Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 16:58:43.645 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36108 10 6452 1 2025-11-08 16:59:36.174 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 16:59:36.097 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 16:59:35.580 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 16:59:35.971 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 16:59:36.054 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 16:59:44.060 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33536 10 6452 1 2025-11-08 17:00:44.427 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44374 10 6452 1 2025-11-08 16:56:57.295 00:06:00.103 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 17:01:44.828 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:47034 10 6452 1 2025-11-08 16:57:57.292 00:06:00.110 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 17:02:45.261 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52312 10 6452 1 2025-11-08 17:03:45.666 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44372 10 6452 1 2025-11-08 17:04:35.873 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 17:04:35.922 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 17:04:35.888 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:04:35.802 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:04:35.885 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 17:04:46.087 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50896 10 6452 1 2025-11-08 17:05:46.461 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56494 10 6452 1 2025-11-08 17:06:46.867 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49136 10 6452 1 2025-11-08 17:07:47.270 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44508 10 6452 1 2025-11-08 17:08:47.675 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36256 10 6452 1 2025-11-08 17:03:57.296 00:06:00.105 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 17:09:36.087 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 17:09:36.213 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 17:09:35.894 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:09:35.964 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:09:36.046 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 17:09:48.118 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45966 10 6452 1 2025-11-08 17:04:57.295 00:06:00.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 17:10:48.520 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41140 10 6452 1 2025-11-08 17:11:48.926 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:49360 10 6452 1 2025-11-08 17:12:49.364 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54680 10 6452 1 2025-11-08 17:13:49.768 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:52860 10 6452 1 2025-11-08 17:14:36.280 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 17:14:35.996 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 17:14:35.833 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:14:36.198 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:14:36.151 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 17:14:50.137 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51500 10 6452 1 2025-11-08 17:10:57.299 00:06:00.105 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 17:15:50.543 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45532 10 6452 1 2025-11-08 17:11:57.297 00:06:00.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 17:16:50.946 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60944 10 6452 1 2025-11-08 17:17:51.360 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34084 10 6452 1 2025-11-08 17:18:51.717 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:48098 10 6452 1 2025-11-08 17:19:36.380 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 17:19:36.128 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 17:19:36.272 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 17:19:36.169 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:19:36.297 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:19:52.137 00:00:22.416 TCP 1.101.0.1:3000 -> 23.104.0.1:49734 10 6452 1 2025-11-08 17:21:04.594 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46644 10 6452 1 2025-11-08 17:22:05.007 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41272 10 6452 1 2025-11-08 17:17:57.301 00:06:00.103 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 17:23:05.407 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53528 10 6452 1 2025-11-08 17:18:57.299 00:06:00.110 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 17:24:05.809 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39932 10 6452 1 2025-11-08 17:24:36.333 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 17:24:36.179 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 17:24:36.349 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 17:24:36.124 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:24:36.251 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:25:06.214 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:42264 10 6452 1 2025-11-08 17:26:06.614 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56680 10 6452 1 2025-11-08 17:27:07.016 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:46352 10 6452 1 2025-11-08 17:28:07.409 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50906 10 6452 1 2025-11-08 17:29:07.812 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57206 10 6452 1 2025-11-08 17:29:36.529 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 17:29:36.350 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 17:29:36.424 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:29:36.352 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:29:36.435 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 17:24:57.304 00:06:00.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 17:30:08.181 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38238 10 6452 1 2025-11-08 17:25:57.303 00:06:00.108 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 17:31:08.585 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47046 10 6452 1 2025-11-08 17:32:08.987 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58946 12 6556 1 2025-11-08 17:33:09.386 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60598 10 6452 1 2025-11-08 17:34:09.791 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34320 10 6452 1 2025-11-08 17:34:36.518 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 17:34:36.421 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 17:34:36.434 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 17:34:36.374 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:34:36.435 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:35:10.202 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44398 10 6452 1 2025-11-08 17:36:10.562 00:00:11.243 TCP 1.101.0.1:3000 -> 23.104.0.1:50020 10 6452 1 2025-11-08 17:31:57.307 00:06:00.101 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 17:37:11.845 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:46476 10 6452 1 2025-11-08 17:32:57.306 00:06:00.107 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 17:38:12.270 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:41124 12 10375 1 2025-11-08 17:39:12.748 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38980 10 6452 1 2025-11-08 17:39:36.732 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 17:39:36.645 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 17:39:36.905 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:39:36.733 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:39:36.816 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 17:40:13.115 00:00:10.854 TCP 1.101.0.1:3000 -> 23.104.0.1:51032 10 6452 1 2025-11-08 17:41:14.012 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48380 10 6452 1 2025-11-08 17:42:14.411 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50756 10 6452 1 2025-11-08 17:43:14.775 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:44096 12 10375 1 2025-11-08 17:38:57.309 00:06:00.101 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 17:44:15.252 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41532 10 6452 1 2025-11-08 17:44:36.807 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 17:44:36.803 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 17:44:36.356 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:44:36.849 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:44:36.932 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 17:39:57.306 00:06:00.106 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 17:45:15.664 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57110 10 6452 1 2025-11-08 17:46:16.097 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38304 10 6452 1 2025-11-08 17:47:16.472 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:36780 10 6452 1 2025-11-08 17:48:16.905 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58916 10 6452 1 2025-11-08 17:49:17.320 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:40636 10 6452 1 2025-11-08 17:49:37.184 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 17:49:36.937 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 17:49:36.945 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 17:49:36.666 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:49:37.101 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:50:17.699 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50818 10 6452 1 2025-11-08 17:45:57.315 00:06:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 17:51:18.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38338 10 6452 1 2025-11-08 17:46:57.312 00:06:00.103 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 17:52:18.513 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53098 10 6452 1 2025-11-08 17:53:18.912 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36472 10 6452 1 2025-11-08 17:54:19.321 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:59568 10 6452 1 2025-11-08 17:54:37.810 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 17:54:37.506 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 17:54:37.514 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:54:37.606 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 17:54:37.688 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 17:55:19.739 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38622 10 6452 1 2025-11-08 17:56:20.112 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50764 10 6452 1 2025-11-08 17:57:20.515 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40026 10 6452 1 2025-11-08 17:52:57.318 00:06:00.097 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 17:58:20.879 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57552 10 6452 1 Summary: total flows: 137, total bytes: 424827, total packets: 1024, avg bps: 913, avg pps: 0, avg bpp: 414 Time window: 2025-11-08 16:56:57 - 2025-11-08 17:58:57 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0027s User: 0.0018s Wall: 0.0016s flows/second: 84354.0 Runtime: 0.0016s