025-10-14 22:00:42.693 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42336 10 6452 1 2025-10-14 21:56:44.282 00:06:00.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 22:01:43.110 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53090 10 6452 1 2025-10-14 22:02:39.632 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 22:02:39.375 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:02:39.641 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:02:39.702 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 22:02:39.723 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 22:02:43.471 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59660 10 6452 1 2025-10-14 22:03:43.868 00:00:10.958 TCP 1.101.0.1:3000 -> 23.104.0.1:42952 10 6452 1 2025-10-14 22:04:44.860 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52216 10 6452 1 2025-10-14 22:00:44.283 00:06:00.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 22:05:45.269 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56734 10 6452 1 2025-10-14 22:06:45.633 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41524 10 6452 1 2025-10-14 22:07:39.558 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 22:07:39.592 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:07:39.610 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:07:39.656 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 22:07:39.692 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 22:07:46.039 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50372 10 6452 1 2025-10-14 22:03:44.287 00:06:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 22:08:46.441 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57400 10 6452 1 2025-10-14 22:09:46.841 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:39110 10 6452 1 2025-10-14 22:10:47.217 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:41414 10 6452 1 2025-10-14 22:11:47.612 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52896 10 6452 1 2025-10-14 22:12:39.918 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 22:12:39.585 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:12:39.916 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:12:39.916 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 22:12:39.998 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 22:07:44.285 00:06:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 22:12:48.015 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:60948 10 6452 1 2025-10-14 22:13:48.373 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56592 10 6452 1 2025-10-14 22:14:48.739 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60874 10 6452 1 2025-10-14 22:10:44.288 00:06:00.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 22:15:49.144 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55648 10 6452 1 2025-10-14 22:16:49.553 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33950 10 6452 1 2025-10-14 22:17:39.738 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 22:17:39.765 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:17:39.737 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:17:39.915 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 22:17:39.820 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 22:17:49.960 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40226 10 6452 1 2025-10-14 22:18:50.328 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53976 10 6452 1 2025-10-14 22:14:44.286 00:06:00.443 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 22:19:50.725 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47794 10 6452 1 2025-10-14 22:20:51.140 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37932 10 6452 1 2025-10-14 22:21:51.548 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34402 10 6452 1 2025-10-14 22:22:39.914 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 22:22:39.908 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 22:22:39.912 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:22:39.831 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:22:39.846 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 22:17:44.289 00:06:00.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 22:22:51.995 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50446 10 6452 1 2025-10-14 22:23:52.395 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54796 10 6452 1 2025-10-14 22:24:52.797 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:54000 10 6452 1 2025-10-14 22:25:53.189 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53774 10 6452 1 2025-10-14 22:21:44.288 00:06:00.446 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 22:26:53.555 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52272 10 6452 1 2025-10-14 22:27:40.156 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 22:27:39.948 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:27:39.916 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:27:39.841 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 22:27:40.000 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 22:27:53.954 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39824 10 6452 1 2025-10-14 22:28:54.357 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57332 10 6452 1 2025-10-14 22:24:44.292 00:06:00.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 22:29:54.768 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40348 10 6452 1 2025-10-14 22:30:55.184 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49204 10 6452 1 2025-10-14 22:31:55.549 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49564 10 6452 1 2025-10-14 22:32:40.172 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 22:32:40.073 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:32:40.216 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:32:40.210 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 22:32:40.298 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 22:32:55.951 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46328 10 6452 1 2025-10-14 22:28:44.290 00:06:00.445 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 22:33:56.359 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56036 10 6452 1 2025-10-14 22:34:56.728 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:53064 11 6504 1 2025-10-14 22:35:57.197 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56870 10 6452 1 2025-10-14 22:31:44.294 00:06:00.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 22:36:57.594 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45756 10 6452 1 2025-10-14 22:37:40.354 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 22:37:40.154 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 22:37:40.005 00:00:00.041 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:37:40.271 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:37:40.419 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 22:37:57.991 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53292 10 6452 1 2025-10-14 22:38:58.398 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47112 10 6452 1 2025-10-14 22:39:58.804 00:00:10.940 TCP 1.101.0.1:3000 -> 23.104.0.1:53792 10 6452 1 2025-10-14 22:35:44.291 00:06:00.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 22:40:59.786 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53210 10 6452 1 2025-10-14 22:42:00.201 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46128 10 6452 1 2025-10-14 22:42:40.320 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 22:42:40.324 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 22:42:39.950 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:42:40.237 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:42:40.445 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 22:43:00.607 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37428 10 6452 1 2025-10-14 22:38:44.294 00:06:00.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 22:44:00.969 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:37050 10 6452 1 2025-10-14 22:45:01.392 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40234 10 6452 1 2025-10-14 22:46:01.791 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:38534 10 6452 1 2025-10-14 22:47:02.201 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35054 10 6452 1 2025-10-14 22:47:40.488 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 22:47:40.476 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 22:47:40.277 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:47:40.406 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:47:40.475 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 22:42:44.292 00:06:00.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 22:48:02.607 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:50244 10 6452 1 2025-10-14 22:49:03.012 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:44032 10 6452 1 2025-10-14 22:50:03.416 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57444 10 6452 1 2025-10-14 22:45:44.296 00:06:00.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 22:51:03.819 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57382 10 6452 1 2025-10-14 22:52:04.223 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32854 10 6452 1 2025-10-14 22:52:40.526 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 22:52:40.560 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:52:40.539 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:52:40.587 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 22:52:40.621 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 22:53:04.653 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51336 10 6452 1 2025-10-14 22:54:05.028 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36792 10 6452 1 2025-10-14 22:49:44.295 00:06:00.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-14 22:55:05.429 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33226 10 6452 1 2025-10-14 22:56:05.838 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:55998 10 6452 1 2025-10-14 22:57:06.215 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33474 10 6452 1 2025-10-14 22:57:40.691 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 22:57:40.410 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:57:40.805 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 22:57:40.814 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 22:57:40.888 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 22:52:44.297 00:06:00.448 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-14 22:58:06.625 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53558 10 6452 1 Summary: total flows: 137, total bytes: 416929, total packets: 1019, avg bps: 896, avg pps: 0, avg bpp: 409 Time window: 2025-10-14 21:56:44 - 2025-10-14 22:58:44 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0026s User: 0.0026s Wall: 0.0022s flows/second: 63221.4 Runtime: 0.0022s