Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 13:54:01.181 00:06:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 13:59:16.355 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55668 10 6452 1 2025-11-15 14:00:16.761 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59816 10 6452 1 2025-11-15 14:01:17.181 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60084 10 6452 1 2025-11-15 14:02:17.592 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45372 10 6452 1 2025-11-15 14:02:54.412 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 14:02:54.316 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:02:54.295 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:02:54.355 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 14:02:54.377 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 14:03:17.997 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36096 10 6452 1 2025-11-15 14:04:18.410 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42336 10 6452 1 2025-11-15 14:00:01.194 00:06:00.067 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 14:05:18.815 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59364 10 6452 1 2025-11-15 14:01:01.191 00:06:00.072 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 14:06:19.220 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:40542 12 10375 1 2025-11-15 14:07:19.708 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50050 10 6452 1 2025-11-15 14:07:54.460 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 14:07:54.569 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:07:54.672 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:07:54.711 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 14:07:54.755 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 14:08:20.115 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37558 10 6452 1 2025-11-15 14:09:20.518 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37310 10 6452 1 2025-11-15 14:10:20.883 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:51352 10 6452 1 2025-11-15 14:11:21.268 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37406 10 6452 1 2025-11-15 14:07:01.197 00:06:00.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 14:12:21.675 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53092 10 6452 1 2025-11-15 14:12:54.665 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 14:12:54.591 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 14:12:54.621 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:12:54.583 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:12:54.499 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 14:08:01.194 00:06:00.074 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 14:13:22.041 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48746 10 6452 1 2025-11-15 14:14:22.444 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55576 10 6452 1 2025-11-15 14:15:22.841 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:51706 10 6452 1 2025-11-15 14:16:23.270 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:56592 10 6452 1 2025-11-15 14:17:23.654 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38048 10 6452 1 2025-11-15 14:17:54.948 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 14:17:54.678 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 14:17:54.398 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:17:54.865 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:17:54.759 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 14:18:24.067 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35624 10 6452 1 2025-11-15 14:14:01.198 00:06:00.071 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 14:19:24.473 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57836 10 6452 1 2025-11-15 14:15:01.196 00:06:00.077 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 14:20:24.894 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:51888 10 6452 1 2025-11-15 14:21:25.276 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52348 10 6452 1 2025-11-15 14:22:25.678 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55622 10 6452 1 2025-11-15 14:22:54.748 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 14:22:54.741 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 14:22:54.710 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:22:54.665 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:22:54.787 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 14:23:26.034 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59248 10 6452 1 2025-11-15 14:24:26.435 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38718 10 6452 1 2025-11-15 14:25:26.838 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:47634 10 6452 1 2025-11-15 14:21:01.200 00:06:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 14:26:27.256 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51658 10 6452 1 2025-11-15 14:22:01.196 00:06:00.076 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 14:27:27.659 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56044 10 6452 1 2025-11-15 14:27:54.819 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 14:27:54.764 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:27:54.876 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:27:54.979 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 14:27:54.963 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 14:28:28.031 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54354 10 6452 1 2025-11-15 14:29:28.435 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38486 10 6452 1 2025-11-15 14:30:28.805 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37892 10 6452 1 2025-11-15 14:31:29.218 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33264 10 6452 1 2025-11-15 14:32:29.583 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58098 10 6452 1 2025-11-15 14:32:55.069 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 14:32:54.913 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:32:55.075 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:32:55.176 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 14:32:55.158 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 14:28:01.200 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 14:33:29.986 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42480 10 6452 1 2025-11-15 14:29:01.201 00:06:00.076 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 14:34:30.386 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59356 10 6452 1 2025-11-15 14:35:30.797 00:00:11.016 TCP 1.101.0.1:3000 -> 23.104.0.1:50466 10 6452 1 2025-11-15 14:36:31.857 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35346 10 6452 1 2025-11-15 14:37:32.274 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57580 10 6452 1 2025-11-15 14:37:55.220 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 14:37:55.118 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:37:54.980 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:37:55.215 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 14:37:55.063 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 14:38:32.674 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46448 10 6452 1 2025-11-15 14:39:33.110 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:38436 10 6452 1 2025-11-15 14:35:01.203 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 14:40:33.490 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50642 10 6452 1 2025-11-15 14:36:01.201 00:06:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 14:41:33.893 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:58960 10 6452 1 2025-11-15 14:42:34.271 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38368 10 6452 1 2025-11-15 14:42:54.967 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:42:55.261 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:42:55.162 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 14:42:55.158 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 14:42:55.343 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 14:43:34.690 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53062 10 6452 1 2025-11-15 14:44:35.113 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47462 10 6452 1 2025-11-15 14:45:35.474 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58378 10 6452 1 2025-11-15 14:46:35.882 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36594 10 6452 1 2025-11-15 14:42:01.206 00:06:00.072 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 14:47:36.241 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56168 10 6452 1 2025-11-15 14:47:55.397 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 14:47:55.375 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 14:47:55.130 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:47:55.314 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:47:55.316 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 14:43:01.204 00:06:00.077 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 14:48:36.642 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42330 10 6452 1 2025-11-15 14:49:37.041 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48214 10 6452 1 2025-11-15 14:50:37.442 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54406 10 6452 1 2025-11-15 14:51:37.808 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60322 10 6452 1 2025-11-15 14:52:55.480 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 14:52:55.542 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 14:52:55.422 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:52:55.398 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:52:55.593 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 14:52:38.173 00:00:13.446 TCP 1.101.0.1:3000 -> 23.104.0.1:58148 10 6452 1 2025-11-15 14:53:41.667 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60606 10 6452 1 2025-11-15 14:49:01.208 00:06:00.072 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 14:54:42.032 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32956 10 6452 1 2025-11-15 14:50:01.206 00:06:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 14:55:42.433 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51596 10 6452 1 2025-11-15 14:56:42.840 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:37588 10 6452 1 2025-11-15 14:57:55.545 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 14:57:55.193 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:57:43.274 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39238 10 6452 1 2025-11-15 14:57:55.325 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 14:57:55.319 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 14:57:55.408 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 136, total bytes: 414348, total packets: 1010, avg bps: 864, avg pps: 0, avg bpp: 410 Time window: 2025-11-15 13:54:01 - 2025-11-15 14:57:55 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0042s User: 0.0008s Wall: 0.0017s flows/second: 79115.9 Runtime: 0.0017s