Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 10:59:12.135 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34718 10 6452 1 2025-10-24 11:00:12.539 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52552 10 6452 1 2025-10-24 11:01:12.943 00:00:10.642 TCP 1.101.0.1:3000 -> 23.104.0.1:51404 10 6452 1 2025-10-24 11:02:15.511 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:02:15.316 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:02:15.402 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:02:15.315 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:02:15.397 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:02:13.623 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60524 10 6452 1 2025-10-24 10:58:49.228 00:04:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 10:58:49.231 00:04:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 11:03:14.040 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:37678 10 6452 1 2025-10-24 11:04:14.436 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:60092 10 6452 1 2025-10-24 11:03:49.231 00:01:00.234 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 11:05:14.822 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43678 10 6452 1 2025-10-24 11:06:15.228 00:00:16.116 TCP 1.101.0.1:3000 -> 23.104.0.1:39332 10 6452 1 2025-10-24 11:07:15.494 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:07:15.492 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:07:15.652 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:07:15.418 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:07:15.500 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:07:21.399 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39392 10 6452 1 2025-10-24 11:03:49.232 00:04:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 11:05:49.230 00:02:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 11:08:21.800 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56042 10 6452 1 2025-10-24 11:09:22.208 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58348 10 6452 1 2025-10-24 11:08:49.230 00:01:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 11:10:22.613 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55608 10 6452 1 2025-10-24 11:11:23.016 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46492 10 6452 1 2025-10-24 11:12:15.608 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:12:15.526 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:12:15.528 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:12:15.526 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:12:15.263 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:12:23.383 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51496 10 6452 1 2025-10-24 11:08:49.233 00:04:00.233 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 11:13:23.794 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37272 10 6452 1 2025-10-24 11:14:24.200 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39938 10 6452 1 2025-10-24 11:10:49.232 00:04:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 11:15:24.599 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37712 10 6452 1 2025-10-24 11:16:24.956 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55822 10 6452 1 2025-10-24 11:17:15.766 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:17:15.910 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:17:15.478 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:17:15.791 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:17:15.872 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:17:25.363 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:51578 10 6452 1 2025-10-24 11:13:49.234 00:04:00.233 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 11:18:25.792 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43136 10 6452 1 2025-10-24 11:19:26.197 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35690 10 6452 1 2025-10-24 11:15:49.233 00:04:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 11:18:49.235 00:01:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 11:20:26.605 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33032 10 6452 1 2025-10-24 11:21:27.007 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35480 10 6452 1 2025-10-24 11:22:15.964 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:22:15.601 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:22:15.914 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:22:15.829 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:22:16.047 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:22:27.406 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54904 10 6452 1 2025-10-24 11:23:27.804 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:33280 10 6452 1 2025-10-24 11:24:28.183 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34928 10 6452 1 2025-10-24 11:20:49.235 00:04:00.233 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 11:20:49.233 00:04:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 11:25:28.545 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46034 10 6452 1 2025-10-24 11:26:28.960 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34578 10 6452 1 2025-10-24 11:27:15.982 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:27:15.886 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:27:15.938 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:27:15.848 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:27:15.899 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:27:29.364 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34864 10 6452 1 2025-10-24 11:28:29.730 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53002 10 6452 1 2025-10-24 11:29:30.131 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47822 10 6452 1 2025-10-24 11:25:49.237 00:04:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 11:25:49.239 00:04:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 11:30:30.536 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42906 10 6452 1 2025-10-24 11:31:30.949 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40682 10 6452 1 2025-10-24 11:32:16.253 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:32:16.169 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:32:16.114 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:32:15.988 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:32:15.863 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:32:31.355 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35232 10 6452 1 2025-10-24 11:33:31.753 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:47966 10 6452 1 2025-10-24 11:34:32.182 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45668 10 6452 1 2025-10-24 11:30:49.244 00:04:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 11:30:49.241 00:04:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 11:35:32.591 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:59558 12 10369 1 2025-10-24 11:36:33.029 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34350 10 6452 1 2025-10-24 11:35:49.244 00:01:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 11:37:16.184 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:37:16.169 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:37:16.291 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:37:16.338 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:37:16.420 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:37:33.432 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39014 10 6452 1 2025-10-24 11:38:33.839 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:55632 10 6452 1 2025-10-24 11:39:34.268 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47714 10 6452 1 2025-10-24 11:35:49.246 00:04:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 11:37:49.246 00:02:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 11:40:34.673 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54440 10 6452 1 2025-10-24 11:40:49.245 00:01:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 11:41:35.105 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42412 10 6452 1 2025-10-24 11:42:16.482 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:42:16.393 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:42:16.340 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:42:15.893 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:42:16.400 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:42:35.507 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46218 10 6452 1 2025-10-24 11:43:35.883 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:55520 10 6452 1 2025-10-24 11:40:49.247 00:04:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 11:44:36.259 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43356 10 6452 1 2025-10-24 11:45:36.620 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56986 10 6452 1 2025-10-24 11:46:37.027 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51804 10 6452 1 2025-10-24 11:42:49.247 00:04:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 11:47:16.481 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:47:16.393 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:47:16.292 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:47:16.307 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:47:16.397 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:47:37.426 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58058 10 6452 1 2025-10-24 11:48:37.832 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:44582 10 6452 1 2025-10-24 11:49:38.277 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40944 10 6452 1 2025-10-24 11:45:49.252 00:04:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 11:50:38.673 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:32808 10 6452 1 2025-10-24 11:47:49.247 00:04:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 11:50:49.253 00:01:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 11:51:39.103 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54376 10 6452 1 2025-10-24 11:52:16.534 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:52:16.452 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:52:16.465 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:52:16.495 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:52:16.452 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:52:39.508 00:00:10.499 TCP 1.101.0.1:3000 -> 23.104.0.1:47164 10 6452 1 2025-10-24 11:53:40.041 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40772 10 6452 1 2025-10-24 11:54:40.442 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54136 10 6452 1 2025-10-24 11:55:40.844 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:39806 10 6452 1 2025-10-24 11:52:49.254 00:04:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 11:52:49.252 00:04:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 11:56:41.275 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46336 10 6452 1 2025-10-24 11:57:16.553 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 11:57:16.588 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:57:16.590 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 11:57:16.353 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 11:57:16.674 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 11:57:41.684 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49092 10 6452 1 Summary: total flows: 147, total bytes: 414219, total packets: 1008, avg bps: 935, avg pps: 0, avg bpp: 410 Time window: 2025-10-24 10:58:49 - 2025-10-24 11:57:52 Total flows processed: 147, passed: 147, Blocks skipped: 0, Bytes read: 15352 Sys: 0.0040s User: 0.0010s Wall: 0.0031s flows/second: 47526.6 Runtime: 0.0031s