Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 19:55:42.689 00:05:00.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 19:59:37.360 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54622 10 6452 1 2025-10-11 20:00:37.719 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60470 10 6452 1 2025-10-11 20:01:10.703 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 20:01:10.776 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 20:01:10.558 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:01:10.700 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:01:10.783 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 20:01:38.140 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53164 10 6452 1 2025-10-11 20:02:38.506 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46180 10 6452 1 2025-10-11 20:03:38.875 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36758 10 6452 1 2025-10-11 20:00:42.693 00:05:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 20:04:39.296 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33718 10 6452 1 2025-10-11 20:01:42.691 00:05:00.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 20:05:39.696 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:36522 10 6452 1 2025-10-11 20:06:10.582 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 20:06:10.448 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 20:06:10.480 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:06:10.439 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:06:10.521 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 20:06:40.113 00:00:11.072 TCP 1.101.0.1:3000 -> 23.104.0.1:33158 10 6452 1 2025-10-11 20:07:41.224 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44188 10 6452 1 2025-10-11 20:08:41.626 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51726 10 6452 1 2025-10-11 20:09:41.991 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:52790 10 6452 1 2025-10-11 20:06:42.694 00:05:00.472 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 20:10:42.361 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46302 10 6452 1 2025-10-11 20:11:10.686 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 20:11:10.633 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 20:11:10.592 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:11:10.629 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:11:10.713 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 20:07:42.693 00:05:00.477 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 20:11:42.726 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56154 10 6452 1 2025-10-11 20:12:43.109 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42096 10 6452 1 2025-10-11 20:13:43.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44168 10 6452 1 2025-10-11 20:14:43.923 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:36414 10 6452 1 2025-10-11 20:15:44.342 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40026 10 6452 1 2025-10-11 20:16:10.784 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 20:16:10.783 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 20:16:10.632 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:16:10.804 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:16:10.887 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 20:12:42.696 00:05:00.472 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 20:16:44.748 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57160 10 6452 1 2025-10-11 20:13:42.694 00:05:00.477 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 20:17:45.153 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44984 10 6452 1 2025-10-11 20:18:45.566 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57808 10 6452 1 2025-10-11 20:19:45.974 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40550 10 6452 1 2025-10-11 20:20:46.378 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33096 10 6452 1 2025-10-11 20:21:10.723 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 20:21:10.790 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 20:21:10.713 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:21:10.717 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:21:10.800 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 20:21:46.736 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37902 10 6452 1 2025-10-11 20:18:42.698 00:05:00.471 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 20:22:47.143 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48164 10 6452 1 2025-10-11 20:19:42.695 00:05:00.477 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 20:23:47.556 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:51006 10 6452 1 2025-10-11 20:24:47.982 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59390 10 6452 1 2025-10-11 20:25:48.389 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35538 10 6452 1 2025-10-11 20:26:10.822 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 20:26:10.935 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 20:26:10.725 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 20:26:10.760 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:26:10.740 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:26:48.797 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:48980 11 6504 1 2025-10-11 20:27:49.255 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33668 10 6452 1 2025-10-11 20:24:42.704 00:05:00.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 20:28:49.652 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59494 10 6452 1 2025-10-11 20:25:42.700 00:05:00.473 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 20:29:50.023 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49556 10 6452 1 2025-10-11 20:30:50.435 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:37046 10 6452 1 2025-10-11 20:31:11.068 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 20:31:10.906 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 20:31:11.067 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 20:31:10.814 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:31:10.987 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:31:50.795 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35044 10 6452 1 2025-10-11 20:32:51.196 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52312 10 6452 1 2025-10-11 20:33:51.597 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53350 10 6452 1 2025-10-11 20:30:42.704 00:05:00.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 20:34:52.001 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57104 10 6452 1 2025-10-11 20:31:42.701 00:05:00.475 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 20:35:52.408 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59646 10 6452 1 2025-10-11 20:36:10.974 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 20:36:10.889 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 20:36:10.993 00:00:00.049 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:36:10.892 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:36:10.972 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 20:36:52.809 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60920 10 6452 1 2025-10-11 20:37:53.213 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38786 10 6452 1 2025-10-11 20:38:53.612 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52618 10 6452 1 2025-10-11 20:39:54.014 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41804 10 6452 1 2025-10-11 20:36:42.707 00:05:00.464 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 20:40:54.414 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57930 10 6452 1 2025-10-11 20:41:11.423 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:41:11.150 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 20:41:11.512 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 20:41:11.292 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:41:11.506 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 20:37:42.704 00:05:00.470 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 20:41:54.817 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51118 10 6452 1 2025-10-11 20:42:55.221 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:55998 10 6452 1 2025-10-11 20:43:55.579 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39414 10 6452 1 2025-10-11 20:44:55.993 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56490 10 6452 1 2025-10-11 20:45:56.407 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39138 10 6452 1 2025-10-11 20:46:11.473 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 20:46:11.339 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 20:46:11.291 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 20:46:11.166 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:46:11.390 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:42:42.708 00:05:00.465 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 20:46:56.813 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47620 10 6452 1 2025-10-11 20:43:42.706 00:05:00.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 20:47:57.220 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58662 10 6452 1 2025-10-11 20:48:57.629 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60122 10 6452 1 2025-10-11 20:49:58.034 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38850 10 6452 1 2025-10-11 20:50:58.435 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50028 10 6452 1 2025-10-11 20:51:11.326 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 20:51:11.401 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 20:51:11.412 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:51:11.443 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:51:11.525 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 20:51:58.845 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56278 10 6452 1 2025-10-11 20:48:42.712 00:05:00.464 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-11 20:52:59.258 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44156 10 6452 1 2025-10-11 20:49:42.714 00:05:00.465 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-11 20:53:59.663 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45124 10 6452 1 2025-10-11 20:55:00.024 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:41250 10 6452 1 2025-10-11 20:56:11.928 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-11 20:56:00.380 00:00:10.844 TCP 1.101.0.1:3000 -> 23.104.0.1:38988 10 6452 1 2025-10-11 20:56:11.791 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-11 20:56:11.425 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:56:11.555 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-11 20:56:11.638 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-11 20:57:01.263 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34536 10 6452 1 2025-10-11 20:58:01.665 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58896 10 6452 1 2025-10-11 20:54:42.713 00:05:00.466 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 Summary: total flows: 139, total bytes: 410600, total packets: 1011, avg bps: 855, avg pps: 0, avg bpp: 406 Time window: 2025-10-11 19:55:42 - 2025-10-11 20:59:43 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0033s User: 0.0011s Wall: 0.0019s flows/second: 73500.8 Runtime: 0.0019s