Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 11:59:00.979 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35562 10 6452 1 2025-11-08 11:59:29.631 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 11:59:29.555 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 11:59:29.812 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 11:59:29.846 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 11:59:29.894 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:00:01.394 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38948 10 6452 1 2025-11-08 11:55:57.198 00:06:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 12:01:01.754 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:45662 10 6452 1 2025-11-08 11:56:57.196 00:06:00.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 12:02:02.184 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49540 10 6452 1 2025-11-08 12:03:02.587 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48068 10 6452 1 2025-11-08 12:04:02.988 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35128 10 6452 1 2025-11-08 12:04:29.945 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:04:30.384 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 12:04:30.142 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 12:04:30.138 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:04:30.231 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:05:03.353 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51050 10 6452 1 2025-11-08 12:06:03.757 00:00:22.786 TCP 1.101.0.1:3000 -> 23.104.0.1:53298 12 6556 1 2025-11-08 12:07:16.608 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46232 10 6452 1 2025-11-08 12:02:57.201 00:06:00.095 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 12:08:16.969 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36882 10 6452 1 2025-11-08 12:03:57.200 00:06:00.100 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 12:09:29.922 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 12:09:29.825 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:09:17.384 00:00:10.488 TCP 1.101.0.1:3000 -> 23.104.0.1:55388 10 6452 1 2025-11-08 12:09:29.925 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:09:29.857 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 12:09:30.010 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:10:17.925 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34390 10 6452 1 2025-11-08 12:11:18.294 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41408 10 6452 1 2025-11-08 12:12:18.698 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42632 10 6452 1 2025-11-08 12:13:19.091 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51178 10 6452 1 2025-11-08 12:14:19.492 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54762 10 6452 1 2025-11-08 12:14:30.271 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 12:14:30.443 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 12:14:30.352 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:14:30.437 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:14:30.522 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:09:57.203 00:06:00.095 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 12:15:19.859 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:39038 10 6452 1 2025-11-08 12:10:57.201 00:06:00.099 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 12:16:20.280 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:52832 10 6452 1 2025-11-08 12:17:20.655 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48010 10 6452 1 2025-11-08 12:18:21.061 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36452 10 6452 1 2025-11-08 12:19:29.956 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 12:19:29.944 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:19:30.151 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 12:19:21.467 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52072 10 6452 1 2025-11-08 12:19:30.098 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:19:30.182 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:20:21.834 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:41958 10 6452 1 2025-11-08 12:21:22.254 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33600 10 6452 1 2025-11-08 12:16:57.209 00:06:00.091 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 12:22:22.624 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58938 10 6452 1 2025-11-08 12:17:57.206 00:06:00.097 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 12:23:23.027 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49240 10 6452 1 2025-11-08 12:24:30.398 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:24:30.133 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 12:24:23.426 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42524 10 6452 1 2025-11-08 12:24:30.304 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 12:24:30.090 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:24:30.315 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:25:23.793 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47062 10 6452 1 2025-11-08 12:26:24.202 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56150 10 6452 1 2025-11-08 12:27:24.599 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36346 10 6452 1 2025-11-08 12:28:25.005 00:00:11.696 TCP 1.101.0.1:3000 -> 23.104.0.1:58510 10 6452 1 2025-11-08 12:23:57.211 00:06:00.091 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 12:29:30.199 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 12:29:30.112 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:29:30.356 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:29:30.291 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 12:29:30.440 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:29:26.747 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56696 10 6452 1 2025-11-08 12:24:57.209 00:06:00.098 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 12:30:27.154 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46366 10 6452 1 2025-11-08 12:31:27.554 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:45804 10 6452 1 2025-11-08 12:32:27.923 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60548 10 6452 1 2025-11-08 12:33:28.346 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53352 10 6452 1 2025-11-08 12:34:30.498 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 12:34:30.586 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 12:34:30.268 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:34:30.587 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:34:30.669 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:34:28.752 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56438 10 6452 1 2025-11-08 12:35:29.159 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:36316 10 6452 1 2025-11-08 12:30:57.212 00:06:00.092 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 12:36:29.555 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53482 10 6452 1 2025-11-08 12:31:57.210 00:06:00.097 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 12:37:29.966 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38472 10 6452 1 2025-11-08 12:38:30.372 00:00:21.721 TCP 1.101.0.1:3000 -> 23.104.0.1:60788 10 6452 1 2025-11-08 12:39:30.689 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:39:30.642 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 12:39:30.620 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 12:39:30.410 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:39:30.772 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:39:42.158 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51458 10 6452 1 2025-11-08 12:40:42.569 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42204 10 6452 1 2025-11-08 12:41:42.980 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58586 10 6452 1 2025-11-08 12:42:43.387 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34880 10 6452 1 2025-11-08 12:37:57.213 00:06:00.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 12:43:43.790 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52946 10 6452 1 2025-11-08 12:38:57.213 00:06:00.098 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 12:44:30.576 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 12:44:30.546 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:44:30.570 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:44:30.632 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 12:44:30.653 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:44:44.152 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60516 10 6452 1 2025-11-08 12:45:44.554 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:49280 10 6452 1 2025-11-08 12:46:44.920 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48190 10 6452 1 2025-11-08 12:47:45.328 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47900 10 6452 1 2025-11-08 12:48:45.728 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33868 10 6452 1 2025-11-08 12:49:31.166 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:49:31.084 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 12:49:31.082 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 12:49:30.861 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:49:31.084 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:44:57.214 00:06:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 12:49:46.115 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:43926 10 6452 1 2025-11-08 12:50:46.536 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47648 10 6452 1 2025-11-08 12:45:57.213 00:06:00.098 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 12:51:46.946 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51358 10 6452 1 2025-11-08 12:52:47.355 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44656 10 6452 1 2025-11-08 12:53:47.757 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38126 10 6452 1 2025-11-08 12:54:30.817 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 12:54:30.903 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 12:54:30.542 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:54:30.953 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:54:31.035 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:54:48.156 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39166 10 6452 1 2025-11-08 12:55:48.557 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:42200 10 6452 1 2025-11-08 12:56:49.016 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56918 10 6452 1 2025-11-08 12:51:57.220 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 12:52:57.220 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 12:57:49.425 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60856 10 6452 1 Summary: total flows: 137, total bytes: 411390, total packets: 1024, avg bps: 870, avg pps: 0, avg bpp: 401 Time window: 2025-11-08 11:55:57 - 2025-11-08 12:58:57 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0038s User: 0.0019s Wall: 0.0018s flows/second: 77182.0 Runtime: 0.0018s