Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 12:58:41.508 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52004 10 6452 1 2025-10-13 12:59:41.913 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49816 10 6452 1 2025-10-13 13:00:42.318 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38326 10 6452 1 2025-10-13 13:02:00.143 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 13:01:42.677 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52286 10 6452 1 2025-10-13 13:01:59.758 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 13:01:59.701 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:02:00.061 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:01:59.927 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 12:58:43.595 00:05:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 12:58:43.598 00:05:00.493 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 13:02:43.108 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50848 10 6452 1 2025-10-13 13:03:43.504 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:50060 10 6452 1 2025-10-13 13:04:43.870 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:49616 10 6452 1 2025-10-13 13:05:44.294 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53404 10 6452 1 2025-10-13 13:06:44.694 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:39590 10 6452 1 2025-10-13 13:06:59.813 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 13:06:59.930 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:06:59.974 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:06:59.809 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 13:07:00.058 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 13:07:45.120 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41948 10 6452 1 2025-10-13 13:04:43.595 00:05:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 13:04:43.597 00:05:00.494 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 13:08:45.532 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43808 10 6452 1 2025-10-13 13:09:45.943 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39966 10 6452 1 2025-10-13 13:10:46.362 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33162 10 6452 1 2025-10-13 13:12:00.040 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 13:11:46.764 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56864 10 6452 1 2025-10-13 13:11:59.962 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 13:12:00.192 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:11:59.958 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:12:00.115 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 13:12:47.188 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56202 10 6452 1 2025-10-13 13:13:47.613 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51990 10 6452 1 2025-10-13 13:10:43.596 00:05:00.500 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 13:10:43.600 00:05:00.494 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 13:14:48.018 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35972 10 6452 1 2025-10-13 13:15:48.417 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37624 10 6452 1 2025-10-13 13:17:00.181 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 13:16:48.779 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60926 10 6452 1 2025-10-13 13:16:59.897 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 13:17:00.078 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:17:00.091 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:16:59.888 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 13:17:49.190 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42098 10 6452 1 2025-10-13 13:18:49.587 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33710 10 6452 1 2025-10-13 13:19:49.990 00:00:10.864 TCP 1.101.0.1:3000 -> 23.104.0.1:50966 10 6452 1 2025-10-13 13:16:43.598 00:05:00.499 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 13:16:43.601 00:05:00.494 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 13:20:50.889 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:48292 10 6452 1 2025-10-13 13:22:00.458 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 13:22:00.338 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 13:21:59.986 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:22:00.375 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:21:59.867 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 13:21:51.321 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57232 10 6452 1 2025-10-13 13:22:51.722 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53640 10 6452 1 2025-10-13 13:23:52.134 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:51686 10 6452 1 2025-10-13 13:24:52.517 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60106 10 6452 1 2025-10-13 13:25:52.915 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39426 10 6452 1 2025-10-13 13:22:43.602 00:05:00.494 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 13:22:43.598 00:05:00.499 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 13:27:00.321 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 13:27:00.221 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:27:00.321 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:27:00.302 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 13:27:00.405 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 13:26:53.319 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52922 10 6452 1 2025-10-13 13:27:53.728 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34128 10 6452 1 2025-10-13 13:28:54.130 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38400 10 6452 1 2025-10-13 13:29:54.534 00:00:10.579 TCP 1.101.0.1:3000 -> 23.104.0.1:58072 10 6452 1 2025-10-13 13:30:55.135 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:48192 10 6452 1 2025-10-13 13:32:00.421 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 13:32:00.484 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:32:00.542 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:32:00.571 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 13:32:00.624 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 13:31:55.520 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58144 10 6452 1 2025-10-13 13:28:43.601 00:05:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 13:28:43.602 00:05:00.494 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 13:32:55.931 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53454 10 6452 1 2025-10-13 13:33:56.352 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47104 10 6452 1 2025-10-13 13:34:56.754 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60992 10 6452 1 2025-10-13 13:35:57.155 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60622 10 6452 1 2025-10-13 13:37:00.549 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 13:37:00.532 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 13:37:00.315 00:00:00.013 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:37:00.466 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:37:00.536 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 13:36:57.562 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59564 10 6452 1 2025-10-13 13:37:57.964 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44770 10 6452 1 2025-10-13 13:34:43.607 00:05:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 13:34:43.604 00:05:00.496 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 13:38:58.367 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45340 10 6452 1 2025-10-13 13:39:58.767 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46890 10 6452 1 2025-10-13 13:40:59.188 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:60574 10 6452 1 2025-10-13 13:42:00.507 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 13:42:00.586 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 13:42:00.425 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:42:00.424 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:42:00.393 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 13:41:59.560 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:50612 10 6452 1 2025-10-13 13:42:59.960 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:36106 10 6452 1 2025-10-13 13:44:00.386 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:51800 10 6452 1 2025-10-13 13:40:43.608 00:05:00.491 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 13:40:43.604 00:05:00.496 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 13:45:00.751 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48186 10 6452 1 2025-10-13 13:46:01.154 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58752 10 6452 1 2025-10-13 13:47:00.554 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 13:47:00.722 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:47:00.561 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:47:00.552 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 13:47:00.644 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 13:47:01.558 00:00:10.541 TCP 1.101.0.1:3000 -> 23.104.0.1:37344 10 6452 1 2025-10-13 13:48:02.143 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53532 10 6452 1 2025-10-13 13:49:02.547 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52426 10 6452 1 2025-10-13 13:50:02.950 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35328 10 6452 1 2025-10-13 13:46:43.610 00:05:00.491 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 13:46:43.614 00:05:00.486 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 13:51:03.359 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57432 10 6452 1 2025-10-13 13:52:00.958 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 13:52:00.720 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:52:00.768 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:52:00.855 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 13:52:00.850 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 13:52:03.759 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43330 10 6452 1 2025-10-13 13:53:04.177 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53168 10 6452 1 2025-10-13 13:54:04.538 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52760 10 6452 1 2025-10-13 13:55:04.899 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50958 10 6452 1 2025-10-13 13:56:05.268 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59272 10 6452 1 2025-10-13 13:52:43.616 00:05:00.483 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 13:52:43.614 00:05:00.488 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 13:57:00.822 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 13:57:00.896 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 13:57:00.843 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:57:00.740 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 13:57:00.899 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 13:57:05.669 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43294 10 6452 1 2025-10-13 13:58:06.101 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57030 10 6452 1 Summary: total flows: 140, total bytes: 417000, total packets: 1020, avg bps: 933, avg pps: 0, avg bpp: 408 Time window: 2025-10-13 12:58:41 - 2025-10-13 13:58:16 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0048s User: 0.0010s Wall: 0.0020s flows/second: 71323.0 Runtime: 0.0020s