Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 15:59:23.544 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52356 10 6452 1 2025-11-09 16:00:03.688 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 16:00:03.607 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 16:00:03.514 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:00:03.607 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:00:03.606 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 16:00:23.905 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38630 10 6452 1 2025-11-09 15:55:57.895 00:06:00.056 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 16:01:24.273 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55660 10 6452 1 2025-11-09 15:56:57.894 00:06:00.060 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 16:02:24.636 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53814 10 6452 1 2025-11-09 16:03:25.055 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51718 10 6452 1 2025-11-09 16:04:25.461 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41980 10 6452 1 2025-11-09 16:05:03.674 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 16:05:03.566 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:05:03.671 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:05:03.721 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 16:05:03.753 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 16:05:25.819 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59328 10 6452 1 2025-11-09 16:06:26.224 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56930 10 6452 1 2025-11-09 16:07:26.630 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41748 10 6452 1 2025-11-09 16:02:57.896 00:06:00.055 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 16:08:27.038 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49738 10 6452 1 2025-11-09 16:03:57.895 00:06:00.060 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 16:09:27.440 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:34514 10 6452 1 2025-11-09 16:10:03.795 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 16:10:03.866 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 16:10:03.687 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:10:03.713 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:10:03.763 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 16:10:27.861 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41244 10 6452 1 2025-11-09 16:11:28.270 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:54066 10 6452 1 2025-11-09 16:12:28.701 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35662 10 6452 1 2025-11-09 16:13:29.073 00:00:10.508 TCP 1.101.0.1:3000 -> 23.104.0.1:49744 14 14292 1 2025-11-09 16:14:29.616 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41786 10 6452 1 2025-11-09 16:09:57.903 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 16:15:03.802 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 16:15:03.657 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:15:03.721 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:15:03.719 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 16:15:03.804 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 16:15:30.023 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35830 10 6452 1 2025-11-09 16:10:57.894 00:06:00.062 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 16:16:30.427 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48732 10 6452 1 2025-11-09 16:17:30.840 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:38478 10 6452 1 2025-11-09 16:18:31.270 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45086 10 6452 1 2025-11-09 16:19:31.635 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55526 10 6452 1 2025-11-09 16:20:03.798 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 16:20:03.925 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 16:20:03.815 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:20:03.714 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:20:03.813 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 16:20:32.037 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42986 10 6452 1 2025-11-09 16:21:32.444 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52468 10 6452 1 2025-11-09 16:16:57.899 00:06:00.057 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 16:22:32.845 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:46976 10 6452 1 2025-11-09 16:17:57.898 00:06:00.061 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 16:23:33.229 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46600 10 6452 1 2025-11-09 16:24:33.625 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:34316 10 6452 1 2025-11-09 16:25:03.947 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 16:25:03.897 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:25:04.114 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:25:03.884 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 16:25:04.198 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 16:25:33.984 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36666 10 6452 1 2025-11-09 16:26:34.389 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34072 10 6452 1 2025-11-09 16:27:34.791 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45272 10 6452 1 2025-11-09 16:28:35.198 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59506 10 6452 1 2025-11-09 16:23:57.901 00:06:00.056 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 16:29:35.602 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51024 10 6452 1 2025-11-09 16:30:04.052 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 16:30:03.935 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:30:04.226 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:30:04.228 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 16:24:57.898 00:06:00.061 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 16:30:04.307 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 16:30:36.003 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51848 10 6452 1 2025-11-09 16:31:36.408 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57216 10 6452 1 2025-11-09 16:32:36.811 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37936 10 6452 1 2025-11-09 16:33:37.217 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46054 10 6452 1 2025-11-09 16:34:37.614 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43336 10 6452 1 2025-11-09 16:35:04.348 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 16:35:03.808 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:35:04.268 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:35:04.346 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 16:35:04.350 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 16:35:37.980 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37218 10 6452 1 2025-11-09 16:30:57.902 00:06:00.057 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 16:36:38.391 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:39268 10 6452 1 2025-11-09 16:31:57.898 00:06:00.063 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 16:37:38.818 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41798 10 6452 1 2025-11-09 16:38:39.218 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52796 10 6452 1 2025-11-09 16:39:39.632 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:49246 10 6452 1 2025-11-09 16:40:04.132 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 16:40:03.943 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:40:04.228 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:40:04.137 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 16:40:04.310 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 16:40:40.015 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55588 10 6452 1 2025-11-09 16:41:40.420 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33850 10 6452 1 2025-11-09 16:42:40.821 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:34582 12 10369 1 2025-11-09 16:37:57.903 00:06:00.055 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 16:43:41.263 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43676 10 6452 1 2025-11-09 16:38:57.901 00:06:00.060 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 16:44:41.626 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56222 10 6452 1 2025-11-09 16:45:04.403 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 16:45:04.487 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 16:45:04.347 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:45:04.320 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:45:04.492 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 16:45:42.036 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42326 10 6452 1 2025-11-09 16:46:42.402 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51420 10 6452 1 2025-11-09 16:47:42.804 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49842 10 6452 1 2025-11-09 16:48:43.215 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54408 10 6452 1 2025-11-09 16:49:43.577 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33702 10 6452 1 2025-11-09 16:44:57.904 00:06:00.057 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 16:50:04.666 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 16:50:04.389 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:50:04.668 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:50:04.862 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 16:50:04.750 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 16:50:43.983 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35414 10 6452 1 2025-11-09 16:45:57.904 00:06:00.061 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 16:51:44.394 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35762 10 6452 1 2025-11-09 16:52:44.757 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:44558 10 6452 1 2025-11-09 16:53:45.181 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56960 10 6452 1 2025-11-09 16:54:45.588 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53576 10 6452 1 2025-11-09 16:55:04.702 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 16:55:04.507 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 16:55:04.532 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:55:04.620 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 16:55:04.617 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 16:55:45.949 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50194 10 6452 1 2025-11-09 16:56:46.358 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44174 10 6452 1 2025-11-09 16:51:57.907 00:06:00.058 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 16:57:46.755 00:00:10.931 TCP 1.101.0.1:3000 -> 23.104.0.1:50320 10 6452 1 2025-11-09 16:52:57.904 00:06:00.063 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 137, total bytes: 423043, total packets: 1028, avg bps: 895, avg pps: 0, avg bpp: 411 Time window: 2025-11-09 15:55:57 - 2025-11-09 16:58:57 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0042s User: 0.0010s Wall: 0.0013s flows/second: 107788.3 Runtime: 0.0013s