Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 14:59:13.237 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38288 10 6452 1 2025-10-05 15:00:13.643 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57134 10 6452 1 2025-10-05 15:01:14.052 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54886 10 6452 1 2025-10-05 15:02:14.458 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48612 10 6452 1 2025-10-05 15:03:11.594 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 15:03:11.196 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:03:11.598 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:03:11.197 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 15:03:11.679 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 15:03:14.854 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:45958 10 6452 1 2025-10-05 14:58:39.549 00:06:00.407 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-05 14:58:39.546 00:06:00.412 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-05 15:04:15.280 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:51570 12 10375 1 2025-10-05 15:05:15.755 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43588 10 6452 1 2025-10-05 15:06:16.155 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37662 10 6452 1 2025-10-05 15:07:16.566 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52782 10 6452 1 2025-10-05 15:08:11.262 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 15:08:11.282 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 15:08:11.194 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:08:11.179 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:08:11.238 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 15:08:16.986 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56476 10 6452 1 2025-10-05 15:09:17.397 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39126 10 6452 1 2025-10-05 15:10:17.759 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:40332 10 6452 1 2025-10-05 15:05:39.555 00:06:00.402 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-05 15:05:39.553 00:06:00.407 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-05 15:11:18.189 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53136 10 6452 1 2025-10-05 15:12:18.594 00:00:10.665 TCP 1.101.0.1:3000 -> 23.104.0.1:39206 10 6452 1 2025-10-05 15:13:11.476 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 15:13:11.444 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 15:13:11.326 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:13:11.391 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:13:11.312 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 15:13:19.302 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54956 10 6452 1 2025-10-05 15:14:19.705 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57654 10 6452 1 2025-10-05 15:15:20.112 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48118 10 6452 1 2025-10-05 15:16:20.520 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39086 10 6452 1 2025-10-05 15:17:20.922 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:43604 10 6452 1 2025-10-05 15:12:39.557 00:06:00.401 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-05 15:12:39.554 00:06:00.407 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-05 15:18:11.615 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 15:18:11.346 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:18:11.533 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:18:11.484 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 15:18:11.405 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 15:18:21.343 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34740 10 6452 1 2025-10-05 15:19:21.744 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50098 10 6452 1 2025-10-05 15:20:22.148 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43748 10 6452 1 2025-10-05 15:21:22.554 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39284 10 6452 1 2025-10-05 15:22:22.955 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55040 10 6452 1 2025-10-05 15:23:12.173 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 15:23:11.695 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 15:23:11.725 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:23:12.090 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:23:11.913 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 15:23:23.362 00:00:10.628 TCP 1.101.0.1:3000 -> 23.104.0.1:36328 10 6452 1 2025-10-05 15:24:24.022 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41018 10 6452 1 2025-10-05 15:19:39.556 00:06:00.407 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-05 15:19:39.559 00:06:00.401 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-05 15:25:24.418 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34606 10 6452 1 2025-10-05 15:26:24.781 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39880 10 6452 1 2025-10-05 15:27:25.190 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45394 10 6452 1 2025-10-05 15:28:11.785 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 15:28:11.616 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 15:28:11.642 00:00:00.037 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:28:11.702 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:28:11.620 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 15:28:25.595 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48422 10 6452 1 2025-10-05 15:29:25.993 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59860 10 6452 1 2025-10-05 15:30:26.402 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49834 10 6452 1 2025-10-05 15:31:26.805 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42450 10 6452 1 2025-10-05 15:26:39.559 00:06:00.402 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-05 15:26:39.559 00:06:00.407 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-05 15:32:27.211 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43140 10 6452 1 2025-10-05 15:33:11.790 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 15:33:11.663 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:33:11.924 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:33:11.730 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 15:33:12.008 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 15:33:27.615 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40076 10 6452 1 2025-10-05 15:34:28.022 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47456 10 6452 1 2025-10-05 15:35:28.425 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33452 10 6452 1 2025-10-05 15:36:28.785 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:39792 10 6452 1 2025-10-05 15:37:29.167 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37412 10 6452 1 2025-10-05 15:38:11.941 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:38:11.943 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 15:38:11.945 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 15:38:11.705 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:38:12.024 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 15:33:39.565 00:06:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-05 15:38:29.575 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:58768 10 6452 1 2025-10-05 15:33:39.561 00:06:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-05 15:39:29.994 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:41832 10 6452 1 2025-10-05 15:40:30.376 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48154 10 6452 1 2025-10-05 15:41:30.782 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40716 10 6452 1 2025-10-05 15:42:31.192 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43236 10 6452 1 2025-10-05 15:43:12.104 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 15:43:12.070 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:43:12.135 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:43:11.963 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 15:43:12.216 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 15:43:31.595 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33878 10 6452 1 2025-10-05 15:44:32.005 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:35366 11 6504 1 2025-10-05 15:40:39.567 00:06:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-05 15:40:39.564 00:06:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-05 15:45:32.459 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34112 10 6452 1 2025-10-05 15:46:32.868 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43694 10 6452 1 2025-10-05 15:47:33.280 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39258 10 6452 1 2025-10-05 15:48:12.291 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 15:48:12.202 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 15:48:12.045 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:48:12.208 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:48:12.209 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 15:48:33.640 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52842 10 6452 1 2025-10-05 15:49:34.040 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52164 10 6452 1 2025-10-05 15:50:34.444 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58910 10 6452 1 2025-10-05 15:51:34.844 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:57426 10 6452 1 2025-10-05 15:47:39.566 00:06:00.402 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-05 15:47:39.569 00:06:00.397 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-05 15:52:35.224 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44056 10 6452 1 2025-10-05 15:53:12.067 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 15:53:12.086 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:53:12.204 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:53:12.205 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 15:53:12.286 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 15:53:35.628 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47906 10 6452 1 2025-10-05 15:54:36.032 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58244 10 6452 1 2025-10-05 15:55:36.438 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37848 10 6452 1 2025-10-05 15:56:36.847 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:53732 10 6452 1 2025-10-05 15:57:37.270 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50006 10 6452 1 2025-10-05 15:58:12.353 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-05 15:58:11.981 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:58:12.355 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-05 15:58:12.113 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-05 15:58:12.437 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-05 15:58:37.634 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39454 10 6452 1 Summary: total flows: 136, total bytes: 419991, total packets: 1007, avg bps: 931, avg pps: 0, avg bpp: 417 Time window: 2025-10-05 14:58:39 - 2025-10-05 15:58:47 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0012s User: 0.0035s Wall: 0.0019s flows/second: 72804.8 Runtime: 0.0019s