Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 23:59:36.918 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35512 10 6452 1 2025-10-25 00:00:37.315 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55868 10 6452 1 2025-10-25 00:01:37.723 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32844 10 6452 1 2025-10-24 23:56:49.520 00:06:00.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 00:02:30.857 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:02:30.926 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:02:30.936 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 00:02:31.123 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 00:02:31.009 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 00:02:38.130 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51132 10 6452 1 2025-10-25 00:03:38.551 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58024 10 6452 1 2025-10-25 00:04:38.955 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53832 10 6452 1 2025-10-25 00:05:39.376 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55510 10 6452 1 2025-10-25 00:00:49.524 00:06:00.228 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 00:06:39.776 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42960 10 6452 1 2025-10-25 00:07:31.124 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 00:07:31.045 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 00:07:31.063 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:07:31.041 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:07:31.257 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 00:07:40.181 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58098 10 6452 1 2025-10-25 00:08:40.584 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39302 10 6452 1 2025-10-25 00:03:49.524 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 00:09:40.992 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56580 10 6452 1 2025-10-25 00:10:41.355 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34090 10 6452 1 2025-10-25 00:11:41.760 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34818 10 6452 1 2025-10-25 00:12:31.416 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 00:12:31.574 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 00:12:31.260 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:12:31.333 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:12:31.422 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 00:07:49.524 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 00:12:42.117 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60084 10 6452 1 2025-10-25 00:13:42.476 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55106 10 6452 1 2025-10-25 00:14:42.879 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52600 10 6452 1 2025-10-25 00:10:49.522 00:06:00.239 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 00:15:43.283 00:00:10.730 TCP 1.101.0.1:3000 -> 23.104.0.1:41774 10 6452 1 2025-10-25 00:16:44.066 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41510 10 6452 1 2025-10-25 00:17:31.427 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 00:17:31.437 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:17:31.549 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:17:31.592 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 00:17:31.633 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 00:17:44.430 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35704 10 6452 1 2025-10-25 00:18:44.834 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:53232 10 6452 1 2025-10-25 00:14:49.524 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 00:19:45.229 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57696 10 6452 1 2025-10-25 00:20:45.633 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38930 10 6452 1 2025-10-25 00:21:46.035 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57396 10 6452 1 2025-10-25 00:22:31.635 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 00:22:31.638 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 00:22:31.602 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:22:31.552 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:22:31.479 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 00:17:49.525 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 00:22:46.436 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51656 10 6452 1 2025-10-25 00:23:46.797 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38274 10 6452 1 2025-10-25 00:24:47.205 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38060 10 6452 1 2025-10-25 00:25:47.575 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:43602 10 6452 1 2025-10-25 00:21:49.530 00:06:00.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 00:26:48.020 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59006 10 6452 1 2025-10-25 00:27:31.833 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 00:27:31.384 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:27:31.831 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:27:31.826 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 00:27:31.914 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 00:27:48.429 00:00:10.613 TCP 1.101.0.1:3000 -> 23.104.0.1:51702 10 6452 1 2025-10-25 00:28:49.108 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43844 10 6452 1 2025-10-25 00:24:49.526 00:06:00.242 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 00:29:49.474 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51126 10 6452 1 2025-10-25 00:30:49.882 00:00:12.573 TCP 1.101.0.1:3000 -> 23.104.0.1:34802 10 6452 1 2025-10-25 00:31:52.501 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34108 10 6452 1 2025-10-25 00:32:31.671 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 00:32:31.874 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 00:32:31.849 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:32:31.589 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:32:31.769 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 00:32:52.901 00:00:11.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48542 12 6556 1 2025-10-25 00:28:49.536 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 00:33:54.260 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34728 10 6452 1 2025-10-25 00:34:54.668 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33794 10 6452 1 2025-10-25 00:35:55.097 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35960 10 6452 1 2025-10-25 00:31:49.535 00:06:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 00:36:55.512 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45486 10 6452 1 2025-10-25 00:37:31.913 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 00:37:31.963 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 00:37:31.673 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:37:31.830 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:37:31.964 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 00:37:55.917 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38360 10 6452 1 2025-10-25 00:38:56.316 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39332 10 6452 1 2025-10-25 00:39:56.723 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:40522 10 6452 1 2025-10-25 00:35:49.538 00:06:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 00:40:57.145 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41600 10 6452 1 2025-10-25 00:41:57.550 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45968 10 6452 1 2025-10-25 00:42:31.792 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 00:42:31.897 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:42:31.886 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:42:31.991 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 00:42:31.969 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 00:42:57.951 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37946 10 6452 1 2025-10-25 00:38:49.535 00:06:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 00:43:58.359 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51582 10 6452 1 2025-10-25 00:44:58.759 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59180 10 6452 1 2025-10-25 00:45:59.172 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60738 10 6452 1 2025-10-25 00:46:59.572 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35488 10 6452 1 2025-10-25 00:47:32.087 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 00:47:32.152 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 00:47:32.010 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:47:32.006 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:47:31.928 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 00:42:49.539 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 00:47:59.938 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:58924 10 6452 1 2025-10-25 00:49:00.362 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57650 10 6452 1 2025-10-25 00:50:00.763 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:55576 10 6452 1 2025-10-25 00:45:49.538 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 00:51:01.186 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40876 10 6452 1 2025-10-25 00:52:01.591 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47386 10 6452 1 2025-10-25 00:52:32.294 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 00:52:32.145 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:52:32.422 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:52:32.664 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 00:52:32.504 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 00:53:02.009 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49986 10 6452 1 2025-10-25 00:54:02.427 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:59308 10 6452 1 2025-10-25 00:49:49.539 00:06:00.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-25 00:55:02.788 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47638 10 6452 1 2025-10-25 00:56:03.207 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49524 10 6452 1 2025-10-25 00:57:03.573 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42676 10 6452 1 2025-10-25 00:57:32.135 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-25 00:57:32.146 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:57:32.410 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-25 00:57:32.298 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-25 00:57:32.492 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-25 00:52:49.538 00:06:00.240 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-25 00:58:03.942 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:34622 10 6452 1 Summary: total flows: 136, total bytes: 410529, total packets: 1010, avg bps: 882, avg pps: 0, avg bpp: 406 Time window: 2025-10-24 23:56:49 - 2025-10-25 00:58:49 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0042s User: 0.0008s Wall: 0.0029s flows/second: 46353.4 Runtime: 0.0030s