Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 19:59:28.067 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38756 10 6452 1 2025-11-15 20:00:28.467 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39244 10 6452 1 2025-11-15 20:01:28.832 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:37732 10 6452 1 2025-11-15 19:57:01.299 00:06:00.076 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 20:02:29.257 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37364 10 6452 1 2025-11-15 19:58:01.297 00:06:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 20:03:01.529 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 20:03:01.643 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 20:03:01.283 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:03:01.446 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:03:01.331 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 20:03:29.663 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59688 10 6452 1 2025-11-15 20:04:30.100 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33842 10 6452 1 2025-11-15 20:05:30.516 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47968 10 6452 1 2025-11-15 20:06:30.918 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56044 10 6452 1 2025-11-15 20:07:31.280 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:37728 10 6452 1 2025-11-15 20:08:02.098 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 20:08:02.224 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 20:08:02.087 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:08:02.016 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:08:02.276 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 20:08:31.652 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59112 10 6452 1 2025-11-15 20:04:01.302 00:06:00.075 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 20:09:32.015 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36044 10 6452 1 2025-11-15 20:05:01.300 00:06:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 20:10:32.423 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60198 10 6452 1 2025-11-15 20:11:32.827 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40888 10 6452 1 2025-11-15 20:12:33.195 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49584 10 6452 1 2025-11-15 20:13:02.208 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 20:13:01.804 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 20:13:01.456 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:13:02.127 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:13:01.796 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 20:13:33.601 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37420 10 6452 1 2025-11-15 20:14:34.007 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42288 10 6452 1 2025-11-15 20:15:34.413 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:46900 10 6452 1 2025-11-15 20:11:01.301 00:06:00.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 20:16:34.827 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47104 10 6452 1 2025-11-15 20:12:01.299 00:06:00.081 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 20:17:35.230 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35700 10 6452 1 2025-11-15 20:18:01.952 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 20:18:02.132 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 20:18:02.054 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:18:01.870 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:18:02.133 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 20:18:35.640 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:42848 10 6452 1 2025-11-15 20:19:36.017 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53568 10 6452 1 2025-11-15 20:20:36.423 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34424 10 6452 1 2025-11-15 20:21:36.787 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53062 10 6452 1 2025-11-15 20:22:37.198 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47684 10 6452 1 2025-11-15 20:23:01.959 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 20:23:02.151 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 20:23:01.889 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:23:01.875 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:23:02.052 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 20:18:01.305 00:06:00.075 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 20:23:37.600 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33994 10 6452 1 2025-11-15 20:19:01.303 00:06:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 20:24:38.004 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53410 10 6452 1 2025-11-15 20:25:38.406 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:40172 10 6452 1 2025-11-15 20:26:38.776 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:46262 12 10369 1 2025-11-15 20:27:39.255 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34014 10 6452 1 2025-11-15 20:28:02.135 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 20:28:02.149 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:28:02.137 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:28:01.933 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 20:28:02.220 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 20:28:39.656 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42876 10 6452 1 2025-11-15 20:29:40.070 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:44512 11 6504 1 2025-11-15 20:25:01.307 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 20:30:40.545 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58710 10 6452 1 2025-11-15 20:26:01.304 00:06:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 20:31:40.944 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51178 10 6452 1 2025-11-15 20:32:41.363 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32948 10 6452 1 2025-11-15 20:33:02.196 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 20:33:01.934 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:33:02.192 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:33:01.905 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 20:33:02.275 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 20:33:41.764 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55736 10 6452 1 2025-11-15 20:34:42.129 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54572 10 6452 1 2025-11-15 20:35:42.491 00:00:10.653 TCP 1.101.0.1:3000 -> 23.104.0.1:60174 10 6452 1 2025-11-15 20:36:43.191 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40646 10 6452 1 2025-11-15 20:32:01.309 00:06:00.073 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 20:37:43.594 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48270 10 6452 1 2025-11-15 20:38:02.423 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 20:38:02.444 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:38:02.413 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:38:02.344 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 20:33:01.307 00:06:00.078 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 20:38:02.497 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 20:38:43.962 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:38754 10 6452 1 2025-11-15 20:39:44.339 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54920 10 6452 1 2025-11-15 20:40:44.742 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38410 10 6452 1 2025-11-15 20:41:45.145 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32892 10 6452 1 2025-11-15 20:42:45.550 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51896 10 6452 1 2025-11-15 20:43:02.777 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 20:43:02.598 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:43:02.711 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:43:02.709 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 20:43:02.793 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 20:43:45.954 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38724 10 6452 1 2025-11-15 20:39:01.312 00:06:00.071 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 20:44:46.363 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51410 10 6452 1 2025-11-15 20:40:01.311 00:06:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 20:45:46.783 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33462 10 6452 1 2025-11-15 20:46:47.190 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37796 10 6452 1 2025-11-15 20:48:02.856 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 20:47:47.589 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37428 10 6452 1 2025-11-15 20:48:02.421 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 20:48:02.601 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:48:02.774 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:48:02.423 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 20:48:47.984 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42634 10 6452 1 2025-11-15 20:49:48.392 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53136 10 6452 1 2025-11-15 20:50:48.789 00:00:15.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53008 10 6452 1 2025-11-15 20:46:01.317 00:06:00.067 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 20:47:01.314 00:06:00.072 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-15 20:51:54.213 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:44350 12 10375 1 2025-11-15 20:53:02.722 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 20:52:54.692 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36734 10 6452 1 2025-11-15 20:53:02.693 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 20:53:02.360 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:53:02.639 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:53:02.459 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 20:53:55.074 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55908 10 6452 1 2025-11-15 20:54:55.474 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:48786 10 6452 1 2025-11-15 20:55:55.830 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39186 10 6452 1 2025-11-15 20:56:56.236 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:50868 10 6452 1 2025-11-15 20:58:02.672 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 20:58:02.838 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 20:58:02.619 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:58:02.589 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 20:58:02.802 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 20:53:01.321 00:06:00.065 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-15 20:57:56.634 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34782 10 6452 1 Summary: total flows: 136, total bytes: 418317, total packets: 1013, avg bps: 899, avg pps: 0, avg bpp: 412 Time window: 2025-11-15 19:57:01 - 2025-11-15 20:59:01 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0052s User: 0.0000s Wall: 0.0040s flows/second: 33957.9 Runtime: 0.0040s