Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 11:59:16.663 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41910 10 6452 1 2025-10-13 12:00:17.029 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36036 10 6452 1 2025-10-13 12:01:17.438 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:59934 12 10375 1 2025-10-13 12:01:58.913 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 12:01:58.467 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 12:01:58.698 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:01:58.831 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:01:58.782 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 12:02:17.919 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54198 10 6452 1 2025-10-13 11:58:43.578 00:05:00.490 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 11:58:43.575 00:05:00.495 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 12:03:18.322 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60048 10 6452 1 2025-10-13 12:04:18.726 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44988 10 6452 1 2025-10-13 12:05:19.138 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36838 10 6452 1 2025-10-13 12:06:19.508 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40160 10 6452 1 2025-10-13 12:06:58.620 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 12:06:58.646 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:06:58.616 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:06:58.616 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 12:06:58.699 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 12:07:19.911 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52100 10 6452 1 2025-10-13 12:08:20.326 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58382 10 6452 1 2025-10-13 12:04:43.582 00:05:00.492 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 12:04:43.584 00:05:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 12:09:20.728 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:37852 10 6452 1 2025-10-13 12:10:21.120 00:00:10.431 TCP 1.101.0.1:3000 -> 23.104.0.1:39066 11 6504 1 2025-10-13 12:11:21.590 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51508 10 6452 1 2025-10-13 12:11:58.901 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 12:11:58.751 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 12:11:58.584 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:11:58.817 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:11:58.746 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 12:12:21.952 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:46828 10 6452 1 2025-10-13 12:13:22.332 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:57132 10 6452 1 2025-10-13 12:14:22.773 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54782 10 6452 1 2025-10-13 12:10:43.583 00:05:00.491 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 12:10:43.585 00:05:00.486 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 12:15:23.188 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46242 10 6452 1 2025-10-13 12:16:23.590 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41988 10 6452 1 2025-10-13 12:16:58.905 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 12:16:58.950 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 12:16:58.907 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:16:58.822 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:16:58.956 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 12:17:23.998 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53580 10 6452 1 2025-10-13 12:18:24.412 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59084 12 6556 1 2025-10-13 12:19:24.819 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55340 10 6452 1 2025-10-13 12:20:25.217 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51354 10 6452 1 2025-10-13 12:16:43.584 00:05:00.492 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 12:16:43.586 00:05:00.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 12:21:25.621 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:50174 12 10375 1 2025-10-13 12:21:59.179 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 12:21:58.996 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 12:21:58.806 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:21:59.096 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:21:58.678 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 12:22:26.114 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39520 10 6452 1 2025-10-13 12:23:26.530 00:00:11.198 TCP 1.101.0.1:3000 -> 23.104.0.1:52790 10 6452 1 2025-10-13 12:24:27.775 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37948 10 6452 1 2025-10-13 12:25:28.185 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45652 10 6452 1 2025-10-13 12:26:28.585 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45448 10 6452 1 2025-10-13 12:22:43.586 00:05:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 12:22:43.584 00:05:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 12:26:59.297 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 12:26:59.197 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 12:26:59.179 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:26:59.215 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:26:59.152 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 12:27:29.001 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52444 10 6452 1 2025-10-13 12:28:29.408 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45348 10 6452 1 2025-10-13 12:29:29.773 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42486 10 6452 1 2025-10-13 12:30:30.181 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:46054 10 6452 1 2025-10-13 12:31:30.606 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42602 10 6452 1 2025-10-13 12:31:59.211 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 12:31:59.148 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 12:31:59.222 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:31:59.129 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:31:59.261 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 12:28:43.589 00:05:00.490 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 12:32:31.005 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42974 10 6452 1 2025-10-13 12:28:43.592 00:05:00.485 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 12:33:31.410 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35972 10 6452 1 2025-10-13 12:34:31.815 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58416 10 6452 1 2025-10-13 12:35:32.183 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34228 10 6452 1 2025-10-13 12:36:32.586 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60460 10 6452 1 2025-10-13 12:36:59.316 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 12:36:59.241 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:36:59.242 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:36:59.359 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 12:36:59.326 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 12:37:32.949 00:00:10.601 TCP 1.101.0.1:3000 -> 23.104.0.1:46006 10 6452 1 2025-10-13 12:38:33.586 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54780 10 6452 1 2025-10-13 12:34:43.593 00:05:00.485 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 12:34:43.591 00:05:00.490 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 12:39:33.951 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:47898 10 6452 1 2025-10-13 12:40:34.318 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55460 10 6452 1 2025-10-13 12:41:34.726 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39316 10 6452 1 2025-10-13 12:41:59.413 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 12:41:59.265 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:41:59.478 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:41:59.532 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 12:41:59.560 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 12:42:35.101 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:38488 11 6492 1 2025-10-13 12:43:35.503 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48786 10 6452 1 2025-10-13 12:40:43.595 00:05:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 12:40:43.592 00:05:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 12:44:35.907 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:40344 10 6452 1 2025-10-13 12:45:36.287 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49242 10 6452 1 2025-10-13 12:46:36.646 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48598 10 6452 1 2025-10-13 12:46:59.698 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 12:46:59.063 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:46:59.380 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:46:59.698 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 12:46:59.463 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 12:47:37.070 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36732 10 6452 1 2025-10-13 12:48:37.433 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60738 10 6452 1 2025-10-13 12:49:37.839 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:47892 10 6452 1 2025-10-13 12:46:43.594 00:05:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 12:46:43.591 00:05:00.496 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 12:50:38.229 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42616 10 6452 1 2025-10-13 12:51:38.632 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58850 10 6452 1 2025-10-13 12:51:59.497 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 12:51:59.589 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:51:59.615 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:51:59.496 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 12:51:59.696 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 12:52:39.035 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59108 10 6452 1 2025-10-13 12:53:39.441 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35276 10 6452 1 2025-10-13 12:54:39.846 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:51676 10 6452 1 2025-10-13 12:55:40.272 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35670 10 6452 1 2025-10-13 12:52:43.596 00:05:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 12:52:43.594 00:05:00.496 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 12:56:40.680 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53760 10 6452 1 2025-10-13 12:56:59.847 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 12:56:59.574 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 12:56:59.667 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:56:59.764 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 12:56:59.767 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 12:57:41.108 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41710 10 6452 1 Summary: total flows: 139, total bytes: 418590, total packets: 1018, avg bps: 943, avg pps: 0, avg bpp: 411 Time window: 2025-10-13 11:58:43 - 2025-10-13 12:57:51 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0044s User: 0.0011s Wall: 0.0023s flows/second: 61369.3 Runtime: 0.0023s