Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 18:53:53.085 00:06:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 18:59:13.775 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:41868 10 6452 1 2025-10-31 19:00:14.219 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51340 10 6452 1 2025-10-31 19:00:47.513 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:00:47.568 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:00:47.492 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 19:00:47.382 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 19:00:47.651 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 19:01:14.620 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60588 10 6452 1 2025-10-31 19:02:15.027 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46014 10 6452 1 2025-10-31 19:03:15.433 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:46036 10 6452 1 2025-10-31 19:04:15.806 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34104 10 6452 1 2025-10-31 18:59:53.083 00:06:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 19:05:16.210 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55886 10 6452 1 2025-10-31 19:05:47.363 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 19:05:47.346 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 19:05:47.391 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:05:47.280 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:05:47.281 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 19:00:53.087 00:06:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 19:06:16.615 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41430 10 6452 1 2025-10-31 19:07:17.015 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59862 10 6452 1 2025-10-31 19:08:17.414 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44948 10 6452 1 2025-10-31 19:09:17.820 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42620 10 6452 1 2025-10-31 19:10:18.225 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:52078 10 6452 1 2025-10-31 19:10:47.365 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 19:10:47.246 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:10:47.497 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:10:47.499 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 19:10:47.580 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 19:11:18.621 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44396 10 6452 1 2025-10-31 19:06:53.106 00:06:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 19:12:19.028 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52498 10 6452 1 2025-10-31 19:07:53.109 00:06:00.289 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 19:13:19.389 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38698 10 6452 1 2025-10-31 19:14:19.791 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49668 10 6452 1 2025-10-31 19:15:20.196 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41282 10 6452 1 2025-10-31 19:15:47.590 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 19:15:47.155 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:15:47.435 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:15:47.329 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 19:15:47.517 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 19:16:20.608 00:00:10.894 TCP 1.101.0.1:3000 -> 23.104.0.1:47592 10 6452 1 2025-10-31 19:17:21.544 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33208 10 6452 1 2025-10-31 19:18:21.951 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45892 10 6452 1 2025-10-31 19:13:53.107 00:06:00.296 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 19:19:22.361 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51080 10 6452 1 2025-10-31 19:14:53.109 00:06:00.293 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 19:20:22.769 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43514 10 6452 1 2025-10-31 19:20:47.869 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 19:20:47.683 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:20:47.407 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:20:47.357 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 19:20:47.492 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 19:21:23.181 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42134 10 6452 1 2025-10-31 19:22:23.595 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58722 10 6452 1 2025-10-31 19:23:24.003 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34724 10 6452 1 2025-10-31 19:24:24.407 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:40324 12 10375 1 2025-10-31 19:25:24.890 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47272 12 6556 1 2025-10-31 19:25:48.039 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 19:25:47.760 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 19:25:47.540 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:25:47.957 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:25:47.687 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 19:20:53.110 00:06:00.298 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 19:26:25.308 00:00:10.718 TCP 1.101.0.1:3000 -> 23.104.0.1:38820 10 6452 1 2025-10-31 19:21:53.111 00:06:00.293 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 19:27:26.092 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49130 10 6452 1 2025-10-31 19:28:26.501 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57116 10 6452 1 2025-10-31 19:29:26.862 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:41630 10 6452 1 2025-10-31 19:30:27.244 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57324 10 6452 1 2025-10-31 19:30:47.763 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 19:30:47.587 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:30:47.749 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:30:47.747 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 19:30:47.831 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 19:31:27.655 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40054 10 6452 1 2025-10-31 19:32:28.062 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59494 10 6452 1 2025-10-31 19:27:53.110 00:06:00.300 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 19:33:28.476 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:44428 10 6452 1 2025-10-31 19:28:53.112 00:06:00.294 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 19:34:28.873 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41166 10 6452 1 2025-10-31 19:35:29.278 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51942 10 6452 1 2025-10-31 19:35:47.938 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 19:35:47.941 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:35:47.937 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:35:47.778 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 19:35:48.020 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 19:36:29.680 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39792 10 6452 1 2025-10-31 19:37:30.105 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51264 10 6452 1 2025-10-31 19:38:30.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54042 10 6452 1 2025-10-31 19:39:30.923 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45494 10 6452 1 2025-10-31 19:34:53.111 00:06:00.299 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 19:40:31.345 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51974 10 6452 1 2025-10-31 19:40:48.156 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 19:40:47.998 00:00:00.040 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 19:40:47.804 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:40:48.073 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:40:47.951 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 19:35:53.114 00:06:00.300 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 19:41:31.708 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36760 10 6452 1 2025-10-31 19:42:32.114 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50048 10 6452 1 2025-10-31 19:43:32.472 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43210 10 6452 1 2025-10-31 19:44:32.830 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36374 10 6452 1 2025-10-31 19:45:48.090 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 19:45:33.236 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35262 10 6452 1 2025-10-31 19:45:48.211 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 19:45:47.821 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:45:48.008 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:45:48.003 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 19:46:33.593 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47334 10 6452 1 2025-10-31 19:41:53.125 00:06:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 19:47:33.997 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35394 10 6452 1 2025-10-31 19:42:53.119 00:06:00.296 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 19:48:34.405 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53640 10 6452 1 2025-10-31 19:49:34.775 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40146 10 6452 1 2025-10-31 19:50:35.189 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37468 10 6452 1 2025-10-31 19:50:48.307 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 19:50:48.228 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 19:50:48.156 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:50:48.225 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:50:48.229 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 19:51:35.595 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44644 10 6452 1 2025-10-31 19:52:35.996 00:00:10.951 TCP 1.101.0.1:3000 -> 23.104.0.1:38468 10 6452 1 2025-10-31 19:53:36.991 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55588 10 6452 1 2025-10-31 19:48:53.116 00:06:00.304 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-31 19:54:37.407 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58410 10 6452 1 2025-10-31 19:49:53.121 00:06:00.297 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-31 19:55:48.382 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 19:55:48.117 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:55:37.811 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56782 10 6452 1 2025-10-31 19:55:48.285 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 19:55:48.287 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 19:55:48.369 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 19:56:38.214 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36748 10 6452 1 2025-10-31 19:57:38.616 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33728 10 6452 1 2025-10-31 19:58:39.024 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:58300 12 10369 1 Summary: total flows: 137, total bytes: 424821, total packets: 1024, avg bps: 872, avg pps: 0, avg bpp: 414 Time window: 2025-10-31 18:53:53 - 2025-10-31 19:58:49 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0038s User: 0.0028s Wall: 0.0019s flows/second: 70984.5 Runtime: 0.0020s