Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-21 23:58:42.148 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53874 10 6452 1 2025-10-21 23:59:42.547 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:55678 10 6452 1 2025-10-21 23:56:47.949 00:05:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-21 23:56:47.951 00:05:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:00:42.942 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37434 10 6452 1 2025-10-22 00:01:04.013 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:01:03.935 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:01:04.147 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:01:03.931 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:01:04.077 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:01:43.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50520 10 6452 1 2025-10-22 00:02:43.772 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59218 10 6452 1 2025-10-22 00:03:44.187 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44552 10 6452 1 2025-10-22 00:04:44.549 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:52100 12 10375 1 2025-10-22 00:05:45.025 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48382 10 6452 1 2025-10-22 00:06:04.342 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:06:04.302 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:06:03.826 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:06:04.259 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:06:04.212 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:02:47.956 00:05:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:02:47.952 00:05:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:06:45.419 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37156 10 6452 1 2025-10-22 00:07:45.823 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:49858 11 6504 1 2025-10-22 00:08:46.275 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34528 10 6452 1 2025-10-22 00:09:46.677 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39904 10 6452 1 2025-10-22 00:10:47.103 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35696 10 6452 1 2025-10-22 00:11:04.831 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:11:04.314 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:11:04.238 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:11:04.747 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:11:04.525 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:11:47.466 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48362 10 6452 1 2025-10-22 00:08:47.957 00:05:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:08:47.956 00:05:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:12:47.831 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42982 10 6452 1 2025-10-22 00:13:48.237 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46788 10 6452 1 2025-10-22 00:14:48.601 00:00:10.769 TCP 1.101.0.1:3000 -> 23.104.0.1:42236 10 6452 1 2025-10-22 00:15:49.404 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42142 10 6452 1 2025-10-22 00:16:04.377 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:16:04.199 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:16:04.287 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:16:04.510 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:16:04.369 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:16:49.772 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47040 10 6452 1 2025-10-22 00:17:50.186 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46618 10 6452 1 2025-10-22 00:14:47.960 00:05:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:14:47.963 00:05:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:18:50.586 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53756 10 6452 1 2025-10-22 00:19:50.990 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49402 10 6452 1 2025-10-22 00:20:51.354 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57890 10 6452 1 2025-10-22 00:21:04.931 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:21:05.101 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:21:04.817 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:21:04.686 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:21:04.900 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:21:51.758 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56212 10 6452 1 2025-10-22 00:22:52.178 00:00:10.935 TCP 1.101.0.1:3000 -> 23.104.0.1:37228 10 6452 1 2025-10-22 00:23:53.150 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53646 10 6452 1 2025-10-22 00:20:47.961 00:05:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:20:47.965 00:05:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:24:53.560 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47708 10 6452 1 2025-10-22 00:26:04.655 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:26:04.354 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:25:53.924 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51568 10 6452 1 2025-10-22 00:26:04.653 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:26:04.543 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:26:04.737 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:26:54.334 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:58476 10 6452 1 2025-10-22 00:27:54.714 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:33134 10 6452 1 2025-10-22 00:28:55.116 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58976 10 6452 1 2025-10-22 00:29:55.517 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59102 10 6452 1 2025-10-22 00:26:47.964 00:05:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:26:47.966 00:05:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:31:04.646 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:31:04.642 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:31:04.722 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:31:04.650 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:31:04.804 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:30:55.929 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:37606 10 6452 1 2025-10-22 00:31:56.358 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34368 10 6452 1 2025-10-22 00:32:56.762 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:36272 10 6452 1 2025-10-22 00:33:57.134 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56170 10 6452 1 2025-10-22 00:34:57.536 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52328 10 6452 1 2025-10-22 00:36:04.853 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:36:04.820 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:36:04.858 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:36:04.916 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:36:04.941 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:35:57.934 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:56268 10 6452 1 2025-10-22 00:32:47.964 00:05:00.322 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:32:47.966 00:05:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:36:58.366 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53860 10 6452 1 2025-10-22 00:37:58.758 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49866 10 6452 1 2025-10-22 00:38:59.129 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58528 10 6452 1 2025-10-22 00:39:59.535 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54198 10 6452 1 2025-10-22 00:41:05.101 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:41:04.911 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:41:04.774 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:41:04.951 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:41:04.854 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:40:59.948 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37538 10 6452 1 2025-10-22 00:42:00.361 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43228 10 6452 1 2025-10-22 00:38:47.964 00:05:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:38:47.966 00:05:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:43:00.757 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59578 10 6452 1 2025-10-22 00:44:01.173 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:39636 10 6452 1 2025-10-22 00:45:01.546 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54142 10 6452 1 2025-10-22 00:46:05.145 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:46:04.942 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:46:04.984 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:46:05.062 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:46:05.137 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:46:01.945 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:48254 10 6452 1 2025-10-22 00:47:02.320 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57646 10 6452 1 2025-10-22 00:48:02.724 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47304 10 6452 1 2025-10-22 00:44:47.964 00:05:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:44:47.967 00:05:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:49:03.135 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50004 10 6452 1 2025-10-22 00:50:03.543 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55362 10 6452 1 2025-10-22 00:51:05.179 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:51:05.104 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:51:05.095 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:51:05.221 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:51:05.167 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:51:03.946 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45366 10 6452 1 2025-10-22 00:52:04.354 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39500 10 6452 1 2025-10-22 00:53:04.752 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46022 10 6452 1 2025-10-22 00:54:05.128 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51966 10 6452 1 2025-10-22 00:50:47.969 00:05:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:50:47.965 00:05:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 00:55:05.535 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53254 10 6452 1 2025-10-22 00:56:05.106 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 00:56:05.080 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:56:05.358 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 00:56:05.296 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 00:56:05.441 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 00:56:05.944 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:43990 10 6452 1 2025-10-22 00:57:06.314 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32974 10 6452 1 2025-10-22 00:58:06.719 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51772 10 6452 1 Summary: total flows: 140, total bytes: 420975, total packets: 1023, avg bps: 912, avg pps: 0, avg bpp: 411 Time window: 2025-10-21 23:56:47 - 2025-10-22 00:58:17 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0041s User: 0.0010s Wall: 0.0019s flows/second: 71908.2 Runtime: 0.0020s