Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 08:59:20.797 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45836 10 6452 1 2025-10-29 08:59:37.302 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 08:59:37.337 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:59:37.303 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 08:59:37.297 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 08:59:37.386 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 08:55:51.768 00:05:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 09:00:21.202 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48168 10 6452 1 2025-10-29 09:01:21.604 00:00:10.717 TCP 1.101.0.1:3000 -> 23.104.0.1:44786 10 6452 1 2025-10-29 09:02:22.380 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53990 10 6452 1 2025-10-29 08:58:51.771 00:05:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 09:03:22.785 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33240 10 6452 1 2025-10-29 09:04:37.571 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 09:04:23.204 00:00:11.465 TCP 1.101.0.1:3000 -> 23.104.0.1:42022 10 6452 1 2025-10-29 09:04:37.425 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:04:37.307 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:04:37.488 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:04:37.488 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:05:24.719 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:59786 10 6452 1 2025-10-29 09:01:51.769 00:05:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 09:06:25.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58744 10 6452 1 2025-10-29 09:07:25.512 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45610 10 6452 1 2025-10-29 09:08:25.918 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54584 10 6452 1 2025-10-29 09:04:51.772 00:05:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 09:09:37.573 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:09:37.690 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:09:26.283 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51600 10 6452 1 2025-10-29 09:09:37.666 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:09:37.740 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:09:37.749 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 09:10:26.688 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50782 10 6452 1 2025-10-29 09:11:27.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38148 10 6452 1 2025-10-29 09:07:51.769 00:05:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 09:12:27.504 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44164 12 6556 1 2025-10-29 09:13:27.910 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36770 10 6452 1 2025-10-29 09:14:38.338 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:14:38.425 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:14:38.273 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:14:38.397 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:14:28.315 00:00:11.423 TCP 1.101.0.1:3000 -> 23.104.0.1:48958 10 6452 1 2025-10-29 09:14:38.357 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 09:10:51.773 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 09:15:29.776 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52488 10 6452 1 2025-10-29 09:16:30.187 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34356 10 6452 1 2025-10-29 09:17:30.593 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33786 10 6452 1 2025-10-29 09:13:51.774 00:05:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 09:18:30.957 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34724 10 6452 1 2025-10-29 09:19:37.863 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 09:19:37.786 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:19:37.729 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:19:37.780 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:19:37.779 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:19:31.323 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52938 10 6452 1 2025-10-29 09:20:31.733 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35854 10 6452 1 2025-10-29 09:16:51.776 00:05:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 09:21:32.149 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42400 10 6452 1 2025-10-29 09:22:32.548 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50066 10 6452 1 2025-10-29 09:23:32.951 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34088 10 6452 1 2025-10-29 09:19:51.774 00:05:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 09:24:38.068 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 09:24:37.907 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:24:37.441 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:24:37.986 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:24:37.826 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:24:33.366 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56780 10 6452 1 2025-10-29 09:25:33.774 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54446 10 6452 1 2025-10-29 09:26:34.185 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33278 10 6452 1 2025-10-29 09:22:51.783 00:05:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 09:27:34.599 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35106 10 6452 1 2025-10-29 09:28:35.001 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53236 10 6452 1 2025-10-29 09:29:37.892 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:29:37.905 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:29:38.137 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:29:37.903 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:29:38.220 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 09:29:35.406 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46418 10 6452 1 2025-10-29 09:25:51.775 00:05:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 09:30:35.814 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46270 10 6452 1 2025-10-29 09:31:36.222 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35078 10 6452 1 2025-10-29 09:32:36.622 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56150 10 6452 1 2025-10-29 09:28:51.778 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 09:33:37.021 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37522 10 6452 1 2025-10-29 09:34:38.363 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 09:34:38.291 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:34:37.958 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:34:38.281 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:34:38.442 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:34:37.450 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60206 12 6556 1 2025-10-29 09:35:37.856 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:45370 10 6452 1 2025-10-29 09:31:51.777 00:05:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 09:36:38.241 00:00:22.598 TCP 1.101.0.1:3000 -> 23.104.0.1:57168 10 6452 1 2025-10-29 09:37:51.016 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58996 10 6452 1 2025-10-29 09:34:51.780 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 09:38:51.419 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55188 10 6452 1 2025-10-29 09:39:38.229 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:39:38.273 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:39:38.312 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:39:38.158 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:39:38.395 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 09:39:51.836 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:52322 10 6452 1 2025-10-29 09:40:52.258 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43374 10 6452 1 2025-10-29 09:37:51.777 00:05:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 09:41:52.668 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60242 10 6452 1 2025-10-29 09:42:53.126 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36808 10 6452 1 2025-10-29 09:43:53.529 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44428 10 6452 1 2025-10-29 09:44:38.138 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:44:38.323 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:44:38.305 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:44:38.360 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:44:38.388 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 09:40:51.781 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 09:44:53.935 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:56204 10 6452 1 2025-10-29 09:45:54.323 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44146 10 6452 1 2025-10-29 09:46:54.731 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35714 10 6452 1 2025-10-29 09:43:51.779 00:05:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 09:47:55.112 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33082 10 6452 1 2025-10-29 09:48:55.514 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55606 10 6452 1 2025-10-29 09:49:38.077 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:49:38.286 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:49:38.236 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:49:38.406 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:49:38.319 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 09:49:55.920 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40050 10 6452 1 2025-10-29 09:46:51.782 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 09:50:56.323 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44594 10 6452 1 2025-10-29 09:51:56.725 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59488 10 6452 1 2025-10-29 09:52:57.136 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55470 10 6452 1 2025-10-29 09:49:51.781 00:05:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 09:53:57.539 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:54684 10 6452 1 2025-10-29 09:54:38.386 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 09:54:38.435 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:54:38.507 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 09:54:38.455 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 09:54:38.590 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 09:54:57.935 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:41606 10 6452 1 2025-10-29 09:55:58.328 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:54596 10 6452 1 2025-10-29 09:52:51.786 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 09:56:58.694 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:53930 10 6452 1 2025-10-29 09:57:59.098 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40060 10 6452 1 Summary: total flows: 139, total bytes: 410756, total packets: 1014, avg bps: 879, avg pps: 0, avg bpp: 405 Time window: 2025-10-29 08:55:51 - 2025-10-29 09:58:09 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0038s User: 0.0009s Wall: 0.0020s flows/second: 69538.2 Runtime: 0.0020s