Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 09:58:46.219 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54350 10 6661 1 2025-10-26 09:59:46.628 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51878 10 6661 1 2025-10-26 09:59:50.335 00:01:00.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-26 10:00:47.041 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42632 10 6661 1 2025-10-26 09:59:50.339 00:02:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-26 10:01:47.445 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52856 10 6661 1 2025-10-26 10:02:47.853 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45964 10 6661 1 2025-10-26 10:03:12.086 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 10:03:12.074 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:03:11.975 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:03:12.089 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 10:03:12.057 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 10:02:50.337 00:01:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-26 10:01:50.335 00:02:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-26 10:03:48.264 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46750 10 6661 1 2025-10-26 10:04:48.663 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42124 10 6661 1 2025-10-26 10:04:50.334 00:01:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-26 10:05:49.096 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32912 10 6661 1 2025-10-26 10:06:49.499 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49030 10 6661 1 2025-10-26 10:07:49.903 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49218 10 6661 1 2025-10-26 10:08:12.059 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 10:08:12.332 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 10:08:12.059 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:08:11.975 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:08:12.124 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 10:04:50.337 00:04:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 10:06:50.335 00:02:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-26 10:08:50.310 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48810 10 6661 1 2025-10-26 10:09:50.712 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44400 10 6661 1 2025-10-26 10:09:50.336 00:01:00.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-26 10:10:51.112 00:00:11.194 TCP 1.101.0.1:3000 -> 23.104.0.1:44958 10 6661 1 2025-10-26 10:11:52.339 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47518 10 6661 1 2025-10-26 10:12:52.703 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45152 10 6661 1 2025-10-26 10:13:12.154 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 10:13:11.992 00:00:00.053 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:13:12.156 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:13:12.154 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 10:13:12.239 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 10:09:50.338 00:04:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 10:11:50.337 00:02:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-26 10:13:53.095 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33940 10 6661 1 2025-10-26 10:14:53.503 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53638 10 6661 1 2025-10-26 10:14:50.335 00:01:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-26 10:14:50.339 00:01:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-26 10:15:53.909 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44500 10 6661 1 2025-10-26 10:16:54.322 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32798 10 6661 1 2025-10-26 10:17:54.749 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:41550 10 6661 1 2025-10-26 10:18:12.513 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 10:18:12.253 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 10:18:12.254 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:18:12.429 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:18:12.323 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 10:16:50.342 00:02:00.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-26 10:18:55.139 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37978 10 6661 1 2025-10-26 10:19:55.541 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40856 10 6661 1 2025-10-26 10:19:50.345 00:01:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-26 10:16:50.338 00:04:00.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 10:20:55.952 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:46984 12 10584 1 2025-10-26 10:21:56.394 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55942 10 6661 1 2025-10-26 10:23:12.371 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 10:22:56.757 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:38784 10 6661 1 2025-10-26 10:23:12.408 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 10:23:12.399 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:23:12.288 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:23:12.188 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 10:21:50.346 00:02:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-26 10:23:57.131 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60208 10 6661 1 2025-10-26 10:24:57.537 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49638 10 6661 1 2025-10-26 10:21:50.343 00:04:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 10:24:50.347 00:01:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-26 10:25:57.890 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37752 10 6661 1 2025-10-26 10:26:58.297 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41736 10 6661 1 2025-10-26 10:26:50.343 00:01:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-26 10:27:58.663 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51046 10 6661 1 2025-10-26 10:28:12.700 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 10:28:12.527 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:28:12.898 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:28:12.969 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 10:28:12.981 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 10:26:50.347 00:02:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-26 10:28:59.096 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53638 10 6661 1 2025-10-26 10:29:59.502 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56668 10 6661 1 2025-10-26 10:28:50.344 00:02:00.216 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-26 10:29:50.347 00:01:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-26 10:30:59.908 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45814 10 6661 1 2025-10-26 10:32:00.311 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45404 10 6661 1 2025-10-26 10:31:50.344 00:01:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-26 10:33:12.589 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 10:33:12.374 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 10:33:12.512 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:33:00.710 00:00:11.107 TCP 1.101.0.1:3000 -> 23.104.0.1:45352 10 6661 1 2025-10-26 10:33:12.506 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:33:12.698 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 10:31:50.348 00:02:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-26 10:34:01.853 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57686 10 6661 1 2025-10-26 10:35:02.267 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55292 10 6661 1 2025-10-26 10:34:50.349 00:01:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-26 10:33:50.346 00:02:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-26 10:36:02.676 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54814 11 6713 1 2025-10-26 10:37:03.102 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46810 10 6661 1 2025-10-26 10:36:50.345 00:01:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-26 10:38:12.862 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 10:38:12.709 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 10:38:03.502 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57398 10 6661 1 2025-10-26 10:38:12.693 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:38:12.779 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:38:12.683 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 10:36:50.347 00:02:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-26 10:39:03.912 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53514 10 6661 1 2025-10-26 10:40:04.313 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52982 10 6661 1 2025-10-26 10:39:50.350 00:01:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-26 10:38:50.345 00:02:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-26 10:41:04.716 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50940 10 6661 1 2025-10-26 10:42:05.119 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36218 10 6661 1 2025-10-26 10:41:50.346 00:01:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-26 10:43:12.701 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 10:43:05.520 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33100 10 6661 1 2025-10-26 10:43:12.960 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 10:43:12.678 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:43:12.619 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:43:12.913 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 10:44:05.926 00:00:10.978 TCP 1.101.0.1:3000 -> 23.104.0.1:37500 10 6661 1 2025-10-26 10:45:06.936 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54522 10 6661 1 2025-10-26 10:43:50.346 00:02:00.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-26 10:41:50.349 00:04:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-26 10:46:07.357 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46952 10 6661 1 2025-10-26 10:47:07.762 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:50196 10 6661 1 2025-10-26 10:46:50.348 00:01:00.216 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-26 10:46:50.352 00:01:00.210 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-26 10:48:12.953 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 10:48:12.873 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 10:48:12.900 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:48:12.871 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:48:12.873 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 10:48:08.135 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45152 10 6661 1 2025-10-26 10:49:08.540 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43254 10 6661 1 2025-10-26 10:50:08.942 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56936 10 6661 1 2025-10-26 10:48:50.348 00:02:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-26 10:48:50.352 00:02:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-26 10:51:09.356 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41100 10 6661 1 2025-10-26 10:52:09.761 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:55836 10 6661 1 2025-10-26 10:51:50.352 00:01:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-26 10:51:50.348 00:01:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-26 10:53:13.123 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 10:53:12.846 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:53:13.005 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:53:12.945 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 10:53:13.087 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 10:53:10.128 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45334 10 6661 1 2025-10-26 10:54:10.529 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57930 10 6661 1 2025-10-26 10:55:10.934 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49100 10 6661 1 2025-10-26 10:53:50.352 00:02:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-26 10:56:11.347 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48590 10 6661 1 2025-10-26 10:57:11.743 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57470 10 6661 1 2025-10-26 10:53:50.349 00:04:00.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-26 10:56:50.352 00:01:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-26 10:58:13.294 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-26 10:58:13.068 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-26 10:58:13.106 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:58:13.211 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-26 10:58:13.151 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-26 10:58:12.144 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36424 10 6661 1 Summary: total flows: 162, total bytes: 433269, total packets: 1019, avg bps: 969, avg pps: 0, avg bpp: 425 Time window: 2025-10-26 09:58:46 - 2025-10-26 10:58:22 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0029s User: 0.0019s Wall: 0.0019s flows/second: 84987.8 Runtime: 0.0019s