Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 16:59:20.260 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51850 10 6452 1 2025-10-29 16:59:46.995 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 16:59:46.837 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 16:59:46.925 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 16:59:46.999 00:00:00.039 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 16:59:47.009 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 16:55:51.896 00:05:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 17:00:20.620 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56748 10 6452 1 2025-10-29 17:01:21.026 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44434 10 6452 1 2025-10-29 17:02:21.433 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:36870 10 6452 1 2025-10-29 16:58:51.900 00:05:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 17:03:21.800 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45404 10 6452 1 2025-10-29 17:04:22.205 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33982 10 6452 1 2025-10-29 17:04:47.212 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 17:04:46.935 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:04:47.104 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:04:47.158 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 17:04:47.186 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 17:05:22.610 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56290 10 6452 1 2025-10-29 17:01:51.899 00:05:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 17:06:23.013 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:55612 10 6452 1 2025-10-29 17:07:23.406 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38522 10 6452 1 2025-10-29 17:08:23.805 00:00:10.793 TCP 1.101.0.1:3000 -> 23.104.0.1:51076 10 6452 1 2025-10-29 17:04:51.901 00:05:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 17:09:24.637 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47324 10 6452 1 2025-10-29 17:09:47.271 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 17:09:47.251 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 17:09:46.891 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:09:47.188 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:09:47.297 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 17:10:25.040 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45788 10 6452 1 2025-10-29 17:11:25.442 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33948 10 6452 1 2025-10-29 17:07:51.899 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 17:12:25.814 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35146 10 6452 1 2025-10-29 17:13:26.227 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37188 10 6452 1 2025-10-29 17:14:26.630 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44486 10 6452 1 2025-10-29 17:14:47.599 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 17:14:47.547 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 17:14:47.509 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:14:47.503 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:14:47.119 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 17:10:51.904 00:05:00.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 17:15:27.026 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44342 10 6452 1 2025-10-29 17:16:27.430 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43952 10 6452 1 2025-10-29 17:17:27.807 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:42480 10 6452 1 2025-10-29 17:13:51.901 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 17:18:28.184 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33224 10 6452 1 2025-10-29 17:19:28.583 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53382 10 6452 1 2025-10-29 17:19:47.494 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 17:19:47.345 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 17:19:47.442 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:19:47.411 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:19:47.412 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 17:20:28.991 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55954 10 6452 1 2025-10-29 17:16:51.906 00:05:00.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 17:21:29.396 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42624 10 6452 1 2025-10-29 17:22:29.802 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:33630 10 6452 1 2025-10-29 17:23:30.196 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:40278 10 6452 1 2025-10-29 17:19:51.904 00:05:00.395 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 17:24:30.684 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47494 10 6452 1 2025-10-29 17:24:47.682 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 17:24:47.491 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 17:24:47.283 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:24:47.600 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:24:47.429 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 17:25:31.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55306 10 6452 1 2025-10-29 17:26:31.520 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46604 10 6452 1 2025-10-29 17:22:51.907 00:05:00.400 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 17:27:31.886 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:50414 10 6452 1 2025-10-29 17:28:32.262 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36348 10 6452 1 2025-10-29 17:29:47.822 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 17:29:32.663 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43036 10 6452 1 2025-10-29 17:29:47.738 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 17:29:47.510 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:29:47.739 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:29:47.500 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 17:25:51.905 00:05:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 17:30:33.027 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:49002 10 6452 1 2025-10-29 17:31:33.417 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50096 10 6452 1 2025-10-29 17:32:33.824 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46608 10 6452 1 2025-10-29 17:28:51.911 00:05:00.397 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 17:33:34.232 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54142 10 6452 1 2025-10-29 17:34:34.648 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50396 10 6452 1 2025-10-29 17:34:48.030 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 17:34:47.707 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 17:34:47.375 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:34:47.948 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:34:47.986 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 17:35:35.068 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34796 10 6452 1 2025-10-29 17:31:51.910 00:05:00.406 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 17:36:35.477 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52602 10 6452 1 2025-10-29 17:37:35.878 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44268 10 6452 1 2025-10-29 17:38:36.296 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35136 10 6452 1 2025-10-29 17:34:51.912 00:05:00.401 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 17:39:36.661 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50138 10 6452 1 2025-10-29 17:39:47.755 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 17:39:47.805 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:39:47.757 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:39:47.757 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 17:39:47.840 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 17:40:37.098 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43570 10 6452 1 2025-10-29 17:41:37.508 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:42410 10 6452 1 2025-10-29 17:37:51.912 00:05:00.405 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 17:42:37.960 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55722 10 6452 1 2025-10-29 17:43:38.365 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:59654 10 6452 1 2025-10-29 17:44:48.562 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 17:44:48.429 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 17:44:48.132 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:44:38.741 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41456 10 6452 1 2025-10-29 17:44:48.480 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:44:48.248 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 17:40:51.916 00:05:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 17:45:39.110 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53764 10 6452 1 2025-10-29 17:46:39.509 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52862 10 6452 1 2025-10-29 17:47:39.870 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55808 10 6452 1 2025-10-29 17:43:51.915 00:05:00.402 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 17:48:40.235 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40944 10 6452 1 2025-10-29 17:49:48.032 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 17:49:48.048 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 17:49:47.961 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:49:47.948 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:49:48.279 00:00:00.041 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 17:49:40.635 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37240 10 6452 1 2025-10-29 17:50:41.040 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33482 10 6452 1 2025-10-29 17:46:51.918 00:05:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 17:51:41.446 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45222 10 6452 1 2025-10-29 17:52:41.848 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:51632 10 6452 1 2025-10-29 17:53:42.229 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41428 10 6452 1 2025-10-29 17:49:51.916 00:05:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 17:54:48.045 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 17:54:48.068 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 17:54:48.008 00:00:00.037 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:54:47.962 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 17:54:48.151 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 17:54:42.629 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59012 10 6452 1 2025-10-29 17:55:43.032 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35986 10 6452 1 2025-10-29 17:52:51.920 00:05:00.397 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 17:56:43.436 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48322 10 6452 1 2025-10-29 17:57:43.836 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39270 10 6452 1 Summary: total flows: 139, total bytes: 410548, total packets: 1010, avg bps: 882, avg pps: 0, avg bpp: 406 Time window: 2025-10-29 16:55:51 - 2025-10-29 17:57:54 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0035s User: 0.0014s Wall: 0.0029s flows/second: 48705.8 Runtime: 0.0029s