Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 18:58:33.725 00:00:16.962 TCP 1.101.0.1:3000 -> 23.104.0.1:46428 10 6452 1 2025-10-25 18:59:40.728 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49834 10 6452 1 2025-10-25 19:00:41.140 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33140 10 6452 1 2025-10-25 18:57:49.964 00:05:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:01:41.537 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52388 10 6452 1 2025-10-25 18:57:49.963 00:05:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:02:54.357 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:02:54.266 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:02:54.111 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:02:53.871 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:02:41.941 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33956 10 6452 1 2025-10-25 19:02:54.275 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:03:42.360 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57024 10 6452 1 2025-10-25 19:04:42.722 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58090 10 6452 1 2025-10-25 19:05:43.138 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38236 10 6452 1 2025-10-25 19:06:43.501 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33782 10 6452 1 2025-10-25 19:07:54.358 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:03:49.963 00:05:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:07:54.001 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:03:49.966 00:05:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:07:54.108 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:07:53.944 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:07:54.275 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:07:43.905 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57418 10 6452 1 2025-10-25 19:08:44.312 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59454 10 6452 1 2025-10-25 19:09:44.725 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:58102 10 6452 1 2025-10-25 19:10:45.145 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:60192 12 10369 1 2025-10-25 19:11:45.618 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52084 10 6452 1 2025-10-25 19:12:54.335 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:12:54.264 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:12:54.267 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:12:54.193 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:12:54.253 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:12:46.022 00:00:11.092 TCP 1.101.0.1:3000 -> 23.104.0.1:49576 10 6452 1 2025-10-25 19:09:49.964 00:05:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:09:49.966 00:05:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:13:47.150 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:36336 10 6452 1 2025-10-25 19:14:47.550 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39852 10 6452 1 2025-10-25 19:15:47.954 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:60222 10 6452 1 2025-10-25 19:16:48.327 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46202 10 6452 1 2025-10-25 19:17:54.467 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:17:54.379 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:17:54.377 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:17:54.198 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:17:54.384 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:17:48.728 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:56310 10 6452 1 2025-10-25 19:18:49.110 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40666 10 6452 1 2025-10-25 19:15:49.965 00:05:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:15:49.970 00:05:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:19:49.514 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39296 10 6452 1 2025-10-25 19:20:49.914 00:00:10.572 TCP 1.101.0.1:3000 -> 23.104.0.1:57774 11 6504 1 2025-10-25 19:21:50.524 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43696 10 6452 1 2025-10-25 19:22:54.614 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:22:54.415 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:22:54.417 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:22:54.433 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:22:54.531 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:22:50.928 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:51352 10 6452 1 2025-10-25 19:23:51.354 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34376 10 6452 1 2025-10-25 19:24:51.758 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43104 10 6452 1 2025-10-25 19:21:49.969 00:05:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:21:49.967 00:05:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:25:52.175 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45080 10 6452 1 2025-10-25 19:26:52.578 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53006 10 6452 1 2025-10-25 19:27:54.658 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:27:54.618 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:27:54.507 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:27:54.581 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:27:54.575 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:27:52.986 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47872 10 6452 1 2025-10-25 19:28:53.353 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57710 10 6452 1 2025-10-25 19:29:53.753 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52590 10 6452 1 2025-10-25 19:30:54.153 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49688 10 6452 1 2025-10-25 19:27:49.971 00:05:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:27:49.968 00:05:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:31:54.554 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50410 10 6452 1 2025-10-25 19:32:54.542 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:32:54.656 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:32:54.449 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:32:54.458 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:32:54.460 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:32:54.921 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:50246 10 6452 1 2025-10-25 19:33:55.300 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:49572 10 6452 1 2025-10-25 19:34:55.699 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53924 10 6452 1 2025-10-25 19:35:56.134 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:46966 10 6452 1 2025-10-25 19:36:56.594 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52894 10 6452 1 2025-10-25 19:33:49.970 00:05:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:37:54.823 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:37:54.744 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:33:49.972 00:05:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:37:54.794 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:37:54.833 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:37:54.739 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:37:57.001 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44158 10 6452 1 2025-10-25 19:38:57.398 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60146 10 6452 1 2025-10-25 19:39:57.766 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36194 10 6452 1 2025-10-25 19:40:58.175 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34682 10 6452 1 2025-10-25 19:41:58.576 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60218 10 6452 1 2025-10-25 19:42:54.797 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:42:54.871 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:42:54.619 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:42:54.936 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:42:55.019 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:42:58.980 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35894 10 6452 1 2025-10-25 19:39:49.974 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:39:49.976 00:05:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:43:59.382 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54040 10 6452 1 2025-10-25 19:44:59.783 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48938 10 6452 1 2025-10-25 19:46:00.183 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60582 10 6452 1 2025-10-25 19:47:00.583 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54494 10 6452 1 2025-10-25 19:47:55.146 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:47:54.924 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:47:54.929 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:47:54.693 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:47:55.061 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:48:00.990 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35644 10 6452 1 2025-10-25 19:49:01.407 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52028 10 6452 1 2025-10-25 19:45:49.981 00:05:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:45:49.976 00:05:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:50:01.818 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50546 10 6452 1 2025-10-25 19:51:02.219 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34490 10 6452 1 2025-10-25 19:52:02.623 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:39668 10 6452 1 2025-10-25 19:52:55.367 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:52:55.360 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:52:55.232 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:52:55.192 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:52:55.285 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:53:02.998 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39252 10 6452 1 2025-10-25 19:54:03.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46470 10 6452 1 2025-10-25 19:55:03.763 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60620 10 6452 1 2025-10-25 19:51:49.981 00:05:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-25 19:51:49.978 00:05:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-25 19:56:04.174 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50158 10 6452 1 2025-10-25 19:57:04.531 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52602 10 6452 1 2025-10-25 19:57:55.218 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 19:57:55.077 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:57:55.135 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 19:57:55.153 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 19:57:55.218 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 19:58:04.935 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:59418 10 6452 1 Summary: total flows: 140, total bytes: 420969, total packets: 1023, avg bps: 928, avg pps: 0, avg bpp: 411 Time window: 2025-10-25 18:57:49 - 2025-10-25 19:58:15 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0038s User: 0.0019s Wall: 0.0020s flows/second: 71723.8 Runtime: 0.0020s