Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 12:59:01.179 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34232 10 6452 1 2025-10-16 13:00:01.585 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35364 10 6452 1 2025-10-16 13:01:01.982 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51918 10 6452 1 2025-10-16 12:57:45.126 00:04:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 13:02:02.349 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37586 10 6452 1 2025-10-16 12:58:45.123 00:04:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 13:03:02.761 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57196 10 6452 1 2025-10-16 13:03:26.544 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:03:26.567 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:03:26.590 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:03:26.463 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:03:26.528 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:04:03.177 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58074 10 6452 1 2025-10-16 13:05:03.580 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53716 10 6452 1 2025-10-16 13:06:03.981 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60518 10 6452 1 2025-10-16 13:02:45.128 00:04:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 13:07:04.380 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53932 10 6452 1 2025-10-16 13:08:04.789 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45218 10 6452 1 2025-10-16 13:08:26.510 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:08:26.516 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:08:26.633 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:08:26.404 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:08:26.715 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:03:45.126 00:06:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 13:09:05.196 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50790 10 6452 1 2025-10-16 13:10:05.596 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54790 10 6452 1 2025-10-16 13:11:06.004 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35702 10 6452 1 2025-10-16 13:07:45.130 00:04:00.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 13:12:06.406 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43300 10 6452 1 2025-10-16 13:13:06.805 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:46042 10 6452 1 2025-10-16 13:13:27.030 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:13:26.526 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:13:26.564 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:13:26.947 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:13:26.525 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:14:07.182 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:33090 10 6452 1 2025-10-16 13:15:07.543 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35920 10 6452 1 2025-10-16 13:10:45.127 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-10-16 13:16:07.950 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:51032 10 6452 1 2025-10-16 13:17:08.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57610 10 6452 1 2025-10-16 13:12:45.130 00:06:00.394 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 13:18:08.721 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35836 10 6452 1 2025-10-16 13:18:26.896 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:18:26.817 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:18:26.518 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:18:26.814 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:18:26.682 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:19:09.150 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52510 10 6452 1 2025-10-16 13:16:45.527 00:03:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 421 1 2025-10-16 13:20:09.553 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54614 10 6452 1 2025-10-16 13:21:09.956 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38372 10 6452 1 2025-10-16 13:22:10.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34764 10 6452 1 2025-10-16 13:23:10.761 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:60272 10 6452 1 2025-10-16 13:23:26.626 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:23:26.584 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:23:26.787 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:23:26.906 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:23:26.666 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:19:45.132 00:04:00.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 13:24:11.182 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37916 10 6452 1 2025-10-16 13:20:45.130 00:04:00.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 13:25:11.587 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55236 10 6452 1 2025-10-16 13:26:11.990 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57440 10 6452 1 2025-10-16 13:27:12.393 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39224 10 6452 1 2025-10-16 13:28:26.857 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:28:12.793 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55168 10 6452 1 2025-10-16 13:28:26.892 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:28:26.906 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:28:26.775 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:28:26.783 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:24:45.132 00:04:00.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 13:29:13.153 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44572 10 6452 1 2025-10-16 13:25:45.132 00:04:00.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 13:30:13.553 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:54230 10 6452 1 2025-10-16 13:31:13.985 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44918 10 6452 1 2025-10-16 13:32:14.392 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38316 10 6452 1 2025-10-16 13:33:27.181 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:33:14.794 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38616 10 6452 1 2025-10-16 13:33:26.943 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:33:26.767 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:33:27.099 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:33:27.094 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:29:45.135 00:04:00.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 13:34:15.199 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38048 10 6452 1 2025-10-16 13:30:45.132 00:04:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 13:35:15.605 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51242 10 6452 1 2025-10-16 13:36:16.022 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45024 10 6452 1 2025-10-16 13:37:16.430 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55670 10 6452 1 2025-10-16 13:38:27.353 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:38:27.226 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:38:27.100 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:38:27.269 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:38:26.973 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:38:16.800 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34144 10 6452 1 2025-10-16 13:34:45.139 00:04:00.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 13:39:17.204 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:34258 10 6452 1 2025-10-16 13:35:45.138 00:04:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 13:40:17.560 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36698 10 6452 1 2025-10-16 13:41:17.925 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54496 10 6452 1 2025-10-16 13:42:18.336 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44176 10 6452 1 2025-10-16 13:43:27.034 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:43:27.334 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:43:18.697 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51330 10 6452 1 2025-10-16 13:43:27.455 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:43:27.580 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:43:27.538 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:39:45.142 00:04:00.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 13:44:19.108 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45974 10 6452 1 2025-10-16 13:45:19.512 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34664 10 6452 1 2025-10-16 13:40:45.140 00:06:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 13:46:19.912 00:00:19.598 TCP 1.101.0.1:3000 -> 23.104.0.1:34770 10 6452 1 2025-10-16 13:47:29.561 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:37366 10 6452 1 2025-10-16 13:48:27.447 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:48:27.498 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:48:27.298 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:48:27.365 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:48:27.503 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:48:29.919 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56210 10 6452 1 2025-10-16 13:49:30.321 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44716 10 6452 1 2025-10-16 13:44:45.151 00:06:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 13:50:30.725 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47336 10 6452 1 2025-10-16 13:51:31.135 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58798 10 6452 1 2025-10-16 13:47:45.150 00:04:00.387 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 13:52:31.537 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38658 10 6452 1 2025-10-16 13:53:27.408 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:53:27.152 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:53:27.585 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:53:27.313 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:53:27.668 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:53:31.940 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52550 10 6452 1 2025-10-16 13:54:32.356 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49118 10 6452 1 2025-10-16 13:55:32.757 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57624 10 6452 1 2025-10-16 13:51:45.152 00:04:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 13:52:45.150 00:04:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 13:56:33.176 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:46090 12 10369 1 2025-10-16 13:57:33.665 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33654 10 6452 1 2025-10-16 13:58:27.806 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 13:58:27.670 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 13:58:27.217 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:58:27.722 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 13:58:27.515 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 13:58:34.100 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43988 10 6452 1 Summary: total flows: 142, total bytes: 420671, total packets: 1018, avg bps: 919, avg pps: 0, avg bpp: 413 Time window: 2025-10-16 12:57:45 - 2025-10-16 13:58:44 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0021s User: 0.0021s Wall: 0.0012s flows/second: 117729.0 Runtime: 0.0012s