Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 03:58:43.608 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:34350 10 6870 1 2025-11-18 03:59:08.983 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 03:59:08.901 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 03:59:08.790 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:59:08.902 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:59:08.826 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 03:59:44.015 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46980 10 6870 1 2025-11-18 04:00:44.419 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33902 10 6870 1 2025-11-18 04:01:44.819 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50252 10 6870 1 2025-11-18 03:57:02.390 00:06:00.121 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:02:45.181 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:37342 10 6870 1 2025-11-18 04:03:45.589 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:56676 10 6870 1 2025-11-18 03:59:02.393 00:06:00.117 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:04:08.890 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:04:08.857 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:04:08.826 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:04:08.807 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:04:08.801 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:04:45.958 00:00:10.425 TCP 1.101.0.1:3000 -> 23.104.0.1:39376 10 6870 1 2025-11-18 04:05:46.424 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52340 10 6870 1 2025-11-18 04:06:46.825 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52640 10 6870 1 2025-11-18 04:07:47.227 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48012 10 6870 1 2025-11-18 04:08:47.630 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46086 10 6870 1 2025-11-18 04:04:02.392 00:06:00.126 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:09:08.913 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:09:08.854 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:09:09.011 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:09:08.917 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:09:09.092 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:09:48.034 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57062 10 6870 1 2025-11-18 04:10:48.437 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:54132 10 6870 1 2025-11-18 04:06:02.396 00:06:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:11:48.808 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44172 10 6870 1 2025-11-18 04:12:49.209 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37528 10 6870 1 2025-11-18 04:13:49.612 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48272 10 6870 1 2025-11-18 04:14:09.193 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:14:09.010 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:14:08.948 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:14:09.200 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:14:09.030 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:14:50.013 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51348 10 6870 1 2025-11-18 04:15:50.411 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44770 10 6870 1 2025-11-18 04:11:02.394 00:06:00.125 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:16:50.815 00:00:12.930 TCP 1.101.0.1:3000 -> 23.104.0.1:48964 10 6870 1 2025-11-18 04:17:53.791 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51522 10 6870 1 2025-11-18 04:13:02.396 00:06:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:18:54.152 00:00:10.487 TCP 1.101.0.1:3000 -> 23.104.0.1:42106 10 6870 1 2025-11-18 04:19:09.145 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:19:09.187 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:19:09.235 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:19:09.070 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:19:09.318 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:19:54.676 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50094 10 6870 1 2025-11-18 04:20:55.109 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33524 10 6870 1 2025-11-18 04:21:55.508 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42232 10 6870 1 2025-11-18 04:18:02.395 00:06:00.126 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:22:55.919 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53786 10 6870 1 2025-11-18 04:24:09.335 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:23:56.320 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43748 10 6870 1 2025-11-18 04:24:09.400 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:24:09.227 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:24:09.253 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:24:09.156 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:20:02.399 00:06:00.120 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:24:56.726 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44862 10 6870 1 2025-11-18 04:25:57.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53918 10 6870 1 2025-11-18 04:26:57.522 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47294 10 6870 1 2025-11-18 04:27:57.921 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:60290 10 6870 1 2025-11-18 04:29:09.398 00:00:00.013 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:29:09.461 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:28:58.294 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55212 10 6870 1 2025-11-18 04:29:09.385 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:29:09.305 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:29:09.285 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:25:02.398 00:06:00.123 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:29:58.693 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42024 10 6870 1 2025-11-18 04:30:59.110 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46896 10 6870 1 2025-11-18 04:27:02.401 00:06:00.119 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:31:59.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35302 10 6870 1 2025-11-18 04:32:59.924 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33156 10 6870 1 2025-11-18 04:34:09.645 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:34:09.254 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:34:09.442 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:34:09.568 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:34:00.343 00:00:10.467 TCP 1.101.0.1:3000 -> 23.104.0.1:42092 10 6870 1 2025-11-18 04:34:09.525 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:35:00.849 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:53160 10 6870 1 2025-11-18 04:36:01.269 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43846 10 6870 1 2025-11-18 04:32:02.401 00:06:00.123 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:37:01.631 00:00:10.946 TCP 1.101.0.1:3000 -> 23.104.0.1:50926 10 6870 1 2025-11-18 04:38:02.619 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37574 10 6870 1 2025-11-18 04:34:02.402 00:06:00.118 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:39:09.686 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:39:09.727 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:39:09.553 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:39:09.605 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:39:09.660 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:39:03.021 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53154 10 6870 1 2025-11-18 04:40:03.419 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37400 10 6870 1 2025-11-18 04:41:03.824 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36762 10 6870 1 2025-11-18 04:42:04.230 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57174 10 6870 1 2025-11-18 04:43:04.631 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:52090 10 6870 1 2025-11-18 04:39:02.402 00:06:00.122 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:44:09.821 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:44:09.813 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:44:09.711 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:44:09.736 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:44:09.984 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:44:05.030 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34938 10 6870 1 2025-11-18 04:45:05.435 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47332 10 6870 1 2025-11-18 04:41:02.406 00:06:00.115 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:46:05.843 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:33680 10 6870 1 2025-11-18 04:47:06.249 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50524 10 6870 1 2025-11-18 04:48:06.652 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34524 10 6870 1 2025-11-18 04:49:10.193 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:49:09.826 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:49:09.941 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:49:09.834 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:49:09.910 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:49:07.066 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42486 10 6870 1 2025-11-18 04:50:07.428 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52430 10 6870 1 2025-11-18 04:46:02.404 00:06:00.121 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:51:07.830 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34980 10 6870 1 2025-11-18 04:52:08.228 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44032 10 6870 1 2025-11-18 04:48:02.407 00:06:00.115 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 04:53:08.637 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47162 10 6870 1 2025-11-18 04:54:09.813 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 04:54:09.875 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:54:09.948 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 04:54:09.899 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 04:54:10.031 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 04:54:09.040 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50414 10 6870 1 2025-11-18 04:55:09.439 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36100 10 6870 1 2025-11-18 04:56:09.844 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:59556 10 6870 1 2025-11-18 04:57:10.270 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:34276 12 10584 1 2025-11-18 04:53:02.408 00:06:00.120 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 04:58:10.752 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46766 10 6661 1 Summary: total flows: 137, total bytes: 445462, total packets: 1020, avg bps: 957, avg pps: 0, avg bpp: 436 Time window: 2025-11-18 03:57:02 - 2025-11-18 04:59:02 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0041s User: 0.0010s Wall: 0.0019s flows/second: 73972.7 Runtime: 0.0019s