Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-21 11:59:41.015 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:53920 10 6452 1 2025-10-21 11:56:47.680 00:05:00.345 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 12:00:49.932 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 12:00:49.613 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 12:00:49.508 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:00:49.849 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:00:49.692 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 11:56:47.683 00:05:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 12:00:41.375 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52266 10 6452 1 2025-10-21 12:01:41.735 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51850 10 6452 1 2025-10-21 12:02:42.137 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46450 10 6452 1 2025-10-21 12:03:42.544 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35740 10 6452 1 2025-10-21 12:04:42.947 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:34378 10 6452 1 2025-10-21 12:05:49.801 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 12:05:49.621 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:05:49.590 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:05:49.759 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 12:05:49.675 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 12:05:43.323 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37970 10 6452 1 2025-10-21 12:02:47.687 00:05:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 12:02:47.685 00:05:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 12:06:43.730 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41850 10 6452 1 2025-10-21 12:07:44.139 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47394 10 6452 1 2025-10-21 12:08:44.542 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39718 10 6452 1 2025-10-21 12:09:44.942 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:57406 10 6452 1 2025-10-21 12:10:49.811 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 12:10:49.577 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:10:49.732 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:10:49.856 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 12:10:49.816 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 12:10:45.315 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:35264 10 6452 1 2025-10-21 12:11:45.703 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41088 10 6452 1 2025-10-21 12:08:47.688 00:05:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 12:08:47.690 00:05:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 12:12:46.119 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44684 10 6452 1 2025-10-21 12:13:46.530 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:33752 10 6452 1 2025-10-21 12:14:46.913 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53452 10 6452 1 2025-10-21 12:15:50.179 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 12:15:50.172 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 12:15:49.899 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:15:50.098 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:15:50.167 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 12:15:47.322 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55964 10 6452 1 2025-10-21 12:16:47.734 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45988 10 6452 1 2025-10-21 12:17:48.140 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40498 10 6452 1 2025-10-21 12:14:47.693 00:05:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 12:14:47.690 00:05:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 12:18:48.538 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:59712 10 6452 1 2025-10-21 12:19:48.965 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34184 10 6452 1 2025-10-21 12:20:50.126 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 12:20:49.779 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 12:20:50.116 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:20:50.043 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:20:50.181 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 12:20:49.369 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49632 10 6452 1 2025-10-21 12:21:49.772 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58468 10 6452 1 2025-10-21 12:22:50.185 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51136 10 6452 1 2025-10-21 12:23:50.585 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:34626 12 10375 1 2025-10-21 12:20:47.694 00:05:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 12:20:47.692 00:05:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 12:24:51.027 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:34368 10 6452 1 2025-10-21 12:25:50.233 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 12:25:50.121 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:25:50.118 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:25:50.187 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 12:25:50.200 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 12:25:51.425 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49154 10 6452 1 2025-10-21 12:26:51.826 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54676 10 6452 1 2025-10-21 12:27:52.185 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42348 10 6452 1 2025-10-21 12:28:52.586 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:53954 14 10479 1 2025-10-21 12:29:53.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55476 10 6452 1 2025-10-21 12:26:47.693 00:05:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 12:30:50.271 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 12:30:49.963 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 12:30:50.238 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:30:50.189 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:30:50.274 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 12:26:47.697 00:05:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 12:30:53.509 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56740 10 6452 1 2025-10-21 12:31:53.914 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39980 10 6452 1 2025-10-21 12:32:54.331 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48898 10 6452 1 2025-10-21 12:33:54.700 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59848 10 6452 1 2025-10-21 12:34:55.110 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50408 10 6452 1 2025-10-21 12:35:50.802 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 12:35:50.809 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 12:35:50.645 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:35:50.719 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:35:50.971 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 12:35:55.512 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37052 10 6452 1 2025-10-21 12:32:47.693 00:05:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 12:32:47.697 00:05:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 12:36:55.918 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39270 10 6452 1 2025-10-21 12:37:56.318 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60880 10 6452 1 2025-10-21 12:38:56.689 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42008 10 6452 1 2025-10-21 12:39:57.108 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50298 10 6452 1 2025-10-21 12:40:50.709 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 12:40:50.652 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:40:50.720 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:40:50.558 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 12:40:50.804 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 12:40:57.506 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44204 10 6452 1 2025-10-21 12:41:57.904 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:48484 10 6452 1 2025-10-21 12:38:47.701 00:05:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 12:38:47.703 00:05:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 12:42:58.282 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46106 10 6452 1 2025-10-21 12:43:58.693 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42452 10 6452 1 2025-10-21 12:44:59.114 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47278 10 6452 1 2025-10-21 12:45:50.572 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 12:45:50.655 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 12:45:50.539 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:45:50.489 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:45:50.620 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 12:45:59.476 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:48154 10 6452 1 2025-10-21 12:46:59.855 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33508 10 6452 1 2025-10-21 12:48:00.277 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32946 10 6452 1 2025-10-21 12:44:47.703 00:05:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 12:44:47.701 00:05:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 12:49:00.678 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39048 10 6452 1 2025-10-21 12:50:01.039 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:49556 10 6452 1 2025-10-21 12:50:50.822 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 12:50:50.741 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 12:50:50.627 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:50:50.740 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:50:50.738 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 12:51:01.410 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59644 10 6452 1 2025-10-21 12:52:01.819 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43488 10 6452 1 2025-10-21 12:53:02.226 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38362 10 6452 1 2025-10-21 12:54:02.627 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39156 10 6452 1 2025-10-21 12:50:47.701 00:05:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 12:50:47.703 00:05:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-21 12:55:03.031 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56372 10 6452 1 2025-10-21 12:55:50.890 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-21 12:55:50.745 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-21 12:55:50.606 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:55:50.807 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-21 12:55:50.567 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-21 12:56:03.394 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36594 10 6452 1 2025-10-21 12:57:03.799 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51124 10 6452 1 2025-10-21 12:58:04.206 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59478 10 6452 1 Summary: total flows: 139, total bytes: 418498, total packets: 1016, avg bps: 908, avg pps: 0, avg bpp: 411 Time window: 2025-10-21 11:56:47 - 2025-10-21 12:58:14 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0048s User: 0.0019s Wall: 0.0020s flows/second: 69746.2 Runtime: 0.0020s