Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 11:58:50.184 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43422 10 6452 1 2025-10-12 11:59:50.588 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36668 10 6452 1 2025-10-12 12:00:50.992 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38702 10 6452 1 2025-10-12 12:01:29.559 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:01:29.674 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:01:29.670 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:01:29.664 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:01:29.756 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 12:01:51.399 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55184 10 6452 1 2025-10-12 11:57:43.064 00:06:00.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 11:57:43.062 00:06:00.445 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 12:02:51.805 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47484 10 6452 1 2025-10-12 12:03:52.208 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54184 10 6452 1 2025-10-12 12:04:52.619 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56582 10 6452 1 2025-10-12 12:05:53.031 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:44208 12 10375 1 2025-10-12 12:06:29.646 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:06:29.823 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:06:29.763 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:06:29.558 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:06:29.640 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 12:06:53.504 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41016 10 6452 1 2025-10-12 12:07:53.906 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56316 10 6452 1 2025-10-12 12:08:54.312 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56018 10 6452 1 2025-10-12 12:04:43.065 00:06:00.440 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 12:04:43.063 00:06:00.446 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 12:09:54.715 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52106 10 6452 1 2025-10-12 12:10:55.119 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47930 10 6452 1 2025-10-12 12:11:29.939 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 12:11:29.788 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:11:29.684 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:11:29.806 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:11:29.856 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:11:55.531 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41488 10 6452 1 2025-10-12 12:12:55.949 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53166 10 6452 1 2025-10-12 12:13:56.368 00:00:10.849 TCP 1.101.0.1:3000 -> 23.104.0.1:36476 10 6452 1 2025-10-12 12:14:57.255 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53244 10 6452 1 2025-10-12 12:15:57.614 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:32892 12 10375 1 2025-10-12 12:16:29.652 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:16:29.726 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:16:29.817 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:16:29.725 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:16:29.807 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 12:11:43.068 00:06:00.438 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 12:11:43.065 00:06:00.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 12:16:58.107 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:49510 10 6452 1 2025-10-12 12:17:58.581 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43412 10 6452 1 2025-10-12 12:18:58.985 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:37010 10 6452 1 2025-10-12 12:19:59.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43034 10 6452 1 2025-10-12 12:20:59.764 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:48148 10 6452 1 2025-10-12 12:21:30.376 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:21:30.227 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:21:30.185 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:21:30.228 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:21:30.311 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 12:22:00.194 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46252 10 6452 1 2025-10-12 12:23:00.605 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55292 10 6452 1 2025-10-12 12:18:43.069 00:06:00.438 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 12:18:43.067 00:06:00.443 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 12:24:01.008 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41874 10 6452 1 2025-10-12 12:25:01.415 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41756 10 6452 1 2025-10-12 12:26:01.820 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58872 10 6452 1 2025-10-12 12:26:29.896 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:26:30.359 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 12:26:30.225 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:26:30.315 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:26:30.277 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:27:02.223 00:00:10.461 TCP 1.101.0.1:3000 -> 23.104.0.1:45904 10 6452 1 2025-10-12 12:28:02.723 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44578 10 6452 1 2025-10-12 12:29:03.111 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38214 10 6452 1 2025-10-12 12:30:03.481 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51492 10 6452 1 2025-10-12 12:25:43.073 00:06:00.440 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 12:25:43.075 00:06:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 12:31:03.848 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:40738 12 10369 1 2025-10-12 12:31:30.237 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:31:30.276 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:31:30.320 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:31:30.319 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:31:30.404 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 12:32:04.353 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42990 10 6452 1 2025-10-12 12:33:04.758 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47296 10 6452 1 2025-10-12 12:34:05.120 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55024 10 6452 1 2025-10-12 12:35:05.493 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53582 10 6452 1 2025-10-12 12:36:05.899 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36550 12 6556 1 2025-10-12 12:36:30.701 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:36:30.579 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:36:30.336 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:36:30.489 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:36:30.419 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 12:37:06.308 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57790 10 6452 1 2025-10-12 12:32:43.076 00:06:00.435 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 12:32:43.073 00:06:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 12:38:06.713 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36434 10 6452 1 2025-10-12 12:39:07.111 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49134 10 6452 1 2025-10-12 12:40:07.512 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:52620 10 6452 1 2025-10-12 12:41:07.886 00:00:10.638 TCP 1.101.0.1:3000 -> 23.104.0.1:54042 12 6556 1 2025-10-12 12:41:30.472 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:41:30.292 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:41:30.532 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:41:30.915 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:41:30.998 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 12:42:08.555 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37532 10 6452 1 2025-10-12 12:43:08.956 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60568 10 6452 1 2025-10-12 12:44:09.374 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44758 10 6452 1 2025-10-12 12:39:43.078 00:06:00.436 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 12:39:43.076 00:06:00.441 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 12:45:09.778 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55634 10 6452 1 2025-10-12 12:46:10.189 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51342 10 6452 1 2025-10-12 12:46:30.531 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 12:46:30.649 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:46:30.652 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:46:30.397 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:46:30.450 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:47:10.590 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54176 10 6452 1 2025-10-12 12:48:10.993 00:00:10.885 TCP 1.101.0.1:3000 -> 23.104.0.1:51108 10 6452 1 2025-10-12 12:49:11.916 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55440 10 6452 1 2025-10-12 12:50:12.317 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:40074 10 6452 1 2025-10-12 12:51:12.694 00:00:10.450 TCP 1.101.0.1:3000 -> 23.104.0.1:55234 12 10375 1 2025-10-12 12:51:30.774 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:51:30.832 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:51:30.535 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:51:30.611 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:51:30.694 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 12:46:43.079 00:06:00.437 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 12:46:43.076 00:06:00.442 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 12:52:13.186 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33816 10 6452 1 2025-10-12 12:53:13.601 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53112 10 6452 1 2025-10-12 12:54:14.008 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49816 10 6452 1 2025-10-12 12:55:14.415 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54070 10 6452 1 2025-10-12 12:56:14.819 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:58972 10 6452 1 2025-10-12 12:56:31.773 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:56:31.617 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 12:56:31.769 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 12:56:31.772 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 12:56:31.700 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 12:57:15.192 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35262 10 6452 1 2025-10-12 12:58:15.597 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53328 10 6452 1 2025-10-12 12:53:43.081 00:06:00.438 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 12:53:43.078 00:06:00.443 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 138, total bytes: 433632, total packets: 1044, avg bps: 932, avg pps: 0, avg bpp: 415 Time window: 2025-10-12 11:57:43 - 2025-10-12 12:59:43 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0045s User: 0.0009s Wall: 0.0019s flows/second: 71168.6 Runtime: 0.0020s