Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-29 11:54:36.590 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 11:59:25.743 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58578 10 6452 1 2025-09-29 12:00:14.311 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 12:00:14.237 00:00:00.016 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 12:00:14.166 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 12:00:14.183 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:00:14.229 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:00:26.143 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53852 10 6452 1 2025-09-29 11:55:36.588 00:06:00.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 12:01:26.540 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47648 10 6452 1 2025-09-29 12:02:26.947 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58642 10 6452 1 2025-09-29 12:03:27.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46250 10 6452 1 2025-09-29 12:04:27.762 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42420 10 6452 1 2025-09-29 12:05:14.546 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 12:05:14.580 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:05:14.462 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:05:14.524 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 12:05:14.455 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 12:05:28.178 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46576 10 6452 1 2025-09-29 12:01:36.591 00:06:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 12:06:28.581 00:00:10.626 TCP 1.101.0.1:3000 -> 23.104.0.1:35004 10 6452 1 2025-09-29 12:02:36.590 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 12:07:29.246 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50740 10 6452 1 2025-09-29 12:08:29.608 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36040 10 6452 1 2025-09-29 12:09:30.015 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:38918 10 6452 1 2025-09-29 12:10:14.415 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 12:10:14.526 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 12:10:14.528 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 12:10:14.381 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:10:14.334 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:10:30.413 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51484 10 6452 1 2025-09-29 12:11:30.818 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34024 10 6452 1 2025-09-29 12:12:31.222 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49612 10 6452 1 2025-09-29 12:08:36.592 00:06:00.182 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 12:13:31.628 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:60660 10 6452 1 2025-09-29 12:09:36.590 00:06:00.187 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 12:14:32.065 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42510 10 6452 1 2025-09-29 12:15:14.679 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 12:15:14.512 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 12:15:14.650 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 12:15:14.247 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:15:14.598 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:15:32.468 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59412 10 6452 1 2025-09-29 12:16:32.871 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41890 10 6452 1 2025-09-29 12:17:33.285 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52404 10 6452 1 2025-09-29 12:18:33.687 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34146 10 6452 1 2025-09-29 12:19:34.102 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40718 10 6452 1 2025-09-29 12:20:14.717 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 12:20:14.596 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 12:20:14.343 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:20:14.664 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:20:14.748 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 12:15:36.596 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 12:20:34.506 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49766 10 6452 1 2025-09-29 12:16:36.594 00:06:00.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 12:21:34.914 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55208 10 6452 1 2025-09-29 12:22:35.272 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:50814 12 10369 1 2025-09-29 12:23:35.711 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50128 10 6452 1 2025-09-29 12:24:36.115 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50572 10 6452 1 2025-09-29 12:25:14.539 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 12:25:14.789 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 12:25:14.878 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 12:25:14.531 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:25:14.456 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:25:36.520 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46212 10 6452 1 2025-09-29 12:26:36.922 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60486 10 6452 1 2025-09-29 12:22:36.599 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 12:27:37.331 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33264 10 6452 1 2025-09-29 12:23:36.595 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 12:28:37.736 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40210 10 6452 1 2025-09-29 12:29:38.141 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52692 10 6452 1 2025-09-29 12:30:14.808 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 12:30:14.738 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 12:30:14.900 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:30:14.817 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:30:14.899 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 12:30:38.547 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46494 10 6452 1 2025-09-29 12:31:38.959 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55750 10 6452 1 2025-09-29 12:32:39.360 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56384 10 6452 1 2025-09-29 12:33:39.723 00:00:19.188 TCP 1.101.0.1:3000 -> 23.104.0.1:55636 10 6452 1 2025-09-29 12:29:36.599 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 12:34:48.968 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36218 10 6452 1 2025-09-29 12:35:14.837 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 12:35:14.719 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:35:14.836 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:35:14.920 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 12:35:15.108 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 12:30:36.597 00:06:00.186 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 12:35:49.331 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56864 10 6452 1 2025-09-29 12:36:49.737 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34510 10 6452 1 2025-09-29 12:37:50.142 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34762 10 6452 1 2025-09-29 12:38:50.501 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54062 10 6452 1 2025-09-29 12:39:50.898 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42476 12 6556 1 2025-09-29 12:40:15.094 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 12:40:15.007 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 12:40:15.003 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 12:40:15.069 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:40:15.012 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:40:51.311 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37962 10 6452 1 2025-09-29 12:36:36.601 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 12:41:51.706 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41718 10 6452 1 2025-09-29 12:37:36.598 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 12:42:52.113 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42492 10 6452 1 2025-09-29 12:43:52.518 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57312 10 6452 1 2025-09-29 12:44:52.920 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:50600 10 6452 1 2025-09-29 12:45:15.010 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 12:45:15.120 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 12:45:15.094 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:45:15.125 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:45:15.207 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 12:45:53.294 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57146 10 6452 1 2025-09-29 12:46:53.700 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36862 10 6452 1 2025-09-29 12:47:54.110 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43046 10 6452 1 2025-09-29 12:43:36.603 00:06:00.183 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 12:48:54.517 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55870 10 6452 1 2025-09-29 12:44:36.601 00:06:00.187 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 12:49:54.920 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:44992 10 6452 1 2025-09-29 12:50:15.785 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 12:50:15.829 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 12:50:15.827 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 12:50:15.872 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:50:15.705 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:50:55.284 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45052 10 6452 1 2025-09-29 12:51:55.685 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58618 10 6452 1 2025-09-29 12:52:56.104 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35790 10 6452 1 2025-09-29 12:53:56.468 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53336 12 6556 1 2025-09-29 12:54:56.872 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:52038 10 6452 1 2025-09-29 12:55:15.464 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-29 12:55:15.268 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-29 12:55:15.430 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-29 12:55:15.346 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:55:15.382 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-29 12:50:36.603 00:06:00.183 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-29 12:55:57.228 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55746 10 6452 1 2025-09-29 12:51:36.601 00:06:00.188 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-29 12:56:57.589 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49328 10 6452 1 2025-09-29 12:57:57.950 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49354 10 6452 1 Summary: total flows: 137, total bytes: 415411, total packets: 1028, avg bps: 871, avg pps: 0, avg bpp: 404 Time window: 2025-09-29 11:54:36 - 2025-09-29 12:58:08 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0042s User: 0.0010s Wall: 0.0019s flows/second: 72152.1 Runtime: 0.0019s