Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 03:59:09.025 00:00:11.033 TCP 1.101.0.1:3000 -> 23.104.0.1:57250 10 6452 1 2025-11-17 03:56:01.916 00:05:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 03:56:01.914 00:05:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 04:00:10.112 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:36742 10 6452 1 2025-11-17 04:01:10.479 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45118 10 6452 1 2025-11-17 04:02:10.848 00:00:10.758 TCP 1.101.0.1:3000 -> 23.104.0.1:36170 10 6452 1 2025-11-17 04:03:11.652 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34882 10 6452 1 2025-11-17 04:03:40.212 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 04:03:40.351 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:03:40.175 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:03:40.153 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 04:03:40.259 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 04:04:12.066 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:42502 10 6452 1 2025-11-17 04:05:12.527 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:49594 10 6452 1 2025-11-17 04:02:01.920 00:05:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 04:02:01.924 00:05:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 04:06:12.917 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38460 10 6452 1 2025-11-17 04:07:13.318 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:46432 10 6452 1 2025-11-17 04:08:13.702 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:35184 10 6452 1 2025-11-17 04:08:40.499 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 04:08:40.247 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 04:08:40.320 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:08:40.416 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:08:40.452 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 04:09:14.114 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38904 10 6452 1 2025-11-17 04:10:14.516 00:00:10.635 TCP 1.101.0.1:3000 -> 23.104.0.1:45684 10 6452 1 2025-11-17 04:11:15.188 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41526 10 6452 1 2025-11-17 04:08:01.923 00:05:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 04:08:01.925 00:05:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 04:12:15.589 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38132 10 6452 1 2025-11-17 04:13:15.991 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36460 10 6452 1 2025-11-17 04:13:40.449 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 04:13:40.180 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:13:40.398 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:13:40.386 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 04:13:40.480 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 04:14:16.392 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:44412 10 6452 1 2025-11-17 04:15:16.788 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37860 10 6452 1 2025-11-17 04:16:17.193 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42400 10 6452 1 2025-11-17 04:17:17.587 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53852 10 6452 1 2025-11-17 04:14:01.926 00:05:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 04:14:01.924 00:05:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 04:18:17.995 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:33678 10 6452 1 2025-11-17 04:18:40.541 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 04:18:40.626 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:18:40.655 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:18:40.603 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 04:18:40.739 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 04:19:18.475 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56390 10 6452 1 2025-11-17 04:20:18.872 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36830 10 6452 1 2025-11-17 04:21:19.277 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57568 10 6452 1 2025-11-17 04:22:19.681 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50756 10 6452 1 2025-11-17 04:23:20.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34110 10 6452 1 2025-11-17 04:23:40.578 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 04:23:40.446 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:23:40.521 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:23:40.399 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 04:23:40.602 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 04:20:01.929 00:05:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 04:20:01.926 00:05:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 04:24:20.519 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54468 10 6452 1 2025-11-17 04:25:20.923 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:54828 10 6452 1 2025-11-17 04:26:21.349 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:33964 10 6452 1 2025-11-17 04:27:21.703 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42946 10 6452 1 2025-11-17 04:28:22.109 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33930 10 6452 1 2025-11-17 04:28:40.686 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 04:28:40.628 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:28:40.824 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:28:40.701 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 04:28:40.908 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 04:29:22.524 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44774 10 6452 1 2025-11-17 04:26:01.928 00:05:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 04:26:01.930 00:05:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 04:30:22.931 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:41692 10 6452 1 2025-11-17 04:31:23.331 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35250 10 6452 1 2025-11-17 04:32:23.697 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55432 10 6452 1 2025-11-17 04:33:24.110 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41018 10 6452 1 2025-11-17 04:33:40.707 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 04:33:40.745 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 04:33:40.594 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:33:40.625 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:33:40.749 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 04:34:24.509 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42528 10 6452 1 2025-11-17 04:35:24.916 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47058 10 6452 1 2025-11-17 04:32:01.929 00:05:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 04:32:01.936 00:05:00.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 04:36:25.282 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53022 10 6452 1 2025-11-17 04:37:25.642 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:34444 12 10375 1 2025-11-17 04:38:40.949 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 04:38:40.969 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 04:38:40.933 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:38:40.866 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:38:40.930 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 04:38:26.113 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40648 10 6452 1 2025-11-17 04:39:26.519 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49928 10 6452 1 2025-11-17 04:40:26.881 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54926 10 6452 1 2025-11-17 04:41:27.282 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57978 10 6452 1 2025-11-17 04:38:01.930 00:05:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 04:38:01.934 00:05:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 04:42:27.688 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56734 10 6452 1 2025-11-17 04:43:40.869 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:43:28.110 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46906 10 6452 1 2025-11-17 04:43:41.197 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 04:43:41.051 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:43:41.192 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 04:43:41.134 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 04:44:28.509 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59026 10 6452 1 2025-11-17 04:45:28.910 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51676 10 6452 1 2025-11-17 04:46:29.276 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34932 10 6452 1 2025-11-17 04:47:29.681 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57232 10 6452 1 2025-11-17 04:44:01.931 00:05:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 04:44:01.933 00:05:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 04:48:30.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37082 10 6452 1 2025-11-17 04:48:40.856 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 04:48:40.738 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:48:40.945 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 04:48:40.822 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 04:48:41.070 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:49:30.515 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45308 10 6452 1 2025-11-17 04:50:30.920 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:47858 10 6452 1 2025-11-17 04:51:31.274 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44724 10 6452 1 2025-11-17 04:52:31.685 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35800 10 6452 1 2025-11-17 04:53:40.970 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:53:41.171 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 04:53:41.091 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 04:53:32.112 00:00:10.994 TCP 1.101.0.1:3000 -> 23.104.0.1:60934 10 6452 1 2025-11-17 04:53:41.088 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:53:41.212 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 04:50:01.933 00:05:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 04:50:01.935 00:05:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 04:54:33.143 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47166 10 6452 1 2025-11-17 04:55:33.500 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:45948 10 6452 1 2025-11-17 04:56:33.935 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:41964 12 10375 1 2025-11-17 04:57:34.397 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44024 10 6452 1 2025-11-17 04:58:34.791 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35972 10 6452 1 2025-11-17 04:58:41.162 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 04:58:41.181 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:58:41.361 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 04:58:41.074 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 04:58:41.444 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 140, total bytes: 424846, total packets: 1024, avg bps: 903, avg pps: 0, avg bpp: 414 Time window: 2025-11-17 03:56:01 - 2025-11-17 04:58:45 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0038s User: 0.0010s Wall: 0.0015s flows/second: 92283.9 Runtime: 0.0015s