Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 03:59:22.513 00:00:10.475 TCP 1.101.0.1:3000 -> 23.104.0.1:34874 10 6452 1 2025-11-15 04:00:23.062 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52260 10 6452 1 2025-11-15 04:01:23.472 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47716 10 6452 1 2025-11-15 04:02:23.878 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:60578 10 6452 1 2025-11-15 04:02:41.969 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:02:42.236 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 04:02:42.304 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 04:02:42.145 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:02:42.051 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 03:59:00.888 00:05:00.184 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 04:03:24.273 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55602 10 6452 1 2025-11-15 04:00:00.885 00:05:00.189 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 04:04:24.678 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50562 10 6452 1 2025-11-15 04:05:25.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46724 10 6452 1 2025-11-15 04:06:25.511 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43420 10 6452 1 2025-11-15 04:07:25.915 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45960 10 6452 1 2025-11-15 04:07:42.313 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 04:07:42.436 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 04:07:42.525 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:07:42.230 00:00:00.034 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:07:42.350 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 04:08:26.318 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59950 10 6452 1 2025-11-15 04:05:00.887 00:05:00.184 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 04:09:26.698 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37034 10 6452 1 2025-11-15 04:06:00.885 00:05:00.189 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 04:10:27.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55172 10 6452 1 2025-11-15 04:11:27.515 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38440 10 6452 1 2025-11-15 04:12:27.923 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:35294 10 6452 1 2025-11-15 04:12:42.730 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:12:42.731 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 04:12:42.728 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 04:12:42.892 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:12:42.812 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 04:13:28.348 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42238 10 6452 1 2025-11-15 04:14:28.756 00:00:16.716 TCP 1.101.0.1:3000 -> 23.104.0.1:46300 10 6452 1 2025-11-15 04:11:00.893 00:05:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 04:15:35.513 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34622 10 6452 1 2025-11-15 04:12:00.890 00:05:00.187 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 04:16:35.915 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51294 10 6452 1 2025-11-15 04:17:42.570 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 04:17:42.445 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:17:42.519 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:17:42.631 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 04:17:42.602 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 04:17:36.313 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42096 10 6452 1 2025-11-15 04:18:36.713 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55224 10 6452 1 2025-11-15 04:19:37.115 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36260 10 6452 1 2025-11-15 04:20:37.524 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:43494 10 6452 1 2025-11-15 04:17:00.893 00:05:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 04:21:37.944 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42242 10 6452 1 2025-11-15 04:18:00.894 00:05:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 04:22:42.912 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 04:22:43.166 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 04:22:42.963 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:22:42.829 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:22:42.967 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 04:22:38.352 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45824 10 6452 1 2025-11-15 04:23:38.755 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:56866 10 6452 1 2025-11-15 04:24:39.180 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39924 10 6452 1 2025-11-15 04:25:39.547 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38676 10 6452 1 2025-11-15 04:26:39.948 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:54600 10 6452 1 2025-11-15 04:23:00.901 00:05:00.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 04:27:42.784 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 04:27:42.481 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:27:42.625 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:27:42.627 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 04:27:42.708 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 04:27:40.322 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37426 10 6452 1 2025-11-15 04:24:00.899 00:05:00.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 04:28:40.727 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50024 10 6452 1 2025-11-15 04:29:41.113 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:56710 10 6452 1 2025-11-15 04:30:41.475 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45456 10 6452 1 2025-11-15 04:31:41.878 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45796 10 6452 1 2025-11-15 04:32:42.908 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:32:42.673 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 04:32:42.835 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 04:32:42.620 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:32:42.990 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 04:32:42.281 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36150 10 6452 1 2025-11-15 04:29:00.903 00:05:00.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 04:33:42.645 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46068 10 6452 1 2025-11-15 04:30:00.905 00:05:00.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 04:34:43.060 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37302 10 6452 1 2025-11-15 04:35:43.464 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43578 10 6452 1 2025-11-15 04:36:43.871 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:37788 10 6452 1 2025-11-15 04:37:43.064 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 04:37:42.734 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:37:43.083 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:37:43.068 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 04:37:43.165 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 04:37:44.241 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33658 10 6452 1 2025-11-15 04:38:44.601 00:00:10.872 TCP 1.101.0.1:3000 -> 23.104.0.1:60786 10 6452 1 2025-11-15 04:35:00.906 00:05:00.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 04:39:45.516 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56882 10 6452 1 2025-11-15 04:36:00.905 00:05:00.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 04:40:45.916 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:39388 12 10375 1 2025-11-15 04:41:46.356 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35758 10 6452 1 2025-11-15 04:42:43.217 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 04:42:43.167 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:42:43.213 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:42:43.025 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 04:42:43.296 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 04:42:46.766 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41278 10 6452 1 2025-11-15 04:43:47.175 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53898 10 6452 1 2025-11-15 04:44:47.583 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41202 10 6452 1 2025-11-15 04:41:00.910 00:05:00.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 04:42:00.907 00:05:00.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 04:45:48.000 00:00:22.584 TCP 1.101.0.1:3000 -> 23.104.0.1:53350 10 6452 1 2025-11-15 04:47:00.631 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47334 10 6452 1 2025-11-15 04:47:43.362 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 04:47:43.117 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:47:43.309 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:47:43.239 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 04:47:43.391 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 04:48:01.032 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43590 10 6452 1 2025-11-15 04:49:01.395 00:00:10.749 TCP 1.101.0.1:3000 -> 23.104.0.1:44580 10 6452 1 2025-11-15 04:50:02.182 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55498 10 6452 1 2025-11-15 04:47:00.912 00:05:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 04:51:02.544 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52510 10 6452 1 2025-11-15 04:48:00.910 00:05:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 04:52:02.944 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45594 10 6452 1 2025-11-15 04:52:43.303 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 04:52:43.329 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:52:43.306 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:52:43.361 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 04:52:43.390 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 04:53:03.353 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37856 10 6452 1 2025-11-15 04:54:03.760 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:58992 10 6452 1 2025-11-15 04:55:04.182 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56220 10 6452 1 2025-11-15 04:56:04.582 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46852 10 6452 1 2025-11-15 04:53:00.912 00:05:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 04:57:04.954 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:37232 10 6452 1 2025-11-15 04:57:43.350 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 04:57:43.379 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:57:43.428 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 04:57:43.499 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 04:57:43.511 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 04:54:00.911 00:05:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 04:58:05.382 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40688 10 6452 1 Summary: total flows: 139, total bytes: 414471, total packets: 1012, avg bps: 920, avg pps: 0, avg bpp: 409 Time window: 2025-11-15 03:59:00 - 2025-11-15 04:59:01 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0037s User: 0.0018s Wall: 0.0029s flows/second: 47391.3 Runtime: 0.0030s