Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 17:58:56.150 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42846 10 6870 1 2025-10-14 17:59:56.514 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43416 10 6870 1 2025-10-14 17:59:44.203 00:01:00.436 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-14 18:00:56.879 00:00:10.959 TCP 1.101.0.1:3000 -> 23.104.0.1:45506 10 6870 1 2025-10-14 18:01:57.880 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52890 10 6870 1 2025-10-14 18:02:34.710 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 18:02:34.690 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 18:02:34.738 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 18:02:34.585 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:02:34.628 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:02:58.237 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45394 10 6870 1 2025-10-14 17:59:44.205 00:04:00.431 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-14 18:03:58.639 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41124 10 6870 1 2025-10-14 18:04:59.004 00:00:14.998 TCP 1.101.0.1:3000 -> 23.104.0.1:55828 10 6870 1 2025-10-14 18:01:44.201 00:04:00.437 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-14 18:06:04.056 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35494 10 6870 1 2025-10-14 18:07:04.454 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47700 10 6870 1 2025-10-14 18:07:34.862 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 18:07:34.671 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 18:07:34.922 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 18:07:34.809 00:00:00.035 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:07:34.777 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:08:04.852 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47264 10 6870 1 2025-10-14 18:04:44.205 00:04:00.431 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-14 18:09:05.270 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58372 10 6870 1 2025-10-14 18:10:05.679 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47358 10 6870 1 2025-10-14 18:06:44.203 00:04:00.437 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-14 18:11:06.107 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57328 10 6870 1 2025-10-14 18:12:06.477 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60980 10 6870 1 2025-10-14 18:12:34.868 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 18:12:34.924 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 18:12:34.928 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 18:12:34.529 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:12:34.786 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:13:06.877 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45290 10 6870 1 2025-10-14 18:09:44.207 00:04:00.431 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-14 18:14:07.292 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44414 10 6870 1 2025-10-14 18:15:07.689 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60236 10 6870 1 2025-10-14 18:11:44.208 00:04:00.436 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-14 18:16:08.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39340 10 6870 1 2025-10-14 18:17:08.513 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52166 10 6870 1 2025-10-14 18:17:34.790 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 18:17:34.790 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 18:17:34.807 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:17:34.944 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:17:35.027 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 18:18:08.921 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41920 10 6870 1 2025-10-14 18:14:44.211 00:04:00.430 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-14 18:19:09.328 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:38496 10 6870 1 2025-10-14 18:20:09.754 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53710 10 6870 1 2025-10-14 18:19:44.214 00:01:00.427 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-14 18:16:44.210 00:04:00.435 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-14 18:21:10.167 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54470 10 6870 1 2025-10-14 18:22:10.569 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35940 10 6870 1 2025-10-14 18:22:34.992 00:00:00.052 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 18:22:35.110 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 18:22:35.024 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:22:34.997 00:00:00.041 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:22:35.081 00:00:00.040 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 18:23:10.934 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:46038 10 6870 1 2025-10-14 18:24:11.322 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40840 10 6870 1 2025-10-14 18:25:11.688 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38640 10 6870 1 2025-10-14 18:21:44.210 00:04:00.434 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-14 18:21:44.213 00:04:00.429 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-14 18:26:12.105 00:00:10.968 TCP 1.101.0.1:3000 -> 23.104.0.1:54026 10 6870 1 2025-10-14 18:27:13.114 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35392 10 6870 1 2025-10-14 18:27:35.231 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 18:27:35.066 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 18:27:35.045 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:27:35.148 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:27:35.161 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 18:28:13.538 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57270 10 6870 1 2025-10-14 18:29:13.900 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55264 10 6870 1 2025-10-14 18:30:14.307 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38358 10 6870 1 2025-10-14 18:26:44.216 00:04:00.426 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-14 18:26:44.216 00:04:00.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-14 18:31:14.711 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33722 10 6870 1 2025-10-14 18:32:15.116 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45146 10 6870 1 2025-10-14 18:32:35.308 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 18:32:35.229 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 18:32:35.254 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:32:35.307 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:32:35.391 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 18:31:44.217 00:01:00.428 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-14 18:33:15.525 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52710 10 6870 1 2025-10-14 18:34:15.932 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59232 10 6870 1 2025-10-14 18:35:16.341 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40824 10 6870 1 2025-10-14 18:31:44.220 00:04:00.423 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-14 18:36:16.700 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51386 10 6870 1 2025-10-14 18:37:17.107 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:43602 10 6870 1 2025-10-14 18:37:35.532 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 18:37:35.312 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 18:37:35.390 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 18:37:35.158 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:37:35.448 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:33:44.219 00:04:00.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-14 18:38:17.478 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47590 10 6870 1 2025-10-14 18:39:17.878 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52958 10 6870 1 2025-10-14 18:40:18.284 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33246 10 6870 1 2025-10-14 18:36:44.221 00:04:00.426 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-14 18:41:18.650 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:41492 12 10584 1 2025-10-14 18:42:19.133 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55516 10 6661 1 2025-10-14 18:42:35.508 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 18:42:35.646 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 18:42:35.354 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:42:35.345 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:42:35.429 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 18:38:44.220 00:04:00.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-14 18:43:19.542 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45646 10 6661 1 2025-10-14 18:44:19.943 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:44938 10 6661 1 2025-10-14 18:45:20.369 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41238 10 6661 1 2025-10-14 18:41:44.222 00:04:00.426 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-14 18:46:20.772 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58500 10 6661 1 2025-10-14 18:47:35.922 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 18:47:21.139 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60074 10 6661 1 2025-10-14 18:47:35.679 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 18:47:35.777 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 18:47:35.324 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:47:35.840 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:46:44.225 00:01:00.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-14 18:43:44.219 00:04:00.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-14 18:48:21.542 00:00:10.643 TCP 1.101.0.1:3000 -> 23.104.0.1:37004 10 6661 1 2025-10-14 18:49:22.226 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37330 10 6661 1 2025-10-14 18:50:22.631 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33896 10 6661 1 2025-10-14 18:48:44.225 00:02:00.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-14 18:51:23.055 00:00:10.997 TCP 1.101.0.1:3000 -> 23.104.0.1:43518 10 6661 1 2025-10-14 18:52:35.984 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 18:52:24.121 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57866 10 6661 1 2025-10-14 18:52:35.821 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 18:52:35.826 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 18:52:35.841 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:52:35.901 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:51:44.227 00:01:00.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-14 18:48:44.223 00:04:00.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-14 18:53:24.529 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45268 10 6661 1 2025-10-14 18:54:24.928 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56234 10 6661 1 2025-10-14 18:55:25.341 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56182 10 6661 1 2025-10-14 18:56:25.747 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53682 10 6661 1 2025-10-14 18:57:35.858 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-14 18:57:35.775 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:57:35.650 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-14 18:57:26.117 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33564 10 6661 1 2025-10-14 18:57:35.924 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-14 18:57:35.566 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-14 18:53:44.226 00:04:00.426 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-14 18:53:44.224 00:04:00.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-14 18:58:26.515 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40642 10 6661 1 Summary: total flows: 147, total bytes: 441995, total packets: 1018, avg bps: 987, avg pps: 0, avg bpp: 434 Time window: 2025-10-14 17:58:56 - 2025-10-14 18:58:36 Total flows processed: 147, passed: 147, Blocks skipped: 0, Bytes read: 15352 Sys: 0.0027s User: 0.0027s Wall: 0.0021s flows/second: 68629.0 Runtime: 0.0022s