Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 16:58:51.486 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55394 10 6452 1 2025-11-16 16:59:51.893 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51646 10 6452 1 2025-11-16 17:00:52.308 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43720 10 6452 1 2025-11-16 17:01:52.710 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60396 10 6452 1 2025-11-16 16:57:01.697 00:06:00.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 16:58:01.695 00:06:00.110 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:02:53.115 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43664 10 6452 1 2025-11-16 17:03:26.979 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:03:26.894 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:03:26.622 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:03:26.897 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:03:26.752 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:03:53.521 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46474 10 6452 1 2025-11-16 17:04:53.923 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45266 10 6452 1 2025-11-16 17:05:54.286 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55764 10 6452 1 2025-11-16 17:06:54.651 00:00:11.057 TCP 1.101.0.1:3000 -> 23.104.0.1:38530 10 6452 1 2025-11-16 17:07:55.749 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55118 10 6452 1 2025-11-16 17:08:26.966 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:08:26.886 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:08:26.885 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:08:26.940 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:08:26.964 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:04:01.700 00:06:00.103 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:08:56.151 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59176 10 6452 1 2025-11-16 17:05:01.698 00:06:00.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:09:56.557 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46862 10 6452 1 2025-11-16 17:10:56.960 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60752 10 6452 1 2025-11-16 17:11:57.363 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:40090 12 10369 1 2025-11-16 17:12:57.839 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50014 10 6452 1 2025-11-16 17:13:27.121 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:13:26.888 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:13:27.084 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:13:26.735 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:13:27.167 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:13:58.257 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35454 10 6452 1 2025-11-16 17:14:58.661 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37844 10 6452 1 2025-11-16 17:11:01.703 00:06:00.105 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:15:59.090 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57928 10 6452 1 2025-11-16 17:12:01.701 00:06:00.111 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:16:59.496 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49392 10 6452 1 2025-11-16 17:17:59.899 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46762 10 6452 1 2025-11-16 17:18:27.324 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:18:27.169 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:18:26.776 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:18:27.241 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:18:26.941 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:19:00.313 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48308 10 6452 1 2025-11-16 17:20:00.673 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:41418 10 6452 1 2025-11-16 17:21:01.042 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44014 10 6452 1 2025-11-16 17:22:01.404 00:00:10.482 TCP 1.101.0.1:3000 -> 23.104.0.1:41088 13 10427 1 2025-11-16 17:18:01.705 00:06:00.109 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:23:01.929 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59896 10 6452 1 2025-11-16 17:23:27.129 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:23:27.217 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:23:27.094 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:23:27.048 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:23:27.220 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:19:01.702 00:06:00.114 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:24:02.349 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36084 10 6452 1 2025-11-16 17:25:02.754 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42980 10 6452 1 2025-11-16 17:26:03.154 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38252 10 6452 1 2025-11-16 17:27:03.553 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59710 10 6452 1 2025-11-16 17:28:03.958 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54992 10 6452 1 2025-11-16 17:28:27.400 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:28:27.239 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:28:27.327 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:28:27.319 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:28:27.314 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:29:04.364 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53138 10 6452 1 2025-11-16 17:25:01.705 00:06:00.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:30:04.727 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49030 10 6452 1 2025-11-16 17:26:01.704 00:06:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:31:05.117 00:00:17.640 TCP 1.101.0.1:3000 -> 23.104.0.1:40806 10 6452 1 2025-11-16 17:32:12.794 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44624 10 6452 1 2025-11-16 17:33:13.199 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44946 10 6452 1 2025-11-16 17:33:27.468 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:33:27.099 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:33:27.458 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:33:27.501 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:33:27.540 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:34:13.598 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34198 10 6452 1 2025-11-16 17:35:14.004 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:32944 10 6452 1 2025-11-16 17:36:14.403 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:54902 10 6452 1 2025-11-16 17:32:01.706 00:06:00.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:37:14.806 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53818 10 6452 1 2025-11-16 17:33:01.705 00:06:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:38:27.715 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:38:15.236 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 10 6452 1 2025-11-16 17:38:27.483 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:38:27.498 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:38:27.632 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:38:27.476 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:39:15.639 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55148 10 6452 1 2025-11-16 17:40:16.071 00:00:10.525 TCP 1.101.0.1:3000 -> 23.104.0.1:55296 10 6452 1 2025-11-16 17:41:16.630 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53798 10 6452 1 2025-11-16 17:42:17.057 00:00:11.116 TCP 1.101.0.1:3000 -> 23.104.0.1:49952 10 6452 1 2025-11-16 17:43:27.576 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:43:27.589 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:43:27.637 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:43:27.571 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:43:18.213 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54808 10 6452 1 2025-11-16 17:43:27.720 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:39:01.708 00:06:00.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:44:18.576 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40450 10 6452 1 2025-11-16 17:40:01.706 00:06:00.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:45:18.981 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48962 10 6452 1 2025-11-16 17:46:19.346 00:00:11.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42862 10 6452 1 2025-11-16 17:47:20.751 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53608 10 6452 1 2025-11-16 17:48:27.749 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:48:27.768 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:48:27.752 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:48:27.698 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:48:27.834 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:48:21.168 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50338 10 6452 1 2025-11-16 17:49:21.585 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38610 10 6452 1 2025-11-16 17:50:21.995 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58952 10 6452 1 2025-11-16 17:46:01.711 00:06:00.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:51:22.396 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41344 10 6452 1 2025-11-16 17:47:01.709 00:06:00.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:52:22.802 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:38072 10 6452 1 2025-11-16 17:53:27.777 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:53:27.736 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:53:27.907 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:53:27.724 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:53:27.992 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:53:23.210 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50440 10 6452 1 2025-11-16 17:54:23.612 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:52594 10 6452 1 2025-11-16 17:55:24.042 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33474 10 6452 1 2025-11-16 17:56:24.440 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:35202 12 10369 1 2025-11-16 17:57:24.919 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40066 10 6452 1 2025-11-16 17:53:01.712 00:06:00.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:58:28.087 00:00:00.045 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:58:27.904 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:58:27.817 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:58:27.986 00:00:00.064 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:58:27.976 00:00:00.049 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:58:25.287 00:00:11.152 TCP 1.101.0.1:3000 -> 23.104.0.1:36918 12 6556 1 Summary: total flows: 137, total bytes: 428790, total packets: 1027, avg bps: 922, avg pps: 0, avg bpp: 417 Time window: 2025-11-16 16:57:01 - 2025-11-16 17:59:01 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0021s User: 0.0028s Wall: 0.0025s flows/second: 54153.2 Runtime: 0.0025s