Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 11:59:05.687 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56104 10 6452 1 2025-11-10 11:54:58.484 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 11:54:58.450 00:06:00.038 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 12:00:06.067 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42236 10 6452 1 2025-11-10 12:00:27.755 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 12:00:27.444 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 12:00:27.439 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 12:00:27.629 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:00:27.673 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:01:06.471 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54558 10 6452 1 2025-11-10 12:02:06.871 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35436 10 6452 1 2025-11-10 12:03:07.273 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50262 10 6452 1 2025-11-10 12:04:07.680 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37274 10 6452 1 2025-11-10 12:05:08.112 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50952 10 6452 1 2025-11-10 12:05:27.801 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 12:05:27.599 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 12:05:27.603 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 12:05:27.723 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:05:27.717 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:06:08.517 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59788 10 6452 1 2025-11-10 12:01:58.485 00:06:00.028 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 757 1 2025-11-10 12:01:58.452 00:06:00.064 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 12:07:08.875 00:00:10.888 TCP 1.101.0.1:3000 -> 23.104.0.1:41396 10 6452 1 2025-11-10 12:08:09.801 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47872 10 6452 1 2025-11-10 12:09:10.206 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:58284 10 6452 1 2025-11-10 12:10:10.591 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56162 10 6452 1 2025-11-10 12:10:27.802 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 12:10:27.742 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 12:10:27.667 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:10:27.801 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:10:27.883 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 12:11:11.003 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36330 10 6452 1 2025-11-10 12:12:11.413 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42132 10 6452 1 2025-11-10 12:13:11.771 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36164 10 6452 1 2025-11-10 12:08:58.458 00:06:00.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 12:08:58.461 00:06:00.052 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 12:14:12.183 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47262 10 6452 1 2025-11-10 12:15:12.543 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56438 10 6452 1 2025-11-10 12:15:27.740 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 12:15:27.738 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 12:15:27.774 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:15:27.944 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:15:28.027 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 12:16:12.959 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56734 10 6452 1 2025-11-10 12:17:13.360 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40914 10 6452 1 2025-11-10 12:18:13.769 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36976 10 6452 1 2025-11-10 12:19:14.182 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56410 10 6452 1 2025-11-10 12:20:28.286 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 12:20:14.588 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33050 10 6452 1 2025-11-10 12:20:28.207 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 12:20:28.203 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 12:20:28.044 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:20:28.202 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:15:58.463 00:06:00.052 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 12:15:58.461 00:06:00.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 12:21:14.992 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55130 10 6452 1 2025-11-10 12:22:15.397 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41814 10 6452 1 2025-11-10 12:23:15.761 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54332 10 6452 1 2025-11-10 12:24:16.181 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54478 10 6452 1 2025-11-10 12:25:28.139 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 12:25:28.397 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 12:25:28.200 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 12:25:27.961 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:25:16.550 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56624 10 6452 1 2025-11-10 12:25:28.057 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:26:16.958 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51536 10 6452 1 2025-11-10 12:27:17.361 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:58664 10 6452 1 2025-11-10 12:22:58.465 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 12:22:58.462 00:06:00.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 12:28:17.758 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:41436 12 10584 1 2025-11-10 12:29:18.236 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42710 10 6661 1 2025-11-10 12:30:28.040 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 12:30:28.115 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 12:30:27.862 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:30:18.601 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39646 10 6661 1 2025-11-10 12:30:28.229 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:30:28.322 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 12:31:19.007 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53784 10 6661 1 2025-11-10 12:32:19.413 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41764 10 6661 1 2025-11-10 12:33:19.816 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:52820 10 6661 1 2025-11-10 12:34:20.187 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50090 10 6661 1 2025-11-10 12:29:58.468 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 12:29:58.465 00:06:00.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 12:35:28.373 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 12:35:28.279 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 12:35:28.218 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 12:35:28.334 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:35:28.289 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:35:20.542 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42228 10 6661 1 2025-11-10 12:36:20.954 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:36404 10 6661 1 2025-11-10 12:37:21.376 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43656 10 6661 1 2025-11-10 12:38:21.783 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41542 10 6661 1 2025-11-10 12:39:22.194 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56800 10 6661 1 2025-11-10 12:40:28.382 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 12:40:28.314 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 12:40:28.391 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 12:40:28.357 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:40:28.299 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:40:22.594 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:36124 10 6661 1 2025-11-10 12:41:22.987 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:39728 10 6661 1 2025-11-10 12:36:58.464 00:06:00.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 12:36:58.467 00:06:00.054 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 12:42:23.366 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60316 10 6661 1 2025-11-10 12:43:23.765 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:46356 10 6661 1 2025-11-10 12:44:24.187 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46008 10 6661 1 2025-11-10 12:45:28.564 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 12:45:28.482 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 12:45:28.313 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 12:45:28.316 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:45:28.482 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:45:24.602 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45784 10 6661 1 2025-11-10 12:46:25.021 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37194 10 6661 1 2025-11-10 12:47:25.423 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45184 10 6661 1 2025-11-10 12:48:25.828 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:42982 10 6661 1 2025-11-10 12:43:58.473 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 12:43:58.470 00:06:00.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 12:49:26.264 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39870 10 6661 1 2025-11-10 12:50:28.640 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 12:50:28.554 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 12:50:28.632 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 12:50:28.639 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:50:28.558 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:50:26.667 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38744 10 6661 1 2025-11-10 12:51:27.031 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:36830 10 6661 1 2025-11-10 12:52:27.428 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36166 10 6661 1 2025-11-10 12:53:27.844 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:37642 10 6661 1 2025-11-10 12:54:28.265 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40140 10 6661 1 2025-11-10 12:55:28.681 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 12:55:28.655 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 12:55:28.732 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 12:55:28.578 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:55:28.598 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 12:55:28.669 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46558 10 6661 1 2025-11-10 12:50:58.480 00:06:00.051 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 12:50:58.483 00:06:00.045 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 12:56:29.100 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42848 10 6661 1 2025-11-10 12:57:29.466 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36376 10 6661 1 2025-11-10 12:58:29.830 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36670 10 6661 1 Summary: total flows: 138, total bytes: 427672, total packets: 1025, avg bps: 895, avg pps: 0, avg bpp: 417 Time window: 2025-11-10 11:54:58 - 2025-11-10 12:58:40 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0023s User: 0.0034s Wall: 0.0021s flows/second: 65343.6 Runtime: 0.0021s