Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 19:59:23.718 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59844 10 6452 1 2025-11-16 20:00:24.103 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50790 10 6452 1 2025-11-16 20:01:24.507 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54586 10 6452 1 2025-11-16 20:02:24.912 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55800 10 6452 1 2025-11-16 20:03:30.553 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 20:03:30.301 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:03:30.552 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:03:30.495 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 20:03:30.634 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 20:03:25.322 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58008 10 6452 1 2025-11-16 19:59:01.750 00:06:00.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 20:04:25.723 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40590 10 6452 1 2025-11-16 20:00:01.748 00:06:00.114 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 20:05:26.139 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47614 10 6452 1 2025-11-16 20:06:26.507 00:00:11.017 TCP 1.101.0.1:3000 -> 23.104.0.1:59304 10 6452 1 2025-11-16 20:07:27.559 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60016 10 6452 1 2025-11-16 20:08:30.743 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 20:08:30.661 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:08:30.776 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 20:08:30.477 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 20:08:30.340 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:08:27.958 00:00:10.897 TCP 1.101.0.1:3000 -> 23.104.0.1:39192 10 6452 1 2025-11-16 20:09:28.890 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:58472 10 6452 1 2025-11-16 20:10:29.272 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45576 10 6452 1 2025-11-16 20:06:01.754 00:06:00.115 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 20:11:29.639 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54848 10 6452 1 2025-11-16 20:07:01.751 00:06:00.120 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 20:12:30.041 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47326 10 6452 1 2025-11-16 20:13:30.695 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 20:13:30.537 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 20:13:30.577 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:13:30.614 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:13:30.613 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 20:13:30.443 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33118 10 6452 1 2025-11-16 20:14:30.845 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:34046 10 6452 1 2025-11-16 20:15:31.234 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38018 10 6452 1 2025-11-16 20:16:31.641 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:47516 10 6452 1 2025-11-16 20:17:32.084 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:43732 10 6452 1 2025-11-16 20:13:01.755 00:06:00.114 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 20:18:30.725 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:18:30.654 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 20:18:30.717 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 20:18:30.598 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:18:30.808 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 20:18:32.523 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34998 10 6452 1 2025-11-16 20:14:01.753 00:06:00.119 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 20:19:32.926 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35654 10 6452 1 2025-11-16 20:20:33.352 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37538 10 6452 1 2025-11-16 20:21:33.754 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:57134 10 6452 1 2025-11-16 20:22:34.177 00:00:10.726 TCP 1.101.0.1:3000 -> 23.104.0.1:51626 10 6452 1 2025-11-16 20:23:30.776 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 20:23:30.815 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 20:23:30.737 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:23:30.693 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:23:30.815 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 20:23:34.941 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40848 10 6452 1 2025-11-16 20:24:35.358 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34504 10 6452 1 2025-11-16 20:20:01.758 00:06:00.118 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 20:25:35.778 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:35762 10 6452 1 2025-11-16 20:21:01.756 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 20:26:36.150 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47232 10 6452 1 2025-11-16 20:27:36.556 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33078 10 6452 1 2025-11-16 20:28:30.876 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 20:28:30.968 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:28:30.935 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:28:30.947 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 20:28:31.020 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 20:28:36.970 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46360 10 6452 1 2025-11-16 20:29:37.376 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44512 10 6452 1 2025-11-16 20:30:37.737 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58776 10 6452 1 2025-11-16 20:31:38.148 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48818 10 6452 1 2025-11-16 20:27:01.761 00:06:00.115 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 20:32:38.548 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55060 10 6452 1 2025-11-16 20:28:01.760 00:06:00.119 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 20:33:31.161 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 20:33:30.824 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:33:30.994 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 20:33:31.079 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:33:30.993 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 20:33:38.914 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35108 10 6452 1 2025-11-16 20:34:39.316 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57084 10 6452 1 2025-11-16 20:35:39.717 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50686 10 6452 1 2025-11-16 20:36:40.122 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46284 10 6452 1 2025-11-16 20:37:40.523 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51184 10 6452 1 2025-11-16 20:38:31.302 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 20:38:31.128 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:38:31.295 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:38:31.296 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 20:38:31.378 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 20:38:40.926 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:44358 10 6452 1 2025-11-16 20:34:01.768 00:06:00.115 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 20:39:41.356 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54932 10 6452 1 2025-11-16 20:35:01.765 00:06:00.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 20:40:41.722 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35424 10 6452 1 2025-11-16 20:41:42.137 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35692 10 6452 1 2025-11-16 20:42:42.540 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:50082 10 6452 1 2025-11-16 20:43:30.897 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:43:31.237 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 20:43:31.186 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:43:31.170 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 20:43:31.270 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 20:43:42.983 00:00:10.820 TCP 1.101.0.1:3000 -> 23.104.0.1:36444 10 6452 1 2025-11-16 20:44:43.846 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:52154 10 6452 1 2025-11-16 20:45:44.273 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37438 10 6452 1 2025-11-16 20:41:01.771 00:06:00.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 20:46:44.681 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47530 10 6452 1 2025-11-16 20:42:01.768 00:06:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 20:47:45.063 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53766 10 6452 1 2025-11-16 20:48:31.332 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 20:48:31.178 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:48:31.320 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:48:31.390 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 20:48:31.402 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 20:48:45.469 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42006 10 6452 1 2025-11-16 20:49:45.887 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:59248 10 6452 1 2025-11-16 20:50:46.319 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56070 10 6452 1 2025-11-16 20:51:46.720 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:40866 10 6452 1 2025-11-16 20:52:47.115 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53060 10 6452 1 2025-11-16 20:48:01.773 00:06:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 20:53:33.172 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 20:53:32.900 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 20:53:32.928 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:53:33.091 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:53:33.083 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 20:53:47.517 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47530 10 6452 1 2025-11-16 20:49:01.770 00:06:00.138 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 20:54:47.921 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34446 10 6452 1 2025-11-16 20:55:48.330 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38646 10 6452 1 2025-11-16 20:56:48.733 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46106 10 6452 1 2025-11-16 20:57:49.145 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46522 10 6452 1 2025-11-16 20:58:31.630 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 20:58:31.482 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:58:31.460 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 20:58:31.534 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 20:58:31.544 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 135, total bytes: 409564, total packets: 994, avg bps: 917, avg pps: 0, avg bpp: 412 Time window: 2025-11-16 19:59:01 - 2025-11-16 20:58:31 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0030s User: 0.0015s Wall: 0.0021s flows/second: 64046.0 Runtime: 0.0021s