Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 17:59:20.814 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57864 10 6452 1 2025-11-12 18:00:21.216 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:41308 10 6452 1 2025-11-12 18:01:21.666 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:41032 10 6452 1 2025-11-12 18:01:32.500 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 18:01:32.617 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:01:32.564 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:01:32.403 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 18:01:32.647 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 18:02:22.134 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52380 10 6452 1 2025-11-12 18:03:22.546 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35804 10 6452 1 2025-11-12 17:58:59.659 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 18:04:22.907 00:00:10.702 TCP 1.101.0.1:3000 -> 23.104.0.1:44280 10 6452 1 2025-11-12 17:59:59.662 00:06:00.195 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 18:05:23.642 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43404 10 6452 1 2025-11-12 18:06:33.155 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 18:06:33.002 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 18:06:32.709 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:06:33.073 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:06:33.230 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 18:06:24.057 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35284 10 6452 1 2025-11-12 18:07:24.466 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34040 10 6452 1 2025-11-12 18:08:24.865 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47044 10 6452 1 2025-11-12 18:09:25.274 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35800 10 6452 1 2025-11-12 18:10:25.633 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52216 10 6452 1 2025-11-12 18:05:59.660 00:06:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 18:11:32.810 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 18:11:32.424 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:11:32.808 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:11:32.807 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 18:11:32.891 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 18:11:26.036 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54398 10 6452 1 2025-11-12 18:06:59.664 00:06:00.196 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 18:12:26.439 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33698 10 6452 1 2025-11-12 18:13:26.840 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:50542 10 6452 1 2025-11-12 18:14:27.268 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40526 10 6452 1 2025-11-12 18:15:27.671 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43278 10 6452 1 2025-11-12 18:16:33.139 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 18:16:32.641 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 18:16:32.883 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:16:33.057 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:16:32.746 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 18:16:28.108 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:49542 10 6452 1 2025-11-12 18:17:28.519 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51548 10 6452 1 2025-11-12 18:12:59.661 00:06:00.207 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 18:18:28.922 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:37978 10 6452 1 2025-11-12 18:13:59.664 00:06:00.202 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 18:19:29.326 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53008 10 6452 1 2025-11-12 18:20:29.727 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43802 10 6452 1 2025-11-12 18:21:33.284 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 18:21:33.031 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 18:21:32.819 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:21:33.202 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:21:33.150 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 18:21:30.140 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43852 10 6452 1 2025-11-12 18:22:30.499 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:39728 10 6452 1 2025-11-12 18:23:30.953 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42606 10 6452 1 2025-11-12 18:24:31.360 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57044 10 6452 1 2025-11-12 18:19:59.665 00:06:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 18:25:31.768 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48740 10 6452 1 2025-11-12 18:20:59.667 00:06:00.201 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 18:26:33.266 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 18:26:32.834 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 18:26:33.158 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:26:33.183 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:26:33.073 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 18:26:32.178 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51052 10 6452 1 2025-11-12 18:27:32.583 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41796 10 6452 1 2025-11-12 18:28:32.987 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47476 10 6452 1 2025-11-12 18:29:33.403 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43494 10 6452 1 2025-11-12 18:30:33.803 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51254 10 6452 1 2025-11-12 18:31:33.188 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 18:31:33.070 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 18:31:33.187 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:31:32.965 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:31:33.049 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 18:31:34.207 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58976 10 6452 1 2025-11-12 18:26:59.667 00:06:00.207 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 18:32:34.609 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58534 10 6452 1 2025-11-12 18:27:59.670 00:06:00.202 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 18:33:35.013 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57696 10 6452 1 2025-11-12 18:34:35.409 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44160 10 6452 1 2025-11-12 18:35:35.811 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49428 10 6452 1 2025-11-12 18:36:33.343 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 18:36:33.176 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:36:33.304 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:36:33.138 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 18:36:33.385 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 18:36:36.216 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37340 10 6452 1 2025-11-12 18:37:36.618 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57744 10 6452 1 2025-11-12 18:38:36.983 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40934 10 6452 1 2025-11-12 18:33:59.668 00:06:00.208 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 18:39:37.349 00:00:16.535 TCP 1.101.0.1:3000 -> 23.104.0.1:53674 10 6452 1 2025-11-12 18:34:59.670 00:06:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 18:40:43.924 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:37528 10 6452 1 2025-11-12 18:41:33.584 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 18:41:33.488 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 18:41:33.430 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:41:33.501 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:41:33.344 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 18:41:44.314 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35314 10 6452 1 2025-11-12 18:42:44.708 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34158 10 6452 1 2025-11-12 18:43:45.101 00:00:10.502 TCP 1.101.0.1:3000 -> 23.104.0.1:46562 14 14298 1 2025-11-12 18:44:45.642 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49834 10 6452 1 2025-11-12 18:45:46.051 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46038 10 6452 1 2025-11-12 18:40:59.675 00:06:00.207 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 18:46:33.600 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 18:46:33.525 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 18:46:33.507 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:46:33.518 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:46:33.588 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 18:46:46.457 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47358 10 6452 1 2025-11-12 18:41:59.678 00:06:00.202 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 18:47:46.857 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43342 10 6452 1 2025-11-12 18:48:47.271 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:59800 10 6452 1 2025-11-12 18:49:47.697 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60290 10 6452 1 2025-11-12 18:50:48.106 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60648 10 6452 1 2025-11-12 18:51:33.570 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 18:51:33.414 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:51:33.640 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:51:33.568 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 18:51:33.724 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 18:51:48.510 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35602 10 6452 1 2025-11-12 18:47:59.676 00:06:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 18:52:48.912 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47202 10 6452 1 2025-11-12 18:53:49.314 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43302 10 6452 1 2025-11-12 18:48:59.680 00:06:00.201 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 18:54:49.715 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42984 10 6452 1 2025-11-12 18:55:50.109 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51714 10 6452 1 2025-11-12 18:56:33.785 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 18:56:33.770 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 18:56:33.419 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:56:33.701 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 18:56:33.700 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 18:56:50.524 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39194 10 6452 1 2025-11-12 18:57:50.923 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:57304 10 6452 1 Summary: total flows: 135, total bytes: 417410, total packets: 998, avg bps: 942, avg pps: 0, avg bpp: 418 Time window: 2025-11-12 17:58:59 - 2025-11-12 18:58:01 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0033s User: 0.0016s Wall: 0.0023s flows/second: 59285.0 Runtime: 0.0023s