Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 11:59:06.136 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38280 10 6452 1 2025-11-22 12:00:06.556 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39890 10 6452 1 2025-11-22 12:01:15.846 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 12:01:15.807 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:01:15.606 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:01:15.850 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 12:01:15.690 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 12:01:06.965 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58064 10 6452 1 2025-11-22 12:02:07.340 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39496 10 6452 1 2025-11-22 12:03:07.753 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:43936 10 6452 1 2025-11-22 11:59:04.569 00:06:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 12:04:08.118 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:44628 10 6452 1 2025-11-22 12:00:04.566 00:06:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 12:05:08.499 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59030 10 6452 1 2025-11-22 12:06:15.908 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 12:06:15.900 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:06:16.130 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:06:08.904 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41416 10 6452 1 2025-11-22 12:06:16.068 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 12:06:15.984 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 12:07:09.313 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45080 10 6452 1 2025-11-22 12:08:09.709 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33358 10 6452 1 2025-11-22 12:09:10.120 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:51098 12 10375 1 2025-11-22 12:10:10.555 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58200 10 6452 1 2025-11-22 12:06:04.569 00:06:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 12:11:15.824 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:11:15.966 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:11:15.964 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 12:11:16.115 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 12:11:16.050 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 12:11:10.957 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59026 10 6452 1 2025-11-22 12:07:04.569 00:06:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 12:12:11.366 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60558 10 6452 1 2025-11-22 12:13:11.765 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:34028 10 6452 1 2025-11-22 12:14:12.185 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52594 10 6452 1 2025-11-22 12:15:12.590 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57400 10 6452 1 2025-11-22 12:16:15.915 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:16:15.997 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 12:16:16.174 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 12:16:16.226 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:16:16.100 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 12:16:12.988 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42040 10 6452 1 2025-11-22 12:17:13.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33428 10 6452 1 2025-11-22 12:13:04.573 00:06:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 12:18:13.773 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36542 10 6452 1 2025-11-22 12:14:04.569 00:06:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 12:19:14.179 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39642 10 6452 1 2025-11-22 12:20:14.588 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54820 10 6452 1 2025-11-22 12:21:16.100 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 12:21:16.191 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:21:16.103 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:21:16.210 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 12:21:16.185 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 12:21:14.996 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39450 10 6452 1 2025-11-22 12:22:15.360 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56204 10 6452 1 2025-11-22 12:23:15.723 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:41248 10 6452 1 2025-11-22 12:24:16.146 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45390 10 6452 1 2025-11-22 12:20:04.574 00:06:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 12:25:16.566 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33564 10 6452 1 2025-11-22 12:21:04.570 00:06:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 12:26:16.061 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 12:26:16.295 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 12:26:16.173 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:26:15.979 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:26:16.212 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 12:26:16.984 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33076 10 6452 1 2025-11-22 12:27:17.396 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57678 10 6452 1 2025-11-22 12:28:17.817 00:00:10.860 TCP 1.101.0.1:3000 -> 23.104.0.1:52718 10 6452 1 2025-11-22 12:29:18.713 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53408 10 6452 1 2025-11-22 12:30:19.134 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37520 10 6452 1 2025-11-22 12:31:16.483 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 12:31:16.216 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:31:16.377 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:31:16.394 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 12:31:16.460 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 12:31:19.538 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43278 10 6452 1 2025-11-22 12:27:04.573 00:06:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 12:32:19.941 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38902 10 6452 1 2025-11-22 12:28:04.571 00:06:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 12:33:20.356 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49610 10 6452 1 2025-11-22 12:34:20.720 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52398 10 6452 1 2025-11-22 12:35:21.138 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50346 10 6452 1 2025-11-22 12:36:16.315 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 12:36:16.516 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:36:16.317 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:36:16.323 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 12:36:16.401 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 12:36:21.539 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33030 10 6452 1 2025-11-22 12:37:21.944 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46382 10 6452 1 2025-11-22 12:38:22.359 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54030 10 6452 1 2025-11-22 12:34:04.574 00:06:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 12:39:22.761 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:33802 12 10375 1 2025-11-22 12:35:04.572 00:06:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 12:40:23.257 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40706 10 6452 1 2025-11-22 12:41:16.674 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:41:17.051 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:41:16.844 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 12:41:16.844 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 12:41:17.132 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 12:41:23.666 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38206 10 6452 1 2025-11-22 12:42:24.109 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58400 10 6452 1 2025-11-22 12:43:24.505 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50044 10 6452 1 2025-11-22 12:44:24.906 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42596 10 6452 1 2025-11-22 12:45:25.275 00:00:10.425 TCP 1.101.0.1:3000 -> 23.104.0.1:42308 10 6452 1 2025-11-22 12:41:04.576 00:06:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 12:46:17.168 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 12:46:17.131 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 12:46:16.857 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:46:17.085 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:46:17.131 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 12:46:25.740 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52450 10 6452 1 2025-11-22 12:42:04.573 00:06:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 12:47:26.147 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45060 10 6452 1 2025-11-22 12:48:26.548 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49268 10 6452 1 2025-11-22 12:49:26.908 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56744 10 6452 1 2025-11-22 12:50:27.307 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43642 10 6452 1 2025-11-22 12:51:16.780 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 12:51:16.897 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:51:16.865 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:51:16.780 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 12:51:16.948 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 12:51:27.709 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34804 10 6452 1 2025-11-22 12:52:28.115 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41632 10 6452 1 2025-11-22 12:48:04.578 00:06:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-22 12:53:28.520 00:00:10.659 TCP 1.101.0.1:3000 -> 23.104.0.1:43404 10 6452 1 2025-11-22 12:49:04.575 00:06:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-22 12:54:29.222 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34160 10 6452 1 2025-11-22 12:55:29.625 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34790 10 6452 1 2025-11-22 12:56:16.898 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 12:56:16.810 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 12:56:16.747 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:56:16.815 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 12:56:16.713 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 12:56:30.038 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46340 10 6452 1 2025-11-22 12:57:30.405 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50676 10 6452 1 2025-11-22 12:58:30.809 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53980 10 6452 1 Summary: total flows: 136, total bytes: 423862, total packets: 1008, avg bps: 948, avg pps: 0, avg bpp: 420 Time window: 2025-11-22 11:59:04 - 2025-11-22 12:58:41 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0041s User: 0.0008s Wall: 0.0014s flows/second: 93990.0 Runtime: 0.0015s