Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 05:58:54.896 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:60198 12 6556 1 2025-11-08 05:59:22.634 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 05:59:22.394 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 05:59:22.323 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 05:59:22.498 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 05:59:22.405 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 05:59:55.328 00:00:10.566 TCP 1.101.0.1:3000 -> 23.104.0.1:34190 10 6452 1 2025-11-08 06:00:55.940 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53156 10 6452 1 2025-11-08 06:01:56.357 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58316 10 6452 1 2025-11-08 06:02:56.763 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:55316 10 6452 1 2025-11-08 05:58:57.100 00:06:00.086 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 06:03:57.192 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44996 10 6452 1 2025-11-08 06:04:22.677 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 06:04:22.713 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:04:22.791 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:04:22.687 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 06:04:22.873 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 05:59:57.097 00:06:00.090 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 06:04:57.621 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41726 10 6452 1 2025-11-08 06:05:58.026 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45760 10 6452 1 2025-11-08 06:06:58.431 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48674 10 6452 1 2025-11-08 06:07:58.840 00:00:10.461 TCP 1.101.0.1:3000 -> 23.104.0.1:56356 12 10369 1 2025-11-08 06:08:59.342 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35394 10 6452 1 2025-11-08 06:09:22.685 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 06:09:22.789 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:09:22.929 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:09:22.925 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 06:09:23.012 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 06:09:59.742 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57262 10 6452 1 2025-11-08 06:05:57.102 00:06:00.084 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 06:11:00.150 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54824 10 6452 1 2025-11-08 06:06:57.098 00:06:00.091 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 06:12:00.547 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33472 10 6452 1 2025-11-08 06:13:00.911 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52454 10 6452 1 2025-11-08 06:14:01.316 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39122 10 6452 1 2025-11-08 06:14:22.682 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 06:14:22.873 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 06:14:22.818 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:14:22.859 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:14:22.943 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 06:15:01.724 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:40282 11 6492 1 2025-11-08 06:16:02.152 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36874 10 6452 1 2025-11-08 06:17:02.593 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43822 10 6452 1 2025-11-08 06:12:57.101 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 06:18:02.997 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:55926 10 6452 1 2025-11-08 06:13:57.099 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 06:19:03.431 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36624 10 6452 1 2025-11-08 06:19:22.906 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 06:19:22.957 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:19:22.898 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:19:22.898 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 06:19:22.980 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 06:20:03.834 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:40694 10 6452 1 2025-11-08 06:21:04.267 00:00:11.298 TCP 1.101.0.1:3000 -> 23.104.0.1:34960 10 6452 1 2025-11-08 06:22:05.594 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46572 10 6452 1 2025-11-08 06:23:05.956 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37778 10 6452 1 2025-11-08 06:24:06.362 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57956 10 6452 1 2025-11-08 06:24:23.919 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 06:24:23.683 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 06:24:23.678 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 06:24:23.635 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:24:23.837 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:19:57.104 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 06:25:06.764 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54552 10 6452 1 2025-11-08 06:20:57.103 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 06:26:07.182 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45772 10 6452 1 2025-11-08 06:27:07.582 00:00:14.463 TCP 1.101.0.1:3000 -> 23.104.0.1:60646 10 6452 1 2025-11-08 06:28:12.100 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49852 10 6452 1 2025-11-08 06:29:23.340 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 06:29:23.158 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 06:29:23.202 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 06:29:23.106 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:29:12.500 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57038 10 6452 1 2025-11-08 06:29:23.257 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:30:12.905 00:00:10.982 TCP 1.101.0.1:3000 -> 23.104.0.1:37614 12 6556 1 2025-11-08 06:31:13.925 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:60944 10 6452 1 2025-11-08 06:26:57.106 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 06:32:14.352 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42848 10 6452 1 2025-11-08 06:27:57.103 00:06:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 06:33:14.751 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:42704 10 6452 1 2025-11-08 06:34:23.354 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:34:23.348 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 06:34:23.352 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 06:34:23.324 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:34:23.438 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 06:34:15.178 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57682 10 6452 1 2025-11-08 06:35:15.583 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39354 10 6452 1 2025-11-08 06:36:15.985 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:33444 10 6452 1 2025-11-08 06:37:16.413 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57706 10 6452 1 2025-11-08 06:38:16.819 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47046 10 6452 1 2025-11-08 06:33:57.106 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 06:39:23.438 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 06:39:23.306 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 06:39:23.301 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 06:39:23.352 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:39:23.354 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:39:17.219 00:00:10.746 TCP 1.101.0.1:3000 -> 23.104.0.1:42088 10 6452 1 2025-11-08 06:34:57.105 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 06:40:18.016 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52640 10 6452 1 2025-11-08 06:41:18.420 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59870 10 6452 1 2025-11-08 06:42:18.827 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43090 10 6452 1 2025-11-08 06:43:19.225 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42124 10 6452 1 2025-11-08 06:44:23.502 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 06:44:23.422 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 06:44:23.098 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:44:23.420 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:44:23.412 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 06:44:19.646 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50052 10 6452 1 2025-11-08 06:45:20.051 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55386 10 6452 1 2025-11-08 06:40:57.108 00:06:00.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 06:46:20.455 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60816 10 6452 1 2025-11-08 06:41:57.104 00:06:00.099 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 06:47:20.863 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44292 10 6452 1 2025-11-08 06:48:21.280 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39352 10 6452 1 2025-11-08 06:49:23.855 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 06:49:23.859 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 06:49:23.817 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:49:23.943 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:49:24.026 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 06:49:21.687 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53666 10 6452 1 2025-11-08 06:50:22.106 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45204 10 6452 1 2025-11-08 06:51:22.517 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40450 10 6452 1 2025-11-08 06:52:22.878 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:48968 10 6452 1 2025-11-08 06:47:57.109 00:06:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 06:53:23.296 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42156 10 6452 1 2025-11-08 06:48:57.106 00:06:00.100 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 06:54:23.713 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 06:54:23.627 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 06:54:23.566 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 06:54:23.569 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:54:23.629 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 06:54:23.662 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44352 10 6452 1 2025-11-08 06:55:24.063 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43728 10 6452 1 2025-11-08 06:56:24.465 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41450 10 6452 1 2025-11-08 06:57:24.864 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57340 10 6452 1 2025-11-08 06:58:25.270 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37282 10 6452 1 Summary: total flows: 136, total bytes: 420181, total packets: 1011, avg bps: 938, avg pps: 0, avg bpp: 415 Time window: 2025-11-08 05:58:54 - 2025-11-08 06:58:35 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0038s User: 0.0009s Wall: 0.0029s flows/second: 47072.6 Runtime: 0.0029s