Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 03:58:43.608 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:34350 10 6870 1 2025-11-18 03:54:02.390 00:06:00.120 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 03:59:08.985 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 03:59:08.902 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 03:59:08.827 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 03:59:08.791 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:59:08.902 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:59:44.016 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46980 10 6870 1 2025-11-18 04:00:44.418 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33902 10 6870 1 2025-11-18 04:01:44.818 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50252 10 6870 1 2025-11-18 04:02:45.180 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:37342 10 6870 1 2025-11-18 04:03:45.588 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56676 10 6870 1 2025-11-18 03:59:02.392 00:06:00.117 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:04:08.802 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:04:08.827 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:04:08.808 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:04:08.858 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:04:08.891 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:04:45.957 00:00:10.426 TCP 1.101.0.1:3000 -> 23.104.0.1:39376 10 6870 1 2025-11-18 04:05:46.424 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52340 10 6870 1 2025-11-18 04:01:02.390 00:06:00.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:06:46.824 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52640 10 6870 1 2025-11-18 04:07:47.228 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48012 10 6870 1 2025-11-18 04:08:47.629 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46086 10 6870 1 2025-11-18 04:09:09.093 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:09:08.917 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:09:08.854 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:09:09.012 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:09:08.913 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:09:48.035 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57062 10 6870 1 2025-11-18 04:10:48.435 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:54132 10 6870 1 2025-11-18 04:06:02.395 00:06:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:11:48.808 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44172 10 6870 1 2025-11-18 04:12:49.210 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37528 10 6870 1 2025-11-18 04:08:02.393 00:06:00.126 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:13:49.611 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48272 10 6870 1 2025-11-18 04:14:09.030 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:14:09.193 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:14:09.200 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:14:09.010 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:14:08.948 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:14:50.012 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51348 10 6870 1 2025-11-18 04:15:50.411 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44770 10 6870 1 2025-11-18 04:16:50.814 00:00:12.930 TCP 1.101.0.1:3000 -> 23.104.0.1:48964 10 6870 1 2025-11-18 04:13:02.397 00:06:00.120 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:17:53.791 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51522 10 6870 1 2025-11-18 04:18:54.151 00:00:10.487 TCP 1.101.0.1:3000 -> 23.104.0.1:42106 10 6870 1 2025-11-18 04:19:09.144 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:19:09.069 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:19:09.186 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:19:09.234 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:19:09.318 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:15:02.394 00:06:00.126 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:19:54.676 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50094 10 6870 1 2025-11-18 04:20:55.108 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33524 10 6870 1 2025-11-18 04:21:55.506 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42232 10 6870 1 2025-11-18 04:22:55.918 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53786 10 6870 1 2025-11-18 04:24:09.399 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:23:56.319 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43748 10 6870 1 2025-11-18 04:24:09.155 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:24:09.226 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:24:09.252 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:24:09.335 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:20:02.398 00:06:00.120 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:24:56.728 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44862 10 6870 1 2025-11-18 04:25:57.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53918 10 6870 1 2025-11-18 04:22:02.398 00:06:00.123 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:26:57.521 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47294 10 6870 1 2025-11-18 04:27:57.922 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:60290 10 6870 1 2025-11-18 04:29:09.398 00:00:00.013 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:29:09.386 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:29:09.306 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:28:58.295 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55212 10 6870 1 2025-11-18 04:29:09.462 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:29:09.286 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:29:58.692 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42024 10 6870 1 2025-11-18 04:30:59.110 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46896 10 6870 1 2025-11-18 04:27:02.401 00:06:00.118 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:31:59.517 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35302 10 6870 1 2025-11-18 04:32:59.923 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33156 10 6870 1 2025-11-18 04:34:09.645 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:34:09.568 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:34:09.254 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:34:09.441 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:29:02.399 00:06:00.123 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:34:09.524 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:34:00.342 00:00:10.467 TCP 1.101.0.1:3000 -> 23.104.0.1:42092 10 6870 1 2025-11-18 04:35:00.848 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:53160 10 6870 1 2025-11-18 04:36:01.269 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43846 10 6870 1 2025-11-18 04:37:01.631 00:00:10.946 TCP 1.101.0.1:3000 -> 23.104.0.1:50926 10 6870 1 2025-11-18 04:38:02.618 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37574 10 6870 1 2025-11-18 04:34:02.402 00:06:00.118 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:39:09.725 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:39:09.659 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:39:09.552 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:39:09.604 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:39:09.687 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:39:03.022 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53154 10 6870 1 2025-11-18 04:40:03.418 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37400 10 6870 1 2025-11-18 04:36:02.400 00:06:00.123 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:41:03.824 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36762 10 6870 1 2025-11-18 04:42:04.229 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57174 10 6870 1 2025-11-18 04:43:04.630 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:52090 10 6870 1 2025-11-18 04:44:09.821 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:44:09.814 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:44:09.712 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:44:09.737 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:44:09.984 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:44:05.030 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34938 10 6870 1 2025-11-18 04:45:05.435 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47332 10 6870 1 2025-11-18 04:41:02.407 00:06:00.115 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:46:05.843 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:33680 10 6870 1 2025-11-18 04:47:06.250 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50524 10 6870 1 2025-11-18 04:43:02.404 00:06:00.121 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:48:06.654 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34524 10 6870 1 2025-11-18 04:49:09.911 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:49:09.835 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:49:09.942 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:49:09.828 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:49:10.194 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:49:07.067 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42486 10 6870 1 2025-11-18 04:50:07.427 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52430 10 6870 1 2025-11-18 04:51:07.830 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34980 10 6870 1 2025-11-18 04:52:08.227 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44032 10 6870 1 2025-11-18 04:48:02.407 00:06:00.116 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:53:08.636 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47162 10 6870 1 2025-11-18 04:54:09.812 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:54:09.899 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:54:09.874 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:54:09.948 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:54:10.030 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:54:09.039 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50414 10 6870 1 2025-11-18 04:50:02.405 00:06:00.120 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:55:09.438 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36100 10 6870 1 2025-11-18 04:56:09.844 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:59556 10 6870 1 2025-11-18 04:57:10.271 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:34276 12 10584 1 2025-11-18 04:58:10.752 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46766 10 6661 1 Summary: total flows: 137, total bytes: 445462, total packets: 1020, avg bps: 923, avg pps: 0, avg bpp: 436 Time window: 2025-11-18 03:54:02 - 2025-11-18 04:58:21 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0034s User: 0.0017s Wall: 0.0018s flows/second: 74947.1 Runtime: 0.0018s