Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 17:58:51.358 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:39288 10 6452 1 2025-10-27 17:59:51.755 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34046 10 6452 1 2025-10-27 18:00:52.153 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52184 10 6452 1 2025-10-27 17:57:50.969 00:05:00.395 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:01:52.555 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47084 10 6452 1 2025-10-27 17:58:50.970 00:05:00.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:02:52.953 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38300 10 6452 1 2025-10-27 18:03:50.556 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:03:50.568 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:03:50.625 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:03:50.557 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:03:50.709 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:03:53.359 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51734 10 6452 1 2025-10-27 18:04:53.758 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:60912 10 6452 1 2025-10-27 18:05:54.134 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56694 10 6452 1 2025-10-27 18:06:54.534 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:55760 10 6452 1 2025-10-27 18:03:50.970 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:07:54.889 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43456 10 6452 1 2025-10-27 18:08:51.091 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:08:50.996 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:08:51.091 00:00:00.019 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:08:51.153 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:04:50.973 00:05:00.394 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:08:51.174 00:00:00.019 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:08:55.259 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:46176 10 6452 1 2025-10-27 18:09:55.613 00:00:14.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40854 10 6452 1 2025-10-27 18:11:00.039 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57256 10 6452 1 2025-10-27 18:12:00.444 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58606 10 6452 1 2025-10-27 18:13:00.845 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:54024 10 6452 1 2025-10-27 18:13:50.808 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:13:50.681 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:13:50.809 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:13:50.903 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:13:50.893 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:09:50.971 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:14:01.226 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33358 10 6452 1 2025-10-27 18:10:50.972 00:05:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:15:01.628 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35994 10 6452 1 2025-10-27 18:16:02.029 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54886 10 6452 1 2025-10-27 18:17:02.425 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38252 10 6452 1 2025-10-27 18:18:02.834 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:33110 10 6452 1 2025-10-27 18:18:50.971 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:18:50.968 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:18:50.790 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:18:50.890 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:18:50.829 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:19:03.257 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40590 10 6452 1 2025-10-27 18:15:50.972 00:05:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:20:03.657 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56640 10 6452 1 2025-10-27 18:16:50.976 00:05:00.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:21:04.069 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60960 10 6452 1 2025-10-27 18:22:04.472 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55142 10 6452 1 2025-10-27 18:23:04.877 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:50888 12 6556 1 2025-10-27 18:23:51.223 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:23:51.171 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:23:51.219 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:23:51.369 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:23:51.303 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:24:05.318 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 10 6452 1 2025-10-27 18:25:05.716 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:59814 10 6452 1 2025-10-27 18:21:50.973 00:05:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:26:06.128 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:41346 12 10375 1 2025-10-27 18:22:50.976 00:05:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:27:06.609 00:00:10.883 TCP 1.101.0.1:3000 -> 23.104.0.1:58778 10 6452 1 2025-10-27 18:28:07.539 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:35134 10 6452 1 2025-10-27 18:28:51.299 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:28:51.115 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:28:51.045 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:28:51.217 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:28:51.061 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:29:08.001 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56084 10 6452 1 2025-10-27 18:30:08.418 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48986 10 6452 1 2025-10-27 18:31:08.827 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52792 10 6452 1 2025-10-27 18:27:50.975 00:05:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:32:09.229 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56504 10 6452 1 2025-10-27 18:28:50.978 00:05:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:33:09.591 00:00:10.485 TCP 1.101.0.1:3000 -> 23.104.0.1:53500 10 6452 1 2025-10-27 18:33:50.910 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:33:50.993 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:33:51.083 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:33:51.277 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:33:51.275 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:34:10.117 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59048 10 6452 1 2025-10-27 18:35:10.520 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40222 10 6452 1 2025-10-27 18:36:10.917 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37506 10 6452 1 2025-10-27 18:37:11.316 00:00:10.553 TCP 1.101.0.1:3000 -> 23.104.0.1:38548 10 6452 1 2025-10-27 18:33:50.978 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:38:11.910 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42082 10 6452 1 2025-10-27 18:38:51.582 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:38:51.508 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:38:51.577 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:38:51.580 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:34:50.979 00:05:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:38:51.660 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:39:12.320 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36654 10 6452 1 2025-10-27 18:40:12.725 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55514 10 6452 1 2025-10-27 18:41:13.131 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46922 10 6452 1 2025-10-27 18:42:13.560 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53510 10 6452 1 2025-10-27 18:43:13.966 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43090 10 6452 1 2025-10-27 18:43:51.522 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:43:51.174 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:43:51.461 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:43:51.374 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:39:50.979 00:05:00.394 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:43:51.544 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:44:14.365 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33728 10 6452 1 2025-10-27 18:40:50.983 00:05:00.388 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:45:14.736 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43150 10 6452 1 2025-10-27 18:46:15.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55128 10 6452 1 2025-10-27 18:47:15.543 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35898 10 6452 1 2025-10-27 18:48:15.942 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35092 10 6452 1 2025-10-27 18:48:51.432 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:48:51.317 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:48:51.430 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:48:51.516 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:48:51.512 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:49:16.355 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48766 10 6452 1 2025-10-27 18:45:50.982 00:05:00.392 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:50:16.761 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:52970 10 6452 1 2025-10-27 18:46:50.985 00:05:00.387 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:51:17.187 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:58766 10 6452 1 2025-10-27 18:52:17.559 00:00:10.717 TCP 1.101.0.1:3000 -> 23.104.0.1:59322 10 6452 1 2025-10-27 18:53:18.318 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38952 10 6452 1 2025-10-27 18:53:51.441 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:53:51.450 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:53:51.210 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:53:51.358 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:53:51.457 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:54:18.719 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:33260 10 6452 1 2025-10-27 18:55:19.111 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39126 10 6452 1 2025-10-27 18:51:50.986 00:05:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:56:19.515 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39532 10 6452 1 2025-10-27 18:52:50.990 00:05:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:57:19.924 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:36096 10 6452 1 2025-10-27 18:58:20.302 00:00:11.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53904 10 6452 1 Summary: total flows: 135, total bytes: 419767, total packets: 1009, avg bps: 922, avg pps: 0, avg bpp: 416 Time window: 2025-10-27 17:57:50 - 2025-10-27 18:58:31 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0030s User: 0.0020s Wall: 0.0034s flows/second: 40070.1 Runtime: 0.0034s