Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 06:58:55.735 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59732 10 6452 1 2025-11-15 06:59:56.140 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34568 10 6452 1 2025-11-15 07:00:56.546 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45310 10 6452 1 2025-11-15 07:01:56.908 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44674 10 6452 1 2025-11-15 07:02:45.950 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:02:45.975 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:02:45.974 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 07:02:45.977 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 07:02:46.058 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 06:59:00.987 00:05:00.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 07:02:57.319 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41840 10 6452 1 2025-11-15 07:00:00.987 00:05:00.148 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 07:03:57.724 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35630 10 6452 1 2025-11-15 07:04:58.138 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50004 10 6452 1 2025-11-15 07:05:58.536 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:47792 11 6504 1 2025-11-15 07:06:58.992 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45854 10 6452 1 2025-11-15 07:07:45.947 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 07:07:45.994 00:00:00.043 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:07:46.082 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:07:46.151 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 07:07:46.165 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 07:07:59.399 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49622 10 6452 1 2025-11-15 07:05:00.989 00:05:00.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 07:08:59.801 00:00:10.840 TCP 1.101.0.1:3000 -> 23.104.0.1:41930 10 6452 1 2025-11-15 07:06:00.987 00:05:00.148 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 07:10:00.675 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42384 10 6452 1 2025-11-15 07:11:01.112 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33498 10 6452 1 2025-11-15 07:12:01.520 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39054 10 6452 1 2025-11-15 07:12:45.971 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:12:46.307 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 07:12:46.051 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 07:12:46.223 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:12:46.322 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 07:13:01.879 00:00:11.220 TCP 1.101.0.1:3000 -> 23.104.0.1:38366 10 6452 1 2025-11-15 07:14:03.138 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58180 10 6452 1 2025-11-15 07:11:00.990 00:05:00.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 07:15:03.539 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36370 10 6452 1 2025-11-15 07:12:00.988 00:05:00.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 07:16:03.938 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42426 10 6452 1 2025-11-15 07:17:04.352 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34252 10 6452 1 2025-11-15 07:17:46.391 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 07:17:45.985 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 07:17:46.280 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:17:46.310 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:17:46.312 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 07:18:04.763 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55802 10 6452 1 2025-11-15 07:19:05.171 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57272 10 6452 1 2025-11-15 07:20:05.583 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50898 10 6452 1 2025-11-15 07:17:00.995 00:05:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 07:21:05.957 00:00:19.871 TCP 1.101.0.1:3000 -> 23.104.0.1:50282 10 6452 1 2025-11-15 07:18:00.993 00:05:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 07:22:15.880 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44972 10 6452 1 2025-11-15 07:22:46.382 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 07:22:46.459 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 07:22:46.233 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:22:46.299 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:22:46.415 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 07:23:16.284 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:52470 10 6452 1 2025-11-15 07:24:16.643 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:49936 10 6452 1 2025-11-15 07:25:16.998 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42050 10 6452 1 2025-11-15 07:26:17.403 00:00:11.078 TCP 1.101.0.1:3000 -> 23.104.0.1:60184 10 6452 1 2025-11-15 07:23:00.997 00:05:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 07:27:18.518 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34078 10 6452 1 2025-11-15 07:27:46.539 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 07:27:46.516 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:27:46.394 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:27:46.387 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 07:27:46.477 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 07:24:00.995 00:05:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 07:28:18.916 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52352 10 6452 1 2025-11-15 07:29:19.321 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47682 10 6452 1 2025-11-15 07:30:19.720 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50682 10 6452 1 2025-11-15 07:31:20.102 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:57174 10 6452 1 2025-11-15 07:32:20.501 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:54756 10 6452 1 2025-11-15 07:32:46.560 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 07:32:46.546 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 07:32:46.518 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 07:32:46.220 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:32:46.478 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:29:00.998 00:05:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 07:33:20.875 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39768 10 6452 1 2025-11-15 07:30:00.997 00:05:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 07:34:21.282 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40088 10 6452 1 2025-11-15 07:35:21.729 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53054 10 6452 1 2025-11-15 07:36:22.142 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:34974 10 6452 1 2025-11-15 07:37:22.574 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52394 10 6452 1 2025-11-15 07:37:46.606 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 07:37:46.752 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 07:37:46.564 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:37:46.522 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:37:46.750 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 07:38:22.938 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:44918 10 6452 1 2025-11-15 07:39:23.347 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47344 10 6452 1 2025-11-15 07:35:01.004 00:06:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 07:40:23.753 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52246 10 6452 1 2025-11-15 07:36:01.001 00:06:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 07:41:24.163 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45216 10 6452 1 2025-11-15 07:42:24.562 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34940 10 6452 1 2025-11-15 07:42:46.477 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:42:46.698 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 07:42:46.708 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 07:42:46.747 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:42:46.560 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 07:43:24.978 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43098 10 6452 1 2025-11-15 07:44:25.379 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54172 10 6452 1 2025-11-15 07:45:25.780 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35894 10 6452 1 2025-11-15 07:46:26.182 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41850 10 6452 1 2025-11-15 07:42:01.005 00:06:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 07:47:26.581 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43756 10 6452 1 2025-11-15 07:47:46.922 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 07:47:46.662 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:47:47.085 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:47:46.717 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 07:47:47.168 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 07:43:01.002 00:06:00.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 07:48:26.984 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39422 10 6452 1 2025-11-15 07:49:27.386 00:00:10.558 TCP 1.101.0.1:3000 -> 23.104.0.1:55012 10 6452 1 2025-11-15 07:50:27.982 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44472 10 6452 1 2025-11-15 07:51:28.388 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35460 10 6452 1 2025-11-15 07:52:28.813 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47864 10 6452 1 2025-11-15 07:52:46.875 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 07:52:46.814 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:52:46.776 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:52:46.965 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 07:52:46.858 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 07:53:29.209 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57462 10 6452 1 2025-11-15 07:49:01.035 00:06:00.118 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 07:54:29.580 00:00:10.708 TCP 1.101.0.1:3000 -> 23.104.0.1:38704 10 6452 1 2025-11-15 07:50:01.033 00:06:00.121 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 07:55:30.331 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:41752 10 6452 1 2025-11-15 07:56:30.699 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34716 10 6452 1 2025-11-15 07:57:31.093 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53118 10 6452 1 2025-11-15 07:57:47.092 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 07:57:47.007 00:00:00.043 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:57:47.169 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 07:57:47.100 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 07:57:47.253 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 07:58:31.511 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39778 10 6452 1 Summary: total flows: 138, total bytes: 416314, total packets: 1009, avg bps: 928, avg pps: 0, avg bpp: 412 Time window: 2025-11-15 06:58:55 - 2025-11-15 07:58:41 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0051s User: 0.0000s Wall: 0.0030s flows/second: 45970.5 Runtime: 0.0030s