Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 00:59:07.117 00:00:11.451 TCP 1.101.0.1:3000 -> 23.104.0.1:57778 10 6452 1 2025-10-22 01:00:08.604 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56856 10 6452 1 2025-10-22 00:56:47.974 00:05:00.315 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 00:56:47.971 00:05:00.321 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:01:05.271 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:01:05.301 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:01:05.317 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:01:05.188 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:01:05.296 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:01:09.003 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39214 10 6452 1 2025-10-22 01:02:09.406 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54852 10 6452 1 2025-10-22 01:03:09.813 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53258 10 6452 1 2025-10-22 01:04:10.212 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57428 10 6452 1 2025-10-22 01:05:10.624 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53658 10 6452 1 2025-10-22 01:06:05.354 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:06:05.650 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:06:05.560 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:06:05.272 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:06:05.520 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:06:11.034 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36456 10 6452 1 2025-10-22 01:02:47.971 00:05:00.322 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:02:47.974 00:05:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:07:11.435 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:36678 11 6504 1 2025-10-22 01:08:11.890 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:40520 10 6452 1 2025-10-22 01:09:12.311 00:00:11.093 TCP 1.101.0.1:3000 -> 23.104.0.1:45040 10 6452 1 2025-10-22 01:10:13.444 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36026 10 6452 1 2025-10-22 01:11:05.670 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:11:05.538 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:11:05.327 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:11:05.586 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:11:05.497 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:11:13.843 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:50846 10 6452 1 2025-10-22 01:12:14.270 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38628 10 6452 1 2025-10-22 01:08:47.973 00:05:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:08:47.977 00:05:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:13:14.632 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34988 10 6452 1 2025-10-22 01:14:15.035 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39350 10 6452 1 2025-10-22 01:15:15.438 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56998 10 6452 1 2025-10-22 01:16:05.725 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:16:05.649 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:16:05.520 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:16:05.643 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:16:05.648 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:16:15.841 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53780 10 6452 1 2025-10-22 01:17:16.256 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34308 10 6452 1 2025-10-22 01:18:16.657 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60720 10 6452 1 2025-10-22 01:14:47.973 00:05:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:14:47.975 00:05:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:19:17.061 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36608 10 6452 1 2025-10-22 01:20:17.469 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50212 10 6452 1 2025-10-22 01:21:05.759 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:21:05.826 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:21:05.746 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:21:05.675 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:21:05.453 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:21:17.882 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52790 10 6452 1 2025-10-22 01:22:18.286 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33008 10 6452 1 2025-10-22 01:23:18.696 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50876 10 6452 1 2025-10-22 01:24:19.113 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38288 10 6452 1 2025-10-22 01:20:47.976 00:05:00.322 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:20:47.974 00:05:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:25:19.516 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41346 10 6452 1 2025-10-22 01:26:05.937 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:26:05.909 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:26:05.816 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:26:05.854 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:26:05.782 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:26:19.915 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60160 10 6452 1 2025-10-22 01:27:20.314 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54096 10 6452 1 2025-10-22 01:28:20.714 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54466 10 6452 1 2025-10-22 01:29:21.115 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55888 10 6452 1 2025-10-22 01:30:21.521 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49260 10 6452 1 2025-10-22 01:26:47.974 00:05:00.328 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:26:47.976 00:05:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:31:05.966 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:31:06.153 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:31:06.152 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:31:06.070 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:31:06.063 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:31:21.920 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47256 10 6452 1 2025-10-22 01:32:22.281 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50858 10 6452 1 2025-10-22 01:33:22.683 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37080 10 6452 1 2025-10-22 01:34:23.110 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41434 10 6452 1 2025-10-22 01:35:23.510 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36726 10 6452 1 2025-10-22 01:36:05.913 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:36:06.069 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:36:05.988 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:36:05.987 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:36:06.071 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:36:23.869 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42162 10 6452 1 2025-10-22 01:32:47.978 00:05:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:32:47.983 00:05:00.322 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:37:24.279 00:00:10.610 TCP 1.101.0.1:3000 -> 23.104.0.1:45138 10 6452 1 2025-10-22 01:38:24.928 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:46354 10 6452 1 2025-10-22 01:39:25.318 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55004 10 6452 1 2025-10-22 01:40:25.688 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45434 10 6452 1 2025-10-22 01:41:06.129 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:41:06.042 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:41:06.074 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:41:06.047 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:41:06.173 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:41:26.106 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58950 10 6452 1 2025-10-22 01:42:26.513 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60694 10 6452 1 2025-10-22 01:38:47.982 00:05:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:38:47.986 00:05:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:43:26.915 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40808 10 6452 1 2025-10-22 01:44:27.334 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35616 10 6452 1 2025-10-22 01:45:27.745 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52856 10 6452 1 2025-10-22 01:46:06.053 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:46:06.259 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:46:06.284 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:46:06.125 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:46:06.136 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:46:28.148 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40906 10 6452 1 2025-10-22 01:47:28.555 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46688 10 6452 1 2025-10-22 01:48:28.921 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40878 10 6452 1 2025-10-22 01:44:47.984 00:05:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:44:47.985 00:05:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:49:29.338 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41460 10 6452 1 2025-10-22 01:50:29.700 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59762 10 6452 1 2025-10-22 01:51:06.371 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:51:06.133 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:51:06.266 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:51:06.264 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:51:06.350 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:51:30.117 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54096 10 6452 1 2025-10-22 01:52:30.482 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36332 10 6452 1 2025-10-22 01:53:30.886 00:00:10.782 TCP 1.101.0.1:3000 -> 23.104.0.1:42828 10 6452 1 2025-10-22 01:54:31.704 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59068 10 6452 1 2025-10-22 01:50:47.989 00:05:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-22 01:50:47.987 00:05:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-22 01:55:32.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33644 10 6452 1 2025-10-22 01:56:06.474 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 01:56:06.259 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:56:06.392 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 01:56:06.319 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 01:56:06.324 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 01:56:32.517 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48076 10 6452 1 2025-10-22 01:57:32.916 00:00:10.813 TCP 1.101.0.1:3000 -> 23.104.0.1:56044 10 6452 1 2025-10-22 01:58:33.771 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55600 10 6452 1 Summary: total flows: 140, total bytes: 417052, total packets: 1021, avg bps: 897, avg pps: 0, avg bpp: 408 Time window: 2025-10-22 00:56:47 - 2025-10-22 01:58:44 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0042s User: 0.0008s Wall: 0.0021s flows/second: 67339.7 Runtime: 0.0021s