Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 16:59:23.976 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50802 10 6452 1 2025-10-24 16:57:49.357 00:02:00.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 16:58:49.361 00:01:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 17:00:24.380 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44128 10 6452 1 2025-10-24 17:01:24.785 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36992 10 6452 1 2025-10-24 17:00:49.357 00:01:00.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 17:02:22.600 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 17:02:22.781 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 17:02:22.437 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:02:22.588 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:02:22.671 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 17:02:25.189 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37360 10 6452 1 2025-10-24 17:03:25.594 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37156 10 6452 1 2025-10-24 17:04:26.001 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51458 10 6452 1 2025-10-24 17:00:49.360 00:04:00.213 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 17:02:49.358 00:02:00.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 17:05:26.397 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52728 10 6452 1 2025-10-24 17:06:26.802 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55836 10 6452 1 2025-10-24 17:05:49.362 00:01:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 17:05:49.360 00:01:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 17:07:23.336 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 17:07:23.210 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 17:07:23.205 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 17:07:23.224 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:07:23.253 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:07:27.205 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42022 10 6452 1 2025-10-24 17:08:27.609 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33514 10 6452 1 2025-10-24 17:09:27.973 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41904 10 6452 1 2025-10-24 17:07:49.360 00:02:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 17:07:49.363 00:02:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 17:10:28.377 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48848 10 6452 1 2025-10-24 17:11:28.778 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60970 10 6452 1 2025-10-24 17:10:49.361 00:01:00.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 17:10:49.363 00:01:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 17:12:22.822 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 17:12:22.884 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 17:12:22.884 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:12:22.884 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:12:22.967 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 17:12:29.183 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35056 10 6452 1 2025-10-24 17:13:29.590 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58952 10 6452 1 2025-10-24 17:14:29.995 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45620 10 6452 1 2025-10-24 17:12:49.360 00:02:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 17:12:49.362 00:02:00.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 17:15:30.361 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60952 10 6452 1 2025-10-24 17:16:30.760 00:00:11.357 TCP 1.101.0.1:3000 -> 23.104.0.1:60450 10 6452 1 2025-10-24 17:15:49.366 00:01:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 17:15:49.363 00:01:00.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 17:17:23.213 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 17:17:23.098 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 17:17:23.113 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:17:23.215 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:17:23.297 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 17:17:32.152 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39692 10 6452 1 2025-10-24 17:18:32.519 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60034 10 6452 1 2025-10-24 17:19:32.930 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:43634 10 6452 1 2025-10-24 17:17:49.365 00:02:00.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 17:17:49.368 00:02:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 17:20:33.364 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52062 10 6452 1 2025-10-24 17:21:33.764 00:00:11.096 TCP 1.101.0.1:3000 -> 23.104.0.1:45000 10 6452 1 2025-10-24 17:20:49.366 00:01:00.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 17:20:49.368 00:01:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 17:22:23.179 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 17:22:23.202 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 17:22:22.977 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 17:22:22.900 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:22:23.098 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:22:34.896 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49408 10 6452 1 2025-10-24 17:23:35.270 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54626 10 6452 1 2025-10-24 17:22:49.368 00:02:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 17:24:35.685 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60172 10 6452 1 2025-10-24 17:25:36.111 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57440 10 6452 1 2025-10-24 17:25:49.370 00:01:00.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 17:26:36.514 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53830 10 6452 1 2025-10-24 17:22:49.366 00:04:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-10-24 17:27:23.523 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 17:27:23.260 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 17:27:23.006 00:00:00.066 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:27:23.466 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:27:23.548 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 17:27:36.915 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56950 10 6452 1 2025-10-24 17:28:37.320 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48896 10 6452 1 2025-10-24 17:27:49.370 00:01:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 17:27:49.372 00:02:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 17:29:37.723 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33372 10 6452 1 2025-10-24 17:30:38.136 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42306 10 6452 1 2025-10-24 17:29:49.368 00:02:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 17:30:49.370 00:01:00.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 17:31:38.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53052 10 6452 1 2025-10-24 17:32:23.279 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 17:32:23.440 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:32:23.423 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:32:23.288 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 17:32:23.505 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 17:32:38.942 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:39874 10 6452 1 2025-10-24 17:33:39.359 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55120 10 6452 1 2025-10-24 17:32:49.369 00:01:00.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 17:34:39.721 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44694 10 6452 1 2025-10-24 17:35:40.117 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49798 10 6452 1 2025-10-24 17:32:49.371 00:04:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 17:34:49.368 00:02:00.233 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 17:36:40.526 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41676 10 6452 1 2025-10-24 17:37:23.498 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 17:37:23.462 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 17:37:23.314 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:37:23.469 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:37:23.552 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 17:37:40.925 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34306 10 6452 1 2025-10-24 17:37:49.370 00:01:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 17:38:41.345 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42038 10 6452 1 2025-10-24 17:39:41.746 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52476 10 6452 1 2025-10-24 17:40:42.153 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38402 10 6452 1 2025-10-24 17:39:49.370 00:02:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 17:37:49.371 00:04:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-10-24 17:41:42.561 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55034 10 6452 1 2025-10-24 17:42:23.627 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 17:42:23.538 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 17:42:23.576 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 17:42:23.328 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:42:23.545 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:42:42.969 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35052 10 6452 1 2025-10-24 17:42:49.372 00:01:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 17:42:49.370 00:01:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 17:43:43.384 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37342 10 6452 1 2025-10-24 17:44:43.783 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58766 10 6452 1 2025-10-24 17:45:44.189 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57876 10 6452 1 2025-10-24 17:44:49.370 00:02:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 17:44:49.373 00:02:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 17:46:44.606 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46950 10 6452 1 2025-10-24 17:47:23.629 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 17:47:23.503 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 17:47:23.328 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:47:23.384 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:47:23.467 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 17:47:45.016 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47610 10 6452 1 2025-10-24 17:47:49.374 00:01:00.231 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 17:47:49.373 00:01:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 17:48:45.380 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48900 10 6452 1 2025-10-24 17:49:45.784 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36556 10 6452 1 2025-10-24 17:50:46.191 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59458 10 6452 1 2025-10-24 17:49:49.372 00:02:00.236 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-24 17:49:49.374 00:02:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 17:51:46.597 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46388 10 6452 1 2025-10-24 17:52:23.551 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 17:52:23.748 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 17:52:23.467 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 17:52:23.664 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:52:23.469 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:52:46.959 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:57702 11 6504 1 2025-10-24 17:52:49.376 00:01:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 17:52:49.375 00:01:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-24 17:53:47.426 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59496 10 6452 1 2025-10-24 17:54:47.838 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47584 10 6452 1 2025-10-24 17:55:48.273 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53002 10 6452 1 2025-10-24 17:54:49.377 00:02:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-24 17:56:48.677 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50940 10 6452 1 2025-10-24 17:57:23.982 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-24 17:57:23.644 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-24 17:57:23.728 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-24 17:57:23.755 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:57:23.896 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-24 17:57:49.106 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57256 10 6452 1 2025-10-24 17:57:49.378 00:01:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-24 17:54:49.376 00:04:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 Summary: total flows: 164, total bytes: 410969, total packets: 1017, avg bps: 898, avg pps: 0, avg bpp: 404 Time window: 2025-10-24 16:57:49 - 2025-10-24 17:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0017s Wall: 0.0020s flows/second: 81918.0 Runtime: 0.0020s