Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 23:53:52.057 00:06:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-29 23:59:04.443 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53480 10 6452 1 2025-10-29 23:59:55.482 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 23:59:55.510 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 23:59:55.064 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 23:59:55.399 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 23:59:55.409 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 00:00:04.848 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:55308 10 6452 1 2025-10-30 00:01:05.274 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:59630 10 6452 1 2025-10-30 00:02:05.667 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33408 10 6452 1 2025-10-30 00:03:06.031 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53766 10 6452 1 2025-10-30 00:04:06.436 00:00:15.913 TCP 1.101.0.1:3000 -> 23.104.0.1:35974 10 6452 1 2025-10-30 00:04:55.413 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 00:04:55.505 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:04:55.411 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:04:55.552 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 23:59:52.062 00:06:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 00:04:55.495 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 00:05:12.399 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48594 10 6452 1 2025-10-30 00:00:52.060 00:06:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 00:06:12.762 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:33242 10 6452 1 2025-10-30 00:07:13.133 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38064 10 6452 1 2025-10-30 00:08:13.532 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51524 10 6452 1 2025-10-30 00:09:13.943 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54456 10 6452 1 2025-10-30 00:09:56.123 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 00:09:56.053 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 00:09:56.074 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:09:56.040 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:09:56.146 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 00:10:14.350 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60538 10 6452 1 2025-10-30 00:11:14.759 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42194 10 6452 1 2025-10-30 00:06:52.063 00:06:00.387 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 00:12:15.175 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37510 10 6452 1 2025-10-30 00:07:52.062 00:06:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 00:13:15.537 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:57270 12 10375 1 2025-10-30 00:14:15.971 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59388 10 6452 1 2025-10-30 00:14:55.747 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 00:14:55.735 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 00:14:55.520 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:14:55.665 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:14:55.735 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 00:15:16.378 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59086 10 6452 1 2025-10-30 00:16:16.795 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35362 10 6452 1 2025-10-30 00:17:17.204 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39930 10 6452 1 2025-10-30 00:18:17.605 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47364 10 6452 1 2025-10-30 00:13:52.066 00:06:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 00:19:18.013 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36072 10 6452 1 2025-10-30 00:14:52.064 00:06:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 00:19:55.828 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 00:19:55.751 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 00:19:55.768 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:19:55.745 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:19:55.883 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 00:20:18.416 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34580 10 6452 1 2025-10-30 00:21:18.827 00:00:11.054 TCP 1.101.0.1:3000 -> 23.104.0.1:44732 10 6452 1 2025-10-30 00:22:19.916 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54234 10 6452 1 2025-10-30 00:23:20.313 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59242 10 6452 1 2025-10-30 00:24:20.676 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40042 10 6452 1 2025-10-30 00:24:55.360 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:24:55.508 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:24:55.501 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 00:24:55.507 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 00:24:55.588 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 00:25:21.103 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47080 10 6452 1 2025-10-30 00:20:52.070 00:06:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 00:26:21.510 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46074 10 6452 1 2025-10-30 00:21:52.067 00:06:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 00:27:21.911 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36824 10 6452 1 2025-10-30 00:28:22.314 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33358 10 6452 1 2025-10-30 00:29:22.675 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40060 10 6452 1 2025-10-30 00:29:55.910 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 00:29:55.919 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 00:29:55.901 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:29:55.829 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:29:56.086 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 00:30:23.068 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45788 10 6452 1 2025-10-30 00:31:23.475 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:46134 10 6452 1 2025-10-30 00:32:23.907 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:51098 10 6452 1 2025-10-30 00:27:52.072 00:06:00.382 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 00:33:24.275 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53694 10 6452 1 2025-10-30 00:28:52.072 00:06:00.385 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 00:34:24.692 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44872 10 6452 1 2025-10-30 00:34:56.409 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 00:34:56.391 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 00:34:56.404 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:34:56.326 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:34:56.390 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 00:35:25.118 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:47836 10 6452 1 2025-10-30 00:36:25.558 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50876 10 6452 1 2025-10-30 00:37:25.960 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44872 10 6452 1 2025-10-30 00:38:26.365 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54618 10 6452 1 2025-10-30 00:39:26.761 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:37096 10 6452 1 2025-10-30 00:34:52.077 00:06:00.378 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 00:39:56.415 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 00:39:56.154 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 00:39:56.150 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:39:56.334 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:39:56.218 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 00:40:27.185 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44938 10 6452 1 2025-10-30 00:35:52.075 00:06:00.383 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 00:41:27.547 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52866 10 6452 1 2025-10-30 00:42:27.957 00:00:10.464 TCP 1.101.0.1:3000 -> 23.104.0.1:39654 12 10375 1 2025-10-30 00:43:28.450 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42658 10 6452 1 2025-10-30 00:44:28.848 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38344 10 6452 1 2025-10-30 00:44:56.635 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 00:44:56.570 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:44:56.641 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:44:56.635 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 00:44:56.723 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 00:45:29.265 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52534 10 6452 1 2025-10-30 00:46:29.673 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41048 10 6452 1 2025-10-30 00:41:52.078 00:06:00.379 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 00:47:30.032 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37352 10 6452 1 2025-10-30 00:42:52.075 00:06:00.384 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 00:48:30.391 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43200 10 6452 1 2025-10-30 00:49:30.795 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:51158 10 6452 1 2025-10-30 00:49:56.491 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 00:49:56.798 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:49:56.481 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:49:56.552 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 00:49:56.565 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 00:50:31.190 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43104 10 6452 1 2025-10-30 00:51:31.594 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38660 10 6452 1 2025-10-30 00:52:32.006 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:51308 10 6452 1 2025-10-30 00:53:32.425 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53780 10 6452 1 2025-10-30 00:48:52.079 00:06:00.380 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 00:54:32.838 00:00:21.698 TCP 1.101.0.1:3000 -> 23.104.0.1:58248 10 6452 1 2025-10-30 00:49:52.077 00:06:00.385 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 00:54:56.574 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 00:54:56.596 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:54:56.575 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 00:54:56.575 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 00:54:56.658 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 00:55:44.589 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42492 10 6452 1 2025-10-30 00:56:44.992 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51656 10 6452 1 2025-10-30 00:57:45.358 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40248 10 6452 1 Summary: total flows: 136, total bytes: 418271, total packets: 1012, avg bps: 870, avg pps: 0, avg bpp: 413 Time window: 2025-10-29 23:53:52 - 2025-10-30 00:57:55 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0053s User: 0.0009s Wall: 0.0018s flows/second: 75433.1 Runtime: 0.0018s