Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 16:58:40.278 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:32854 10 6452 1 2025-11-18 16:59:24.658 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 16:59:24.441 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 16:59:24.346 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 16:59:24.479 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 16:59:24.576 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 16:59:40.707 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37274 10 6452 1 2025-11-18 17:00:41.115 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46120 10 6452 1 2025-11-18 16:56:02.646 00:06:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 17:01:41.517 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42640 10 6452 1 2025-11-18 17:02:41.916 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:36774 10 6452 1 2025-11-18 16:58:02.645 00:06:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 17:03:42.272 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41420 10 6452 1 2025-11-18 17:04:24.789 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 17:04:24.802 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 17:04:24.677 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:04:24.808 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:04:24.891 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 17:04:42.674 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40698 10 6452 1 2025-11-18 17:05:43.101 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48842 10 6452 1 2025-11-18 17:06:43.459 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51804 10 6452 1 2025-11-18 17:07:43.856 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:55636 10 6452 1 2025-11-18 17:03:02.647 00:06:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 17:08:44.271 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33616 10 6452 1 2025-11-18 17:09:25.304 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 17:09:25.532 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 17:09:25.360 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 17:09:24.997 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:09:25.221 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:09:44.667 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51348 10 6452 1 2025-11-18 17:05:02.646 00:06:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 17:10:45.102 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51180 10 6452 1 2025-11-18 17:11:45.504 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56744 10 6452 1 2025-11-18 17:12:45.872 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37262 10 6452 1 2025-11-18 17:13:46.243 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43444 10 6452 1 2025-11-18 17:14:24.764 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 17:14:24.780 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 17:14:24.680 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 17:14:24.528 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:14:24.682 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:10:02.649 00:06:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 17:14:46.612 00:00:22.798 TCP 1.101.0.1:3000 -> 23.104.0.1:41260 10 6452 1 2025-11-18 17:15:59.454 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51586 10 6452 1 2025-11-18 17:12:02.646 00:06:00.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 17:16:59.864 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:55478 10 6452 1 2025-11-18 17:18:00.245 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32850 10 6452 1 2025-11-18 17:19:00.649 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:49424 11 6504 1 2025-11-18 17:19:24.975 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 17:19:24.787 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:19:24.904 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:19:24.853 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 17:19:24.987 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 17:20:01.116 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35208 10 6452 1 2025-11-18 17:21:01.518 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40368 10 6452 1 2025-11-18 17:17:02.652 00:06:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 17:22:01.923 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59840 10 6452 1 2025-11-18 17:23:02.330 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50206 10 6452 1 2025-11-18 17:19:02.649 00:06:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 17:24:02.736 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45032 10 6452 1 2025-11-18 17:24:24.922 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 17:24:24.851 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:24:25.266 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 17:24:25.104 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 17:24:25.184 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:25:03.149 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36834 10 6452 1 2025-11-18 17:26:03.546 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45826 10 6452 1 2025-11-18 17:27:03.945 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37990 10 6452 1 2025-11-18 17:28:04.353 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45012 10 6452 1 2025-11-18 17:24:02.653 00:06:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 17:29:04.755 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:39426 10 6452 1 2025-11-18 17:29:25.091 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 17:29:25.155 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 17:29:25.131 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:29:25.152 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:29:25.237 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 17:30:05.181 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:35970 10 6452 1 2025-11-18 17:26:02.651 00:06:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 17:31:05.614 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47632 10 6452 1 2025-11-18 17:32:06.020 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36468 10 6452 1 2025-11-18 17:33:06.379 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50354 10 6452 1 2025-11-18 17:34:06.780 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59230 10 6452 1 2025-11-18 17:34:25.214 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 17:34:25.198 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 17:34:25.209 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:34:25.259 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:34:25.343 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 17:35:07.188 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50460 10 6452 1 2025-11-18 17:31:02.654 00:06:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 17:36:07.548 00:00:14.789 TCP 1.101.0.1:3000 -> 23.104.0.1:59720 10 6452 1 2025-11-18 17:37:12.376 00:00:10.314 TCP 1.101.0.1:3000 -> 23.104.0.1:52732 10 6452 1 2025-11-18 17:33:02.653 00:06:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 17:38:12.729 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42488 10 6452 1 2025-11-18 17:39:13.111 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37952 10 6452 1 2025-11-18 17:39:24.912 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:39:25.222 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 17:39:25.316 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 17:39:25.272 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:39:25.355 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 17:40:13.475 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52394 10 6452 1 2025-11-18 17:41:13.877 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:44668 10 6452 1 2025-11-18 17:42:14.240 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47384 10 6452 1 2025-11-18 17:38:02.656 00:06:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 17:43:14.637 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52042 10 6452 1 2025-11-18 17:44:25.577 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 17:44:25.636 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 17:44:25.639 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 17:44:25.566 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:44:25.494 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:44:15.034 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47722 10 6452 1 2025-11-18 17:40:02.654 00:06:00.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 17:45:15.438 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45892 10 6452 1 2025-11-18 17:46:15.841 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:49232 11 6492 1 2025-11-18 17:47:16.226 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:51002 12 10375 1 2025-11-18 17:48:16.661 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35726 10 6452 1 2025-11-18 17:49:25.487 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 17:49:25.537 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 17:49:25.478 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 17:49:17.021 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35538 10 6452 1 2025-11-18 17:49:25.471 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:49:25.405 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:45:02.659 00:06:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 17:50:17.439 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35682 10 6452 1 2025-11-18 17:51:17.845 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:42598 10 6452 1 2025-11-18 17:47:02.658 00:06:00.148 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 17:52:18.273 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54886 10 6452 1 2025-11-18 17:53:18.678 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45050 10 6452 1 2025-11-18 17:54:25.727 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 17:54:25.593 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 17:54:25.645 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 17:54:25.564 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:54:25.646 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:54:19.116 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46676 10 6452 1 2025-11-18 17:55:19.520 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56938 10 6452 1 2025-11-18 17:56:19.886 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:48892 12 6556 1 2025-11-18 17:52:02.661 00:06:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 17:57:20.311 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57128 10 6452 1 2025-11-18 17:58:20.711 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:45104 10 6452 1 Summary: total flows: 137, total bytes: 420996, total packets: 1024, avg bps: 898, avg pps: 0, avg bpp: 411 Time window: 2025-11-18 16:56:02 - 2025-11-18 17:58:31 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0036s User: 0.0012s Wall: 0.0025s flows/second: 53748.0 Runtime: 0.0026s