Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 18:59:16.018 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47482 10 6452 1 2025-11-22 19:00:16.418 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53884 10 6452 1 2025-11-22 18:57:04.678 00:05:00.508 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:01:24.173 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:01:24.173 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:01:24.092 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:01:24.106 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:01:24.161 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:01:16.781 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47294 10 6452 1 2025-11-22 18:58:04.676 00:05:00.512 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:02:17.186 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:48268 10 6452 1 2025-11-22 19:03:17.574 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49462 10 6452 1 2025-11-22 19:04:17.975 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:36954 10 6452 1 2025-11-22 19:05:18.371 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47544 10 6452 1 2025-11-22 19:06:24.384 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:06:24.302 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:06:24.469 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:06:24.451 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:06:24.535 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:06:18.772 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35320 10 6452 1 2025-11-22 19:03:04.697 00:05:00.494 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:07:19.191 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44812 10 6452 1 2025-11-22 19:04:04.695 00:05:00.499 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:08:19.600 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43744 10 6452 1 2025-11-22 19:09:20.007 00:00:10.474 TCP 1.101.0.1:3000 -> 23.104.0.1:48152 14 14286 1 2025-11-22 19:10:20.522 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41090 10 6452 1 2025-11-22 19:11:24.551 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:11:24.460 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:11:24.288 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:11:24.297 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:11:24.467 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:11:20.882 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41214 10 6452 1 2025-11-22 19:12:21.247 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47762 10 6452 1 2025-11-22 19:09:04.697 00:05:00.496 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:13:21.656 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41190 10 6452 1 2025-11-22 19:10:04.699 00:05:00.499 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:14:22.070 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42468 10 6452 1 2025-11-22 19:15:22.433 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:59836 10 6452 1 2025-11-22 19:16:24.816 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:16:25.096 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:16:25.044 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:16:25.144 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:16:25.127 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:16:22.830 00:00:12.006 TCP 1.101.0.1:3000 -> 23.104.0.1:40738 12 6556 1 2025-11-22 19:17:24.869 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34720 10 6452 1 2025-11-22 19:18:25.238 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59194 10 6452 1 2025-11-22 19:15:04.701 00:05:00.493 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:19:25.635 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:43964 12 10375 1 2025-11-22 19:16:04.698 00:05:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:20:26.122 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42294 10 6452 1 2025-11-22 19:21:24.752 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:21:24.725 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:21:24.727 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:21:24.446 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:21:24.671 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:21:26.531 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35040 10 6452 1 2025-11-22 19:22:26.932 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54114 10 6452 1 2025-11-22 19:23:27.354 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45360 10 6452 1 2025-11-22 19:24:27.761 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43218 10 6452 1 2025-11-22 19:21:04.704 00:05:00.492 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:25:28.135 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56142 10 6452 1 2025-11-22 19:22:04.702 00:05:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:26:24.646 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:26:24.648 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:26:24.475 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:26:24.643 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:26:24.727 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:26:28.553 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42694 10 6452 1 2025-11-22 19:27:28.955 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34996 10 6452 1 2025-11-22 19:28:29.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49998 10 6452 1 2025-11-22 19:29:29.761 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:52056 10 6452 1 2025-11-22 19:30:30.178 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56240 10 6452 1 2025-11-22 19:27:04.706 00:05:00.492 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:31:24.801 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:31:24.777 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:31:24.786 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:31:24.688 00:00:00.017 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:31:24.883 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:31:30.578 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55436 10 6452 1 2025-11-22 19:28:04.702 00:05:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:32:30.946 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:35206 10 6452 1 2025-11-22 19:33:31.398 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54174 10 6452 1 2025-11-22 19:34:31.804 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32942 10 6452 1 2025-11-22 19:35:32.215 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52684 10 6452 1 2025-11-22 19:36:24.930 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:36:24.801 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:36:24.924 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:36:24.883 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:36:24.990 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:36:32.615 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56410 10 6452 1 2025-11-22 19:33:04.706 00:05:00.493 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:37:33.018 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55924 10 6452 1 2025-11-22 19:34:04.703 00:05:00.500 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:38:33.426 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46290 10 6452 1 2025-11-22 19:39:33.830 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51872 10 6452 1 2025-11-22 19:40:34.229 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35484 10 6452 1 2025-11-22 19:41:24.895 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:41:24.891 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:41:24.897 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:41:24.823 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:41:24.814 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:41:34.632 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39764 10 6452 1 2025-11-22 19:42:35.036 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35512 10 6452 1 2025-11-22 19:39:04.709 00:05:00.497 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:43:35.443 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57030 10 6452 1 2025-11-22 19:40:04.707 00:05:00.502 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:44:35.805 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:38638 10 6452 1 2025-11-22 19:45:36.181 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52144 10 6452 1 2025-11-22 19:46:24.799 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:46:25.055 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:46:25.113 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:46:25.108 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:46:25.192 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:46:36.587 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51418 10 6452 1 2025-11-22 19:47:36.984 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56498 10 6452 1 2025-11-22 19:48:37.351 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43400 10 6452 1 2025-11-22 19:45:04.710 00:05:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:49:37.751 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53716 10 6452 1 2025-11-22 19:46:04.708 00:05:00.504 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:50:38.121 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56502 10 6452 1 2025-11-22 19:51:25.358 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:51:25.281 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:51:25.126 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:51:25.211 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:51:25.293 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:51:38.519 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:38474 10 6452 1 2025-11-22 19:52:38.878 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60242 10 6452 1 2025-11-22 19:53:39.282 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43734 10 6452 1 2025-11-22 19:54:39.644 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49282 10 6452 1 2025-11-22 19:51:04.711 00:05:00.497 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:55:40.055 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44800 10 6452 1 2025-11-22 19:52:04.708 00:05:00.503 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:56:25.372 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:56:25.287 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:56:25.209 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:56:25.065 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:56:25.290 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:56:40.458 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56718 10 6452 1 2025-11-22 19:57:40.859 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54938 10 6452 1 Summary: total flows: 139, total bytes: 422409, total packets: 1018, avg bps: 926, avg pps: 0, avg bpp: 414 Time window: 2025-11-22 18:57:04 - 2025-11-22 19:57:51 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0030s User: 0.0020s Wall: 0.0026s flows/second: 53462.5 Runtime: 0.0026s