Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 12:59:02.497 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46840 10 6452 1 2025-11-16 13:00:02.909 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55654 10 6452 1 2025-11-16 13:01:03.274 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43680 10 6452 1 2025-11-16 13:02:03.680 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57964 10 6452 1 2025-11-16 13:03:04.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50974 10 6452 1 2025-11-16 13:03:22.005 00:00:00.042 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 13:03:21.957 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:03:21.885 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:03:22.078 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 13:03:21.969 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 12:59:01.626 00:06:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 13:04:04.509 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53182 10 6452 1 2025-11-16 13:00:01.624 00:06:00.105 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 13:05:04.904 00:00:10.489 TCP 1.101.0.1:3000 -> 23.104.0.1:57920 10 6452 1 2025-11-16 13:06:05.433 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38748 10 6452 1 2025-11-16 13:07:05.839 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50026 10 6452 1 2025-11-16 13:08:06.256 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:32776 10 6452 1 2025-11-16 13:08:22.395 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 13:08:22.279 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:08:22.037 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:08:22.235 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 13:08:22.120 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 13:09:06.670 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:47838 10 6452 1 2025-11-16 13:10:07.184 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52748 10 6452 1 2025-11-16 13:06:01.628 00:06:00.097 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 13:11:07.595 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:37966 10 6452 1 2025-11-16 13:07:01.627 00:06:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 13:12:07.954 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:54952 10 6452 1 2025-11-16 13:13:08.377 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36798 10 6452 1 2025-11-16 13:13:22.206 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 13:13:22.167 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:13:22.207 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:13:22.205 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 13:13:22.290 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 13:14:08.776 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:37940 11 6504 1 2025-11-16 13:15:09.203 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:55696 10 6452 1 2025-11-16 13:16:09.577 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60464 10 6452 1 2025-11-16 13:17:09.979 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59312 10 6452 1 2025-11-16 13:13:01.629 00:06:00.097 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 13:18:22.436 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 13:18:10.393 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54074 10 6452 1 2025-11-16 13:18:22.248 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 13:18:22.343 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:18:22.354 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:18:22.406 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 13:14:01.629 00:06:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 13:19:10.753 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37702 10 6452 1 2025-11-16 13:20:11.156 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47606 10 6452 1 2025-11-16 13:21:11.518 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60130 10 6452 1 2025-11-16 13:22:11.925 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:52162 10 6452 1 2025-11-16 13:23:22.479 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 13:23:12.296 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59208 10 6452 1 2025-11-16 13:23:22.334 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 13:23:22.403 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:23:22.397 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:23:22.396 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 13:24:12.697 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33766 10 6452 1 2025-11-16 13:20:01.630 00:06:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 13:25:13.122 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34274 10 6452 1 2025-11-16 13:21:01.628 00:06:00.103 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 13:26:13.484 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39262 10 6452 1 2025-11-16 13:27:13.893 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:48354 12 6556 1 2025-11-16 13:28:22.576 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 13:28:14.312 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:51496 10 6452 1 2025-11-16 13:28:22.644 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 13:28:22.460 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:28:22.492 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:28:22.328 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 13:29:14.710 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:52030 10 6452 1 2025-11-16 13:30:15.153 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44774 10 6452 1 2025-11-16 13:31:15.559 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55962 10 6452 1 2025-11-16 13:27:01.632 00:06:00.099 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 13:32:15.958 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46744 10 6452 1 2025-11-16 13:28:01.629 00:06:00.104 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 13:33:22.557 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 13:33:22.568 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:33:22.707 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:33:22.607 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 13:33:22.788 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 13:33:16.320 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56244 10 6452 1 2025-11-16 13:34:16.727 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48034 10 6452 1 2025-11-16 13:35:17.145 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35396 10 6452 1 2025-11-16 13:36:17.556 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:41980 10 6452 1 2025-11-16 13:37:17.974 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:50440 10 6452 1 2025-11-16 13:38:22.862 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 13:38:22.636 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:38:22.926 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:38:22.660 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 13:38:23.009 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 13:38:18.409 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34074 10 6452 1 2025-11-16 13:34:01.633 00:06:00.099 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 13:39:18.820 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57720 10 6452 1 2025-11-16 13:35:01.634 00:06:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 13:40:19.235 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37066 10 6452 1 2025-11-16 13:41:19.642 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:52434 12 10369 1 2025-11-16 13:42:20.135 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43874 10 6452 1 2025-11-16 13:43:22.940 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 13:43:22.747 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 13:43:22.698 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:43:22.858 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:43:22.860 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 13:43:20.537 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37490 10 6452 1 2025-11-16 13:44:20.898 00:00:10.954 TCP 1.101.0.1:3000 -> 23.104.0.1:53720 12 6556 1 2025-11-16 13:45:21.889 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56202 12 6556 1 2025-11-16 13:41:01.638 00:06:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 13:46:22.307 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50110 10 6452 1 2025-11-16 13:42:01.635 00:06:00.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 13:47:22.712 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39636 10 6452 1 2025-11-16 13:48:22.781 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 13:48:22.868 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:48:22.904 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:48:22.773 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 13:48:22.987 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 13:48:23.132 00:00:11.312 TCP 1.101.0.1:3000 -> 23.104.0.1:48070 11 6504 1 2025-11-16 13:49:24.482 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40716 10 6452 1 2025-11-16 13:50:24.846 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:52556 10 6452 1 2025-11-16 13:51:25.267 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46096 10 6452 1 2025-11-16 13:52:25.676 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59522 10 6452 1 2025-11-16 13:48:01.640 00:06:00.095 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 13:53:23.145 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 13:53:23.157 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 13:53:22.843 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:53:23.061 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:53:23.069 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 13:53:26.100 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41310 10 6452 1 2025-11-16 13:49:01.637 00:06:00.100 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 13:54:26.513 00:00:10.508 TCP 1.101.0.1:3000 -> 23.104.0.1:34640 10 6452 1 2025-11-16 13:55:27.063 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51468 10 6452 1 2025-11-16 13:56:27.462 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49260 10 6452 1 2025-11-16 13:57:27.864 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:50232 10 6452 1 2025-11-16 13:58:23.063 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 13:58:22.867 00:00:00.041 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:58:22.928 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 13:58:23.138 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 13:58:23.012 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 13:58:28.295 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49506 10 6452 1 Summary: total flows: 136, total bytes: 420349, total packets: 1014, avg bps: 940, avg pps: 0, avg bpp: 414 Time window: 2025-11-16 12:59:01 - 2025-11-16 13:58:38 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0034s User: 0.0017s Wall: 0.0022s flows/second: 61875.0 Runtime: 0.0022s