Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 11:58:40.907 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56194 10 6661 1 2025-11-17 11:59:41.276 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36756 10 6661 1 2025-11-17 12:00:41.687 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56180 10 6661 1 2025-11-17 12:01:42.113 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:59642 12 10369 1 2025-11-17 12:02:42.593 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57624 10 6452 1 2025-11-17 11:58:02.080 00:06:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 12:03:49.783 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 12:03:49.651 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 12:03:49.350 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:03:49.701 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:03:49.642 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 12:03:42.953 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39522 10 6452 1 2025-11-17 12:04:43.321 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47556 10 6452 1 2025-11-17 12:00:02.083 00:06:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 12:05:43.723 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47672 10 6452 1 2025-11-17 12:06:44.136 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58018 10 6452 1 2025-11-17 12:07:44.537 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47496 10 6452 1 2025-11-17 12:08:49.844 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 12:08:50.061 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 12:08:49.929 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:08:49.763 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:08:50.048 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 12:08:44.935 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:57412 10 6452 1 2025-11-17 12:09:45.364 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40896 10 6452 1 2025-11-17 12:05:02.082 00:06:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 12:10:45.767 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56824 10 6452 1 2025-11-17 12:11:46.183 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56110 10 6452 1 2025-11-17 12:07:02.086 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 12:12:46.584 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45400 10 6452 1 2025-11-17 12:13:49.981 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 12:13:50.133 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 12:13:50.010 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:13:49.897 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:13:49.703 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 12:13:46.997 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46436 10 6452 1 2025-11-17 12:14:47.402 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43690 10 6452 1 2025-11-17 12:15:47.772 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59154 10 6452 1 2025-11-17 12:16:48.185 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49520 10 6452 1 2025-11-17 12:12:02.083 00:06:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 12:17:48.590 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51200 10 6452 1 2025-11-17 12:18:50.338 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 12:18:50.256 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 12:18:50.202 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:18:50.254 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:18:50.261 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 12:18:49.016 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40572 10 6452 1 2025-11-17 12:14:02.088 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 12:19:49.418 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38280 10 6452 1 2025-11-17 12:20:49.833 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59690 10 6452 1 2025-11-17 12:21:50.239 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:49446 10 6452 1 2025-11-17 12:22:50.611 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43496 10 6452 1 2025-11-17 12:23:50.262 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 12:23:50.230 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 12:23:49.907 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:23:50.180 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:23:50.174 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 12:23:50.974 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:45236 10 6452 1 2025-11-17 12:19:02.085 00:06:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 12:24:51.347 00:00:10.482 TCP 1.101.0.1:3000 -> 23.104.0.1:59590 10 6452 1 2025-11-17 12:21:02.087 00:06:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 12:25:51.870 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36154 10 6452 1 2025-11-17 12:26:52.284 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33350 10 6452 1 2025-11-17 12:27:52.648 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45234 10 6452 1 2025-11-17 12:28:50.366 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 12:28:50.330 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 12:28:50.075 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:28:50.284 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:28:50.330 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 12:28:53.057 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39942 10 6452 1 2025-11-17 12:29:53.458 00:00:10.883 TCP 1.101.0.1:3000 -> 23.104.0.1:52440 10 6452 1 2025-11-17 12:30:54.376 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41732 10 6452 1 2025-11-17 12:26:02.086 00:06:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 12:31:54.783 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:55984 12 10375 1 2025-11-17 12:28:02.089 00:06:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 12:32:55.265 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37254 10 6452 1 2025-11-17 12:33:50.532 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 12:33:50.451 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 12:33:50.255 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:33:50.451 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:33:50.384 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 12:33:55.643 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44432 10 6452 1 2025-11-17 12:34:56.068 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:53218 10 6452 1 2025-11-17 12:35:56.466 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55450 10 6452 1 2025-11-17 12:36:56.868 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55858 10 6452 1 2025-11-17 12:33:02.088 00:06:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 12:37:57.277 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45776 10 6452 1 2025-11-17 12:38:50.755 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 12:38:50.673 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 12:38:50.633 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:38:50.672 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:38:50.615 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 12:38:57.683 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35948 10 6452 1 2025-11-17 12:35:02.093 00:06:00.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 12:39:58.120 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35140 10 6452 1 2025-11-17 12:40:58.521 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39024 10 6452 1 2025-11-17 12:41:58.929 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:57838 10 6452 1 2025-11-17 12:42:59.307 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57538 10 6452 1 2025-11-17 12:43:50.728 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 12:43:50.799 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 12:43:50.766 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:43:50.646 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:43:50.750 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 12:43:59.724 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38880 10 6452 1 2025-11-17 12:40:02.090 00:06:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 12:45:00.138 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59694 10 6452 1 2025-11-17 12:46:00.503 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:32828 10 6452 1 2025-11-17 12:42:02.093 00:06:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 12:47:00.867 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47778 10 6452 1 2025-11-17 12:48:01.240 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48448 10 6452 1 2025-11-17 12:48:50.794 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 12:48:50.714 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 12:48:50.647 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:48:50.712 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:48:50.718 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 12:49:01.654 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42680 10 6452 1 2025-11-17 12:50:02.065 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38426 10 6452 1 2025-11-17 12:51:02.446 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41352 10 6452 1 2025-11-17 12:47:02.091 00:06:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 12:52:02.847 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:42886 10 6452 1 2025-11-17 12:53:03.272 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36924 10 6452 1 2025-11-17 12:53:50.822 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 12:53:50.843 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:53:50.755 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:53:50.822 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 12:53:50.838 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 12:49:02.094 00:06:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 12:54:03.677 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57162 10 6452 1 2025-11-17 12:55:04.113 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:39908 10 6452 1 2025-11-17 12:56:04.562 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50036 10 6452 1 2025-11-17 12:57:04.967 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45796 10 6452 1 2025-11-17 12:58:05.369 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60354 10 6452 1 2025-11-17 12:58:50.939 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 12:58:50.554 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:58:50.831 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 12:58:50.892 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 12:58:50.914 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 136, total bytes: 424483, total packets: 1008, avg bps: 930, avg pps: 0, avg bpp: 421 Time window: 2025-11-17 11:58:02 - 2025-11-17 12:58:50 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0045s User: 0.0009s Wall: 0.0021s flows/second: 66182.3 Runtime: 0.0021s