Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 16:55:41.737 00:05:00.378 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 16:59:31.575 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45886 10 6452 1 2025-10-09 17:00:09.450 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 17:00:09.520 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:00:09.379 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:00:09.444 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 17:00:09.461 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 17:00:31.978 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:58258 10 6452 1 2025-10-09 17:01:32.399 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46186 10 6452 1 2025-10-09 17:02:32.813 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50326 10 6452 1 2025-10-09 16:58:41.741 00:05:00.375 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 17:03:33.212 00:00:14.306 TCP 1.101.0.1:3000 -> 23.104.0.1:41372 10 6452 1 2025-10-09 17:04:37.556 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47994 10 6452 1 2025-10-09 17:05:09.043 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 17:05:09.184 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 17:05:08.754 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:05:08.946 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:05:09.226 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 17:01:41.737 00:05:00.381 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 17:05:37.958 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42416 10 6452 1 2025-10-09 17:06:38.331 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39710 10 6452 1 2025-10-09 17:07:38.727 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37076 10 6452 1 2025-10-09 17:04:41.742 00:05:00.375 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 17:08:39.146 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41704 10 6452 1 2025-10-09 17:09:39.545 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56920 10 6452 1 2025-10-09 17:10:09.334 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 17:10:09.251 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 17:10:08.975 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:10:09.253 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:10:09.261 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 17:10:39.954 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43376 10 6452 1 2025-10-09 17:07:41.740 00:05:00.385 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 17:11:40.318 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51002 10 6452 1 2025-10-09 17:12:40.726 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52366 10 6452 1 2025-10-09 17:13:41.131 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34200 10 6452 1 2025-10-09 17:10:41.742 00:05:00.376 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 17:14:41.538 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52358 10 6452 1 2025-10-09 17:15:09.427 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 17:15:09.346 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:15:09.071 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 17:15:09.260 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 17:15:09.319 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:15:41.935 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:53934 10 6452 1 2025-10-09 17:16:42.320 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51882 10 6452 1 2025-10-09 17:13:41.741 00:05:00.381 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 17:17:42.683 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35518 10 6452 1 2025-10-09 17:18:43.064 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60014 10 6452 1 2025-10-09 17:19:43.466 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58900 10 6452 1 2025-10-09 17:20:09.611 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 17:20:09.578 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 17:20:09.265 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:20:09.529 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:20:09.227 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 17:16:41.752 00:05:00.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 17:20:43.872 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34986 10 6452 1 2025-10-09 17:21:44.282 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:33586 10 6452 1 2025-10-09 17:22:44.705 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37792 10 6452 1 2025-10-09 17:19:41.746 00:05:00.378 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 17:23:45.115 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40476 10 6452 1 2025-10-09 17:24:45.511 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37012 10 6452 1 2025-10-09 17:25:09.698 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 17:25:09.563 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 17:25:09.422 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:25:09.616 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:25:09.393 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 17:25:45.889 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:59098 12 6556 1 2025-10-09 17:22:41.747 00:05:00.375 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 17:26:46.317 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48932 10 6452 1 2025-10-09 17:27:46.676 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52220 10 6452 1 2025-10-09 17:28:47.097 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50780 10 6452 1 2025-10-09 17:25:41.744 00:05:00.382 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 17:29:47.500 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38580 10 6452 1 2025-10-09 17:30:10.113 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:30:10.118 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 17:30:10.174 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 17:30:10.172 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:30:10.196 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 17:30:47.905 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55652 12 6556 1 2025-10-09 17:31:48.314 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45274 10 6452 1 2025-10-09 17:28:41.749 00:05:00.377 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 17:32:48.714 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34782 10 6452 1 2025-10-09 17:33:49.102 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51476 10 6452 1 2025-10-09 17:34:49.502 00:00:10.573 TCP 1.101.0.1:3000 -> 23.104.0.1:45082 10 6452 1 2025-10-09 17:35:09.715 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 17:35:09.507 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:35:09.986 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:35:09.686 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 17:35:10.068 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 17:31:41.746 00:05:00.382 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 17:35:50.112 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55234 10 6452 1 2025-10-09 17:36:50.520 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55158 10 6452 1 2025-10-09 17:37:50.921 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58900 10 6452 1 2025-10-09 17:34:41.750 00:05:00.376 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 17:38:51.332 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43412 10 6452 1 2025-10-09 17:40:09.854 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 17:39:51.744 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:57208 10 6452 1 2025-10-09 17:40:09.924 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 17:40:09.892 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:40:09.770 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:40:09.861 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 17:40:52.185 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51630 10 6452 1 2025-10-09 17:37:41.749 00:05:00.382 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 17:41:52.590 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51420 10 6452 1 2025-10-09 17:42:52.995 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44618 10 6452 1 2025-10-09 17:43:53.406 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47860 10 6452 1 2025-10-09 17:40:41.751 00:05:00.386 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 17:44:53.809 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60782 10 6452 1 2025-10-09 17:45:09.965 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 17:45:09.680 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:45:10.011 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:45:09.964 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 17:45:10.093 00:00:00.037 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 17:45:54.212 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51336 10 6452 1 2025-10-09 17:46:54.616 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51354 10 6452 1 2025-10-09 17:43:41.751 00:05:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 17:47:55.030 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32934 10 6452 1 2025-10-09 17:48:55.396 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35740 10 6452 1 2025-10-09 17:50:10.195 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 17:49:55.796 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48246 10 6452 1 2025-10-09 17:50:10.074 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 17:50:09.648 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:50:10.111 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:50:10.110 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 17:46:41.754 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 17:50:56.207 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35298 10 6452 1 2025-10-09 17:51:56.563 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47026 10 6452 1 2025-10-09 17:52:56.981 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46670 10 6452 1 2025-10-09 17:49:41.753 00:05:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-09 17:53:57.402 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36740 10 6452 1 2025-10-09 17:55:10.208 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-09 17:55:10.224 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:55:10.164 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-09 17:55:09.836 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-09 17:55:10.246 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-09 17:54:57.766 00:00:17.250 TCP 1.101.0.1:3000 -> 23.104.0.1:36436 10 6452 1 2025-10-09 17:56:05.097 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33308 10 6452 1 2025-10-09 17:52:41.757 00:05:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-09 17:57:05.497 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47394 10 6452 1 2025-10-09 17:58:05.898 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:54610 10 6452 1 Summary: total flows: 139, total bytes: 410756, total packets: 1014, avg bps: 875, avg pps: 0, avg bpp: 405 Time window: 2025-10-09 16:55:41 - 2025-10-09 17:58:16 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0053s User: 0.0008s Wall: 0.0023s flows/second: 59224.7 Runtime: 0.0024s