Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 19:59:05.359 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50836 10 6452 1 2025-10-25 20:00:05.758 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46300 10 6452 1 2025-10-25 20:01:06.168 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35958 10 6452 1 2025-10-25 19:57:49.980 00:05:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 20:02:06.574 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58394 10 6452 1 2025-10-25 19:58:49.979 00:05:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 20:02:55.182 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 20:02:55.247 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:02:55.170 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:02:55.179 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 20:02:55.252 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 20:03:06.981 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:34728 10 6452 1 2025-10-25 20:04:07.399 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51284 10 6452 1 2025-10-25 20:05:07.820 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:53404 10 6452 1 2025-10-25 20:06:08.245 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44306 10 6452 1 2025-10-25 20:07:08.660 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33430 10 6452 1 2025-10-25 20:03:49.983 00:05:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 20:07:55.370 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 20:07:55.401 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:07:55.378 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:07:55.375 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 20:07:55.461 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 20:08:09.094 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39076 10 6452 1 2025-10-25 20:04:49.980 00:05:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 20:09:09.500 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36620 10 6452 1 2025-10-25 20:10:09.908 00:00:11.054 TCP 1.101.0.1:3000 -> 23.104.0.1:33000 10 6452 1 2025-10-25 20:11:10.997 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60336 10 6452 1 2025-10-25 20:12:11.357 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55960 10 6452 1 2025-10-25 20:12:55.509 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 20:12:55.676 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 20:12:55.684 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:12:55.428 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:12:55.323 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 20:13:11.766 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56516 10 6452 1 2025-10-25 20:09:49.986 00:05:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 20:14:12.182 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47310 10 6452 1 2025-10-25 20:10:49.983 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 20:15:12.599 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42206 10 6452 1 2025-10-25 20:16:13.002 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60404 10 6452 1 2025-10-25 20:17:13.412 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40904 10 6452 1 2025-10-25 20:17:55.571 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 20:17:55.618 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:17:55.294 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:17:55.657 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 20:17:55.378 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 20:18:13.775 00:00:10.686 TCP 1.101.0.1:3000 -> 23.104.0.1:55478 10 6452 1 2025-10-25 20:19:14.499 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49612 10 6452 1 2025-10-25 20:15:49.987 00:05:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 20:20:14.909 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41236 10 6452 1 2025-10-25 20:16:49.985 00:05:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 20:21:15.310 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36532 10 6452 1 2025-10-25 20:22:15.713 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48552 10 6452 1 2025-10-25 20:22:55.832 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 20:22:55.670 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:22:55.823 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:22:55.532 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 20:22:55.907 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 20:23:16.117 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37186 10 6452 1 2025-10-25 20:24:16.517 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49640 10 6452 1 2025-10-25 20:25:16.920 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57840 10 6452 1 2025-10-25 20:21:49.989 00:05:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 20:26:17.286 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:57454 11 6504 1 2025-10-25 20:22:49.988 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 20:27:17.704 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43538 10 6452 1 2025-10-25 20:27:55.674 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 20:27:55.816 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 20:27:55.467 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:27:55.591 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:27:55.691 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 20:28:18.115 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53656 10 6452 1 2025-10-25 20:29:18.522 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59374 10 6452 1 2025-10-25 20:30:18.929 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:36552 10 6452 1 2025-10-25 20:31:19.312 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46572 10 6452 1 2025-10-25 20:27:49.993 00:05:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 20:32:19.727 00:00:10.681 TCP 1.101.0.1:3000 -> 23.104.0.1:39538 10 6452 1 2025-10-25 20:28:49.991 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 20:32:55.895 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 20:32:55.781 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:32:55.731 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:32:55.896 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 20:32:55.813 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 20:33:20.460 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58920 10 6452 1 2025-10-25 20:34:20.823 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50564 10 6452 1 2025-10-25 20:35:21.228 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42332 10 6452 1 2025-10-25 20:34:49.994 00:01:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-25 20:36:21.628 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55704 10 6452 1 2025-10-25 20:37:22.031 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42994 10 6452 1 2025-10-25 20:33:49.996 00:05:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 20:37:55.911 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 20:37:55.918 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:37:56.059 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:37:56.054 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 20:37:56.002 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 20:38:22.442 00:00:10.526 TCP 1.101.0.1:3000 -> 23.104.0.1:45454 10 6452 1 2025-10-25 20:39:23.019 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39180 10 6452 1 2025-10-25 20:40:23.423 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38310 10 6452 1 2025-10-25 20:36:49.995 00:05:00.267 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 20:41:23.832 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59500 10 6452 1 2025-10-25 20:42:24.245 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32770 10 6452 1 2025-10-25 20:42:56.223 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 20:42:56.247 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:42:56.158 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:42:56.281 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 20:42:56.242 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 20:43:24.653 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44318 10 6452 1 2025-10-25 20:39:49.997 00:05:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 20:44:25.102 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46958 10 6452 1 2025-10-25 20:45:25.508 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56056 10 6452 1 2025-10-25 20:46:25.871 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:56342 10 6452 1 2025-10-25 20:42:49.994 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 20:47:26.236 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33130 10 6452 1 2025-10-25 20:47:56.213 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 20:47:56.124 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:47:56.204 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:47:56.204 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 20:47:56.287 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 20:48:26.639 00:00:16.151 TCP 1.101.0.1:3000 -> 23.104.0.1:38800 10 6452 1 2025-10-25 20:49:32.843 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:41618 10 6452 1 2025-10-25 20:45:49.999 00:05:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 20:50:33.267 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56958 10 6452 1 2025-10-25 20:51:33.626 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46516 10 6452 1 2025-10-25 20:52:34.034 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43076 10 6452 1 2025-10-25 20:48:49.997 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 20:52:55.935 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:52:56.157 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 20:52:56.335 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 20:52:56.074 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:52:56.229 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 20:53:34.405 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59642 10 6452 1 2025-10-25 20:54:34.803 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39066 10 6452 1 2025-10-25 20:55:35.214 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45990 10 6452 1 2025-10-25 20:51:49.999 00:04:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-25 20:56:35.623 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54824 10 6452 1 2025-10-25 20:57:35.987 00:00:10.506 TCP 1.101.0.1:3000 -> 23.104.0.1:34622 10 6452 1 2025-10-25 20:57:56.527 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 20:57:56.646 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 20:57:56.669 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:57:56.444 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 20:57:56.643 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 20:58:36.527 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47724 10 6452 1 2025-10-25 20:54:49.996 00:05:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 141, total bytes: 417175, total packets: 1023, avg bps: 897, avg pps: 0, avg bpp: 407 Time window: 2025-10-25 19:57:49 - 2025-10-25 20:59:50 Total flows processed: 141, passed: 141, Blocks skipped: 0, Bytes read: 14728 Sys: 0.0040s User: 0.0010s Wall: 0.0023s flows/second: 62004.3 Runtime: 0.0023s