Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 05:58:53.663 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33748 10 6452 1 2025-11-16 05:59:54.027 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49236 10 6452 1 2025-11-16 06:00:54.434 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57706 10 6452 1 2025-11-16 06:01:54.848 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:33652 10 6452 1 2025-11-16 06:02:55.228 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48442 10 6452 1 2025-11-16 06:03:14.172 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 06:03:13.889 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:03:13.674 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:03:14.089 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:03:13.897 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 05:59:01.501 00:06:00.065 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 06:03:55.630 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36422 10 6452 1 2025-11-16 06:00:01.498 00:06:00.072 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 06:04:56.036 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59066 10 6452 1 2025-11-16 06:05:56.438 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37726 10 6452 1 2025-11-16 06:06:56.797 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:35364 10 6452 1 2025-11-16 06:07:57.211 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51104 10 6452 1 2025-11-16 06:08:13.701 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:08:13.514 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:08:13.707 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:08:13.628 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 06:08:13.790 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 06:08:57.621 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51046 10 6452 1 2025-11-16 06:09:58.022 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60786 10 6452 1 2025-11-16 06:06:01.503 00:06:00.066 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 06:10:58.426 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:52388 10 6452 1 2025-11-16 06:07:01.501 00:06:00.071 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 06:11:58.875 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51606 10 6452 1 2025-11-16 06:12:59.284 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35852 10 6452 1 2025-11-16 06:13:14.047 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 06:13:13.964 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:13:13.815 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:13:13.965 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:13:13.876 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 06:13:59.685 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48286 10 6452 1 2025-11-16 06:15:00.115 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45688 10 6452 1 2025-11-16 06:16:00.523 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49544 10 6452 1 2025-11-16 06:17:00.930 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:38812 10 6452 1 2025-11-16 06:13:01.505 00:06:00.065 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 06:18:13.906 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:18:01.359 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40574 10 6452 1 2025-11-16 06:18:13.713 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:18:13.839 00:00:00.016 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:18:13.820 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 06:18:13.923 00:00:00.015 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 06:14:01.502 00:06:00.071 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 06:19:01.773 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41112 10 6452 1 2025-11-16 06:20:02.164 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42048 10 6452 1 2025-11-16 06:21:02.576 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48350 10 6452 1 2025-11-16 06:22:02.991 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:46312 12 10369 1 2025-11-16 06:23:14.225 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 06:23:14.080 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:23:14.192 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:23:14.143 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:23:03.474 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58184 10 6452 1 2025-11-16 06:23:13.957 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 06:24:03.881 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52630 10 6452 1 2025-11-16 06:20:01.507 00:06:00.065 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 06:25:04.283 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51042 10 6452 1 2025-11-16 06:21:01.503 00:06:00.070 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 06:26:04.646 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35796 10 6452 1 2025-11-16 06:27:05.052 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32922 10 6452 1 2025-11-16 06:28:14.218 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 06:28:14.382 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:28:14.323 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:28:14.136 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:28:13.946 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 06:28:05.457 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33804 10 6452 1 2025-11-16 06:29:05.857 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47748 10 6452 1 2025-11-16 06:30:06.277 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38426 10 6452 1 2025-11-16 06:31:06.676 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39036 10 6452 1 2025-11-16 06:27:01.508 00:06:00.063 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 06:32:07.107 00:00:11.824 TCP 1.101.0.1:3000 -> 23.104.0.1:48726 10 6452 1 2025-11-16 06:28:01.507 00:06:00.068 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 06:33:14.399 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 06:33:14.227 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:33:14.090 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:33:14.315 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:33:14.267 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 06:33:08.971 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50566 10 6452 1 2025-11-16 06:34:09.379 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55850 10 6452 1 2025-11-16 06:35:09.783 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56026 10 6452 1 2025-11-16 06:36:10.147 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46392 10 6452 1 2025-11-16 06:37:10.545 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36326 10 6452 1 2025-11-16 06:38:14.227 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 06:38:14.438 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:38:14.070 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:38:14.145 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:38:14.279 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 06:38:10.949 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52846 10 6452 1 2025-11-16 06:34:01.510 00:06:00.063 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 06:39:11.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40732 10 6452 1 2025-11-16 06:35:01.509 00:06:00.071 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 06:40:11.760 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53780 10 6452 1 2025-11-16 06:41:12.177 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52306 10 6452 1 2025-11-16 06:42:12.584 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33920 10 6452 1 2025-11-16 06:43:14.623 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:43:14.436 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:43:14.575 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:43:14.411 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 06:43:14.657 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 06:43:12.991 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40438 10 6452 1 2025-11-16 06:44:13.402 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58722 10 6452 1 2025-11-16 06:45:13.761 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51784 12 6556 1 2025-11-16 06:41:01.513 00:06:00.065 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 06:46:14.187 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:35388 12 10369 1 2025-11-16 06:42:01.509 00:06:00.071 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 06:47:14.629 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55720 10 6452 1 2025-11-16 06:48:14.888 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:48:14.741 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:48:14.881 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:48:14.796 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 06:48:14.964 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 06:48:15.033 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:38528 10 6452 1 2025-11-16 06:49:15.393 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40708 10 6452 1 2025-11-16 06:50:15.770 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45622 10 6452 1 2025-11-16 06:51:16.194 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46652 10 6452 1 2025-11-16 06:52:16.558 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51792 10 6452 1 2025-11-16 06:48:01.514 00:06:00.065 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 06:53:14.642 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:53:14.561 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:53:14.562 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:53:14.724 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 06:53:14.645 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 06:53:16.924 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:38632 11 6492 1 2025-11-16 06:49:01.511 00:06:00.069 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 06:54:17.343 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41250 10 6452 1 2025-11-16 06:55:17.753 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60534 10 6452 1 2025-11-16 06:56:18.152 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46784 10 6452 1 2025-11-16 06:57:18.552 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57312 10 6452 1 2025-11-16 06:58:14.762 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 06:58:14.389 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:58:14.680 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 06:58:14.706 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 06:58:14.763 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 06:58:18.956 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47024 10 6452 1 Summary: total flows: 136, total bytes: 423994, total packets: 1011, avg bps: 948, avg pps: 0, avg bpp: 419 Time window: 2025-11-16 05:58:53 - 2025-11-16 06:58:29 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0041s User: 0.0014s Wall: 0.0024s flows/second: 56061.5 Runtime: 0.0024s