Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 19:59:26.865 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:55012 10 6452 1 2025-10-22 20:00:27.260 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59676 10 6452 1 2025-10-22 20:01:28.254 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:01:28.111 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:01:28.051 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:01:28.171 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:01:28.107 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:01:27.627 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59196 10 6452 1 2025-10-22 19:56:48.372 00:06:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:02:27.985 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41530 10 6452 1 2025-10-22 19:57:48.375 00:06:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:03:28.353 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49690 10 6452 1 2025-10-22 20:04:28.755 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:60978 10 6452 1 2025-10-22 20:05:29.117 00:00:10.891 TCP 1.101.0.1:3000 -> 23.104.0.1:58000 10 6452 1 2025-10-22 20:06:28.459 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:06:28.408 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:06:28.321 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:06:28.375 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:06:28.239 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:06:30.057 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54172 10 6452 1 2025-10-22 20:07:30.466 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:54526 10 6452 1 2025-10-22 20:08:30.849 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:54796 10 6452 1 2025-10-22 20:03:48.375 00:06:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:09:31.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42280 10 6452 1 2025-10-22 20:04:48.377 00:06:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:10:31.694 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48714 10 6452 1 2025-10-22 20:11:28.523 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:11:28.099 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:11:28.312 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:11:28.440 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:11:28.525 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:11:32.112 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38704 10 6452 1 2025-10-22 20:12:32.513 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50136 10 6452 1 2025-10-22 20:13:32.921 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51620 10 6452 1 2025-10-22 20:14:33.328 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48690 10 6452 1 2025-10-22 20:15:33.738 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53544 10 6452 1 2025-10-22 20:10:48.378 00:06:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:16:28.581 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:16:28.613 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:16:28.450 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:16:28.499 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:16:28.574 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:16:34.145 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40942 10 6452 1 2025-10-22 20:11:48.380 00:06:00.304 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:17:34.547 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58214 10 6452 1 2025-10-22 20:18:34.948 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60806 10 6452 1 2025-10-22 20:19:35.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50608 10 6452 1 2025-10-22 20:20:35.765 00:00:10.468 TCP 1.101.0.1:3000 -> 23.104.0.1:34642 10 6452 1 2025-10-22 20:21:28.544 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:21:28.532 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:21:28.410 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:21:28.462 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:21:28.576 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:21:36.281 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46904 10 6452 1 2025-10-22 20:17:48.378 00:06:00.311 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:22:36.685 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48044 10 6452 1 2025-10-22 20:23:37.118 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47864 10 6452 1 2025-10-22 20:18:48.381 00:06:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:24:37.523 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51318 10 6452 1 2025-10-22 20:25:37.932 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53860 10 6452 1 2025-10-22 20:26:28.627 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:26:28.292 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:26:28.607 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:26:28.608 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:26:28.690 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:26:38.352 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49708 10 6452 1 2025-10-22 20:27:38.766 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:32842 10 6452 1 2025-10-22 20:28:39.199 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40782 10 6452 1 2025-10-22 20:29:39.608 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45798 10 6452 1 2025-10-22 20:24:48.381 00:06:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:30:39.970 00:00:10.812 TCP 1.101.0.1:3000 -> 23.104.0.1:41294 10 6452 1 2025-10-22 20:25:48.382 00:06:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:31:28.841 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:31:28.636 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:31:28.785 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:31:28.784 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:31:28.868 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:31:40.820 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43500 10 6452 1 2025-10-22 20:32:41.222 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48580 10 6452 1 2025-10-22 20:33:41.627 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42192 10 6452 1 2025-10-22 20:34:41.997 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42200 10 6452 1 2025-10-22 20:35:42.399 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44742 10 6452 1 2025-10-22 20:36:28.970 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:36:29.218 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:36:29.114 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:36:28.887 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:36:29.084 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:31:48.385 00:06:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:36:42.804 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59642 10 6452 1 2025-10-22 20:32:48.388 00:06:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:37:43.206 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39704 10 6452 1 2025-10-22 20:38:43.572 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60670 10 6452 1 2025-10-22 20:39:43.942 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46024 10 6452 1 2025-10-22 20:40:44.357 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40450 10 6452 1 2025-10-22 20:41:28.941 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:41:28.886 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:41:29.053 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:41:28.929 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:41:29.135 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:41:44.776 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50344 10 6452 1 2025-10-22 20:42:45.189 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34414 10 6452 1 2025-10-22 20:38:48.390 00:06:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:43:45.593 00:00:10.481 TCP 1.101.0.1:3000 -> 23.104.0.1:47198 10 6452 1 2025-10-22 20:39:48.392 00:06:00.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:44:46.112 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36572 10 6452 1 2025-10-22 20:45:46.511 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59876 10 6452 1 2025-10-22 20:46:28.918 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:46:28.913 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:46:29.005 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:46:29.035 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:46:29.002 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:46:46.919 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44010 10 6452 1 2025-10-22 20:47:47.323 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44774 10 6452 1 2025-10-22 20:48:47.732 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:59102 10 6452 1 2025-10-22 20:49:48.149 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36542 10 6452 1 2025-10-22 20:45:48.391 00:06:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:50:48.547 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50742 10 6452 1 2025-10-22 20:51:29.619 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:51:29.680 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:51:29.677 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:51:29.621 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:51:29.759 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:46:48.393 00:06:00.309 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-22 20:51:48.957 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58538 10 6452 1 2025-10-22 20:52:49.358 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42552 10 6452 1 2025-10-22 20:53:49.761 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:59312 10 6452 1 2025-10-22 20:54:50.184 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54064 10 6452 1 2025-10-22 20:55:50.544 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58644 10 6452 1 2025-10-22 20:56:29.203 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:56:29.331 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-22 20:56:28.968 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-22 20:56:29.327 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-22 20:56:29.285 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-22 20:56:50.907 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46604 10 6452 1 2025-10-22 20:52:48.393 00:06:00.316 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-22 20:57:51.307 00:00:11.093 TCP 1.101.0.1:3000 -> 23.104.0.1:59112 10 6452 1 2025-10-22 20:53:48.394 00:06:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 137, total bytes: 411286, total packets: 1022, avg bps: 870, avg pps: 0, avg bpp: 402 Time window: 2025-10-22 19:56:48 - 2025-10-22 20:59:48 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0048s User: 0.0000s Wall: 0.0014s flows/second: 95801.9 Runtime: 0.0014s