Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 14:58:45.513 00:00:11.108 TCP 1.101.0.1:3000 -> 23.104.0.1:60290 10 6452 1 2025-11-08 14:59:33.358 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:59:33.353 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 14:59:33.356 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 14:59:33.384 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:59:33.440 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 14:59:46.643 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48072 10 6452 1 2025-11-08 15:00:47.085 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39020 10 6452 1 2025-11-08 15:01:47.445 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37368 10 6452 1 2025-11-08 15:02:47.808 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:47324 10 6452 1 2025-11-08 14:57:57.258 00:06:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 15:03:48.220 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:51644 11 6504 1 2025-11-08 14:58:57.257 00:06:00.099 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 15:04:33.481 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 15:04:33.399 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:04:33.628 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 15:04:33.491 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 15:04:33.228 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:04:48.670 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40046 10 6452 1 2025-11-08 15:05:49.102 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41894 10 6452 1 2025-11-08 15:06:49.505 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59292 10 6452 1 2025-11-08 15:07:49.905 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42202 10 6452 1 2025-11-08 15:08:50.309 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47834 10 6452 1 2025-11-08 15:09:34.106 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:09:34.112 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 15:09:33.740 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 15:09:33.594 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:09:34.188 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 15:04:57.259 00:06:00.095 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 15:09:50.710 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34328 10 6452 1 2025-11-08 15:05:57.256 00:06:00.100 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 15:10:51.112 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60876 10 6452 1 2025-11-08 15:11:51.515 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53198 10 6452 1 2025-11-08 15:12:51.924 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56422 10 6452 1 2025-11-08 15:13:52.337 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48434 10 6452 1 2025-11-08 15:14:33.789 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 15:14:33.881 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:14:33.444 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:14:33.665 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 15:14:33.526 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 15:14:52.743 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36336 10 6452 1 2025-11-08 15:15:53.151 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45988 10 6452 1 2025-11-08 15:11:57.262 00:06:00.101 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 15:16:53.558 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43138 10 6452 1 2025-11-08 15:12:57.259 00:06:00.106 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 15:17:53.961 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58870 10 6452 1 2025-11-08 15:18:54.370 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55230 10 6452 1 2025-11-08 15:19:33.629 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 15:19:33.568 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:19:33.857 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:19:33.805 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 15:19:33.941 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 15:19:54.770 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:41952 10 6452 1 2025-11-08 15:20:55.140 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36542 10 6452 1 2025-11-08 15:21:55.544 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39858 10 6452 1 2025-11-08 15:22:55.908 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:59058 12 10375 1 2025-11-08 15:18:57.262 00:06:00.106 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 15:23:56.389 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49040 10 6452 1 2025-11-08 15:24:33.714 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 15:24:33.755 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:24:33.913 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:24:33.809 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 15:24:33.994 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 15:19:57.262 00:06:00.110 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 15:24:56.796 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:39044 10 6452 1 2025-11-08 15:25:57.181 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47136 10 6452 1 2025-11-08 15:26:57.544 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55448 10 6452 1 2025-11-08 15:27:57.950 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:58762 10 6452 1 2025-11-08 15:28:58.364 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42994 10 6452 1 2025-11-08 15:29:34.399 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 15:29:34.183 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:29:33.950 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:29:34.348 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 15:29:34.033 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 15:29:58.766 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51534 10 6452 1 2025-11-08 15:25:57.265 00:06:00.106 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 15:30:59.187 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:57048 10 6452 1 2025-11-08 15:26:57.262 00:06:00.111 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 15:31:59.556 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37142 10 6452 1 2025-11-08 15:32:59.968 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55766 10 6452 1 2025-11-08 15:34:00.383 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44512 10 6452 1 2025-11-08 15:34:34.261 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 15:34:33.873 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:34:34.175 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:34:34.222 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 15:34:34.257 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 15:35:00.782 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57136 10 6452 1 2025-11-08 15:36:01.141 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:37798 10 6452 1 2025-11-08 15:37:01.526 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41924 10 6452 1 2025-11-08 15:32:57.264 00:06:00.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 15:38:01.927 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:44570 10 6452 1 2025-11-08 15:33:57.262 00:06:00.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 15:39:02.354 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:52260 10 6452 1 2025-11-08 15:39:34.388 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 15:39:34.304 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 15:39:33.806 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:39:34.304 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:39:34.173 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 15:40:02.712 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35114 10 6452 1 2025-11-08 15:41:03.116 00:00:10.673 TCP 1.101.0.1:3000 -> 23.104.0.1:53882 10 6452 1 2025-11-08 15:42:03.828 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58678 10 6452 1 2025-11-08 15:43:04.187 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57966 10 6452 1 2025-11-08 15:44:04.595 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43594 10 6452 1 2025-11-08 15:44:34.300 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 15:44:34.320 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:44:34.433 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:44:34.004 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 15:44:34.516 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 15:39:57.267 00:06:00.114 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 15:45:05.004 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44376 10 6452 1 2025-11-08 15:40:57.265 00:06:00.120 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 15:46:05.407 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39930 10 6452 1 2025-11-08 15:47:05.809 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:50406 10 6452 1 2025-11-08 15:48:06.187 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38922 10 6452 1 2025-11-08 15:49:06.593 00:00:11.157 TCP 1.101.0.1:3000 -> 23.104.0.1:58674 10 6452 1 2025-11-08 15:49:34.289 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 15:49:34.236 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:49:34.430 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:49:34.284 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 15:49:34.514 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 15:50:07.783 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51472 10 6452 1 2025-11-08 15:51:08.188 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53510 10 6452 1 2025-11-08 15:46:57.267 00:06:00.116 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 15:52:08.551 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50912 10 6452 1 2025-11-08 15:47:57.264 00:06:00.121 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 15:53:08.949 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35948 10 6452 1 2025-11-08 15:54:09.364 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43636 10 6452 1 2025-11-08 15:54:34.399 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 15:54:34.503 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:54:34.525 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 15:54:34.529 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 15:54:34.608 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 15:55:09.725 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33760 10 6452 1 2025-11-08 15:56:10.138 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49198 10 6452 1 2025-11-08 15:57:10.503 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43556 10 6452 1 2025-11-08 15:58:10.914 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53536 10 6452 1 Summary: total flows: 136, total bytes: 419991, total packets: 1007, avg bps: 927, avg pps: 0, avg bpp: 417 Time window: 2025-11-08 14:57:57 - 2025-11-08 15:58:21 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0020s User: 0.0030s Wall: 0.0019s flows/second: 70033.8 Runtime: 0.0020s