Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 13:58:56.017 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:44854 12 10375 1 2025-10-31 13:59:56.500 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43784 10 6452 1 2025-10-31 14:00:41.699 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:00:41.630 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:00:41.435 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:00:41.615 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:00:41.608 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:00:56.908 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:33358 10 6452 1 2025-10-31 14:01:57.274 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59714 10 6452 1 2025-10-31 14:02:57.682 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60088 10 6452 1 2025-10-31 13:59:52.882 00:05:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 13:59:52.884 00:05:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:03:58.115 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47602 10 6452 1 2025-10-31 14:04:58.520 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55430 10 6452 1 2025-10-31 14:05:40.927 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:05:41.165 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:05:41.165 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:05:41.082 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:05:41.166 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:05:58.884 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:44226 10 6452 1 2025-10-31 14:06:59.309 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49318 10 6452 1 2025-10-31 14:07:59.710 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35738 10 6452 1 2025-10-31 14:09:00.097 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44974 10 6452 1 2025-10-31 14:05:52.888 00:05:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:05:52.887 00:05:00.401 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:10:00.500 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56810 10 6452 1 2025-10-31 14:10:41.216 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:10:41.323 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:10:41.518 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:10:41.468 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:10:41.600 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:11:00.907 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40054 10 6452 1 2025-10-31 14:12:01.308 00:00:10.797 TCP 1.101.0.1:3000 -> 23.104.0.1:38278 10 6452 1 2025-10-31 14:13:02.143 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32866 10 6452 1 2025-10-31 14:14:02.550 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38654 10 6452 1 2025-10-31 14:15:02.965 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52276 10 6452 1 2025-10-31 14:15:41.558 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:15:41.305 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:15:41.229 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:15:41.474 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:15:41.531 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:11:52.890 00:05:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:11:52.887 00:05:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:16:03.366 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47474 10 6452 1 2025-10-31 14:17:03.728 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39440 10 6452 1 2025-10-31 14:18:04.139 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45912 10 6452 1 2025-10-31 14:19:04.558 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38728 10 6452 1 2025-10-31 14:20:04.967 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35104 10 6452 1 2025-10-31 14:20:41.580 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:20:41.572 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:20:41.571 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:20:41.400 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:20:41.654 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:21:05.340 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50056 10 6452 1 2025-10-31 14:17:52.894 00:05:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:17:52.891 00:05:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:22:05.753 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51874 10 6452 1 2025-10-31 14:23:06.163 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52372 10 6452 1 2025-10-31 14:24:06.566 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36332 10 6452 1 2025-10-31 14:25:06.970 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51666 10 6452 1 2025-10-31 14:25:41.945 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:25:41.965 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:25:42.078 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:25:41.870 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:25:42.162 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:26:07.382 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51696 10 6452 1 2025-10-31 14:27:07.787 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37976 10 6452 1 2025-10-31 14:23:52.895 00:05:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:23:52.893 00:05:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:28:08.193 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:60722 10 6452 1 2025-10-31 14:29:08.557 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38746 10 6452 1 2025-10-31 14:30:08.958 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51278 10 6452 1 2025-10-31 14:30:41.743 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:30:41.704 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:30:41.744 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:30:41.928 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:30:41.826 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:31:09.358 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60760 10 6452 1 2025-10-31 14:32:09.759 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34944 10 6452 1 2025-10-31 14:33:10.126 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33338 10 6452 1 2025-10-31 14:29:52.896 00:05:00.401 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:29:52.894 00:05:00.406 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:34:10.483 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:43838 12 10369 1 2025-10-31 14:35:10.921 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:53924 10 6452 1 2025-10-31 14:35:41.828 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:35:41.939 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:35:41.683 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:35:41.590 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:35:41.912 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:36:11.317 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55528 10 6452 1 2025-10-31 14:37:11.682 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34750 10 6452 1 2025-10-31 14:38:12.103 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42954 10 6452 1 2025-10-31 14:39:12.504 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52884 10 6452 1 2025-10-31 14:35:52.896 00:05:00.405 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:35:52.900 00:05:00.400 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:40:12.904 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49890 10 6452 1 2025-10-31 14:40:42.059 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:40:41.969 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:40:41.655 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:40:41.975 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:40:41.807 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:41:13.321 00:00:12.409 TCP 1.101.0.1:3000 -> 23.104.0.1:37918 10 6452 1 2025-10-31 14:42:15.788 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55574 10 6452 1 2025-10-31 14:43:16.149 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33708 10 6452 1 2025-10-31 14:44:16.551 00:00:10.816 TCP 1.101.0.1:3000 -> 23.104.0.1:40246 10 6452 1 2025-10-31 14:45:17.400 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58670 10 6452 1 2025-10-31 14:45:42.170 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:45:41.863 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:45:42.087 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:45:41.978 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:45:42.171 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:41:52.901 00:05:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:41:52.898 00:05:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:46:17.760 00:00:10.634 TCP 1.101.0.1:3000 -> 23.104.0.1:39440 10 6452 1 2025-10-31 14:47:18.433 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47474 10 6452 1 2025-10-31 14:48:18.845 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:33004 10 6452 1 2025-10-31 14:49:19.269 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48406 10 6452 1 2025-10-31 14:50:19.669 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41820 10 6452 1 2025-10-31 14:50:42.308 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:50:42.269 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:50:42.212 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:50:42.225 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:50:42.313 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:51:20.096 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58444 10 6452 1 2025-10-31 14:47:52.901 00:05:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:47:52.904 00:05:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:52:20.495 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49638 10 6452 1 2025-10-31 14:53:20.909 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51006 10 6452 1 2025-10-31 14:54:21.315 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34204 10 6452 1 2025-10-31 14:55:21.719 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:35058 10 6452 1 2025-10-31 14:55:42.561 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-31 14:55:42.374 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-31 14:55:42.499 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:55:42.479 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-31 14:55:42.477 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-31 14:56:22.151 00:00:11.855 TCP 1.101.0.1:3000 -> 23.104.0.1:59452 10 6452 1 2025-10-31 14:57:24.040 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49556 10 6452 1 2025-10-31 14:53:52.904 00:05:00.401 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-31 14:53:52.903 00:05:00.405 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-31 14:58:24.442 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34474 10 6452 1 Summary: total flows: 140, total bytes: 424840, total packets: 1024, avg bps: 944, avg pps: 0, avg bpp: 414 Time window: 2025-10-31 13:58:56 - 2025-10-31 14:58:53 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0040s User: 0.0013s Wall: 0.0024s flows/second: 57332.8 Runtime: 0.0025s