Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 16:59:35.991 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52120 10 6452 1 2025-11-15 16:55:01.256 00:06:00.062 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 17:00:36.393 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35390 10 6452 1 2025-11-15 16:56:01.252 00:06:00.068 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 17:01:36.796 00:00:10.944 TCP 1.101.0.1:3000 -> 23.104.0.1:57718 10 6452 1 2025-11-15 17:02:37.783 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55350 10 6452 1 2025-11-15 17:02:57.849 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 17:02:57.587 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:02:58.132 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:02:58.026 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 17:02:58.214 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 17:03:38.146 00:00:10.659 TCP 1.101.0.1:3000 -> 23.104.0.1:54410 10 6452 1 2025-11-15 17:04:38.842 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:42870 10 6452 1 2025-11-15 17:05:39.218 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41562 10 6452 1 2025-11-15 17:06:39.623 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40408 10 6452 1 2025-11-15 17:02:01.255 00:06:00.066 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 17:07:40.021 00:00:10.770 TCP 1.101.0.1:3000 -> 23.104.0.1:47810 10 6452 1 2025-11-15 17:07:57.983 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 17:07:57.859 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:07:58.138 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:07:58.082 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 17:07:58.220 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 17:03:01.252 00:06:00.071 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 17:08:40.830 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42146 10 6452 1 2025-11-15 17:09:41.232 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33030 10 6452 1 2025-11-15 17:10:41.631 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54864 10 6452 1 2025-11-15 17:11:42.041 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51456 10 6452 1 2025-11-15 17:12:42.442 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51142 10 6452 1 2025-11-15 17:12:58.275 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 17:12:57.917 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:12:58.301 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:12:58.269 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 17:12:58.384 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 17:13:42.867 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:43280 10 6452 1 2025-11-15 17:09:01.256 00:06:00.066 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 17:14:43.298 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43440 10 6452 1 2025-11-15 17:10:01.254 00:06:00.073 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 17:15:43.713 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42250 10 6452 1 2025-11-15 17:16:44.103 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58976 10 6452 1 2025-11-15 17:17:44.510 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43906 10 6452 1 2025-11-15 17:17:58.402 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 17:17:58.297 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:17:58.302 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:17:58.395 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 17:17:58.384 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 17:18:44.915 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35910 10 6452 1 2025-11-15 17:19:45.331 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46086 10 6452 1 2025-11-15 17:20:45.734 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43734 10 6452 1 2025-11-15 17:16:01.257 00:06:00.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 17:21:46.141 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43154 10 6452 1 2025-11-15 17:17:01.256 00:06:00.072 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 17:22:58.336 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 17:22:58.265 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:22:58.544 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:22:46.548 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44800 10 6452 1 2025-11-15 17:22:58.432 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 17:22:58.626 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 17:23:46.951 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:56330 10 6452 1 2025-11-15 17:24:47.322 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51108 10 6452 1 2025-11-15 17:25:47.687 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45474 10 6452 1 2025-11-15 17:26:48.133 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:50930 12 10375 1 2025-11-15 17:27:58.499 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 17:27:58.444 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:27:58.512 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:27:58.348 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 17:27:48.574 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59672 10 6452 1 2025-11-15 17:27:58.595 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 17:23:01.258 00:06:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 17:28:48.982 00:00:10.564 TCP 1.101.0.1:3000 -> 23.104.0.1:46090 10 6452 1 2025-11-15 17:24:01.258 00:06:00.073 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 17:29:49.585 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32768 10 6452 1 2025-11-15 17:30:49.991 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38804 10 6452 1 2025-11-15 17:31:50.398 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44012 10 6452 1 2025-11-15 17:32:58.534 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 17:32:58.209 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:32:58.581 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:32:58.361 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 17:32:58.665 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 17:32:50.811 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:34480 11 6504 1 2025-11-15 17:33:51.274 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:50816 10 6452 1 2025-11-15 17:34:51.644 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36480 10 6452 1 2025-11-15 17:30:01.268 00:06:00.062 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 17:35:52.046 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34812 10 6452 1 2025-11-15 17:31:01.265 00:06:00.068 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 17:36:52.452 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33360 10 6452 1 2025-11-15 17:37:58.652 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 17:37:58.666 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:37:58.657 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:37:58.770 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 17:37:58.739 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 17:37:52.857 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:34372 10 6452 1 2025-11-15 17:38:53.280 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42834 10 6452 1 2025-11-15 17:39:53.682 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53946 10 6452 1 2025-11-15 17:40:54.107 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48748 10 6452 1 2025-11-15 17:41:54.506 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37194 10 6452 1 2025-11-15 17:37:01.267 00:06:00.063 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 17:42:58.831 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 17:42:58.727 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:42:58.778 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:42:58.696 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 17:42:58.861 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 17:38:01.268 00:06:00.065 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 17:42:54.869 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48202 10 6452 1 2025-11-15 17:43:55.280 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42790 10 6452 1 2025-11-15 17:44:55.697 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45368 10 6452 1 2025-11-15 17:45:56.116 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57632 10 6452 1 2025-11-15 17:46:56.520 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34000 10 6452 1 2025-11-15 17:47:58.901 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:47:58.854 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 17:47:58.797 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 17:47:58.608 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:47:58.983 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 17:47:56.924 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:35596 10 6452 1 2025-11-15 17:44:01.270 00:06:00.064 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 17:48:57.302 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45882 10 6452 1 2025-11-15 17:45:01.268 00:06:00.069 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 17:49:57.704 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57834 10 6452 1 2025-11-15 17:50:58.116 00:00:10.696 TCP 1.101.0.1:3000 -> 23.104.0.1:40712 10 6452 1 2025-11-15 17:51:58.851 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:48254 10 6452 1 2025-11-15 17:52:59.965 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 17:52:59.884 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:52:59.753 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 17:52:59.847 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 17:52:59.527 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:52:59.272 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45360 10 6452 1 2025-11-15 17:53:59.675 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:41830 10 6452 1 2025-11-15 17:55:00.116 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47016 10 6452 1 2025-11-15 17:51:01.271 00:06:00.064 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 17:56:00.514 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60650 10 6452 1 2025-11-15 17:52:01.269 00:06:00.069 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 17:57:00.933 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:51606 10 6452 1 2025-11-15 17:57:59.187 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 17:57:58.789 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 17:57:58.983 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:57:59.103 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 17:57:58.979 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 17:58:01.359 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59532 10 6452 1 Summary: total flows: 137, total bytes: 415261, total packets: 1025, avg bps: 876, avg pps: 0, avg bpp: 405 Time window: 2025-11-15 16:55:01 - 2025-11-15 17:58:11 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0035s User: 0.0018s Wall: 0.0039s flows/second: 35138.5 Runtime: 0.0039s