Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 23:59:06.140 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36906 10 6452 1 2025-11-22 00:00:06.537 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36334 10 6452 1 2025-11-22 00:01:00.944 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:01:01.378 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:01:01.142 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:01:01.136 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:01:01.461 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:01:06.954 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54058 10 6452 1 2025-11-22 00:02:07.364 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56490 10 6452 1 2025-11-21 23:58:04.308 00:06:00.292 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 00:03:07.766 00:00:11.020 TCP 1.101.0.1:3000 -> 23.104.0.1:46730 10 6452 1 2025-11-21 23:59:04.305 00:06:00.297 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 00:04:08.826 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52478 10 6452 1 2025-11-22 00:05:09.190 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58736 10 6452 1 2025-11-22 00:06:01.523 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:06:01.343 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:06:01.271 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:06:01.440 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:06:01.494 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:06:09.594 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51508 10 6452 1 2025-11-22 00:07:09.994 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34816 10 6452 1 2025-11-22 00:08:10.398 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47232 10 6452 1 2025-11-22 00:09:10.801 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44586 10 6452 1 2025-11-22 00:05:04.310 00:06:00.292 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 00:10:11.199 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59904 10 6452 1 2025-11-22 00:06:04.307 00:06:00.297 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 00:11:01.741 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:11:01.665 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:11:01.420 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:11:01.659 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:11:01.543 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:11:11.559 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42226 10 6452 1 2025-11-22 00:12:11.954 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33118 10 6452 1 2025-11-22 00:13:12.381 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:48070 12 10375 1 2025-11-22 00:14:12.858 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:45724 10 6452 1 2025-11-22 00:15:13.279 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48172 10 6452 1 2025-11-22 00:16:01.468 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:16:01.665 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:16:01.703 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:16:01.461 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:16:01.786 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:16:13.690 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44962 10 6452 1 2025-11-22 00:12:04.314 00:06:00.289 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 00:17:14.108 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36496 10 6452 1 2025-11-22 00:13:04.310 00:06:00.295 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 00:18:14.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41074 10 6452 1 2025-11-22 00:19:14.922 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44556 10 6452 1 2025-11-22 00:20:15.338 00:00:18.904 TCP 1.101.0.1:3000 -> 23.104.0.1:48440 10 6452 1 2025-11-22 00:21:01.739 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:21:01.722 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:21:01.565 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:21:01.655 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:21:01.823 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:21:24.347 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33462 10 6452 1 2025-11-22 00:22:24.755 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58962 10 6452 1 2025-11-22 00:23:25.152 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50976 10 6452 1 2025-11-22 00:19:04.319 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 00:24:25.550 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57974 10 6452 1 2025-11-22 00:20:04.316 00:06:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 00:25:25.949 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:38786 10 6452 1 2025-11-22 00:26:01.899 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:26:01.815 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:26:01.866 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:26:01.817 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:26:02.049 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:26:26.317 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52520 10 6452 1 2025-11-22 00:27:26.729 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52300 10 6452 1 2025-11-22 00:28:27.141 00:00:14.438 TCP 1.101.0.1:3000 -> 23.104.0.1:59516 12 10369 1 2025-11-22 00:29:31.621 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53672 10 6452 1 2025-11-22 00:30:32.021 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55158 10 6452 1 2025-11-22 00:31:01.825 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:31:01.891 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:31:01.818 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:31:01.892 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:26:04.319 00:06:00.289 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 00:31:01.902 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:31:32.429 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39386 10 6452 1 2025-11-22 00:27:04.317 00:06:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 00:32:32.835 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60064 10 6452 1 2025-11-22 00:33:33.236 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:40664 12 10369 1 2025-11-22 00:34:33.722 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45814 10 6452 1 2025-11-22 00:35:34.135 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37592 10 6452 1 2025-11-22 00:36:01.978 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:36:02.084 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:36:01.743 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:36:01.894 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:36:01.808 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:36:34.536 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35942 10 6452 1 2025-11-22 00:37:34.944 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:54308 10 6452 1 2025-11-22 00:33:04.322 00:06:00.288 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 00:38:35.367 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53238 10 6452 1 2025-11-22 00:34:04.320 00:06:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 00:39:35.773 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50828 10 6452 1 2025-11-22 00:40:36.186 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56544 10 6452 1 2025-11-22 00:41:02.201 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:41:02.041 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:41:01.978 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:41:01.992 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:41:02.061 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:41:36.584 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42128 10 6452 1 2025-11-22 00:42:36.986 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60826 10 6452 1 2025-11-22 00:43:37.355 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34636 10 6452 1 2025-11-22 00:44:37.763 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60508 10 6452 1 2025-11-22 00:40:04.323 00:06:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 00:45:38.168 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39008 10 6452 1 2025-11-22 00:41:04.321 00:06:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 00:46:02.337 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:46:02.340 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:46:02.297 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:46:02.255 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:46:02.350 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:46:38.575 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42550 10 6452 1 2025-11-22 00:47:38.980 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34046 10 6452 1 2025-11-22 00:48:39.387 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:43772 10 6452 1 2025-11-22 00:49:39.742 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49746 10 6452 1 2025-11-22 00:50:40.109 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35428 10 6452 1 2025-11-22 00:51:02.738 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:51:02.661 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:51:02.225 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:51:02.656 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:51:02.557 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:51:40.515 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42368 10 6452 1 2025-11-22 00:47:04.328 00:06:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 00:52:40.885 00:00:12.029 TCP 1.101.0.1:3000 -> 23.104.0.1:57986 12 6556 1 2025-11-22 00:48:04.326 00:06:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 00:53:42.997 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33912 10 6452 1 2025-11-22 00:54:43.402 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43602 10 6452 1 2025-11-22 00:55:43.805 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60248 10 6452 1 2025-11-22 00:56:02.516 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:56:02.319 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:56:02.435 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:56:02.153 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:56:02.517 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:56:44.210 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:35062 10 6452 1 2025-11-22 00:57:44.603 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50672 10 6452 1 Summary: total flows: 135, total bytes: 421425, total packets: 1002, avg bps: 938, avg pps: 0, avg bpp: 420 Time window: 2025-11-21 23:58:04 - 2025-11-22 00:57:54 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0043s User: 0.0014s Wall: 0.0019s flows/second: 69948.2 Runtime: 0.0020s