Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 08:59:36.630 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40326 12 6556 1 2025-11-22 09:00:37.034 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58666 10 6452 1 2025-11-22 09:01:12.287 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 09:01:12.240 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:01:12.198 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:01:12.326 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 09:01:12.280 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 09:01:37.392 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41186 10 6452 1 2025-11-22 08:57:04.501 00:06:00.320 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 09:02:37.753 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:38454 10 6452 1 2025-11-22 08:58:04.499 00:06:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 09:03:38.176 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50636 10 6452 1 2025-11-22 09:04:38.582 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:45480 12 10369 1 2025-11-22 09:05:39.067 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55568 10 6452 1 2025-11-22 09:06:12.468 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 09:06:12.434 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 09:06:12.110 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:06:12.385 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:06:12.465 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 09:06:39.428 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:38768 10 6452 1 2025-11-22 09:07:39.804 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46146 10 6452 1 2025-11-22 09:08:40.214 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57418 10 6452 1 2025-11-22 09:04:04.507 00:06:00.315 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 09:09:40.622 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46588 10 6452 1 2025-11-22 09:05:04.504 00:06:00.320 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 09:10:40.988 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60174 10 6452 1 2025-11-22 09:11:12.325 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 09:11:12.386 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:11:12.337 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:11:12.423 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 09:11:12.420 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 09:11:41.392 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46828 10 6452 1 2025-11-22 09:12:41.795 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:35096 10 6452 1 2025-11-22 09:13:42.173 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53728 10 6452 1 2025-11-22 09:14:42.532 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49050 10 6452 1 2025-11-22 09:15:42.939 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:42200 10 6452 1 2025-11-22 09:11:04.509 00:06:00.316 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 09:16:12.619 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 09:16:12.460 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 09:16:12.419 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:16:12.536 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:16:12.585 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 09:16:43.357 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36084 10 6452 1 2025-11-22 09:12:04.506 00:06:00.321 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 09:17:43.759 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35548 10 6452 1 2025-11-22 09:18:44.118 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60126 10 6452 1 2025-11-22 09:19:44.527 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:33452 11 6504 1 2025-11-22 09:20:44.954 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53024 10 6452 1 2025-11-22 09:21:12.930 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 09:21:12.948 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:21:12.847 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:21:13.009 00:00:00.039 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 09:21:12.839 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 09:21:45.372 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39372 10 6452 1 2025-11-22 09:22:45.775 00:00:10.867 TCP 1.101.0.1:3000 -> 23.104.0.1:43474 10 6452 1 2025-11-22 09:18:04.511 00:06:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 09:23:46.677 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56032 10 6452 1 2025-11-22 09:19:04.510 00:06:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 09:24:47.102 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53068 10 6452 1 2025-11-22 09:25:47.507 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54604 10 6452 1 2025-11-22 09:26:12.692 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 09:26:12.765 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:26:12.781 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:26:12.781 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 09:26:12.864 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 09:26:47.911 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57780 10 6452 1 2025-11-22 09:27:48.322 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56776 10 6452 1 2025-11-22 09:28:48.730 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39058 10 6452 1 2025-11-22 09:29:49.138 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55896 10 6452 1 2025-11-22 09:25:04.515 00:06:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 09:30:49.541 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53362 10 6452 1 2025-11-22 09:26:04.510 00:06:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 09:31:12.969 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 09:31:12.721 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:31:12.902 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:31:12.778 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 09:31:12.985 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 09:31:49.952 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42382 10 6452 1 2025-11-22 09:32:50.360 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40746 10 6452 1 2025-11-22 09:33:50.761 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:54840 10 6452 1 2025-11-22 09:34:51.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36044 10 6452 1 2025-11-22 09:35:51.588 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50308 10 6452 1 2025-11-22 09:36:12.914 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 09:36:12.672 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:36:13.002 00:00:00.044 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:36:12.964 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 09:36:13.084 00:00:00.045 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 09:36:51.991 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39706 10 6452 1 2025-11-22 09:32:04.515 00:06:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 09:37:52.355 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47284 10 6452 1 2025-11-22 09:33:04.513 00:06:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 09:38:52.754 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35482 10 6452 1 2025-11-22 09:39:53.157 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47556 10 6452 1 2025-11-22 09:40:53.567 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53668 10 6452 1 2025-11-22 09:41:12.857 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 09:41:13.203 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:41:13.290 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:41:12.971 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 09:41:13.373 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 09:41:53.974 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40388 10 6452 1 2025-11-22 09:42:54.383 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39496 10 6452 1 2025-11-22 09:39:04.518 00:06:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 09:43:54.786 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53266 10 6452 1 2025-11-22 09:44:55.207 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58698 10 6452 1 2025-11-22 09:40:04.517 00:06:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 09:45:55.573 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51026 10 6452 1 2025-11-22 09:46:13.304 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 09:46:12.953 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:46:13.179 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:46:13.059 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 09:46:13.262 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 09:46:55.972 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57696 10 6452 1 2025-11-22 09:47:56.386 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54138 10 6452 1 2025-11-22 09:48:56.785 00:00:10.617 TCP 1.101.0.1:3000 -> 23.104.0.1:57872 10 6452 1 2025-11-22 09:49:57.433 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53010 10 6452 1 2025-11-22 09:46:04.526 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 09:50:57.794 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:44106 10 6452 1 2025-11-22 09:51:13.192 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 09:51:12.950 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:51:13.373 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:51:13.264 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 09:51:13.458 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 09:47:04.523 00:06:00.328 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 09:51:58.184 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47274 10 6452 1 2025-11-22 09:52:58.583 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:37466 10 6452 1 2025-11-22 09:53:59.012 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35546 10 6452 1 2025-11-22 09:54:59.413 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:42094 12 10375 1 2025-11-22 09:55:59.858 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:45596 10 6452 1 2025-11-22 09:56:13.169 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 09:56:13.342 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:56:13.272 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 09:56:13.382 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 09:56:13.355 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 09:57:00.286 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:46572 11 6504 1 2025-11-22 09:53:04.526 00:06:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 09:58:00.740 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52804 10 6452 1 Summary: total flows: 136, total bytes: 418473, total packets: 1016, avg bps: 899, avg pps: 0, avg bpp: 411 Time window: 2025-11-22 08:57:04 - 2025-11-22 09:59:04 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0043s User: 0.0011s Wall: 0.0022s flows/second: 62642.8 Runtime: 0.0022s