Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 20:59:07.959 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60626 10 6452 1 2025-10-18 20:59:33.839 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 20:59:33.758 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 20:59:33.576 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 20:59:33.757 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 20:59:33.764 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:00:08.363 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41450 10 6452 1 2025-10-18 21:01:08.761 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:38332 10 6452 1 2025-10-18 20:56:46.388 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:02:09.186 00:00:10.963 TCP 1.101.0.1:3000 -> 23.104.0.1:54440 10 6452 1 2025-10-18 21:03:10.184 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36830 10 6452 1 2025-10-18 21:04:10.586 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43762 10 6452 1 2025-10-18 21:04:34.031 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:04:33.898 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:04:33.860 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:04:33.949 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:04:33.899 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:05:10.990 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58160 10 6452 1 2025-10-18 21:00:46.396 00:06:00.228 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:06:11.395 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60542 10 6452 1 2025-10-18 21:07:11.791 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57912 10 6452 1 2025-10-18 21:08:12.199 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55432 10 6452 1 2025-10-18 21:03:46.394 00:06:00.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:09:12.605 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52638 10 6452 1 2025-10-18 21:09:33.801 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:09:33.837 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:09:34.008 00:00:00.045 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:09:33.921 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:09:34.091 00:00:00.046 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:10:13.015 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50726 10 6452 1 2025-10-18 21:11:13.412 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42096 10 6452 1 2025-10-18 21:12:13.813 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:37876 10 6452 1 2025-10-18 21:07:46.398 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:13:14.184 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50350 10 6452 1 2025-10-18 21:14:14.586 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44412 10 6452 1 2025-10-18 21:14:33.907 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:14:33.952 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:14:33.914 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:14:34.003 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:14:33.995 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:15:14.991 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:48166 10 6452 1 2025-10-18 21:10:46.394 00:06:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:16:15.361 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49830 10 6452 1 2025-10-18 21:17:15.763 00:00:10.726 TCP 1.101.0.1:3000 -> 23.104.0.1:38652 10 6452 1 2025-10-18 21:18:16.529 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39160 10 6452 1 2025-10-18 21:19:34.254 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:19:16.930 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:55738 10 6452 1 2025-10-18 21:19:34.231 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:19:33.895 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:19:34.173 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:19:34.174 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:14:46.397 00:06:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:20:17.367 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55054 10 6452 1 2025-10-18 21:21:17.745 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60480 10 6452 1 2025-10-18 21:22:18.147 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47984 10 6452 1 2025-10-18 21:17:46.395 00:06:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:23:18.551 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:56048 10 6452 1 2025-10-18 21:24:34.116 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:24:18.910 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35990 10 6452 1 2025-10-18 21:24:34.245 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:24:33.975 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:24:34.033 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:24:34.258 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:25:19.317 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55462 10 6452 1 2025-10-18 21:26:19.718 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:55550 10 6452 1 2025-10-18 21:21:46.399 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:27:20.149 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53630 10 6452 1 2025-10-18 21:28:20.552 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:38690 12 10375 1 2025-10-18 21:29:34.533 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:29:34.330 00:00:00.037 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:29:34.450 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:29:21.032 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60634 10 6452 1 2025-10-18 21:29:34.451 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:29:34.330 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:24:46.399 00:06:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:30:21.430 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34140 10 6452 1 2025-10-18 21:31:21.835 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:56606 10 6452 1 2025-10-18 21:32:22.225 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49510 10 6452 1 2025-10-18 21:33:22.628 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34878 10 6452 1 2025-10-18 21:28:46.406 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:34:34.546 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:34:34.345 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:34:23.034 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49790 10 6452 1 2025-10-18 21:34:34.343 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:34:34.614 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:34:34.434 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:35:23.440 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45954 10 6452 1 2025-10-18 21:36:23.848 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:34950 10 6452 1 2025-10-18 21:31:46.402 00:06:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:37:24.269 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49532 10 6452 1 2025-10-18 21:38:24.673 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53894 10 6452 1 2025-10-18 21:39:34.600 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:39:34.690 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:39:25.035 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:45170 11 6504 1 2025-10-18 21:39:34.723 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:39:34.601 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:39:34.807 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:40:25.491 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47166 10 6452 1 2025-10-18 21:35:46.404 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:41:25.892 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49550 12 6556 1 2025-10-18 21:42:26.307 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37228 10 6452 1 2025-10-18 21:43:26.708 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46072 10 6452 1 2025-10-18 21:38:46.402 00:06:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:44:34.646 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:44:34.605 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:44:35.200 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:44:34.744 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:44:35.283 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:44:27.114 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55956 10 6452 1 2025-10-18 21:45:27.472 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34670 10 6452 1 2025-10-18 21:46:27.873 00:00:11.065 TCP 1.101.0.1:3000 -> 23.104.0.1:50890 11 6504 1 2025-10-18 21:47:28.981 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:56010 10 6452 1 2025-10-18 21:42:46.409 00:06:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:48:29.352 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60620 10 6452 1 2025-10-18 21:49:34.842 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:49:34.607 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:49:34.641 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:49:34.759 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:49:34.750 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:49:29.759 00:00:10.429 TCP 1.101.0.1:3000 -> 23.104.0.1:33994 11 6504 1 2025-10-18 21:50:30.220 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34290 10 6452 1 2025-10-18 21:45:46.405 00:06:00.234 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:51:30.589 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51300 10 6452 1 2025-10-18 21:52:30.993 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58420 10 6452 1 2025-10-18 21:53:31.436 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:50098 12 10369 1 2025-10-18 21:54:34.955 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 21:54:34.805 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:54:34.891 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 21:54:34.896 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 21:54:34.974 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 21:54:31.919 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45996 10 6452 1 2025-10-18 21:49:46.411 00:06:00.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 21:55:32.278 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45660 10 6452 1 2025-10-18 21:56:32.695 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35236 10 6452 1 2025-10-18 21:57:33.109 00:00:10.904 TCP 1.101.0.1:3000 -> 23.104.0.1:55880 10 6452 1 2025-10-18 21:52:46.409 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 21:58:34.065 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:34430 12 10369 1 Summary: total flows: 137, total bytes: 428894, total packets: 1029, avg bps: 922, avg pps: 0, avg bpp: 416 Time window: 2025-10-18 20:56:46 - 2025-10-18 21:58:46 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0021s User: 0.0021s Wall: 0.0019s flows/second: 72562.1 Runtime: 0.0019s