Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 01:58:52.681 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35212 10 6452 1 2025-10-26 01:59:53.108 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33818 10 6452 1 2025-10-26 01:56:50.147 00:04:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 02:00:53.519 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35112 10 6452 1 2025-10-26 02:01:53.920 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45606 10 6452 1 2025-10-26 02:03:02.621 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:03:02.077 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:02:54.327 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52954 10 6452 1 2025-10-26 02:03:02.343 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:03:02.457 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:03:02.426 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 01:59:50.152 00:04:00.227 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 02:03:54.731 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35524 10 6452 1 2025-10-26 02:04:55.112 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40012 10 6452 1 2025-10-26 02:01:50.148 00:04:00.232 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 02:05:55.509 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50138 10 6452 1 2025-10-26 02:06:55.870 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57576 10 6452 1 2025-10-26 02:08:02.540 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:08:02.631 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:08:02.481 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:08:02.458 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:08:02.459 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:07:56.283 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:58494 10 6452 1 2025-10-26 02:04:50.153 00:04:00.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 02:08:56.651 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55550 10 6452 1 2025-10-26 02:09:57.016 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38994 10 6452 1 2025-10-26 02:06:50.150 00:04:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 02:10:57.378 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:38506 12 10375 1 2025-10-26 02:11:57.854 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:43000 10 6452 1 2025-10-26 02:13:02.409 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:13:02.448 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:13:02.491 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:13:02.513 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:13:02.574 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:12:58.234 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46490 10 6452 1 2025-10-26 02:13:58.638 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50288 10 6452 1 2025-10-26 02:09:50.155 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 02:14:59.038 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57592 10 6452 1 2025-10-26 02:11:50.152 00:04:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 02:15:59.441 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56264 10 6452 1 2025-10-26 02:16:59.799 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54614 10 6452 1 2025-10-26 02:18:02.691 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:18:02.561 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:18:02.633 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:18:02.693 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:18:02.716 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:18:00.206 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49960 10 6452 1 2025-10-26 02:19:00.610 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36892 10 6452 1 2025-10-26 02:20:01.012 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:56446 10 6452 1 2025-10-26 02:16:50.154 00:04:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 02:16:50.156 00:04:00.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 02:21:01.363 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43830 10 6452 1 2025-10-26 02:22:01.768 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47600 10 6452 1 2025-10-26 02:23:02.851 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:23:02.696 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:23:02.845 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:23:02.971 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:23:02.926 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:23:02.177 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35702 10 6452 1 2025-10-26 02:24:02.576 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35260 10 6452 1 2025-10-26 02:25:02.984 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59806 10 6452 1 2025-10-26 02:21:50.159 00:04:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 02:26:03.350 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33392 10 6452 1 2025-10-26 02:21:50.155 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-26 02:27:03.753 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54406 10 6452 1 2025-10-26 02:28:02.907 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:28:02.885 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:28:02.832 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:28:02.825 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:28:02.822 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:28:04.183 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53616 12 6556 1 2025-10-26 02:29:04.585 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52412 10 6452 1 2025-10-26 02:30:04.997 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59760 10 6452 1 2025-10-26 02:26:50.160 00:04:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 02:31:05.399 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55720 10 6452 1 2025-10-26 02:32:05.814 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36158 10 6452 1 2025-10-26 02:28:50.156 00:04:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 02:33:03.033 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:33:02.946 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:33:02.895 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:33:02.949 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:33:03.185 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:33:06.215 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38698 10 6452 1 2025-10-26 02:34:06.619 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60304 10 6452 1 2025-10-26 02:35:07.023 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49610 10 6452 1 2025-10-26 02:31:50.159 00:04:00.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 02:36:07.423 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45992 10 6452 1 2025-10-26 02:37:07.828 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:60126 10 6452 1 2025-10-26 02:33:50.159 00:04:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 02:38:03.204 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:38:02.922 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:38:02.980 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:38:03.133 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:38:03.062 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:38:08.272 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:32934 10 6452 1 2025-10-26 02:39:08.642 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49684 10 6452 1 2025-10-26 02:40:09.059 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39774 10 6452 1 2025-10-26 02:36:50.173 00:04:00.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 02:41:09.416 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58192 10 6452 1 2025-10-26 02:42:09.820 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38434 10 6452 1 2025-10-26 02:38:50.170 00:04:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 02:43:03.139 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:43:03.129 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:43:03.196 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:43:03.056 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:43:03.131 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:43:10.226 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42792 10 6452 1 2025-10-26 02:44:10.627 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54372 10 6452 1 2025-10-26 02:45:10.990 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57786 10 6452 1 2025-10-26 02:46:11.389 00:00:10.556 TCP 1.101.0.1:3000 -> 23.104.0.1:36324 10 6452 1 2025-10-26 02:41:50.172 00:06:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-26 02:47:11.982 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42306 10 6452 1 2025-10-26 02:43:50.170 00:04:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 02:48:03.207 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:48:03.226 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:48:03.246 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:48:03.124 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:48:03.375 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:48:12.389 00:00:10.716 TCP 1.101.0.1:3000 -> 23.104.0.1:50078 10 6452 1 2025-10-26 02:49:13.151 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42382 10 6452 1 2025-10-26 02:50:13.555 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50534 10 6452 1 2025-10-26 02:51:13.956 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36418 10 6452 1 2025-10-26 02:52:14.365 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:45202 10 6452 1 2025-10-26 02:48:50.171 00:04:00.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 02:48:50.175 00:04:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 02:53:03.558 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:53:03.450 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:53:03.653 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:53:03.435 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:53:03.737 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:53:14.761 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:41496 10 6452 1 2025-10-26 02:54:15.192 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35368 10 6452 1 2025-10-26 02:55:15.570 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:54248 10 6452 1 2025-10-26 02:56:15.944 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38752 10 6452 1 2025-10-26 02:57:16.361 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57962 10 6452 1 2025-10-26 02:53:50.178 00:04:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 02:58:03.467 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 02:58:03.403 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 02:58:03.427 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:58:03.384 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 02:58:03.386 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 02:58:16.764 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:49778 10 6452 1 2025-10-26 02:53:50.174 00:06:00.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 143, total bytes: 421396, total packets: 1030, avg bps: 891, avg pps: 0, avg bpp: 409 Time window: 2025-10-26 01:56:50 - 2025-10-26 02:59:50 Total flows processed: 143, passed: 143, Blocks skipped: 0, Bytes read: 14936 Sys: 0.0054s User: 0.0008s Wall: 0.0024s flows/second: 59811.1 Runtime: 0.0024s