Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 15:58:54.758 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:33362 10 6452 1 2025-10-13 15:59:55.176 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58720 10 6452 1 2025-10-13 16:00:55.594 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45392 10 6452 1 2025-10-13 16:02:03.345 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 16:02:03.311 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:02:03.474 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:02:03.346 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 16:02:03.556 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 16:01:55.995 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51952 10 6452 1 2025-10-13 15:58:43.657 00:05:00.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 15:58:43.655 00:05:00.491 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 16:02:56.399 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39086 10 6452 1 2025-10-13 16:03:56.772 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:47796 10 6452 1 2025-10-13 16:04:57.142 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34146 10 6452 1 2025-10-13 16:05:57.545 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38410 10 6452 1 2025-10-13 16:07:03.780 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 16:07:03.820 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 16:07:03.487 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:07:03.697 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:07:03.633 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 16:06:57.949 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54078 10 6452 1 2025-10-13 16:07:58.362 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59180 10 6452 1 2025-10-13 16:04:43.657 00:05:00.492 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 16:04:43.658 00:05:00.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 16:08:58.761 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52392 10 6452 1 2025-10-13 16:09:59.172 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:44764 10 6452 1 2025-10-13 16:10:59.568 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 10 6452 1 2025-10-13 16:12:03.489 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 16:12:03.439 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:12:03.571 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:12:03.646 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 16:12:03.654 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 16:11:59.972 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59582 10 6452 1 2025-10-13 16:13:00.373 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37686 10 6452 1 2025-10-13 16:14:00.782 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:44982 10 6452 1 2025-10-13 16:10:43.659 00:05:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 16:10:43.657 00:05:00.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 16:15:01.151 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46252 10 6452 1 2025-10-13 16:16:01.565 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:50294 12 10369 1 2025-10-13 16:17:03.990 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 16:17:04.082 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 16:17:03.520 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:17:03.906 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:17:03.910 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 16:17:02.066 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36966 10 6452 1 2025-10-13 16:18:02.475 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56760 10 6452 1 2025-10-13 16:19:02.838 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:47342 10 6452 1 2025-10-13 16:20:03.262 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50216 10 6452 1 2025-10-13 16:16:43.656 00:05:00.494 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 16:16:43.659 00:05:00.488 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 16:21:03.661 00:00:10.650 TCP 1.101.0.1:3000 -> 23.104.0.1:33870 10 6452 1 2025-10-13 16:22:03.867 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 16:22:03.592 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:22:03.869 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:22:03.867 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 16:22:03.952 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 16:22:04.344 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49862 10 6452 1 2025-10-13 16:23:04.744 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48388 10 6452 1 2025-10-13 16:24:05.149 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50562 10 6452 1 2025-10-13 16:25:05.563 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58088 10 6452 1 2025-10-13 16:26:05.962 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53636 10 6452 1 2025-10-13 16:22:43.662 00:05:00.491 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 16:22:43.665 00:05:00.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 16:27:04.020 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 16:27:03.931 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 16:27:03.681 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:27:03.936 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:27:03.936 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 16:27:06.366 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44372 10 6452 1 2025-10-13 16:28:06.771 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:55496 10 6452 1 2025-10-13 16:29:07.145 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55462 10 6452 1 2025-10-13 16:30:07.555 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51472 10 6452 1 2025-10-13 16:31:07.955 00:00:10.736 TCP 1.101.0.1:3000 -> 23.104.0.1:50012 10 6452 1 2025-10-13 16:32:04.641 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 16:32:04.379 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:32:04.428 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:32:04.505 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 16:32:04.511 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 16:32:08.732 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46166 10 6452 1 2025-10-13 16:28:43.671 00:05:00.481 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 16:28:43.670 00:05:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 16:33:09.140 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54522 10 6452 1 2025-10-13 16:34:09.552 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45130 10 6452 1 2025-10-13 16:35:09.953 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45874 10 6452 1 2025-10-13 16:36:10.366 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:46650 12 10375 1 2025-10-13 16:37:04.213 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 16:37:04.009 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:37:04.132 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:37:04.119 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 16:37:04.215 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 16:37:10.851 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:41748 10 6452 1 2025-10-13 16:38:11.268 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35460 10 6452 1 2025-10-13 16:34:43.670 00:05:00.486 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 16:34:43.672 00:05:00.481 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 16:39:11.671 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43244 10 6452 1 2025-10-13 16:40:12.095 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33474 10 6452 1 2025-10-13 16:41:12.496 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48324 10 6452 1 2025-10-13 16:42:04.480 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 16:42:04.324 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:42:03.914 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:42:04.105 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 16:42:03.998 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 16:42:12.895 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57902 10 6452 1 2025-10-13 16:43:13.309 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46978 10 6452 1 2025-10-13 16:44:13.709 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34140 10 6452 1 2025-10-13 16:40:43.675 00:05:00.484 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 16:40:43.677 00:05:00.480 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 16:45:14.118 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38640 10 6452 1 2025-10-13 16:46:14.485 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41984 10 6452 1 2025-10-13 16:47:04.379 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 16:47:04.246 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 16:47:04.233 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:47:04.296 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:47:04.360 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 16:47:14.897 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58796 12 6556 1 2025-10-13 16:48:15.307 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47346 10 6452 1 2025-10-13 16:49:15.706 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60152 10 6452 1 2025-10-13 16:50:16.113 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49678 10 6452 1 2025-10-13 16:46:43.679 00:05:00.477 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 16:46:43.676 00:05:00.482 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 16:51:16.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56532 10 6452 1 2025-10-13 16:52:04.571 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 16:52:04.344 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:52:04.468 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:52:04.530 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 16:52:04.548 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 16:52:16.921 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48208 10 6452 1 2025-10-13 16:53:17.329 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54330 10 6452 1 2025-10-13 16:54:17.724 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41094 10 6452 1 2025-10-13 16:55:18.137 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34080 10 6452 1 2025-10-13 16:56:18.503 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50582 10 6452 1 2025-10-13 16:52:43.676 00:05:00.485 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-13 16:52:43.679 00:05:00.479 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-13 16:57:04.407 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-13 16:57:04.328 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-13 16:57:04.429 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:57:04.326 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-13 16:57:04.324 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-13 16:57:18.909 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52832 10 6452 1 2025-10-13 16:58:19.316 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59100 10 6452 1 Summary: total flows: 140, total bytes: 424944, total packets: 1026, avg bps: 947, avg pps: 0, avg bpp: 414 Time window: 2025-10-13 15:58:43 - 2025-10-13 16:58:29 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0031s User: 0.0008s Wall: 0.0016s flows/second: 86100.1 Runtime: 0.0016s