Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 18:59:16.018 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47482 10 6452 1 2025-11-22 19:00:16.417 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53884 10 6452 1 2025-11-22 19:01:24.173 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:01:24.105 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:01:24.173 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:01:24.091 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:01:24.160 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:01:16.781 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47294 10 6452 1 2025-11-22 19:02:17.186 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:48268 10 6452 1 2025-11-22 18:59:04.679 00:05:00.507 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 18:59:04.676 00:05:00.513 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:03:17.573 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49462 10 6452 1 2025-11-22 19:04:17.976 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:36954 10 6452 1 2025-11-22 19:05:18.370 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47544 10 6452 1 2025-11-22 19:06:24.534 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:06:24.384 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:06:24.469 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:06:24.452 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:06:24.303 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:06:18.772 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35320 10 6452 1 2025-11-22 19:07:19.192 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44812 10 6452 1 2025-11-22 19:08:19.600 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43744 10 6452 1 2025-11-22 19:05:04.695 00:05:00.510 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:05:04.698 00:05:00.494 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:09:20.007 00:00:10.475 TCP 1.101.0.1:3000 -> 23.104.0.1:48152 14 14286 1 2025-11-22 19:10:20.522 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41090 10 6452 1 2025-11-22 19:11:24.461 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:11:24.298 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:11:24.468 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:11:24.289 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:11:24.551 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:11:20.882 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41214 10 6452 1 2025-11-22 19:12:21.247 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47762 10 6452 1 2025-11-22 19:13:21.656 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41190 10 6452 1 2025-11-22 19:14:22.069 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42468 10 6452 1 2025-11-22 19:11:04.700 00:05:00.494 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:11:04.696 00:05:00.500 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:15:22.434 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:59836 10 6452 1 2025-11-22 19:16:25.126 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:16:24.817 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:16:25.045 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:16:25.097 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:16:25.145 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:16:22.829 00:00:12.006 TCP 1.101.0.1:3000 -> 23.104.0.1:40738 12 6556 1 2025-11-22 19:17:24.870 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34720 10 6452 1 2025-11-22 19:18:25.238 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59194 10 6452 1 2025-11-22 19:19:25.634 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:43964 12 10375 1 2025-11-22 19:20:26.121 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42294 10 6452 1 2025-11-22 19:17:04.701 00:05:00.493 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:17:04.700 00:05:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:21:24.752 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:21:24.723 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:21:24.444 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:21:24.669 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:21:24.725 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:21:26.531 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35040 10 6452 1 2025-11-22 19:22:26.932 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54114 10 6452 1 2025-11-22 19:23:27.355 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45360 10 6452 1 2025-11-22 19:24:27.761 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43218 10 6452 1 2025-11-22 19:25:28.135 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56142 10 6452 1 2025-11-22 19:26:24.646 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:26:24.475 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:26:24.643 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:26:24.649 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:26:24.726 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:26:28.553 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42694 10 6452 1 2025-11-22 19:23:04.704 00:05:00.493 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:23:04.701 00:05:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:27:28.956 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34996 10 6452 1 2025-11-22 19:28:29.359 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49998 10 6452 1 2025-11-22 19:29:29.761 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:52056 10 6452 1 2025-11-22 19:30:30.179 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56240 10 6452 1 2025-11-22 19:31:24.776 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:31:24.687 00:00:00.017 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:31:24.800 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:31:24.786 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:31:24.884 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:31:30.579 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55436 10 6452 1 2025-11-22 19:32:30.946 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:35206 10 6452 1 2025-11-22 19:29:04.706 00:05:00.493 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:29:04.703 00:05:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:33:31.398 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54174 10 6452 1 2025-11-22 19:34:31.804 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32942 10 6452 1 2025-11-22 19:35:32.213 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52684 10 6452 1 2025-11-22 19:36:24.884 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:36:24.924 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:36:24.990 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:36:24.801 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:36:24.930 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:36:32.616 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56410 10 6452 1 2025-11-22 19:37:33.018 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55924 10 6452 1 2025-11-22 19:38:33.426 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46290 10 6452 1 2025-11-22 19:35:04.705 00:05:00.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:35:04.706 00:05:00.494 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:39:33.831 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51872 10 6452 1 2025-11-22 19:40:34.230 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35484 10 6452 1 2025-11-22 19:41:24.895 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:41:24.890 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:41:24.822 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:41:24.813 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:41:24.896 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:41:34.633 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39764 10 6452 1 2025-11-22 19:42:35.035 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35512 10 6452 1 2025-11-22 19:43:35.442 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57030 10 6452 1 2025-11-22 19:44:35.805 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:38638 10 6452 1 2025-11-22 19:41:04.708 00:05:00.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:41:04.707 00:05:00.502 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:45:36.182 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52144 10 6452 1 2025-11-22 19:46:25.190 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:46:25.055 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:46:24.799 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:46:25.108 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:46:25.113 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:46:36.588 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51418 10 6452 1 2025-11-22 19:47:36.984 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56498 10 6452 1 2025-11-22 19:48:37.349 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43400 10 6452 1 2025-11-22 19:49:37.750 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53716 10 6452 1 2025-11-22 19:50:38.121 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56502 10 6452 1 2025-11-22 19:47:04.709 00:05:00.503 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:47:04.710 00:05:00.499 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:51:25.358 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:51:25.126 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:51:25.211 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:51:25.282 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:51:25.294 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:51:38.521 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:38474 10 6452 1 2025-11-22 19:52:38.877 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60242 10 6452 1 2025-11-22 19:53:39.281 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43734 10 6452 1 2025-11-22 19:54:39.644 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49282 10 6452 1 2025-11-22 19:55:40.055 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44800 10 6452 1 2025-11-22 19:56:25.372 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 19:56:25.287 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 19:56:25.065 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:56:25.290 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 19:56:25.209 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 19:56:40.458 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56718 10 6452 1 2025-11-22 19:53:04.709 00:05:00.527 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 19:53:04.711 00:05:00.522 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 19:57:40.859 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54938 10 6452 1 Summary: total flows: 139, total bytes: 422409, total packets: 1018, avg bps: 954, avg pps: 0, avg bpp: 414 Time window: 2025-11-22 18:59:04 - 2025-11-22 19:58:05 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0021s User: 0.0021s Wall: 0.0017s flows/second: 80481.5 Runtime: 0.0017s