Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 02:58:51.053 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42656 10 6452 1 2025-11-22 02:54:04.376 00:06:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 02:59:51.461 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58356 10 6452 1 2025-11-22 03:01:04.805 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:01:04.864 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:01:04.972 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 03:00:51.825 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56022 10 6452 1 2025-11-22 03:01:04.917 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 03:01:04.947 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 03:01:52.190 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:44240 10 6452 1 2025-11-22 03:02:52.588 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38348 10 6452 1 2025-11-22 03:03:52.953 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54814 10 6452 1 2025-11-22 03:04:53.361 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33912 10 6452 1 2025-11-22 03:00:04.384 00:06:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 03:01:04.382 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 03:06:05.265 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 03:06:05.190 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 03:06:05.087 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:06:05.183 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:06:04.977 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 03:05:53.759 00:00:10.768 TCP 1.101.0.1:3000 -> 23.104.0.1:35424 10 6452 1 2025-11-22 03:06:54.561 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43094 10 6452 1 2025-11-22 03:07:54.965 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52326 10 6452 1 2025-11-22 03:08:55.372 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57456 10 6452 1 2025-11-22 03:09:55.733 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40090 10 6452 1 2025-11-22 03:11:05.252 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 03:11:05.135 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:11:05.260 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:11:05.264 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 03:11:05.343 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 03:10:56.145 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46054 10 6452 1 2025-11-22 03:07:04.386 00:06:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 03:11:56.550 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46942 10 6452 1 2025-11-22 03:08:04.384 00:06:00.284 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 03:12:56.951 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:42402 10 6452 1 2025-11-22 03:13:57.371 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50438 10 6452 1 2025-11-22 03:14:57.779 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38580 10 6452 1 2025-11-22 03:16:05.185 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 03:16:05.356 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:16:05.339 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:16:05.187 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 03:16:05.421 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 03:15:58.212 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44490 10 6452 1 2025-11-22 03:16:58.623 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34246 10 6452 1 2025-11-22 03:17:59.023 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45232 10 6452 1 2025-11-22 03:14:04.390 00:06:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 03:18:59.437 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54674 10 6452 1 2025-11-22 03:15:04.389 00:06:00.284 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 03:19:59.853 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:50808 10 6452 1 2025-11-22 03:21:05.579 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:21:05.577 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 03:21:05.595 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 03:21:05.444 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:21:05.662 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 03:21:00.269 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:54482 10 6452 1 2025-11-22 03:22:00.634 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58178 10 6452 1 2025-11-22 03:23:01.052 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45274 10 6452 1 2025-11-22 03:24:01.458 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49118 10 6452 1 2025-11-22 03:25:01.858 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56344 10 6452 1 2025-11-22 03:26:05.352 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 03:26:05.519 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:26:05.352 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:26:05.600 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 03:21:04.394 00:06:00.278 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 03:26:05.435 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 03:26:02.275 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46974 10 6452 1 2025-11-22 03:22:04.392 00:06:00.283 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 03:27:02.680 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:46882 10 6452 1 2025-11-22 03:28:03.109 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50988 10 6452 1 2025-11-22 03:29:03.516 00:00:11.626 TCP 1.101.0.1:3000 -> 23.104.0.1:38232 10 6452 1 2025-11-22 03:30:05.180 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39566 10 6452 1 2025-11-22 03:31:05.740 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 03:31:05.535 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:31:05.602 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:31:05.602 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 03:31:05.683 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 03:31:05.582 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:47130 10 6452 1 2025-11-22 03:32:06.005 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42344 10 6452 1 2025-11-22 03:28:04.396 00:06:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 03:33:06.415 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:38060 10 6452 1 2025-11-22 03:29:04.402 00:06:00.278 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 03:34:06.804 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33392 10 6452 1 2025-11-22 03:35:07.210 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46956 10 6452 1 2025-11-22 03:36:05.579 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 03:36:05.700 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:36:05.654 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:36:05.658 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 03:36:05.739 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 03:36:07.617 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56052 10 6452 1 2025-11-22 03:37:08.018 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34992 10 6452 1 2025-11-22 03:38:08.419 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58960 10 6452 1 2025-11-22 03:39:08.818 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45040 10 6452 1 2025-11-22 03:35:04.397 00:06:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 03:40:09.187 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40010 10 6452 1 2025-11-22 03:36:04.395 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 03:41:05.804 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 03:41:05.646 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 03:41:05.607 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:41:05.722 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:41:05.795 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 03:41:09.549 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45600 10 6452 1 2025-11-22 03:42:09.953 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52094 10 6452 1 2025-11-22 03:43:10.357 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40748 10 6452 1 2025-11-22 03:44:10.761 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33116 10 6452 1 2025-11-22 03:45:11.164 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38974 10 6452 1 2025-11-22 03:46:05.976 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 03:46:05.660 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 03:46:05.934 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:46:05.893 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:46:05.893 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 03:46:11.569 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59764 10 6452 1 2025-11-22 03:42:04.398 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 03:47:11.970 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41194 10 6452 1 2025-11-22 03:43:04.395 00:06:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 03:48:12.382 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45476 10 6452 1 2025-11-22 03:49:12.745 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51546 10 6452 1 2025-11-22 03:50:13.112 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59384 10 6452 1 2025-11-22 03:51:05.580 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:51:05.859 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 03:51:06.175 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 03:51:05.977 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 03:51:06.092 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:51:13.476 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59956 10 6452 1 2025-11-22 03:52:13.881 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37938 12 6556 1 2025-11-22 03:53:14.299 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47934 10 6452 1 2025-11-22 03:49:04.400 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 03:54:14.659 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58930 10 6452 1 2025-11-22 03:50:04.397 00:06:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 03:55:15.025 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45786 10 6452 1 2025-11-22 03:56:05.815 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 03:56:05.859 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:56:05.733 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 03:56:06.165 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 03:56:06.165 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 03:56:15.423 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45030 10 6452 1 2025-11-22 03:57:15.824 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49946 10 6452 1 2025-11-22 03:58:16.226 00:00:14.982 TCP 1.101.0.1:3000 -> 23.104.0.1:56052 10 6452 1 Summary: total flows: 137, total bytes: 416981, total packets: 1020, avg bps: 862, avg pps: 0, avg bpp: 408 Time window: 2025-11-22 02:54:04 - 2025-11-22 03:58:31 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0048s User: 0.0010s Wall: 0.0020s flows/second: 67554.6 Runtime: 0.0020s