Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-19 23:58:53.184 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36510 10 6452 1 2025-11-20 00:00:02.542 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-19 23:55:03.294 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-20 00:00:02.006 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 00:00:01.764 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:00:02.461 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-19 23:59:53.547 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43436 10 6452 1 2025-11-20 00:00:01.989 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-19 23:55:03.298 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-20 00:00:53.956 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32772 10 6452 1 2025-11-20 00:01:54.359 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50318 10 6452 1 2025-11-20 00:02:54.773 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44844 10 6452 1 2025-11-20 00:03:55.185 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59672 10 6452 1 2025-11-20 00:05:01.816 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 00:05:01.899 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:05:01.614 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:05:01.825 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:05:01.697 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 00:04:55.600 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60258 10 6452 1 2025-11-20 00:05:56.016 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:59588 10 6452 1 2025-11-20 00:02:03.298 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-20 00:02:03.301 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-20 00:06:56.413 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45944 10 6452 1 2025-11-20 00:07:56.817 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59304 10 6452 1 2025-11-20 00:08:57.218 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50060 10 6452 1 2025-11-20 00:10:02.151 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 00:10:01.952 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:10:01.967 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 00:10:01.914 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:10:02.068 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:09:57.624 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36096 10 6452 1 2025-11-20 00:10:58.025 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52056 10 6452 1 2025-11-20 00:11:58.427 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54116 10 6452 1 2025-11-20 00:12:58.828 00:00:11.667 TCP 1.101.0.1:3000 -> 23.104.0.1:47020 10 6452 1 2025-11-20 00:09:03.300 00:06:00.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-20 00:09:03.299 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-20 00:14:00.542 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51126 10 6452 1 2025-11-20 00:15:02.169 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 00:15:02.186 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:15:01.926 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:15:02.166 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:15:02.010 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 00:15:00.948 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40614 10 6452 1 2025-11-20 00:16:01.360 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41734 10 6452 1 2025-11-20 00:17:01.761 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56870 10 6452 1 2025-11-20 00:18:02.172 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53440 10 6452 1 2025-11-20 00:19:02.530 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54700 10 6452 1 2025-11-20 00:20:02.250 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:20:02.162 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 00:20:02.113 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:20:02.245 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:20:02.327 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 00:20:02.934 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:34534 10 6452 1 2025-11-20 00:16:03.299 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-20 00:16:03.303 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-20 00:21:03.353 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42196 10 6452 1 2025-11-20 00:22:03.751 00:00:10.901 TCP 1.101.0.1:3000 -> 23.104.0.1:57442 10 6452 1 2025-11-20 00:23:04.690 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:57954 12 10369 1 2025-11-20 00:24:05.175 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55660 10 6452 1 2025-11-20 00:25:02.533 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 00:25:02.175 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:25:02.494 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 00:25:02.455 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:25:02.450 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:25:05.575 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37564 10 6452 1 2025-11-20 00:26:05.933 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:59538 10 6452 1 2025-11-20 00:27:06.332 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57106 10 6452 1 2025-11-20 00:23:03.302 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-20 00:23:03.303 00:06:00.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-20 00:28:06.738 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52062 10 6452 1 2025-11-20 00:29:07.113 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40972 10 6452 1 2025-11-20 00:30:02.707 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 00:30:02.694 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:30:02.742 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 00:30:02.713 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:30:02.620 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:30:07.520 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53360 10 6452 1 2025-11-20 00:31:07.923 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34746 10 6452 1 2025-11-20 00:32:08.340 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39292 10 6452 1 2025-11-20 00:33:08.705 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58456 10 6452 1 2025-11-20 00:34:09.113 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49988 10 6452 1 2025-11-20 00:30:03.304 00:06:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-20 00:35:02.796 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 00:35:02.483 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:30:03.307 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-20 00:35:02.472 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 00:35:02.535 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:35:02.714 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:35:09.514 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:37196 10 6452 1 2025-11-20 00:36:09.874 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:41840 10 6452 1 2025-11-20 00:37:10.301 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:53262 10 6452 1 2025-11-20 00:38:10.670 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37506 10 6452 1 2025-11-20 00:39:11.096 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43038 10 6452 1 2025-11-20 00:40:02.607 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:40:02.607 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 00:40:02.431 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:40:02.686 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:40:02.769 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 00:40:11.502 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33148 10 6452 1 2025-11-20 00:41:11.903 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60022 10 6452 1 2025-11-20 00:37:03.309 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-20 00:37:03.313 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-20 00:42:12.310 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42358 10 6452 1 2025-11-20 00:43:12.720 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46760 10 6452 1 2025-11-20 00:44:13.128 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44644 10 6452 1 2025-11-20 00:45:02.877 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:45:02.674 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:45:02.673 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 00:45:02.709 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:45:02.959 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 00:45:13.535 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54726 10 6452 1 2025-11-20 00:46:13.938 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:35154 10 6452 1 2025-11-20 00:47:14.318 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39470 10 6452 1 2025-11-20 00:48:14.727 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49470 10 6452 1 2025-11-20 00:44:03.316 00:06:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-20 00:44:03.313 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-20 00:49:15.133 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36552 10 6452 1 2025-11-20 00:50:03.006 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:50:02.816 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 00:50:02.862 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:50:02.826 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:50:02.909 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 00:50:15.495 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48816 10 6452 1 2025-11-20 00:51:15.864 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35702 10 6452 1 2025-11-20 00:52:16.276 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49320 10 6452 1 2025-11-20 00:53:16.677 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60732 10 6452 1 2025-11-20 00:54:17.107 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35216 10 6452 1 2025-11-20 00:55:02.895 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-20 00:55:02.957 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-20 00:55:02.931 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:55:02.829 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-20 00:55:02.913 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-20 00:55:17.510 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60088 10 6452 1 2025-11-20 00:51:03.319 00:06:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-20 00:51:03.318 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-20 00:56:17.923 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57406 10 6452 1 2025-11-20 00:57:18.326 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37060 10 6452 1 2025-11-20 00:58:18.734 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58172 10 6452 1 Summary: total flows: 138, total bytes: 421655, total packets: 1034, avg bps: 886, avg pps: 0, avg bpp: 407 Time window: 2025-11-19 23:55:03 - 2025-11-20 00:58:29 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0024s User: 0.0024s Wall: 0.0018s flows/second: 78814.5 Runtime: 0.0018s