Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 12:58:49.783 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59742 10 6452 1 2025-11-08 12:59:30.767 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:59:30.862 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 12:59:30.788 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:59:30.686 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:59:30.861 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 12:59:50.187 00:00:11.057 TCP 1.101.0.1:3000 -> 23.104.0.1:58134 10 6452 1 2025-11-08 13:00:51.281 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58844 10 6452 1 2025-11-08 13:01:51.689 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51938 10 6452 1 2025-11-08 13:02:52.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55164 10 6452 1 2025-11-08 12:58:57.225 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:03:52.514 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60158 10 6452 1 2025-11-08 13:04:31.131 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:04:31.130 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:04:31.142 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:04:30.960 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:04:31.043 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:59:57.224 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:04:52.923 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38778 10 6452 1 2025-11-08 13:05:53.346 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43136 10 6452 1 2025-11-08 13:06:53.752 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50364 10 6452 1 2025-11-08 13:07:54.116 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:38594 12 10375 1 2025-11-08 13:08:54.558 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:41614 10 6452 1 2025-11-08 13:09:31.111 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:09:31.032 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:09:30.849 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:09:31.107 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:09:31.189 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:09:54.932 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42156 10 6452 1 2025-11-08 13:05:57.228 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:10:55.354 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34088 10 6452 1 2025-11-08 13:06:57.225 00:06:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:11:55.761 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:32946 10 6452 1 2025-11-08 13:12:56.181 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34202 10 6452 1 2025-11-08 13:13:56.556 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52318 10 6452 1 2025-11-08 13:14:31.501 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:14:31.294 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:14:31.568 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:14:31.465 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:14:31.419 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:14:56.971 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41214 10 6452 1 2025-11-08 13:15:57.331 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38350 10 6452 1 2025-11-08 13:16:57.743 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43240 10 6452 1 2025-11-08 13:12:57.228 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:17:58.147 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38476 10 6452 1 2025-11-08 13:13:57.225 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:18:58.551 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35192 10 6452 1 2025-11-08 13:19:31.748 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:19:31.791 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:19:31.391 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:19:31.270 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:19:31.663 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:19:58.915 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57126 10 6452 1 2025-11-08 13:20:59.315 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51062 10 6452 1 2025-11-08 13:21:59.719 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49990 10 6452 1 2025-11-08 13:23:00.133 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42418 10 6452 1 2025-11-08 13:24:00.535 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43446 10 6452 1 2025-11-08 13:24:31.504 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:24:31.462 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:24:31.559 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:24:31.516 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:24:31.642 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:19:57.231 00:06:00.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:25:00.938 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33792 10 6452 1 2025-11-08 13:20:57.231 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:26:01.358 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56812 10 6452 1 2025-11-08 13:27:01.759 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:48094 10 6452 1 2025-11-08 13:28:02.183 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53500 10 6452 1 2025-11-08 13:29:02.588 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40512 10 6452 1 2025-11-08 13:29:31.506 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:29:31.502 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:29:31.399 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:29:31.502 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:29:31.584 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:30:02.985 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45480 10 6452 1 2025-11-08 13:31:03.396 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49360 10 6452 1 2025-11-08 13:26:57.234 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:32:03.799 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:57674 10 6452 1 2025-11-08 13:27:57.232 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:33:04.178 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59136 10 6452 1 2025-11-08 13:34:04.574 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58824 10 6452 1 2025-11-08 13:34:31.625 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:34:31.701 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:34:31.803 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:34:31.632 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:34:31.714 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:35:04.978 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39730 10 6452 1 2025-11-08 13:36:05.391 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54158 10 6452 1 2025-11-08 13:37:05.765 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37420 10 6452 1 2025-11-08 13:38:06.187 00:00:10.454 TCP 1.101.0.1:3000 -> 23.104.0.1:35374 12 10375 1 2025-11-08 13:33:57.236 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:39:06.671 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:39260 10 6452 1 2025-11-08 13:39:31.780 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:39:31.619 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:39:31.895 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:39:31.699 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:39:31.608 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:34:57.234 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:40:07.131 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48546 10 6452 1 2025-11-08 13:41:07.537 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:47180 10 6452 1 2025-11-08 13:42:07.933 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41628 10 6452 1 2025-11-08 13:43:08.354 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44936 10 6452 1 2025-11-08 13:44:08.758 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56532 10 6452 1 2025-11-08 13:44:31.975 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:44:31.815 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:44:31.687 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:44:31.872 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:44:31.954 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:45:09.167 00:00:11.719 TCP 1.101.0.1:3000 -> 23.104.0.1:34290 10 6452 1 2025-11-08 13:40:57.238 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:46:10.932 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:38924 10 6452 1 2025-11-08 13:41:57.237 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:47:11.361 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43060 10 6452 1 2025-11-08 13:48:11.727 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42536 10 6452 1 2025-11-08 13:49:12.115 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54312 10 6452 1 2025-11-08 13:49:32.043 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:49:31.865 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:49:31.982 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:49:31.772 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:49:31.855 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:50:12.525 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58720 10 6452 1 2025-11-08 13:51:12.927 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58696 10 6452 1 2025-11-08 13:52:13.341 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35528 10 6452 1 2025-11-08 13:47:57.239 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:53:13.747 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56764 10 6452 1 2025-11-08 13:48:57.236 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:54:14.150 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38114 10 6452 1 2025-11-08 13:54:32.546 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:54:32.391 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:54:32.283 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:54:32.256 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:54:32.339 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:55:14.555 00:00:15.081 TCP 1.101.0.1:3000 -> 23.104.0.1:34472 10 6452 1 2025-11-08 13:56:19.689 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44316 10 6452 1 2025-11-08 13:57:20.107 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39366 10 6452 1 2025-11-08 13:58:20.521 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59504 10 6452 1 Summary: total flows: 136, total bytes: 423862, total packets: 1008, avg bps: 946, avg pps: 0, avg bpp: 420 Time window: 2025-11-08 12:58:49 - 2025-11-08 13:58:30 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0040s User: 0.0020s Wall: 0.0019s flows/second: 71125.4 Runtime: 0.0019s