Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 00:54:01.849 00:06:00.126 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 00:59:31.315 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44634 10 6452 1 2025-11-17 01:00:31.723 00:00:10.428 TCP 1.101.0.1:3000 -> 23.104.0.1:47676 11 6504 1 2025-11-17 01:01:32.190 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60742 10 6452 1 2025-11-17 01:02:32.594 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53216 10 6452 1 2025-11-17 01:03:36.673 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 01:03:36.366 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 01:03:36.399 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:03:36.591 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:03:36.630 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 01:03:32.998 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35654 10 6452 1 2025-11-17 01:04:33.398 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50040 10 6452 1 2025-11-17 01:00:01.855 00:06:00.118 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 01:05:33.807 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41120 10 6452 1 2025-11-17 01:01:01.852 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 01:06:34.209 00:00:10.630 TCP 1.101.0.1:3000 -> 23.104.0.1:55130 10 6452 1 2025-11-17 01:07:34.875 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34274 10 6452 1 2025-11-17 01:08:36.679 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 01:08:36.238 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:08:36.676 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:08:36.680 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 01:08:36.757 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 01:08:35.285 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42678 10 6452 1 2025-11-17 01:09:35.689 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43754 10 6452 1 2025-11-17 01:10:36.057 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52554 10 6452 1 2025-11-17 01:11:36.465 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51302 10 6452 1 2025-11-17 01:07:01.856 00:06:00.119 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 01:12:36.867 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50296 10 6452 1 2025-11-17 01:08:01.853 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 01:13:37.015 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 01:13:36.925 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 01:13:37.000 00:00:00.041 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:13:36.930 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:13:36.832 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 01:13:37.281 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42712 10 6452 1 2025-11-17 01:14:37.642 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36204 10 6452 1 2025-11-17 01:15:38.050 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54580 10 6452 1 2025-11-17 01:16:38.468 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:37368 12 10369 1 2025-11-17 01:17:38.948 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:41322 10 6452 1 2025-11-17 01:18:36.974 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 01:18:36.923 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 01:18:36.769 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:18:36.884 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:18:36.753 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 01:18:39.385 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45980 10 6452 1 2025-11-17 01:14:01.857 00:06:00.119 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 01:19:39.800 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:50844 10 6452 1 2025-11-17 01:15:01.856 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 01:20:40.180 00:00:10.541 TCP 1.101.0.1:3000 -> 23.104.0.1:38112 10 6452 1 2025-11-17 01:21:40.761 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45740 10 6452 1 2025-11-17 01:22:41.173 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57736 10 6452 1 2025-11-17 01:23:36.917 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 01:23:36.967 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:23:36.836 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:23:36.741 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 01:23:36.918 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 01:23:41.585 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38476 10 6452 1 2025-11-17 01:24:41.993 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:33928 10 6452 1 2025-11-17 01:25:42.384 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60340 10 6452 1 2025-11-17 01:21:01.858 00:06:00.118 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 01:26:42.783 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:37838 12 10375 1 2025-11-17 01:22:01.854 00:06:00.125 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 01:27:43.225 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45724 10 6452 1 2025-11-17 01:28:36.989 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 01:28:37.087 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 01:28:36.772 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:28:37.114 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:28:37.197 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 01:28:43.629 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41336 10 6452 1 2025-11-17 01:29:44.032 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36012 10 6452 1 2025-11-17 01:30:44.442 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58328 10 6452 1 2025-11-17 01:31:44.842 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:33218 10 6452 1 2025-11-17 01:32:45.273 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58864 10 6452 1 2025-11-17 01:28:01.858 00:06:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 01:33:37.359 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 01:33:37.012 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 01:33:36.950 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:33:37.276 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:33:37.164 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 01:33:45.633 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50044 10 6452 1 2025-11-17 01:29:01.856 00:06:00.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 01:34:46.039 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54196 10 6452 1 2025-11-17 01:35:46.406 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54566 10 6452 1 2025-11-17 01:36:46.768 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:37988 10 6452 1 2025-11-17 01:37:47.140 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:47650 10 6452 1 2025-11-17 01:38:37.360 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 01:38:37.003 00:00:00.057 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:38:37.363 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:38:37.706 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 01:38:37.445 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 01:38:47.496 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60600 10 6452 1 2025-11-17 01:39:47.897 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39124 12 6556 1 2025-11-17 01:35:01.860 00:06:00.122 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 01:40:48.311 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34304 10 6452 1 2025-11-17 01:36:01.858 00:06:00.125 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 01:41:48.678 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42820 10 6452 1 2025-11-17 01:42:49.112 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37112 10 6452 1 2025-11-17 01:43:37.370 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 01:43:37.288 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 01:43:37.018 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:43:37.288 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:43:37.203 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 01:43:49.476 00:00:12.592 TCP 1.101.0.1:3000 -> 23.104.0.1:43806 10 6452 1 2025-11-17 01:44:52.114 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44126 10 6452 1 2025-11-17 01:45:52.518 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41414 10 6452 1 2025-11-17 01:46:52.925 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:35860 10 6452 1 2025-11-17 01:42:01.861 00:06:00.122 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 01:47:53.345 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51124 10 6452 1 2025-11-17 01:43:01.858 00:06:00.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 01:48:37.492 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 01:48:37.290 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:48:37.495 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:48:37.338 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 01:48:37.577 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 01:48:53.754 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:39524 10 6452 1 2025-11-17 01:49:54.186 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45452 10 6452 1 2025-11-17 01:50:54.581 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49830 10 6452 1 2025-11-17 01:51:54.983 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56998 10 6452 1 2025-11-17 01:52:55.392 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53978 10 6452 1 2025-11-17 01:53:37.625 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 01:53:37.583 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 01:53:37.229 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:53:37.544 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:53:37.334 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 01:49:01.865 00:06:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 01:53:55.797 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39398 10 6452 1 2025-11-17 01:50:01.862 00:06:00.126 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 01:54:56.201 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60068 10 6452 1 2025-11-17 01:55:56.607 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41568 10 6452 1 2025-11-17 01:56:57.012 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49512 10 6452 1 2025-11-17 01:57:57.415 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37358 10 6452 1 2025-11-17 01:58:37.591 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 01:58:37.636 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 01:58:37.607 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:58:37.509 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 01:58:37.572 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 Summary: total flows: 136, total bytes: 418421, total packets: 1015, avg bps: 863, avg pps: 0, avg bpp: 412 Time window: 2025-11-17 00:54:01 - 2025-11-17 01:58:37 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0044s User: 0.0009s Wall: 0.0023s flows/second: 59234.2 Runtime: 0.0023s