Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 22:54:50.072 00:06:00.241 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 22:59:38.076 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52646 10 6452 1 2025-10-25 23:00:38.477 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43130 10 6452 1 2025-10-25 23:01:38.877 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33198 10 6452 1 2025-10-25 22:56:50.076 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-10-25 23:02:39.235 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38918 10 6452 1 2025-10-25 23:02:58.920 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 23:02:58.834 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 23:02:58.794 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:02:58.838 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:02:58.842 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 23:03:39.632 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:36172 11 6504 1 2025-10-25 23:02:50.310 00:01:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 3 194 1 2025-10-25 23:04:40.110 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55206 10 6452 1 2025-10-25 23:05:40.475 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45570 10 6452 1 2025-10-25 23:01:50.076 00:06:00.239 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 23:06:40.880 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53120 12 6556 1 2025-10-25 23:07:58.800 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 23:07:41.301 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35258 10 6452 1 2025-10-25 23:07:58.863 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 23:07:58.816 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:07:58.715 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:07:58.979 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 23:04:50.078 00:04:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-25 23:08:41.701 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:59298 10 6452 1 2025-10-25 23:09:42.151 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35934 10 6452 1 2025-10-25 23:10:42.554 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:46766 10 6452 1 2025-10-25 23:11:42.907 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33952 10 6452 1 2025-10-25 23:12:43.309 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38210 10 6452 1 2025-10-25 23:12:59.085 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 23:12:58.839 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 23:12:58.751 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:12:59.004 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:12:58.927 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 23:09:50.080 00:04:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-25 23:08:50.078 00:06:00.005 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-10-25 23:13:43.719 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:38568 10 6452 1 2025-10-25 23:14:44.138 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39714 10 6452 1 2025-10-25 23:15:44.542 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38324 10 6452 1 2025-10-25 23:16:44.945 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41262 10 6452 1 2025-10-25 23:17:45.359 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48816 10 6452 1 2025-10-25 23:17:59.207 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 23:17:58.967 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:17:59.285 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:17:59.142 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 23:17:59.369 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 23:18:45.760 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:55106 12 6556 1 2025-10-25 23:14:50.085 00:06:00.241 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 23:14:50.317 00:06:00.013 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 790 1 2025-10-25 23:19:46.181 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42408 10 6452 1 2025-10-25 23:20:46.539 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60988 10 6452 1 2025-10-25 23:21:46.940 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39866 10 6452 1 2025-10-25 23:22:59.377 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 23:22:58.970 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:22:47.362 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42406 10 6452 1 2025-10-25 23:22:59.433 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:22:59.375 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 23:22:59.516 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 23:23:47.763 00:00:11.087 TCP 1.101.0.1:3000 -> 23.104.0.1:47556 10 6452 1 2025-10-25 23:24:48.886 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:52018 10 6452 1 2025-10-25 23:21:50.082 00:04:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-25 23:25:49.267 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41586 10 6452 1 2025-10-25 23:21:50.085 00:06:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 23:26:49.674 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:36244 10 6452 1 2025-10-25 23:27:50.040 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47976 10 6452 1 2025-10-25 23:27:59.275 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 23:27:59.017 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:27:59.279 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:27:59.203 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 23:27:59.362 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 23:28:50.446 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43760 10 6452 1 2025-10-25 23:29:50.845 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:54464 10 6452 1 2025-10-25 23:30:51.229 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:51896 12 10369 1 2025-10-25 23:26:50.083 00:06:00.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 23:31:51.707 00:00:10.581 TCP 1.101.0.1:3000 -> 23.104.0.1:39752 10 6452 1 2025-10-25 23:32:59.460 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 23:32:59.203 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:32:59.465 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:32:59.459 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 23:32:59.549 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 23:32:52.323 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45012 10 6452 1 2025-10-25 23:28:50.086 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-10-25 23:33:52.729 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55268 10 6452 1 2025-10-25 23:34:53.141 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58882 10 6452 1 2025-10-25 23:34:50.334 00:00:59.998 TCP 179.21.23.21:38570 -> 179.21.23.23:179 3 194 1 2025-10-25 23:35:53.551 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45762 10 6452 1 2025-10-25 23:36:53.954 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35098 10 6452 1 2025-10-25 23:37:59.638 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 23:37:59.306 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:37:59.484 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:37:59.593 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 23:37:59.566 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 23:37:54.328 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53740 10 6452 1 2025-10-25 23:33:50.085 00:06:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 23:38:54.743 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39328 10 6452 1 2025-10-25 23:39:55.169 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:59364 10 6452 1 2025-10-25 23:36:50.088 00:04:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-25 23:40:55.599 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45902 10 6452 1 2025-10-25 23:41:55.966 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:42268 10 6452 1 2025-10-25 23:42:59.902 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 23:42:59.621 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 23:42:59.818 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:42:59.820 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:42:59.623 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 23:42:56.323 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40174 10 6452 1 2025-10-25 23:43:56.692 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51400 10 6452 1 2025-10-25 23:44:57.117 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57054 10 6452 1 2025-10-25 23:40:50.086 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-10-25 23:41:50.090 00:04:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-25 23:45:57.520 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59870 10 6452 1 2025-10-25 23:46:57.922 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35134 10 6452 1 2025-10-25 23:46:50.335 00:01:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 3 175 1 2025-10-25 23:47:59.786 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 23:47:59.603 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:47:59.783 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:47:59.651 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 23:47:59.866 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 23:47:58.333 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55816 10 6452 1 2025-10-25 23:48:58.741 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36742 10 6452 1 2025-10-25 23:49:59.154 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42800 10 6452 1 2025-10-25 23:46:50.090 00:04:00.245 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-25 23:50:59.556 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33998 10 6452 1 2025-10-25 23:51:59.961 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58718 10 6452 1 2025-10-25 23:48:50.088 00:04:00.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-25 23:52:59.856 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 23:52:59.766 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 23:52:59.621 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:52:59.774 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:52:59.595 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 23:53:00.363 00:00:10.428 TCP 1.101.0.1:3000 -> 23.104.0.1:36880 10 6452 1 2025-10-25 23:54:00.827 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40966 10 6452 1 2025-10-25 23:55:01.235 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50256 10 6452 1 2025-10-25 23:56:01.646 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54226 10 6452 1 2025-10-25 23:51:50.094 00:06:00.246 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 23:57:02.050 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59432 10 6452 1 2025-10-25 23:53:50.091 00:04:00.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-25 23:58:00.050 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 23:57:59.796 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 23:57:59.716 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:57:59.968 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 23:57:59.858 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 23:58:02.461 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57002 10 6452 1 Summary: total flows: 142, total bytes: 415463, total packets: 1029, avg bps: 874, avg pps: 0, avg bpp: 403 Time window: 2025-10-25 22:54:50 - 2025-10-25 23:58:12 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0049s User: 0.0008s Wall: 0.0025s flows/second: 56507.7 Runtime: 0.0025s