Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 12:58:49.782 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59742 10 6452 1 2025-11-08 12:59:30.860 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 12:59:30.786 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:59:30.684 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:59:30.860 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 12:59:30.768 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 12:59:50.186 00:00:11.057 TCP 1.101.0.1:3000 -> 23.104.0.1:58134 10 6452 1 2025-11-08 13:00:51.281 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58844 10 6452 1 2025-11-08 13:01:51.689 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51938 10 6452 1 2025-11-08 13:02:52.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55164 10 6452 1 2025-11-08 12:58:57.224 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:03:52.514 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60158 10 6452 1 2025-11-08 13:04:30.961 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:04:31.043 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:04:31.130 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:04:31.131 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:04:31.142 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 12:59:57.222 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:04:52.923 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38778 10 6452 1 2025-11-08 13:05:53.345 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43136 10 6452 1 2025-11-08 13:06:53.752 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50364 10 6452 1 2025-11-08 13:07:54.117 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:38594 12 10375 1 2025-11-08 13:08:54.558 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:41614 10 6452 1 2025-11-08 13:09:30.849 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:09:31.189 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:09:31.112 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:09:31.108 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:09:31.032 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:09:54.933 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:42156 10 6452 1 2025-11-08 13:05:57.228 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:10:55.354 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34088 10 6452 1 2025-11-08 13:06:57.224 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:11:55.763 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:32946 10 6452 1 2025-11-08 13:12:56.181 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34202 10 6452 1 2025-11-08 13:13:56.556 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52318 10 6452 1 2025-11-08 13:14:31.501 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:14:31.294 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:14:31.465 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:14:31.419 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:14:31.568 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:14:56.971 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41214 10 6452 1 2025-11-08 13:15:57.331 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38350 10 6452 1 2025-11-08 13:16:57.742 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43240 10 6452 1 2025-11-08 13:12:57.229 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:17:58.147 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38476 10 6452 1 2025-11-08 13:13:57.225 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:18:58.551 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35192 10 6452 1 2025-11-08 13:19:31.790 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:19:31.269 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:19:31.662 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:19:31.390 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:19:31.748 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:19:58.915 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57126 10 6452 1 2025-11-08 13:20:59.315 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51062 10 6452 1 2025-11-08 13:21:59.719 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49990 10 6452 1 2025-11-08 13:23:00.133 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42418 10 6452 1 2025-11-08 13:24:00.535 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43446 10 6452 1 2025-11-08 13:24:31.642 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:24:31.517 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:24:31.463 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:24:31.559 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:24:31.505 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:19:57.231 00:06:00.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:25:00.937 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33792 10 6452 1 2025-11-08 13:20:57.231 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:26:01.358 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56812 10 6452 1 2025-11-08 13:27:01.758 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:48094 10 6452 1 2025-11-08 13:28:02.184 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53500 10 6452 1 2025-11-08 13:29:02.586 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40512 10 6452 1 2025-11-08 13:29:31.505 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:29:31.398 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:29:31.501 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:29:31.502 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:29:31.584 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:30:02.985 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45480 10 6452 1 2025-11-08 13:31:03.397 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49360 10 6452 1 2025-11-08 13:26:57.235 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:32:03.800 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:57674 10 6452 1 2025-11-08 13:27:57.233 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:33:04.179 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59136 10 6452 1 2025-11-08 13:34:04.575 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58824 10 6452 1 2025-11-08 13:34:31.715 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:34:31.626 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:34:31.803 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:34:31.632 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:34:31.701 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:35:04.978 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39730 10 6452 1 2025-11-08 13:36:05.390 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54158 10 6452 1 2025-11-08 13:37:05.766 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37420 10 6452 1 2025-11-08 13:38:06.187 00:00:10.454 TCP 1.101.0.1:3000 -> 23.104.0.1:35374 12 10375 1 2025-11-08 13:33:57.235 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:39:06.670 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:39260 10 6452 1 2025-11-08 13:39:31.607 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:39:31.893 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:39:31.698 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:39:31.617 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:39:31.781 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:34:57.234 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:40:07.131 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48546 10 6452 1 2025-11-08 13:41:07.537 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:47180 10 6452 1 2025-11-08 13:42:07.932 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41628 10 6452 1 2025-11-08 13:43:08.353 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44936 10 6452 1 2025-11-08 13:44:08.758 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56532 10 6452 1 2025-11-08 13:44:31.973 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:44:31.686 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:44:31.871 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:44:31.814 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:44:31.954 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:45:09.166 00:00:11.719 TCP 1.101.0.1:3000 -> 23.104.0.1:34290 10 6452 1 2025-11-08 13:40:57.238 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:46:10.933 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:38924 10 6452 1 2025-11-08 13:41:57.237 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:47:11.364 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43060 10 6452 1 2025-11-08 13:48:11.727 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42536 10 6452 1 2025-11-08 13:49:12.116 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54312 10 6452 1 2025-11-08 13:49:32.042 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:49:31.981 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:49:31.772 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:49:31.864 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:49:31.855 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:50:12.525 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58720 10 6452 1 2025-11-08 13:51:12.928 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58696 10 6452 1 2025-11-08 13:52:13.340 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35528 10 6452 1 2025-11-08 13:47:57.240 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 13:53:13.746 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56764 10 6452 1 2025-11-08 13:48:57.235 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 13:54:14.150 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38114 10 6452 1 2025-11-08 13:54:32.546 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:54:32.283 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:54:32.257 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:54:32.391 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:54:32.340 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:55:14.554 00:00:15.082 TCP 1.101.0.1:3000 -> 23.104.0.1:34472 10 6452 1 2025-11-08 13:56:19.689 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44316 10 6452 1 2025-11-08 13:57:20.106 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39366 10 6452 1 2025-11-08 13:58:20.521 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59504 10 6452 1 Summary: total flows: 136, total bytes: 423862, total packets: 1008, avg bps: 946, avg pps: 0, avg bpp: 420 Time window: 2025-11-08 12:58:49 - 2025-11-08 13:58:30 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0021s User: 0.0021s Wall: 0.0016s flows/second: 84532.5 Runtime: 0.0016s