Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 09:58:45.800 00:00:11.569 TCP 1.101.0.1:3000 -> 23.104.0.1:60154 10 6452 1 2025-10-24 09:59:47.408 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48954 10 6452 1 2025-10-24 09:59:49.207 00:01:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 10:00:47.823 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:35084 10 6452 1 2025-10-24 10:01:48.277 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54710 10 6452 1 2025-10-24 10:02:14.076 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:02:13.891 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:02:13.888 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:02:13.792 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:02:14.159 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:02:48.677 00:00:10.677 TCP 1.101.0.1:3000 -> 23.104.0.1:37132 10 6452 1 2025-10-24 09:59:49.209 00:04:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 10:03:49.392 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33160 10 6452 1 2025-10-24 10:04:49.795 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50524 10 6452 1 2025-10-24 10:01:49.209 00:04:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 10:05:50.197 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53298 10 6452 1 2025-10-24 10:06:50.600 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56580 10 6452 1 2025-10-24 10:07:13.864 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:07:14.069 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:07:13.934 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:07:13.879 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:07:13.946 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:07:50.967 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60408 10 6452 1 2025-10-24 10:04:49.212 00:04:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 10:08:51.374 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44024 10 6452 1 2025-10-24 10:09:51.771 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59822 10 6452 1 2025-10-24 10:06:49.209 00:04:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 10:10:52.177 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52254 10 6452 1 2025-10-24 10:11:52.582 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41420 10 6452 1 2025-10-24 10:12:13.887 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:12:14.064 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:12:14.101 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:12:14.105 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:12:14.187 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:12:52.982 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44042 10 6452 1 2025-10-24 10:13:53.390 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36548 10 6452 1 2025-10-24 10:09:49.213 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-24 10:14:53.785 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35400 10 6452 1 2025-10-24 10:11:49.212 00:04:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 10:15:54.192 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36850 10 6452 1 2025-10-24 10:16:54.594 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59706 10 6452 1 2025-10-24 10:17:14.112 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:17:13.997 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:17:13.873 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:17:14.236 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:17:14.320 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:17:55.002 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39308 10 6452 1 2025-10-24 10:18:55.365 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:34922 11 6504 1 2025-10-24 10:19:55.821 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40962 10 6452 1 2025-10-24 10:16:49.216 00:04:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 10:16:49.213 00:04:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 10:20:56.226 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34268 10 6452 1 2025-10-24 10:21:56.588 00:00:10.832 TCP 1.101.0.1:3000 -> 23.104.0.1:41626 10 6452 1 2025-10-24 10:22:14.068 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:22:13.785 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:22:14.223 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:22:14.068 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:22:14.307 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:22:57.459 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34524 10 6452 1 2025-10-24 10:23:57.860 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35766 10 6452 1 2025-10-24 10:24:58.298 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33922 10 6452 1 2025-10-24 10:21:49.219 00:04:00.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 10:21:49.218 00:04:00.246 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 10:25:58.703 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53766 10 6452 1 2025-10-24 10:26:59.109 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46224 10 6452 1 2025-10-24 10:27:14.253 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:27:14.556 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:27:14.479 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:27:14.378 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:27:14.463 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:27:59.513 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34452 10 6452 1 2025-10-24 10:28:59.913 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55104 10 6452 1 2025-10-24 10:30:00.311 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44664 10 6452 1 2025-10-24 10:26:49.221 00:04:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 10:26:49.218 00:04:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 10:31:00.671 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34210 10 6452 1 2025-10-24 10:32:14.613 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:32:14.478 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:32:14.444 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:32:14.529 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:32:01.103 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45764 10 6452 1 2025-10-24 10:32:14.612 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:31:49.220 00:01:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 10:33:01.463 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38730 10 6452 1 2025-10-24 10:34:01.825 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:39838 10 6452 1 2025-10-24 10:35:02.216 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41400 10 6452 1 2025-10-24 10:31:49.222 00:04:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 10:36:02.579 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:40760 10 6452 1 2025-10-24 10:37:14.584 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:37:14.582 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:37:14.562 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:37:14.588 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:37:02.996 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39952 10 6452 1 2025-10-24 10:37:14.670 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:33:49.219 00:04:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 10:38:03.356 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52750 10 6452 1 2025-10-24 10:39:03.757 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:48710 10 6452 1 2025-10-24 10:40:04.171 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53054 10 6452 1 2025-10-24 10:36:49.224 00:04:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 10:41:04.573 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36778 10 6452 1 2025-10-24 10:42:14.897 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:42:14.764 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:42:14.815 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:42:14.630 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:42:14.815 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:42:04.981 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:38574 10 6452 1 2025-10-24 10:38:49.223 00:04:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 10:41:49.225 00:01:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 10:43:05.361 00:00:10.789 TCP 1.101.0.1:3000 -> 23.104.0.1:59774 10 6452 1 2025-10-24 10:44:06.187 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56606 10 6452 1 2025-10-24 10:45:06.588 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41920 10 6452 1 2025-10-24 10:46:06.996 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41726 10 6452 1 2025-10-24 10:47:14.856 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:47:14.534 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:47:14.863 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:47:14.858 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:47:14.942 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:47:07.357 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57682 10 6452 1 2025-10-24 10:43:49.225 00:04:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 10:43:49.221 00:04:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 10:48:07.757 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:48836 10 6452 1 2025-10-24 10:49:08.171 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47640 10 6452 1 2025-10-24 10:50:08.565 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38282 10 6452 1 2025-10-24 10:51:08.967 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52178 10 6452 1 2025-10-24 10:52:14.935 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:52:14.602 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:52:14.985 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:52:09.331 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50376 10 6452 1 2025-10-24 10:52:15.064 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:52:15.068 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:48:49.227 00:04:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 10:48:49.224 00:04:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 10:53:09.737 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35002 10 6452 1 2025-10-24 10:54:10.144 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55870 10 6452 1 2025-10-24 10:55:10.547 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40768 10 6452 1 2025-10-24 10:56:10.949 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54528 10 6452 1 2025-10-24 10:57:14.977 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 10:57:14.979 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 10:57:14.987 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:57:14.979 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 10:57:15.062 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 10:57:11.367 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51458 10 6452 1 2025-10-24 10:53:49.226 00:04:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 10:53:49.228 00:04:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 10:58:11.770 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55890 10 6452 1 Summary: total flows: 145, total bytes: 416806, total packets: 1017, avg bps: 932, avg pps: 0, avg bpp: 409 Time window: 2025-10-24 09:58:45 - 2025-10-24 10:58:22 Total flows processed: 145, passed: 145, Blocks skipped: 0, Bytes read: 15144 Sys: 0.0041s User: 0.0017s Wall: 0.0022s flows/second: 65317.8 Runtime: 0.0022s