Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 11:53:50.374 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 11:59:39.671 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50004 10 6661 1 2025-10-26 12:00:40.048 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39116 10 6661 1 2025-10-26 12:01:40.457 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57632 10 6661 1 2025-10-26 12:02:40.851 00:00:11.508 TCP 1.101.0.1:3000 -> 23.104.0.1:34248 10 6661 1 2025-10-26 12:03:14.525 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 12:03:14.496 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 12:03:14.156 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 12:03:14.369 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:03:14.442 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 11:58:50.373 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 12:03:42.391 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58264 10 6661 1 2025-10-26 12:04:42.794 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55634 10 6661 1 2025-10-26 12:05:43.199 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46596 10 6661 1 2025-10-26 12:00:50.376 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 12:06:43.564 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42780 10 6661 1 2025-10-26 12:07:43.974 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36480 10 6661 1 2025-10-26 12:08:14.650 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 12:08:14.628 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:08:14.568 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:08:14.683 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 12:08:14.821 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 12:08:44.383 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43024 10 6661 1 2025-10-26 12:09:44.787 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44120 10 6661 1 2025-10-26 12:05:50.374 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 12:10:45.187 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49246 10 6661 1 2025-10-26 12:11:45.588 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58710 10 6661 1 2025-10-26 12:07:50.376 00:06:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 12:12:45.993 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33184 10 6661 1 2025-10-26 12:13:14.642 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 12:13:14.561 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 12:13:14.520 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 12:13:14.559 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:13:14.559 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:13:46.355 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32922 10 6661 1 2025-10-26 12:14:46.760 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54278 10 6661 1 2025-10-26 12:15:47.170 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37402 10 6661 1 2025-10-26 12:16:47.574 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37610 10 6661 1 2025-10-26 12:12:50.378 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 12:17:47.938 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36848 10 6661 1 2025-10-26 12:18:14.760 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 12:18:14.764 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 12:18:14.582 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:18:14.758 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:18:14.841 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 12:18:48.346 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41424 10 6661 1 2025-10-26 12:14:50.380 00:06:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 12:19:48.747 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51498 10 6661 1 2025-10-26 12:20:49.155 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53056 10 6661 1 2025-10-26 12:21:49.556 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56248 10 6661 1 2025-10-26 12:22:49.954 00:00:16.048 TCP 1.101.0.1:3000 -> 23.104.0.1:48626 10 6661 1 2025-10-26 12:23:14.848 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 12:23:14.871 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:23:14.934 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:23:15.129 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 12:23:15.017 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 12:23:56.049 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60846 10 6661 1 2025-10-26 12:19:50.377 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 12:24:56.451 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51326 10 6661 1 2025-10-26 12:25:56.852 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45232 10 6661 1 2025-10-26 12:21:50.381 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 12:26:57.272 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59814 10 6661 1 2025-10-26 12:27:57.670 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36958 10 6661 1 2025-10-26 12:28:14.757 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 12:28:14.837 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 12:28:14.884 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:28:14.837 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:28:14.920 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 12:28:58.031 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:40498 10 6661 1 2025-10-26 12:29:58.414 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53998 10 6661 1 2025-10-26 12:30:58.817 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51080 10 6661 1 2025-10-26 12:26:50.380 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 12:31:59.218 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57000 10 6661 1 2025-10-26 12:32:59.584 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57102 10 6661 1 2025-10-26 12:33:14.967 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:33:15.051 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 12:33:15.272 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 12:33:15.332 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 12:33:15.198 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:28:50.382 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 12:34:00.014 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55484 10 6661 1 2025-10-26 12:35:00.417 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40420 10 6661 1 2025-10-26 12:36:00.829 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41680 10 6661 1 2025-10-26 12:37:01.231 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42312 10 6661 1 2025-10-26 12:38:15.159 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 12:38:14.878 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:38:01.642 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57014 10 6661 1 2025-10-26 12:38:15.280 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 12:38:15.138 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 12:38:15.076 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:33:50.382 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 12:39:02.055 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42138 10 6661 1 2025-10-26 12:40:02.461 00:00:10.700 TCP 1.101.0.1:3000 -> 23.104.0.1:49148 10 6661 1 2025-10-26 12:35:50.386 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 12:41:03.196 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50888 10 6661 1 2025-10-26 12:42:03.561 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35742 10 6661 1 2025-10-26 12:43:15.315 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 12:43:03.960 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42562 10 6661 1 2025-10-26 12:43:15.346 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 12:43:15.419 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 12:43:15.266 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:43:15.233 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:44:04.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37676 10 6661 1 2025-10-26 12:45:04.766 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58666 12 6765 1 2025-10-26 12:40:50.386 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 12:46:05.178 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54926 10 6661 1 2025-10-26 12:47:05.583 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:41232 11 6713 1 2025-10-26 12:42:50.389 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 12:48:15.609 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 12:48:15.454 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 12:48:15.522 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 12:48:15.309 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:48:06.039 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43898 10 6661 1 2025-10-26 12:48:15.528 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:49:06.405 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45584 10 6661 1 2025-10-26 12:50:06.811 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:58030 10 6661 1 2025-10-26 12:51:07.194 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41652 10 6661 1 2025-10-26 12:52:07.606 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44726 10 6661 1 2025-10-26 12:47:50.389 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 12:53:15.457 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 12:53:15.515 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 12:53:15.081 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:53:15.384 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:53:08.012 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51746 10 6661 1 2025-10-26 12:53:15.465 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 12:54:08.415 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32934 10 6661 1 2025-10-26 12:49:50.394 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 12:55:08.820 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53928 10 6661 1 2025-10-26 12:56:09.228 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:55248 12 10375 1 2025-10-26 12:57:09.706 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55090 10 6452 1 2025-10-26 12:58:15.675 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 12:58:15.539 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 12:58:15.606 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 12:58:15.482 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:58:15.593 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 12:58:10.115 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53642 10 6452 1 Summary: total flows: 136, total bytes: 426208, total packets: 1013, avg bps: 881, avg pps: 0, avg bpp: 420 Time window: 2025-10-26 11:53:50 - 2025-10-26 12:58:20 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0024s User: 0.0024s Wall: 0.0021s flows/second: 64035.2 Runtime: 0.0021s