Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 15:59:31.728 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49620 10 6452 1 2025-10-16 16:00:32.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60104 10 6452 1 2025-10-16 16:01:32.513 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33744 10 6452 1 2025-10-16 16:02:32.919 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34760 10 6452 1 2025-10-16 15:57:45.180 00:06:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 16:03:30.209 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 16:03:29.964 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 16:03:29.928 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:03:30.126 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:03:30.123 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 16:03:33.321 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60450 10 6452 1 2025-10-16 16:04:33.731 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35508 10 6452 1 2025-10-16 16:00:45.178 00:04:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 16:05:34.136 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:32914 10 6452 1 2025-10-16 16:06:34.504 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47396 10 6452 1 2025-10-16 16:07:34.906 00:00:19.503 TCP 1.101.0.1:3000 -> 23.104.0.1:41520 10 6452 1 2025-10-16 16:08:30.187 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 16:08:29.989 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:08:30.273 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:08:30.289 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 16:08:30.356 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 16:04:45.181 00:04:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 16:08:44.450 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51886 10 6452 1 2025-10-16 16:05:45.180 00:04:00.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 16:09:44.824 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59062 10 6452 1 2025-10-16 16:10:45.227 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34124 10 6452 1 2025-10-16 16:11:45.625 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46024 10 6452 1 2025-10-16 16:12:45.983 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48954 10 6452 1 2025-10-16 16:13:30.673 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 16:13:30.592 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:13:30.387 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 16:13:30.527 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 16:13:30.479 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:09:45.182 00:04:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 16:13:46.343 00:00:10.708 TCP 1.101.0.1:3000 -> 23.104.0.1:35496 10 6452 1 2025-10-16 16:10:45.180 00:04:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 16:14:47.115 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44174 10 6452 1 2025-10-16 16:15:47.514 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56892 10 6452 1 2025-10-16 16:16:47.918 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58674 10 6452 1 2025-10-16 16:17:48.318 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51464 10 6452 1 2025-10-16 16:18:30.342 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 16:18:30.420 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 16:18:30.281 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:18:30.260 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:18:30.544 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 16:14:45.184 00:04:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 16:18:48.684 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58044 10 6452 1 2025-10-16 16:15:45.182 00:04:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 16:19:49.105 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32786 10 6452 1 2025-10-16 16:20:49.512 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33832 10 6452 1 2025-10-16 16:21:49.910 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36748 10 6452 1 2025-10-16 16:22:50.314 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53622 10 6452 1 2025-10-16 16:23:30.464 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 16:23:30.563 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:23:30.236 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:23:30.528 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 16:23:30.319 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 16:19:45.184 00:04:00.395 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 16:23:50.715 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56202 10 6452 1 2025-10-16 16:20:45.183 00:04:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 16:24:51.129 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43736 10 6452 1 2025-10-16 16:25:51.532 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49192 10 6452 1 2025-10-16 16:26:51.928 00:00:10.460 TCP 1.101.0.1:3000 -> 23.104.0.1:51950 12 10369 1 2025-10-16 16:27:52.423 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37512 10 6452 1 2025-10-16 16:28:30.339 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 16:28:30.370 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 16:28:30.557 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:28:30.255 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:28:30.382 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 16:24:45.187 00:04:00.394 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 16:28:52.826 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57134 10 6452 1 2025-10-16 16:29:53.228 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37690 10 6452 1 2025-10-16 16:25:45.184 00:06:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-16 16:30:53.628 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40824 10 6452 1 2025-10-16 16:31:53.984 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38016 10 6452 1 2025-10-16 16:32:54.391 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53842 10 6452 1 2025-10-16 16:33:30.788 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 16:33:30.633 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 16:33:30.630 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:33:30.705 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:33:30.762 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 16:33:54.761 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:47266 10 6452 1 2025-10-16 16:29:45.187 00:06:00.394 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-16 16:34:55.171 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38202 10 6452 1 2025-10-16 16:35:55.535 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52438 10 6452 1 2025-10-16 16:32:45.185 00:04:00.399 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 16:36:55.944 00:00:10.509 TCP 1.101.0.1:3000 -> 23.104.0.1:35142 14 10473 1 2025-10-16 16:37:56.494 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57624 10 6452 1 2025-10-16 16:38:30.795 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 16:38:30.839 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:38:30.667 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:38:30.680 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 16:38:30.749 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 16:38:56.892 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:60888 10 6452 1 2025-10-16 16:39:57.275 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52926 10 6452 1 2025-10-16 16:36:45.199 00:04:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 16:40:57.638 00:00:10.685 TCP 1.101.0.1:3000 -> 23.104.0.1:47398 10 6452 1 2025-10-16 16:37:45.195 00:04:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 16:41:58.356 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45978 10 6452 1 2025-10-16 16:42:58.764 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:42210 10 6452 1 2025-10-16 16:43:30.944 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 16:43:30.775 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:43:30.949 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:43:30.861 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 16:43:31.033 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 16:43:59.129 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55742 10 6452 1 2025-10-16 16:44:59.491 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56796 10 6452 1 2025-10-16 16:41:45.201 00:04:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 16:45:59.902 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37998 10 6452 1 2025-10-16 16:42:45.198 00:04:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 16:47:00.317 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53482 10 6452 1 2025-10-16 16:48:00.720 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38940 10 6452 1 2025-10-16 16:48:30.976 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 16:48:30.895 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:48:30.898 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 16:48:30.943 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:48:30.990 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 16:49:01.133 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45812 10 6452 1 2025-10-16 16:50:01.531 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34190 10 6452 1 2025-10-16 16:46:45.201 00:04:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 16:51:01.899 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59372 10 6452 1 2025-10-16 16:47:45.198 00:04:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 16:52:02.262 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39296 10 6452 1 2025-10-16 16:53:02.680 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46284 10 6452 1 2025-10-16 16:53:31.262 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 16:53:30.901 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:53:31.179 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 16:53:31.179 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:53:31.129 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 16:54:03.103 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57916 10 6452 1 2025-10-16 16:55:03.506 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56658 10 6452 1 2025-10-16 16:51:45.215 00:04:00.373 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 16:56:03.914 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34196 10 6452 1 2025-10-16 16:52:45.213 00:04:00.378 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 16:57:04.284 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58466 10 6452 1 2025-10-16 16:58:04.685 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48942 10 6452 1 2025-10-16 16:58:31.295 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 16:58:31.227 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 16:58:31.162 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:58:31.213 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 16:58:31.216 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 Summary: total flows: 141, total bytes: 417994, total packets: 1008, avg bps: 917, avg pps: 0, avg bpp: 414 Time window: 2025-10-16 15:57:45 - 2025-10-16 16:58:31 Total flows processed: 141, passed: 141, Blocks skipped: 0, Bytes read: 14728 Sys: 0.0043s User: 0.0009s Wall: 0.0025s flows/second: 57084.6 Runtime: 0.0025s