Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 19:53:53.119 00:06:00.299 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 19:59:39.503 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59018 10 6452 1 2025-10-31 20:00:48.578 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 20:00:48.549 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 20:00:48.376 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 20:00:48.276 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:00:48.495 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:00:39.909 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58688 10 6452 1 2025-10-31 20:01:40.316 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52012 10 6452 1 2025-10-31 20:02:40.717 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37808 10 6452 1 2025-10-31 19:57:53.118 00:06:00.307 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 20:03:41.112 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54026 10 6452 1 2025-10-31 20:04:41.518 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52528 10 6452 1 2025-10-31 20:05:48.597 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 20:05:48.418 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 20:05:48.419 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 20:05:48.498 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:05:48.515 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:00:53.121 00:06:00.300 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 20:05:41.921 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39146 10 6452 1 2025-10-31 20:06:42.326 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34840 10 6452 1 2025-10-31 20:07:42.732 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44756 10 6452 1 2025-10-31 20:08:43.143 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34580 10 6452 1 2025-10-31 20:04:53.120 00:06:00.305 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 20:09:43.561 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36374 10 6452 1 2025-10-31 20:10:48.581 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 20:10:48.582 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 20:10:48.542 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:10:48.584 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:10:48.666 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 20:10:43.962 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36488 10 6452 1 2025-10-31 20:11:44.381 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41910 10 6452 1 2025-10-31 20:07:53.122 00:06:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 20:12:44.785 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53220 10 6452 1 2025-10-31 20:13:45.188 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37426 10 6452 1 2025-10-31 20:14:45.596 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38952 10 6452 1 2025-10-31 20:15:48.753 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 20:15:48.674 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 20:15:48.589 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:15:48.749 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:15:48.832 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 20:15:45.996 00:00:11.570 TCP 1.101.0.1:3000 -> 23.104.0.1:34914 10 6452 1 2025-10-31 20:11:53.121 00:06:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 20:16:47.611 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50068 10 6452 1 2025-10-31 20:17:48.021 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55840 10 6452 1 2025-10-31 20:18:48.386 00:00:11.525 TCP 1.101.0.1:3000 -> 23.104.0.1:38282 10 6452 1 2025-10-31 20:14:53.125 00:06:00.299 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 20:19:49.947 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41638 10 6452 1 2025-10-31 20:20:49.066 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 20:20:49.062 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 20:20:48.980 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 20:20:49.082 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:20:48.982 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:20:50.370 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43518 10 6452 1 2025-10-31 20:21:50.773 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35822 10 6452 1 2025-10-31 20:22:51.185 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52832 10 6452 1 2025-10-31 20:18:53.123 00:06:00.304 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 20:23:51.579 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59818 10 6452 1 2025-10-31 20:24:51.986 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37054 10 6452 1 2025-10-31 20:25:48.838 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 20:25:48.756 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 20:25:48.981 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:25:48.861 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:25:48.945 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 20:25:52.389 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32786 10 6452 1 2025-10-31 20:21:53.127 00:06:00.299 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 20:26:52.747 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:36462 11 6504 1 2025-10-31 20:27:53.209 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43760 10 6452 1 2025-10-31 20:28:53.613 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39246 10 6452 1 2025-10-31 20:29:54.016 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46784 10 6452 1 2025-10-31 20:30:48.867 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 20:30:49.117 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 20:30:48.963 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:30:48.866 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:30:48.948 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 20:25:53.124 00:06:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 20:30:54.416 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36902 10 6452 1 2025-10-31 20:31:54.820 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45358 10 6452 1 2025-10-31 20:32:55.222 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45828 10 6452 1 2025-10-31 20:28:53.127 00:06:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 20:33:55.627 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39050 10 6452 1 2025-10-31 20:34:56.042 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50134 10 6452 1 2025-10-31 20:35:48.995 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 20:35:48.989 00:00:00.052 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 20:35:48.922 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:35:49.094 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:35:49.176 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 20:35:56.449 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:49658 10 6452 1 2025-10-31 20:36:56.814 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53020 10 6452 1 2025-10-31 20:32:53.125 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 20:37:57.219 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59330 10 6452 1 2025-10-31 20:38:57.622 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60486 10 6452 1 2025-10-31 20:39:57.981 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36322 10 6452 1 2025-10-31 20:40:48.960 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 20:40:49.165 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 20:40:49.062 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:40:48.959 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:40:49.043 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 20:35:53.129 00:06:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 20:40:58.387 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38196 10 6452 1 2025-10-31 20:41:58.793 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50642 10 6452 1 2025-10-31 20:42:59.191 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33268 10 6452 1 2025-10-31 20:43:59.595 00:00:18.785 TCP 1.101.0.1:3000 -> 23.104.0.1:37570 10 6452 1 2025-10-31 20:39:53.129 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 20:45:08.436 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53724 10 6452 1 2025-10-31 20:45:49.540 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:45:49.465 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 20:45:49.540 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 20:45:49.543 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:45:49.622 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 20:46:08.835 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51046 10 6452 1 2025-10-31 20:47:09.251 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45482 10 6452 1 2025-10-31 20:42:53.132 00:06:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 20:48:09.661 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35600 10 6452 1 2025-10-31 20:49:10.086 00:00:12.757 TCP 1.101.0.1:3000 -> 23.104.0.1:36806 10 6452 1 2025-10-31 20:50:12.882 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50874 10 6452 1 2025-10-31 20:50:49.403 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 20:50:49.544 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 20:50:49.573 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 20:50:49.239 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:50:49.321 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:51:13.250 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47340 10 6452 1 2025-10-31 20:46:53.132 00:06:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 20:52:13.620 00:00:11.474 TCP 1.101.0.1:3000 -> 23.104.0.1:36670 10 6452 1 2025-10-31 20:53:15.134 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:35520 10 6452 1 2025-10-31 20:54:15.532 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:45258 10 6452 1 2025-10-31 20:49:53.135 00:06:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 20:55:15.962 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:60762 10 6452 1 2025-10-31 20:55:49.638 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 20:55:49.518 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 20:55:49.261 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:55:49.555 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 20:55:49.559 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 20:56:16.329 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:41280 10 6452 1 2025-10-31 20:57:16.740 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43004 10 6452 1 2025-10-31 20:58:17.135 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48300 10 6452 1 Summary: total flows: 136, total bytes: 410477, total packets: 1009, avg bps: 847, avg pps: 0, avg bpp: 406 Time window: 2025-10-31 19:53:53 - 2025-10-31 20:58:27 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0039s User: 0.0010s Wall: 0.0014s flows/second: 100004.4 Runtime: 0.0014s