Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-23 18:59:01.413 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55686 10 6452 1 2025-10-23 18:55:48.826 00:05:00.335 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 19:00:01.815 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60946 10 6452 1 2025-10-23 19:01:02.226 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36268 10 6452 1 2025-10-23 19:01:55.950 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 19:01:55.795 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:01:55.903 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:01:55.964 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 19:01:55.986 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 19:02:02.636 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57674 10 6452 1 2025-10-23 19:03:03.038 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45550 10 6452 1 2025-10-23 19:04:03.442 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52512 10 6452 1 2025-10-23 19:00:48.824 00:05:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 19:05:03.841 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:55022 10 6452 1 2025-10-23 19:01:48.826 00:05:00.336 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 19:06:04.224 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59504 10 6452 1 2025-10-23 19:06:55.956 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 19:06:55.872 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:06:56.188 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 19:06:56.166 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:06:56.191 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 19:07:04.626 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55876 10 6452 1 2025-10-23 19:08:05.030 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36568 10 6452 1 2025-10-23 19:09:05.394 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34126 10 6452 1 2025-10-23 19:10:05.804 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60724 10 6452 1 2025-10-23 19:06:48.827 00:05:00.339 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 19:11:06.216 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60280 10 6452 1 2025-10-23 19:07:48.829 00:05:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 19:11:55.972 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 19:11:55.952 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:11:56.034 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 19:11:55.999 00:00:00.050 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:11:56.198 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 19:12:06.623 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:44762 10 6452 1 2025-10-23 19:13:07.087 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52078 10 6452 1 2025-10-23 19:14:07.491 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41174 10 6452 1 2025-10-23 19:15:07.890 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58026 12 6556 1 2025-10-23 19:16:08.313 00:00:11.093 TCP 1.101.0.1:3000 -> 23.104.0.1:55526 10 6452 1 2025-10-23 19:12:48.826 00:05:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 19:16:55.841 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 19:16:56.245 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 19:16:56.124 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:16:56.161 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:16:56.243 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 19:17:09.444 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57854 10 6452 1 2025-10-23 19:13:48.830 00:05:00.336 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 19:18:09.847 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:59258 10 6452 1 2025-10-23 19:19:10.270 00:00:19.828 TCP 1.101.0.1:3000 -> 23.104.0.1:58232 10 6452 1 2025-10-23 19:20:20.158 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42506 10 6452 1 2025-10-23 19:21:20.573 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50554 10 6452 1 2025-10-23 19:21:56.268 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 19:21:56.161 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:21:56.259 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:21:56.425 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 19:21:56.342 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 19:22:20.974 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:44772 10 6452 1 2025-10-23 19:18:48.828 00:05:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 19:23:21.359 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58634 10 6452 1 2025-10-23 19:19:48.829 00:05:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 19:24:21.757 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:39394 10 6452 1 2025-10-23 19:25:22.192 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51280 10 6452 1 2025-10-23 19:26:22.595 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36012 10 6452 1 2025-10-23 19:26:56.373 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 19:26:56.285 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:26:56.427 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:26:56.055 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 19:26:56.510 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 19:27:22.996 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46442 10 6452 1 2025-10-23 19:28:23.395 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55246 10 6452 1 2025-10-23 19:24:48.827 00:05:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 19:29:23.798 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57478 10 6452 1 2025-10-23 19:25:48.830 00:05:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 19:30:24.213 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59140 10 6452 1 2025-10-23 19:31:24.615 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41686 10 6452 1 2025-10-23 19:31:56.496 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 19:31:56.450 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:31:56.431 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:31:56.430 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 19:31:56.514 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 19:32:24.977 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:45630 10 6452 1 2025-10-23 19:33:25.399 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41046 10 6452 1 2025-10-23 19:34:25.799 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36102 10 6452 1 2025-10-23 19:30:48.830 00:05:00.345 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 19:35:26.208 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42356 10 6452 1 2025-10-23 19:31:48.832 00:05:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 19:36:26.610 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42130 10 6452 1 2025-10-23 19:36:56.340 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 19:36:56.278 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:36:56.528 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:36:56.344 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 19:36:56.612 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 19:37:27.012 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46212 10 6452 1 2025-10-23 19:38:27.424 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38280 10 6452 1 2025-10-23 19:39:27.822 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40010 10 6452 1 2025-10-23 19:40:28.224 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36744 10 6452 1 2025-10-23 19:36:48.832 00:05:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 19:41:28.592 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47926 10 6452 1 2025-10-23 19:37:48.835 00:05:00.338 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 19:41:57.135 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 19:41:56.924 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:41:56.705 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:41:56.708 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 19:41:56.788 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 19:42:28.994 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34112 10 6452 1 2025-10-23 19:43:29.404 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46954 10 6452 1 2025-10-23 19:44:29.817 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:41074 10 6452 1 2025-10-23 19:45:30.194 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:41460 10 6452 1 2025-10-23 19:46:30.626 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45254 10 6452 1 2025-10-23 19:42:48.834 00:05:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 19:46:56.780 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 19:46:56.378 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:46:56.697 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:46:56.774 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 19:46:56.511 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 19:47:31.037 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45214 10 6452 1 2025-10-23 19:43:48.837 00:05:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 19:48:31.436 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60086 10 6452 1 2025-10-23 19:49:31.839 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57146 10 6452 1 2025-10-23 19:50:32.250 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32806 10 6452 1 2025-10-23 19:51:32.653 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36258 10 6452 1 2025-10-23 19:51:56.953 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 19:51:56.788 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:51:56.854 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:51:56.774 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 19:51:56.938 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 19:52:33.067 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34518 10 6452 1 2025-10-23 19:48:48.835 00:05:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-23 19:53:33.473 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38126 10 6452 1 2025-10-23 19:49:48.838 00:05:00.338 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-23 19:54:33.878 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50298 10 6452 1 2025-10-23 19:55:34.279 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57692 10 6452 1 2025-10-23 19:56:34.684 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40228 10 6452 1 2025-10-23 19:56:56.828 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-23 19:56:57.109 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-23 19:56:56.772 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:56:56.747 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-23 19:56:56.957 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-23 19:57:35.052 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44624 10 6452 1 2025-10-23 19:58:35.460 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50726 10 6452 1 2025-10-23 19:54:48.835 00:05:00.345 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 140, total bytes: 417104, total packets: 1022, avg bps: 868, avg pps: 0, avg bpp: 408 Time window: 2025-10-23 18:55:48 - 2025-10-23 19:59:49 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0020s User: 0.0030s Wall: 0.0023s flows/second: 59723.6 Runtime: 0.0024s