Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 20:58:49.022 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47578 10 6452 1 2025-10-16 20:57:45.311 00:02:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 20:59:49.421 00:00:10.815 TCP 1.101.0.1:3000 -> 23.104.0.1:54364 10 6452 1 2025-10-16 20:58:45.309 00:02:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 21:00:50.281 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32888 10 6452 1 2025-10-16 21:00:45.312 00:01:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 21:01:50.681 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60474 10 6452 1 2025-10-16 21:01:45.310 00:01:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 21:02:51.105 00:00:10.763 TCP 1.101.0.1:3000 -> 23.104.0.1:42090 10 6452 1 2025-10-16 21:03:35.972 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:03:36.064 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 21:03:36.110 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 21:03:35.982 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:03:36.276 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 21:03:51.909 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38606 10 6452 1 2025-10-16 21:02:45.313 00:02:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 21:04:52.318 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57364 10 6452 1 2025-10-16 21:05:52.676 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59286 10 6452 1 2025-10-16 21:05:45.314 00:01:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 21:06:53.037 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40538 10 6452 1 2025-10-16 21:03:45.309 00:04:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 21:07:53.445 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35578 10 6452 1 2025-10-16 21:08:36.372 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 21:08:36.316 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:08:36.265 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:08:36.204 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 21:08:36.348 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 21:08:53.812 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:35270 10 6452 1 2025-10-16 21:09:54.250 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54440 10 6452 1 2025-10-16 21:10:54.659 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48594 10 6452 1 2025-10-16 21:07:45.314 00:04:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 21:11:55.066 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49158 10 6452 1 2025-10-16 21:08:45.312 00:04:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 21:12:55.462 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49632 10 6452 1 2025-10-16 21:13:36.373 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 21:13:36.339 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 21:13:36.255 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:13:36.292 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:13:36.230 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 21:13:55.874 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45116 10 6452 1 2025-10-16 21:14:56.249 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48798 10 6452 1 2025-10-16 21:15:56.655 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34214 10 6452 1 2025-10-16 21:12:45.316 00:04:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 21:16:57.069 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41914 10 6452 1 2025-10-16 21:13:45.316 00:04:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 21:17:57.497 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43292 10 6452 1 2025-10-16 21:18:36.356 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 21:18:36.581 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:18:36.351 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:18:36.265 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 21:18:36.434 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 21:18:57.899 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51684 12 6556 1 2025-10-16 21:18:45.319 00:01:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 21:19:58.313 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35754 10 6452 1 2025-10-16 21:20:58.678 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42008 10 6452 1 2025-10-16 21:17:45.320 00:04:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 21:21:59.102 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:35090 10 6452 1 2025-10-16 21:20:45.322 00:02:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 21:22:59.525 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56146 10 6452 1 2025-10-16 21:23:36.658 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 21:23:36.774 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 21:23:36.729 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:23:36.576 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:23:36.774 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 21:22:45.324 00:01:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 21:23:59.936 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:33392 10 6452 1 2025-10-16 21:23:45.321 00:01:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 21:25:00.373 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54724 10 6452 1 2025-10-16 21:26:00.739 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59720 10 6452 1 2025-10-16 21:24:45.324 00:02:00.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 21:27:01.145 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39794 10 6452 1 2025-10-16 21:25:45.322 00:02:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 21:28:01.558 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34886 10 6452 1 2025-10-16 21:28:36.661 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 21:28:36.565 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:28:36.615 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:28:36.622 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 21:28:36.699 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 21:27:45.325 00:01:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 21:29:01.918 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35966 10 6452 1 2025-10-16 21:28:45.323 00:01:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 21:30:02.319 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33502 10 6452 1 2025-10-16 21:31:02.725 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:33966 10 6452 1 2025-10-16 21:29:45.325 00:02:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 21:32:03.117 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36390 10 6452 1 2025-10-16 21:30:45.323 00:02:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 21:33:03.512 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46304 10 6452 1 2025-10-16 21:33:36.727 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 21:33:36.609 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:33:36.660 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:33:36.657 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 21:33:36.743 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 21:32:45.326 00:01:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 21:34:03.920 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50470 10 6452 1 2025-10-16 21:33:45.322 00:01:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 21:35:04.317 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41852 10 6452 1 2025-10-16 21:36:04.729 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:37714 10 6452 1 2025-10-16 21:34:45.326 00:02:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 21:37:05.153 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47014 10 6452 1 2025-10-16 21:35:45.323 00:02:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 21:38:05.554 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36928 10 6452 1 2025-10-16 21:38:37.054 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 21:38:37.133 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 21:38:37.001 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:38:36.972 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:38:37.047 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 21:37:45.326 00:01:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 21:39:05.918 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33688 10 6452 1 2025-10-16 21:38:45.323 00:01:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 21:40:06.323 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58236 10 6452 1 2025-10-16 21:41:06.683 00:00:10.985 TCP 1.101.0.1:3000 -> 23.104.0.1:55988 10 6452 1 2025-10-16 21:39:45.326 00:02:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-16 21:42:07.703 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36956 10 6452 1 2025-10-16 21:43:08.118 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35118 10 6452 1 2025-10-16 21:43:37.054 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 21:43:37.251 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 21:43:36.800 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:43:36.971 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:43:37.119 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 21:42:45.328 00:01:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 21:44:08.481 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47344 10 6452 1 2025-10-16 21:40:45.323 00:04:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 21:45:08.882 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35902 10 6452 1 2025-10-16 21:46:09.245 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46558 10 6452 1 2025-10-16 21:47:09.662 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43892 10 6452 1 2025-10-16 21:48:10.024 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46038 10 6452 1 2025-10-16 21:48:37.218 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 21:48:37.075 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 21:48:37.157 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:48:37.136 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:48:37.071 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 21:44:45.328 00:04:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 21:49:10.426 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48720 10 6452 1 2025-10-16 21:45:45.327 00:04:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-16 21:50:10.834 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:37118 10 6452 1 2025-10-16 21:51:11.254 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52386 10 6452 1 2025-10-16 21:50:45.328 00:01:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 21:52:11.660 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:55062 12 10375 1 2025-10-16 21:53:12.146 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:56932 10 6452 1 2025-10-16 21:53:36.961 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 21:53:37.136 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 21:53:36.841 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:53:36.879 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:53:36.897 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 21:49:45.330 00:04:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-16 21:54:12.536 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43374 10 6452 1 2025-10-16 21:52:45.330 00:02:00.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-16 21:55:12.937 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:58282 10 6452 1 2025-10-16 21:54:45.345 00:01:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-16 21:56:13.356 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39164 10 6452 1 2025-10-16 21:55:45.343 00:01:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-16 21:57:13.751 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37078 10 6452 1 2025-10-16 21:58:14.150 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39856 10 6452 1 2025-10-16 21:58:37.454 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-16 21:58:37.233 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-16 21:58:37.059 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:58:37.372 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-16 21:58:37.184 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-16 21:56:45.346 00:02:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 Summary: total flows: 159, total bytes: 421150, total packets: 1026, avg bps: 920, avg pps: 0, avg bpp: 410 Time window: 2025-10-16 20:57:45 - 2025-10-16 21:58:45 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0042s User: 0.0008s Wall: 0.0028s flows/second: 57150.9 Runtime: 0.0028s