Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 17:58:48.188 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54366 10 6452 1 2025-10-04 17:59:48.546 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40554 10 6452 1 2025-10-04 17:56:39.178 00:04:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 18:00:48.957 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36518 10 6452 1 2025-10-04 18:01:49.361 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43322 10 6452 1 2025-10-04 18:02:46.001 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:02:45.871 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:02:45.654 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:02:45.856 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:02:45.940 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:02:49.761 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:49502 11 6504 1 2025-10-04 17:58:39.180 00:06:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-04 18:03:50.225 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:59410 10 6452 1 2025-10-04 18:04:50.623 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44256 11 6504 1 2025-10-04 18:01:39.178 00:04:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 18:05:51.104 00:00:14.355 TCP 1.101.0.1:3000 -> 23.104.0.1:37772 11 6504 1 2025-10-04 18:06:55.510 00:00:10.477 TCP 1.101.0.1:3000 -> 23.104.0.1:52006 10 6452 1 2025-10-04 18:07:46.145 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:07:46.109 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:07:46.054 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:07:45.904 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:07:45.988 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:07:56.023 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59540 10 6452 1 2025-10-04 18:08:56.432 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:57198 12 10369 1 2025-10-04 18:05:39.183 00:04:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 18:09:56.915 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48824 10 6452 1 2025-10-04 18:06:39.181 00:04:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 18:10:57.316 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:51604 10 6452 1 2025-10-04 18:11:57.747 00:00:10.559 TCP 1.101.0.1:3000 -> 23.104.0.1:53716 10 6452 1 2025-10-04 18:12:46.472 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:12:46.115 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:12:46.398 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:12:46.243 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:12:46.389 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:12:58.350 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53926 10 6452 1 2025-10-04 18:13:58.756 00:00:10.460 TCP 1.101.0.1:3000 -> 23.104.0.1:49128 12 10375 1 2025-10-04 18:10:39.186 00:04:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 18:14:59.258 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33134 10 6452 1 2025-10-04 18:11:39.184 00:04:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 18:15:59.663 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32870 10 6452 1 2025-10-04 18:17:00.100 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60250 10 6452 1 2025-10-04 18:17:46.246 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:17:46.151 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:17:46.219 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:17:45.960 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:17:46.162 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:18:00.506 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51668 10 6452 1 2025-10-04 18:19:00.911 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56040 10 6452 1 2025-10-04 18:15:39.185 00:04:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 18:20:01.274 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59024 10 6452 1 2025-10-04 18:21:01.676 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:39492 10 6452 1 2025-10-04 18:16:39.183 00:06:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 18:22:02.038 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60122 10 6452 1 2025-10-04 18:22:46.278 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:22:46.434 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:22:46.283 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:22:46.273 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:22:46.356 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:23:02.445 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56818 10 6452 1 2025-10-04 18:24:02.845 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:47198 10 6452 1 2025-10-04 18:20:39.187 00:04:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 18:25:03.273 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51662 10 6452 1 2025-10-04 18:26:03.681 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35968 10 6452 1 2025-10-04 18:27:04.118 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:40852 10 6452 1 2025-10-04 18:23:39.186 00:04:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 18:27:46.424 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:27:46.414 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:27:46.135 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:27:46.493 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:27:46.575 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:28:04.503 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56282 10 6452 1 2025-10-04 18:29:04.912 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39182 10 6452 1 2025-10-04 18:25:39.188 00:04:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 18:30:05.323 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43636 10 6452 1 2025-10-04 18:31:05.746 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47786 10 6452 1 2025-10-04 18:30:39.190 00:01:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-04 18:32:06.149 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45362 10 6452 1 2025-10-04 18:28:39.186 00:04:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 18:32:46.516 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:32:46.556 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:32:46.607 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:32:46.557 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:32:46.597 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:33:06.547 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:54364 12 10375 1 2025-10-04 18:34:07.030 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36988 10 6452 1 2025-10-04 18:35:07.434 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36044 10 6452 1 2025-10-04 18:36:07.836 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:48236 10 6452 1 2025-10-04 18:32:39.190 00:04:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 18:37:08.267 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56032 10 6452 1 2025-10-04 18:33:39.186 00:04:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 18:37:46.806 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:37:46.851 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:37:47.110 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:37:46.800 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:37:46.722 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:38:08.670 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53470 10 6452 1 2025-10-04 18:39:09.097 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59076 10 6452 1 2025-10-04 18:40:09.497 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46798 10 6452 1 2025-10-04 18:41:09.894 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46058 10 6452 1 2025-10-04 18:37:39.189 00:04:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 18:42:10.302 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43600 10 6452 1 2025-10-04 18:38:39.187 00:04:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 18:42:46.753 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:42:46.694 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:42:46.853 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:42:46.745 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:42:46.936 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:43:10.703 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43034 10 6452 1 2025-10-04 18:44:11.111 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45014 12 6556 1 2025-10-04 18:45:11.509 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59488 10 6452 1 2025-10-04 18:46:11.875 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42190 10 6452 1 2025-10-04 18:42:39.190 00:04:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 18:47:12.243 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40558 10 6452 1 2025-10-04 18:43:39.189 00:04:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-04 18:47:46.798 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:47:46.714 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:47:46.838 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:47:46.722 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:47:46.714 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:48:12.648 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32840 10 6452 1 2025-10-04 18:49:13.008 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53192 10 6452 1 2025-10-04 18:50:13.413 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59110 10 6452 1 2025-10-04 18:51:13.781 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49942 10 6452 1 2025-10-04 18:47:39.192 00:04:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 18:52:14.191 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50506 10 6452 1 2025-10-04 18:52:47.139 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:52:46.809 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:52:46.976 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:52:46.646 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:52:47.056 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:53:14.593 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41610 10 6452 1 2025-10-04 18:48:39.189 00:06:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 18:54:15.004 00:00:10.824 TCP 1.101.0.1:3000 -> 23.104.0.1:46900 10 6452 1 2025-10-04 18:55:15.867 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39910 10 6452 1 2025-10-04 18:56:16.283 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45454 10 6452 1 2025-10-04 18:52:39.192 00:04:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-04 18:57:16.702 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:60312 10 6452 1 2025-10-04 18:57:47.434 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:57:47.255 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:57:47.274 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:57:47.337 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:57:47.352 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:58:17.136 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:37448 12 10369 1 Summary: total flows: 143, total bytes: 432694, total packets: 1029, avg bps: 933, avg pps: 0, avg bpp: 420 Time window: 2025-10-04 17:56:39 - 2025-10-04 18:58:27 Total flows processed: 143, passed: 143, Blocks skipped: 0, Bytes read: 14936 Sys: 0.0035s User: 0.0012s Wall: 0.0013s flows/second: 106496.0 Runtime: 0.0014s