Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 18:58:55.705 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34970 10 6452 1 2025-10-28 18:59:20.460 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 18:59:20.413 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:59:20.663 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:59:20.448 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 18:59:20.744 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 18:59:56.094 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58852 10 6452 1 2025-10-28 19:00:56.494 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37474 10 6452 1 2025-10-28 19:01:56.895 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38252 12 6556 1 2025-10-28 18:57:51.488 00:06:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 19:02:57.308 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37820 10 6452 1 2025-10-28 18:58:51.491 00:06:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 19:03:57.685 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59722 10 6452 1 2025-10-28 19:04:20.678 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 19:04:20.595 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:04:20.537 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:04:20.595 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:04:20.883 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:04:58.107 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57334 10 6452 1 2025-10-28 19:05:58.513 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:60108 10 6452 1 2025-10-28 19:06:58.881 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39936 10 6452 1 2025-10-28 19:07:59.289 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42350 10 6452 1 2025-10-28 19:08:59.692 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48410 10 6452 1 2025-10-28 19:09:20.963 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:09:20.858 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:09:20.965 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:09:20.968 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:09:21.048 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 19:04:51.490 00:06:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 19:10:00.108 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38094 10 6452 1 2025-10-28 19:05:51.492 00:06:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 19:11:00.472 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56072 10 6452 1 2025-10-28 19:12:00.888 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:58974 12 6556 1 2025-10-28 19:13:01.304 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50606 10 6452 1 2025-10-28 19:14:01.703 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37824 10 6452 1 2025-10-28 19:14:20.685 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:14:20.693 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:14:20.769 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:14:20.770 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:14:20.851 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 19:15:02.111 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35446 10 6452 1 2025-10-28 19:16:02.516 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33764 10 6452 1 2025-10-28 19:11:51.494 00:06:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 19:17:02.927 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:60952 10 6452 1 2025-10-28 19:12:51.496 00:06:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 19:18:03.354 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35262 10 6452 1 2025-10-28 19:19:03.763 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:50006 10 6452 1 2025-10-28 19:19:21.561 00:00:00.055 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:19:21.235 00:00:00.034 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:19:21.595 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:19:22.040 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:19:21.677 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 19:20:04.178 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44060 10 6452 1 2025-10-28 19:21:04.542 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39426 10 6452 1 2025-10-28 19:22:04.945 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34396 10 6452 1 2025-10-28 19:23:05.365 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55596 10 6452 1 2025-10-28 19:18:51.495 00:06:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 19:24:20.909 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:24:20.732 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:24:05.766 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60670 10 6452 1 2025-10-28 19:24:20.806 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:24:20.821 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:24:20.888 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 19:19:51.498 00:06:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 19:25:06.177 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35784 10 6452 1 2025-10-28 19:26:06.542 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49578 10 6452 1 2025-10-28 19:27:06.949 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40076 10 6452 1 2025-10-28 19:28:07.359 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:48488 10 6452 1 2025-10-28 19:29:20.882 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:29:07.777 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45800 10 6452 1 2025-10-28 19:29:20.972 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:29:21.191 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:29:21.194 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:29:21.277 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 19:30:08.179 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59648 10 6452 1 2025-10-28 19:25:51.499 00:06:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 19:31:08.588 00:00:10.429 TCP 1.101.0.1:3000 -> 23.104.0.1:40836 10 6452 1 2025-10-28 19:26:51.502 00:06:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 19:32:09.080 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60256 10 6452 1 2025-10-28 19:33:09.493 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53902 10 6452 1 2025-10-28 19:34:09.896 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49110 10 6452 1 2025-10-28 19:34:21.250 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:34:21.238 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:34:21.097 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:34:21.187 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:34:21.180 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 19:35:10.309 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55236 10 6452 1 2025-10-28 19:36:10.677 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39958 10 6452 1 2025-10-28 19:37:11.105 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56168 10 6452 1 2025-10-28 19:32:51.499 00:06:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 19:38:11.511 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56810 10 6452 1 2025-10-28 19:33:51.505 00:06:00.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 19:39:21.546 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 19:39:21.250 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:39:21.364 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:39:21.464 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:39:21.443 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:39:11.875 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56912 10 6452 1 2025-10-28 19:40:12.274 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54788 10 6452 1 2025-10-28 19:41:12.674 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35184 10 6452 1 2025-10-28 19:42:13.098 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56882 10 6452 1 2025-10-28 19:43:13.500 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39090 10 6452 1 2025-10-28 19:44:21.480 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 19:44:21.412 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:44:21.345 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:44:21.398 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:44:21.346 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:44:13.903 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:43978 12 6556 1 2025-10-28 19:39:51.501 00:06:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 19:45:14.366 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50572 10 6452 1 2025-10-28 19:40:51.507 00:06:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 19:46:14.723 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50376 10 6452 1 2025-10-28 19:47:15.131 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58576 10 6452 1 2025-10-28 19:48:15.489 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49090 10 6452 1 2025-10-28 19:49:21.347 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:49:21.442 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:49:21.610 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:49:21.298 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:49:21.430 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 19:49:15.893 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59942 12 6556 1 2025-10-28 19:50:16.308 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43658 10 6452 1 2025-10-28 19:51:16.710 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34878 10 6452 1 2025-10-28 19:46:51.504 00:06:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 19:52:17.099 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34428 10 6452 1 2025-10-28 19:47:51.507 00:06:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 19:53:17.517 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60526 10 6452 1 2025-10-28 19:54:21.658 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:54:21.610 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:54:21.657 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:54:21.587 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:54:21.741 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 19:54:17.923 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:58302 10 6452 1 2025-10-28 19:55:18.350 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59342 10 6452 1 2025-10-28 19:56:18.759 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:37694 10 6452 1 2025-10-28 19:57:19.129 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35948 10 6452 1 2025-10-28 19:58:19.538 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46808 10 6452 1 Summary: total flows: 136, total bytes: 416432, total packets: 1012, avg bps: 915, avg pps: 0, avg bpp: 411 Time window: 2025-10-28 18:57:51 - 2025-10-28 19:58:29 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0028s User: 0.0028s Wall: 0.0019s flows/second: 73112.7 Runtime: 0.0019s