Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 07:59:31.918 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46016 10 6452 1 2025-11-15 08:00:32.327 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40140 10 6452 1 2025-11-15 07:56:01.040 00:06:00.113 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 08:01:32.729 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51224 10 6452 1 2025-11-15 07:57:01.038 00:06:00.118 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 08:02:33.142 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40374 10 6452 1 2025-11-15 08:02:46.949 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 08:02:47.101 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:02:47.276 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:02:47.231 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 08:02:47.359 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 08:03:33.546 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50126 10 6452 1 2025-11-15 08:04:33.943 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40036 10 6452 1 2025-11-15 08:05:34.358 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42850 10 6452 1 2025-11-15 08:06:34.762 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56384 10 6452 1 2025-11-15 08:07:35.165 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60842 10 6452 1 2025-11-15 08:07:47.322 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 08:07:47.321 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 08:07:46.875 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:07:47.240 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:07:47.477 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 08:03:01.040 00:06:00.113 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 08:08:35.568 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52232 10 6452 1 2025-11-15 08:04:01.039 00:06:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 08:09:35.973 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54408 10 6452 1 2025-11-15 08:10:36.378 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34174 10 6452 1 2025-11-15 08:11:36.778 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53098 10 6452 1 2025-11-15 08:12:47.406 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 08:12:47.523 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 08:12:37.185 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43328 10 6452 1 2025-11-15 08:12:47.235 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:12:47.326 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:12:47.323 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 08:13:37.546 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41058 10 6452 1 2025-11-15 08:14:37.949 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54866 10 6452 1 2025-11-15 08:10:01.042 00:06:00.113 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 08:15:38.358 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53996 10 6452 1 2025-11-15 08:11:01.040 00:06:00.118 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 08:16:38.756 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:44000 10 6452 1 2025-11-15 08:17:47.424 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:17:47.538 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 08:17:39.172 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:37008 10 6452 1 2025-11-15 08:17:47.502 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 08:17:47.263 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:17:47.507 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 08:18:39.541 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58794 10 6452 1 2025-11-15 08:19:39.943 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:57128 10 6452 1 2025-11-15 08:20:40.366 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45202 10 6452 1 2025-11-15 08:21:40.768 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:58674 10 6452 1 2025-11-15 08:17:01.044 00:06:00.112 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 08:22:47.542 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:22:47.435 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 08:22:47.540 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 08:22:47.482 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:22:47.625 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 08:22:41.184 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52808 10 6452 1 2025-11-15 08:18:01.042 00:06:00.118 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 08:23:41.590 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:56550 10 6452 1 2025-11-15 08:24:42.020 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44652 10 6452 1 2025-11-15 08:25:42.424 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60494 10 6452 1 2025-11-15 08:26:42.827 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47368 10 6452 1 2025-11-15 08:27:48.263 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 08:27:48.092 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 08:27:47.727 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:27:48.180 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:27:48.090 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 08:27:43.232 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50112 10 6452 1 2025-11-15 08:28:43.633 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51726 10 6452 1 2025-11-15 08:24:01.049 00:06:00.108 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 08:29:44.051 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35704 10 6452 1 2025-11-15 08:25:01.048 00:06:00.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 08:30:44.411 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44238 10 6452 1 2025-11-15 08:31:44.772 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44424 10 6452 1 2025-11-15 08:32:48.009 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 08:32:47.844 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 08:32:47.842 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:32:47.925 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:32:47.837 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 08:32:45.166 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53490 10 6452 1 2025-11-15 08:33:45.566 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34272 10 6452 1 2025-11-15 08:34:45.968 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41340 10 6452 1 2025-11-15 08:35:46.371 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38840 10 6452 1 2025-11-15 08:31:01.052 00:06:00.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 08:36:46.769 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34878 10 6452 1 2025-11-15 08:32:01.050 00:06:00.111 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 08:37:47.963 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:37:47.753 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 08:37:47.755 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 08:37:47.815 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:37:48.046 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 08:37:47.178 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39366 10 6452 1 2025-11-15 08:38:47.583 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44840 10 6452 1 2025-11-15 08:39:47.986 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49784 10 6452 1 2025-11-15 08:40:48.389 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56490 10 6452 1 2025-11-15 08:41:48.796 00:00:10.834 TCP 1.101.0.1:3000 -> 23.104.0.1:35596 10 6452 1 2025-11-15 08:42:47.994 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 08:42:47.849 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:42:47.986 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:42:47.890 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 08:42:48.069 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 08:42:49.678 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41798 10 6452 1 2025-11-15 08:38:01.055 00:06:00.106 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 08:43:50.050 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49846 10 6452 1 2025-11-15 08:39:01.053 00:06:00.111 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 08:44:50.459 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47950 10 6452 1 2025-11-15 08:45:50.832 00:00:10.428 TCP 1.101.0.1:3000 -> 23.104.0.1:40298 12 10375 1 2025-11-15 08:46:51.295 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40510 10 6452 1 2025-11-15 08:47:48.161 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 08:47:48.083 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 08:47:48.186 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:47:48.078 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:47:48.221 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 08:47:51.705 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36978 10 6452 1 2025-11-15 08:48:52.122 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48234 10 6452 1 2025-11-15 08:49:52.528 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46260 10 6452 1 2025-11-15 08:45:01.055 00:06:00.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 08:46:01.053 00:06:00.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 08:50:52.934 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52492 10 6452 1 2025-11-15 08:51:53.345 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56322 10 6452 1 2025-11-15 08:52:48.037 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 08:52:48.087 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 08:52:47.725 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:52:47.953 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:52:48.325 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 08:52:53.751 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48210 10 6452 1 2025-11-15 08:53:54.155 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50910 10 6452 1 2025-11-15 08:54:54.562 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41278 10 6452 1 2025-11-15 08:55:54.964 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:54910 12 10375 1 2025-11-15 08:56:55.405 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41012 10 6452 1 2025-11-15 08:52:01.059 00:06:00.105 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 08:57:48.655 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 08:57:48.541 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:57:48.788 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 08:57:48.561 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 08:57:48.872 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 08:53:01.055 00:06:00.111 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 08:57:55.810 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57772 10 6452 1 Summary: total flows: 137, total bytes: 419132, total packets: 1026, avg bps: 887, avg pps: 0, avg bpp: 408 Time window: 2025-11-15 07:56:01 - 2025-11-15 08:59:01 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0042s User: 0.0010s Wall: 0.0065s flows/second: 20944.8 Runtime: 0.0066s