Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 17:58:48.187 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:54366 10 6452 1 2025-10-04 17:59:48.546 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40554 10 6452 1 2025-10-04 18:00:48.957 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36518 10 6452 1 2025-10-04 18:01:49.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43322 10 6452 1 2025-10-04 18:02:45.939 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:02:45.653 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:02:45.856 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:02:45.870 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:02:46.000 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:02:49.760 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:49502 11 6504 1 2025-10-04 17:58:39.180 00:06:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-04 17:58:39.178 00:06:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 18:03:50.226 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:59410 10 6452 1 2025-10-04 18:04:50.622 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44256 11 6504 1 2025-10-04 18:05:51.103 00:00:14.355 TCP 1.101.0.1:3000 -> 23.104.0.1:37772 11 6504 1 2025-10-04 18:06:55.510 00:00:10.477 TCP 1.101.0.1:3000 -> 23.104.0.1:52006 10 6452 1 2025-10-04 18:07:45.904 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:07:45.987 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:07:46.145 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:07:46.053 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:07:46.109 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:07:56.023 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59540 10 6452 1 2025-10-04 18:08:56.431 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:57198 12 10369 1 2025-10-04 18:09:56.915 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48824 10 6452 1 2025-10-04 18:05:39.183 00:06:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-04 18:05:39.180 00:06:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 18:10:57.316 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:51604 10 6452 1 2025-10-04 18:11:57.748 00:00:10.560 TCP 1.101.0.1:3000 -> 23.104.0.1:53716 10 6452 1 2025-10-04 18:12:46.116 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:12:46.244 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:12:46.390 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:12:46.399 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:12:46.473 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:12:58.350 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53926 10 6452 1 2025-10-04 18:13:58.754 00:00:10.460 TCP 1.101.0.1:3000 -> 23.104.0.1:49128 12 10375 1 2025-10-04 18:14:59.259 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33134 10 6452 1 2025-10-04 18:15:59.663 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32870 10 6452 1 2025-10-04 18:17:00.099 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60250 10 6452 1 2025-10-04 18:12:39.183 00:06:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 18:12:39.185 00:06:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-04 18:17:45.961 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:17:46.246 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:17:46.152 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:17:46.163 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:17:46.220 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:18:00.508 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51668 10 6452 1 2025-10-04 18:19:00.911 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56040 10 6452 1 2025-10-04 18:20:01.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59024 10 6452 1 2025-10-04 18:21:01.676 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39492 10 6452 1 2025-10-04 18:22:02.039 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60122 10 6452 1 2025-10-04 18:22:46.278 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:22:46.283 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:22:46.274 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:22:46.434 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:22:46.356 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:23:02.446 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56818 10 6452 1 2025-10-04 18:24:02.845 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:47198 10 6452 1 2025-10-04 18:19:39.187 00:06:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-04 18:19:39.185 00:06:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 18:25:03.274 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51662 10 6452 1 2025-10-04 18:26:03.681 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35968 10 6452 1 2025-10-04 18:27:04.117 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:40852 10 6452 1 2025-10-04 18:27:46.575 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:27:46.493 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:27:46.414 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:27:46.424 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:27:46.135 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:28:04.502 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56282 10 6452 1 2025-10-04 18:29:04.913 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39182 10 6452 1 2025-10-04 18:30:05.323 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43636 10 6452 1 2025-10-04 18:31:05.745 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47786 10 6452 1 2025-10-04 18:26:39.188 00:06:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-04 18:26:39.186 00:06:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 18:32:06.150 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45362 10 6452 1 2025-10-04 18:32:46.598 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:32:46.556 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:32:46.558 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:32:46.516 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:32:46.607 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:33:06.547 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:54364 12 10375 1 2025-10-04 18:34:07.030 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36988 10 6452 1 2025-10-04 18:35:07.434 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36044 10 6452 1 2025-10-04 18:36:07.836 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:48236 10 6452 1 2025-10-04 18:37:08.267 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56032 10 6452 1 2025-10-04 18:37:46.804 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:37:46.851 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:37:46.799 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:37:46.722 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:37:47.110 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:38:08.669 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53470 10 6452 1 2025-10-04 18:33:39.189 00:06:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-04 18:33:39.186 00:06:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 18:39:09.098 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59076 10 6452 1 2025-10-04 18:40:09.497 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46798 10 6452 1 2025-10-04 18:41:09.895 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46058 10 6452 1 2025-10-04 18:42:10.302 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43600 10 6452 1 2025-10-04 18:42:46.936 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:42:46.855 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:42:46.755 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:42:46.747 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:42:46.695 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:43:10.703 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43034 10 6452 1 2025-10-04 18:44:11.113 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45014 12 6556 1 2025-10-04 18:45:11.510 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59488 10 6452 1 2025-10-04 18:40:39.188 00:06:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 18:40:39.190 00:06:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-04 18:46:11.874 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42190 10 6452 1 2025-10-04 18:47:12.244 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40558 10 6452 1 2025-10-04 18:47:46.715 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:47:46.723 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:47:46.715 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:47:46.839 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:47:46.797 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:48:12.647 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32840 10 6452 1 2025-10-04 18:49:13.008 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53192 10 6452 1 2025-10-04 18:50:13.411 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59110 10 6452 1 2025-10-04 18:51:13.782 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49942 10 6452 1 2025-10-04 18:52:14.190 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50506 10 6452 1 2025-10-04 18:47:39.189 00:06:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-04 18:47:39.191 00:06:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-04 18:52:46.808 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:52:46.645 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:52:47.055 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:52:46.975 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:52:47.139 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:53:14.593 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41610 10 6452 1 2025-10-04 18:54:15.005 00:00:10.824 TCP 1.101.0.1:3000 -> 23.104.0.1:46900 10 6452 1 2025-10-04 18:55:15.866 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39910 10 6452 1 2025-10-04 18:56:16.283 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45454 10 6452 1 2025-10-04 18:57:16.702 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:60312 10 6452 1 2025-10-04 18:57:47.254 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-04 18:57:47.337 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:57:47.351 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-04 18:57:47.273 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-04 18:57:47.434 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-04 18:58:17.135 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:37448 12 10369 1 Summary: total flows: 136, total bytes: 431956, total packets: 1017, avg bps: 963, avg pps: 0, avg bpp: 424 Time window: 2025-10-04 17:58:39 - 2025-10-04 18:58:27 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0036s User: 0.0012s Wall: 0.0024s flows/second: 57770.4 Runtime: 0.0024s