Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 15:59:31.118 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47832 10 6452 1 2025-10-12 15:55:43.162 00:06:00.471 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 16:00:31.520 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56948 10 6452 1 2025-10-12 15:55:43.163 00:06:00.467 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 16:01:34.507 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:01:34.446 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:01:34.391 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:01:34.556 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:01:34.639 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 16:01:31.931 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34964 10 6452 1 2025-10-12 16:02:32.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43762 10 6452 1 2025-10-12 16:03:32.759 00:00:10.484 TCP 1.101.0.1:3000 -> 23.104.0.1:51978 10 6452 1 2025-10-12 16:04:33.280 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60454 10 6452 1 2025-10-12 16:05:33.683 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:50848 10 6452 1 2025-10-12 16:06:34.688 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 16:06:34.458 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:06:34.608 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:06:34.554 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:06:34.604 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:06:34.055 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43304 10 6452 1 2025-10-12 16:02:43.162 00:06:00.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 16:02:43.165 00:06:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 16:07:34.463 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60578 10 6452 1 2025-10-12 16:08:34.863 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44758 10 6452 1 2025-10-12 16:09:35.278 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54056 10 6452 1 2025-10-12 16:10:35.687 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39980 10 6452 1 2025-10-12 16:11:34.733 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 16:11:34.849 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:11:34.923 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:11:34.774 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:11:34.651 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:11:36.109 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47690 10 6452 1 2025-10-12 16:12:36.516 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:35678 10 6452 1 2025-10-12 16:13:36.938 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39022 10 6452 1 2025-10-12 16:09:43.164 00:06:00.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 16:09:43.166 00:06:00.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 16:14:37.354 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:41230 10 6452 1 2025-10-12 16:15:37.749 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50092 10 6452 1 2025-10-12 16:16:34.820 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:16:35.216 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:16:35.112 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:16:35.154 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:16:35.239 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 16:16:38.152 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51822 10 6452 1 2025-10-12 16:17:38.561 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43374 10 6452 1 2025-10-12 16:18:38.961 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58034 10 6452 1 2025-10-12 16:19:39.375 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55020 10 6452 1 2025-10-12 16:20:39.786 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59310 10 6452 1 2025-10-12 16:21:34.807 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:21:34.674 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:21:34.879 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:21:34.823 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:21:34.960 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 16:16:43.163 00:06:00.481 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 16:16:43.166 00:06:00.475 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 16:21:40.197 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46590 10 6452 1 2025-10-12 16:22:40.562 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47116 11 6492 1 2025-10-12 16:23:40.962 00:00:10.980 TCP 1.101.0.1:3000 -> 23.104.0.1:46540 10 6452 1 2025-10-12 16:24:41.984 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50024 10 6452 1 2025-10-12 16:25:42.388 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44610 10 6452 1 2025-10-12 16:26:34.826 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:26:34.847 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:26:35.117 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:26:34.984 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:26:35.068 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 16:26:42.792 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41254 10 6452 1 2025-10-12 16:27:43.206 00:00:11.055 TCP 1.101.0.1:3000 -> 23.104.0.1:40094 10 6452 1 2025-10-12 16:23:43.165 00:06:00.479 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 16:23:43.167 00:06:00.474 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 16:28:44.306 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39318 10 6452 1 2025-10-12 16:29:44.707 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48660 10 6452 1 2025-10-12 16:30:45.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43740 10 6452 1 2025-10-12 16:31:35.279 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 16:31:35.066 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:31:34.978 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:31:34.983 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:31:35.195 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:31:45.518 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34980 10 6452 1 2025-10-12 16:32:45.918 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48322 10 6452 1 2025-10-12 16:33:46.330 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41314 10 6452 1 2025-10-12 16:34:46.732 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53114 10 6452 1 2025-10-12 16:30:43.169 00:06:00.476 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 16:30:43.168 00:06:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 16:35:47.139 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39072 10 6452 1 2025-10-12 16:36:35.497 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 16:36:35.316 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:36:35.234 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:36:35.148 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:36:35.413 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:36:47.550 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47730 10 6452 1 2025-10-12 16:37:47.956 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50432 10 6452 1 2025-10-12 16:38:48.366 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44960 10 6452 1 2025-10-12 16:39:48.768 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:45590 10 6452 1 2025-10-12 16:40:49.141 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39278 12 6556 1 2025-10-12 16:41:35.328 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 16:41:35.320 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:41:35.336 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:41:35.379 00:00:00.013 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:41:35.245 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:41:49.541 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46472 10 6452 1 2025-10-12 16:37:43.170 00:06:00.476 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 16:37:43.168 00:06:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 16:42:49.903 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41820 12 6556 1 2025-10-12 16:43:50.307 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60966 10 6452 1 2025-10-12 16:44:50.707 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40058 10 6452 1 2025-10-12 16:45:51.102 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56978 10 6452 1 2025-10-12 16:46:35.378 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:46:35.270 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:46:35.333 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:46:35.271 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:46:35.353 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 16:46:51.501 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60096 10 6452 1 2025-10-12 16:47:51.910 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39394 10 6452 1 2025-10-12 16:48:52.321 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45260 10 6452 1 2025-10-12 16:44:43.173 00:06:00.477 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 16:44:43.170 00:06:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 16:49:52.733 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50408 10 6452 1 2025-10-12 16:50:53.118 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51730 10 6452 1 2025-10-12 16:51:35.292 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:51:35.367 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:51:35.523 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:51:35.450 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:51:35.450 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 16:51:53.519 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39494 10 6452 1 2025-10-12 16:52:53.922 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45534 10 6452 1 2025-10-12 16:53:54.327 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42042 10 6452 1 2025-10-12 16:54:54.733 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52454 10 6452 1 2025-10-12 16:55:55.110 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52088 10 6452 1 2025-10-12 16:56:35.770 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-12 16:56:35.630 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-12 16:56:35.519 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:56:35.687 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-12 16:56:35.779 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-12 16:51:43.175 00:06:00.476 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-12 16:51:43.173 00:06:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-12 16:56:55.511 00:00:11.123 TCP 1.101.0.1:3000 -> 23.104.0.1:60278 10 6452 1 2025-10-12 16:57:56.670 00:00:10.533 TCP 1.101.0.1:3000 -> 23.104.0.1:40856 10 6452 1 Summary: total flows: 137, total bytes: 411534, total packets: 1027, avg bps: 879, avg pps: 0, avg bpp: 400 Time window: 2025-10-12 15:55:43 - 2025-10-12 16:58:07 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0049s User: 0.0010s Wall: 0.0029s flows/second: 47634.9 Runtime: 0.0029s