Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 21:59:32.881 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49706 10 6452 1 2025-11-22 22:00:33.285 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:40576 10 6452 1 2025-11-22 21:57:04.754 00:05:00.518 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 22:01:27.957 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 22:01:27.905 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 22:01:27.851 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:01:27.950 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:01:28.034 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 22:01:33.649 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55110 10 6452 1 2025-11-22 21:58:04.751 00:05:00.524 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 22:02:34.045 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53894 10 6452 1 2025-11-22 22:03:34.448 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44878 10 6452 1 2025-11-22 22:04:34.849 00:00:10.457 TCP 1.101.0.1:3000 -> 23.104.0.1:40312 12 10369 1 2025-11-22 22:05:35.350 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:35462 10 6452 1 2025-11-22 22:06:27.943 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 22:06:27.786 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 22:06:27.880 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:06:27.956 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:06:28.039 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 22:06:35.755 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34424 10 6452 1 2025-11-22 22:03:04.753 00:05:00.522 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 22:07:36.154 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60702 10 6452 1 2025-11-22 22:04:04.751 00:05:00.526 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 22:08:36.519 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35612 10 6452 1 2025-11-22 22:09:36.920 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39568 10 6452 1 2025-11-22 22:10:37.321 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51962 10 6452 1 2025-11-22 22:11:28.401 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 22:11:28.232 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 22:11:28.373 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 22:11:28.235 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:11:28.318 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:11:37.730 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36484 10 6452 1 2025-11-22 22:12:38.135 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35578 10 6452 1 2025-11-22 22:09:04.754 00:05:00.522 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 22:13:38.539 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37024 10 6452 1 2025-11-22 22:10:04.751 00:05:00.528 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 22:14:38.947 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:54070 13 6608 1 2025-11-22 22:15:39.379 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48028 10 6452 1 2025-11-22 22:16:27.961 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 22:16:28.284 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 22:16:28.106 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:16:28.139 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:16:28.222 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 22:16:39.788 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48650 10 6452 1 2025-11-22 22:17:40.191 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44106 10 6452 1 2025-11-22 22:18:40.592 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50494 10 6452 1 2025-11-22 22:15:04.757 00:05:00.537 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 22:19:41.001 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43016 10 6452 1 2025-11-22 22:16:04.755 00:05:00.544 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 22:20:41.397 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56996 10 6452 1 2025-11-22 22:21:28.274 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 22:21:28.411 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 22:21:28.256 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:21:28.130 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:21:28.213 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 22:21:41.805 00:00:10.516 TCP 1.101.0.1:3000 -> 23.104.0.1:34038 10 6452 1 2025-11-22 22:22:42.361 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60000 10 6452 1 2025-11-22 22:23:42.765 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55354 10 6452 1 2025-11-22 22:24:43.179 00:00:10.855 TCP 1.101.0.1:3000 -> 23.104.0.1:53028 10 6452 1 2025-11-22 22:21:04.759 00:05:00.536 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 22:25:44.095 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60976 10 6452 1 2025-11-22 22:22:04.758 00:05:00.541 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 22:26:28.395 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 22:26:28.391 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 22:26:28.147 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:26:28.300 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:26:28.384 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 22:26:44.493 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51702 10 6452 1 2025-11-22 22:27:44.893 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58398 10 6452 1 2025-11-22 22:28:45.301 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53826 10 6452 1 2025-11-22 22:29:45.710 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55098 10 6452 1 2025-11-22 22:30:46.116 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52046 10 6452 1 2025-11-22 22:27:04.761 00:05:00.542 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 22:31:28.418 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 22:31:28.409 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 22:31:28.355 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:31:28.246 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:31:28.328 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 22:31:46.477 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45460 10 6452 1 2025-11-22 22:28:04.759 00:05:00.543 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 22:32:46.893 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49446 12 6556 1 2025-11-22 22:33:47.295 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56408 10 6452 1 2025-11-22 22:34:47.698 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57188 10 6452 1 2025-11-22 22:35:48.125 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58058 10 6452 1 2025-11-22 22:36:28.239 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 22:36:28.445 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 22:36:28.298 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:36:28.443 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:36:28.527 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 22:36:48.536 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35084 10 6452 1 2025-11-22 22:33:04.763 00:05:00.553 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 22:37:48.938 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55630 10 6452 1 2025-11-22 22:34:04.761 00:05:00.559 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 22:38:49.353 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42996 10 6452 1 2025-11-22 22:39:49.714 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36064 10 6452 1 2025-11-22 22:40:50.135 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34186 10 6452 1 2025-11-22 22:41:28.881 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 22:41:28.797 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 22:41:28.678 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 22:41:28.676 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:41:28.798 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:41:50.554 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60460 10 6452 1 2025-11-22 22:42:50.935 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:49452 10 6452 1 2025-11-22 22:39:04.764 00:05:00.554 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 22:43:51.318 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53374 10 6452 1 2025-11-22 22:40:04.762 00:05:00.560 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 22:44:51.722 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45602 10 6452 1 2025-11-22 22:45:52.106 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53606 10 6452 1 2025-11-22 22:46:28.794 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 22:46:28.894 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 22:46:28.692 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:46:29.064 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:46:29.146 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 22:46:52.507 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46916 10 6452 1 2025-11-22 22:47:52.912 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45144 10 6452 1 2025-11-22 22:48:53.281 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39682 10 6452 1 2025-11-22 22:45:04.765 00:05:00.554 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 22:49:53.641 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51650 10 6452 1 2025-11-22 22:46:04.763 00:05:00.559 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 22:50:54.001 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60530 10 6452 1 2025-11-22 22:51:28.979 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:51:28.675 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 22:51:28.887 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 22:51:28.982 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:51:29.061 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 22:51:54.403 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49982 10 6452 1 2025-11-22 22:52:54.805 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47258 10 6452 1 2025-11-22 22:53:55.214 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60420 10 6452 1 2025-11-22 22:54:55.612 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41004 10 6452 1 2025-11-22 22:51:04.767 00:05:00.577 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 22:55:56.010 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57102 10 6452 1 2025-11-22 22:52:04.763 00:05:00.583 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 22:56:28.963 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 22:56:28.778 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 22:56:28.915 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:56:28.854 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 22:56:28.936 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 22:56:56.413 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59694 10 6452 1 2025-11-22 22:57:56.813 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:36156 10 6452 1 Summary: total flows: 139, total bytes: 414725, total packets: 1017, avg bps: 905, avg pps: 0, avg bpp: 407 Time window: 2025-11-22 21:57:04 - 2025-11-22 22:58:07 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0039s User: 0.0010s Wall: 0.0020s flows/second: 69671.2 Runtime: 0.0020s