Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-30 18:53:52.418 00:06:00.386 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 18:59:34.430 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51650 10 6452 1 2025-10-30 18:54:52.415 00:06:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 19:00:18.518 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 19:00:18.438 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 19:00:18.193 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:00:18.434 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:00:18.356 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 19:00:34.836 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:42056 10 6452 1 2025-10-30 19:01:35.225 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52412 10 6452 1 2025-10-30 19:02:35.625 00:00:10.776 TCP 1.101.0.1:3000 -> 23.104.0.1:39222 10 6452 1 2025-10-30 19:03:36.439 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41550 10 6452 1 2025-10-30 19:04:36.840 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:45084 11 6504 1 2025-10-30 19:05:18.454 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 19:05:18.203 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:05:18.253 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:05:18.451 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 19:05:18.336 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 19:05:37.328 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53970 10 6452 1 2025-10-30 19:00:52.418 00:06:00.389 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 19:06:37.729 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47152 10 6452 1 2025-10-30 19:01:52.415 00:06:00.394 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 19:07:38.139 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52712 10 6452 1 2025-10-30 19:08:38.539 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37562 10 6452 1 2025-10-30 19:09:38.942 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50652 10 6452 1 2025-10-30 19:10:18.455 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 19:10:18.321 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:10:18.519 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:10:18.360 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 19:10:18.601 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 19:10:39.370 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38430 10 6452 1 2025-10-30 19:11:39.797 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39480 10 6452 1 2025-10-30 19:12:40.205 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:52510 10 6452 1 2025-10-30 19:07:52.418 00:06:00.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 19:13:40.570 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59914 10 6452 1 2025-10-30 19:08:52.418 00:06:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 19:14:40.976 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59672 10 6452 1 2025-10-30 19:15:18.644 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 19:15:18.396 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:15:18.581 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:15:18.689 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 19:15:18.663 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 19:15:41.390 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37614 10 6452 1 2025-10-30 19:16:41.798 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45158 10 6452 1 2025-10-30 19:17:42.222 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35626 10 6452 1 2025-10-30 19:18:42.627 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48442 10 6452 1 2025-10-30 19:14:52.421 00:06:00.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 19:19:43.030 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54062 10 6452 1 2025-10-30 19:20:18.768 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 19:20:18.764 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:20:18.804 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:20:18.528 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 19:20:18.886 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 19:15:52.420 00:06:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 19:20:43.434 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47584 10 6452 1 2025-10-30 19:21:43.832 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:59350 10 6452 1 2025-10-30 19:22:44.206 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49356 10 6452 1 2025-10-30 19:23:44.570 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33104 10 6452 1 2025-10-30 19:24:44.976 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36210 10 6452 1 2025-10-30 19:25:18.902 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 19:25:18.819 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 19:25:18.470 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:25:18.821 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:25:18.824 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 19:25:45.390 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55262 10 6452 1 2025-10-30 19:21:52.425 00:06:00.388 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 19:26:45.748 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40436 10 6452 1 2025-10-30 19:22:52.424 00:06:00.395 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 19:27:46.159 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35740 10 6452 1 2025-10-30 19:28:46.565 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47014 10 6452 1 2025-10-30 19:29:46.976 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57740 10 6452 1 2025-10-30 19:30:19.445 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 19:30:19.281 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 19:30:19.221 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:30:19.363 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:30:19.425 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 19:30:47.397 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57620 10 6452 1 2025-10-30 19:31:47.803 00:00:10.604 TCP 1.101.0.1:3000 -> 23.104.0.1:46540 10 6452 1 2025-10-30 19:32:48.448 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39928 10 6452 1 2025-10-30 19:28:52.429 00:06:00.389 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 19:33:48.845 00:00:10.469 TCP 1.101.0.1:3000 -> 23.104.0.1:48860 12 10369 1 2025-10-30 19:29:52.426 00:06:00.394 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 19:34:49.342 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:36466 10 6452 1 2025-10-30 19:35:18.848 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 19:35:18.765 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:35:18.929 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:35:19.156 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 19:35:19.014 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 19:35:49.724 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37062 10 6452 1 2025-10-30 19:36:50.132 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40430 10 6452 1 2025-10-30 19:37:50.540 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41524 10 6452 1 2025-10-30 19:38:50.942 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:57676 10 6452 1 2025-10-30 19:39:51.321 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43672 10 6452 1 2025-10-30 19:40:18.894 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 19:40:19.014 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:40:18.977 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:40:18.890 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 19:40:19.060 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 19:35:52.433 00:06:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 19:40:51.689 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:39532 10 6452 1 2025-10-30 19:36:52.432 00:06:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 19:41:52.112 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43468 10 6452 1 2025-10-30 19:42:52.516 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41764 10 6452 1 2025-10-30 19:43:52.920 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42056 10 6452 1 2025-10-30 19:44:53.334 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49406 10 6452 1 2025-10-30 19:45:19.012 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 19:45:19.077 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:45:19.010 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:45:19.250 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 19:45:19.091 00:00:00.041 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 19:45:53.738 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44654 10 6452 1 2025-10-30 19:46:54.144 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49776 10 6452 1 2025-10-30 19:42:52.438 00:06:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 19:47:54.547 00:00:10.425 TCP 1.101.0.1:3000 -> 23.104.0.1:37432 10 6452 1 2025-10-30 19:43:52.433 00:06:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 19:48:55.018 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51248 10 6452 1 2025-10-30 19:49:55.380 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36132 10 6452 1 2025-10-30 19:50:20.056 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 19:50:19.769 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 19:50:19.699 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:50:19.973 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:50:19.977 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 19:50:55.777 00:00:11.621 TCP 1.101.0.1:3000 -> 23.104.0.1:38820 10 6452 1 2025-10-30 19:51:57.435 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41540 10 6452 1 2025-10-30 19:52:57.839 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:53588 10 6452 1 2025-10-30 19:53:58.261 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:42834 12 10375 1 2025-10-30 19:49:52.438 00:06:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-30 19:54:58.745 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47158 10 6452 1 2025-10-30 19:55:19.635 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-30 19:55:19.695 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-30 19:55:19.334 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:55:19.552 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-30 19:55:19.552 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-30 19:50:52.437 00:06:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-30 19:55:59.151 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54994 10 6452 1 2025-10-30 19:56:59.557 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52406 10 6452 1 2025-10-30 19:57:59.972 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:32808 10 6452 1 Summary: total flows: 137, total bytes: 419178, total packets: 1027, avg bps: 869, avg pps: 0, avg bpp: 408 Time window: 2025-10-30 18:53:52 - 2025-10-30 19:58:10 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0053s User: 0.0011s Wall: 0.0017s flows/second: 78553.6 Runtime: 0.0018s