Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 18:53:50.531 00:06:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 18:58:54.967 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41164 10 6452 1 2025-10-26 18:59:55.372 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35028 10 6452 1 2025-10-26 19:00:55.775 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38302 10 6452 1 2025-10-26 19:01:56.186 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50446 10 6452 1 2025-10-26 19:02:56.551 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33558 10 6452 1 2025-10-26 19:03:22.799 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 19:03:22.760 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:03:22.718 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:03:22.801 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 19:03:22.713 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 18:58:50.530 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 19:03:56.952 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46318 10 6452 1 2025-10-26 19:04:57.361 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57616 10 6452 1 2025-10-26 19:00:50.532 00:06:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 19:05:57.761 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:34926 10 6452 1 2025-10-26 19:06:58.187 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36360 10 6452 1 2025-10-26 19:07:58.586 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41460 10 6452 1 2025-10-26 19:08:23.318 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 19:08:23.289 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 19:08:23.240 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 19:08:23.243 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:08:23.236 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:08:58.988 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50256 10 6452 1 2025-10-26 19:09:59.395 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34062 10 6452 1 2025-10-26 19:05:50.531 00:06:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 19:10:59.792 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:35188 12 10369 1 2025-10-26 19:12:00.234 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58572 10 6452 1 2025-10-26 19:07:50.535 00:06:00.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 19:13:00.634 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48510 10 6452 1 2025-10-26 19:13:22.996 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 19:13:23.176 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 19:13:23.052 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:13:23.003 00:00:00.042 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:13:23.086 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 19:14:01.036 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39720 10 6452 1 2025-10-26 19:15:01.444 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46542 10 6452 1 2025-10-26 19:16:01.853 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:47260 10 6452 1 2025-10-26 19:17:02.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46158 10 6452 1 2025-10-26 19:12:50.533 00:06:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 19:18:02.678 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49424 10 6452 1 2025-10-26 19:18:23.273 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 19:18:23.189 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 19:18:23.131 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 19:18:22.887 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:18:23.191 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:19:03.113 00:00:14.772 TCP 1.101.0.1:3000 -> 23.104.0.1:51606 10 6452 1 2025-10-26 19:14:50.536 00:06:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 19:20:07.934 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:47494 10 6452 1 2025-10-26 19:21:08.323 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58514 10 6452 1 2025-10-26 19:22:08.720 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43960 10 6452 1 2025-10-26 19:23:09.131 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39016 10 6452 1 2025-10-26 19:23:23.188 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:23:23.190 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 19:23:23.121 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 19:23:23.130 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:23:23.271 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 19:24:09.492 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34424 10 6452 1 2025-10-26 19:19:50.535 00:06:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 19:25:09.856 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60140 10 6452 1 2025-10-26 19:26:10.272 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:34522 10 6452 1 2025-10-26 19:21:50.537 00:06:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 19:27:10.646 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59824 10 6452 1 2025-10-26 19:28:23.612 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 19:28:23.485 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 19:28:23.319 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:28:23.483 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:28:11.054 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55066 10 6452 1 2025-10-26 19:28:23.566 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 19:29:11.420 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33860 10 6452 1 2025-10-26 19:30:11.777 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55116 10 6452 1 2025-10-26 19:31:12.188 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49084 10 6452 1 2025-10-26 19:26:50.536 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 19:32:12.592 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36608 10 6452 1 2025-10-26 19:33:23.453 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 19:33:23.386 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 19:33:23.536 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 19:33:23.030 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:33:23.370 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:33:12.993 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43144 10 6452 1 2025-10-26 19:28:50.539 00:06:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 19:34:13.400 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50468 10 6452 1 2025-10-26 19:35:13.818 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37142 10 6452 1 2025-10-26 19:36:14.217 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60470 10 6452 1 2025-10-26 19:37:14.623 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41870 10 6452 1 2025-10-26 19:38:23.510 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 19:38:23.577 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 19:38:23.633 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:38:23.574 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:38:23.657 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 19:38:15.026 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:57328 10 6452 1 2025-10-26 19:33:50.539 00:06:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 19:39:15.508 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42468 10 6452 1 2025-10-26 19:40:15.917 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46710 10 6452 1 2025-10-26 19:35:50.544 00:06:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 19:41:16.339 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33530 10 6452 1 2025-10-26 19:42:16.742 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58272 10 6452 1 2025-10-26 19:43:23.838 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 19:43:23.637 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 19:43:23.711 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 19:43:23.474 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:43:23.754 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:43:17.149 00:00:20.209 TCP 1.101.0.1:3000 -> 23.104.0.1:60934 10 6452 1 2025-10-26 19:44:27.415 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57662 10 6452 1 2025-10-26 19:45:27.818 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:45322 10 6452 1 2025-10-26 19:40:50.542 00:06:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 19:46:28.192 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54502 10 6452 1 2025-10-26 19:47:28.601 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50234 10 6452 1 2025-10-26 19:42:50.545 00:06:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 19:48:23.772 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 19:48:23.530 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:48:23.831 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:48:23.830 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 19:48:23.915 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 19:48:29.005 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42130 10 6452 1 2025-10-26 19:49:29.406 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38450 10 6452 1 2025-10-26 19:50:29.772 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34288 10 6452 1 2025-10-26 19:51:30.184 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35498 10 6452 1 2025-10-26 19:52:30.592 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36452 10 6452 1 2025-10-26 19:47:50.543 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 19:53:23.985 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 19:53:23.788 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 19:53:23.537 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:53:23.883 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:53:23.964 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 19:53:30.953 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35684 10 6452 1 2025-10-26 19:54:31.363 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51884 10 6452 1 2025-10-26 19:49:50.545 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 19:55:31.728 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38512 10 6452 1 2025-10-26 19:56:32.138 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60194 10 6452 1 2025-10-26 19:57:32.539 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:57632 10 6452 1 2025-10-26 19:58:23.904 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 19:58:23.736 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 19:58:23.748 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:58:23.829 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 19:58:23.911 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 19:58:32.937 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53420 10 6452 1 Summary: total flows: 137, total bytes: 420794, total packets: 1020, avg bps: 864, avg pps: 0, avg bpp: 412 Time window: 2025-10-26 18:53:50 - 2025-10-26 19:58:43 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0011s User: 0.0023s Wall: 0.0012s flows/second: 115223.5 Runtime: 0.0012s