Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 20:59:07.673 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59984 10 6452 1 2025-11-22 21:00:08.107 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56038 10 6452 1 2025-11-22 21:01:08.509 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43578 10 6452 1 2025-11-22 21:01:26.682 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 21:01:26.451 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 21:01:26.621 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:01:26.600 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:01:26.460 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 21:02:08.875 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53636 10 6452 1 2025-11-22 20:59:04.735 00:05:00.511 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 20:59:04.734 00:05:00.516 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 21:03:09.234 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:52904 10 6452 1 2025-11-22 21:04:09.597 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36076 10 6452 1 2025-11-22 21:05:09.998 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50052 10 6452 1 2025-11-22 21:06:10.401 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50408 10 6452 1 2025-11-22 21:06:26.833 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 21:06:26.749 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 21:06:26.642 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:06:26.750 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:06:26.678 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 21:07:10.845 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:34358 10 6452 1 2025-11-22 21:08:11.266 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:51078 10 6452 1 2025-11-22 21:05:04.737 00:05:00.518 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 21:05:04.735 00:05:00.523 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 21:09:11.628 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50488 10 6452 1 2025-11-22 21:10:12.036 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58786 10 6452 1 2025-11-22 21:11:12.439 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60202 10 6452 1 2025-11-22 21:11:26.903 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 21:11:26.775 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 21:11:26.799 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:11:26.821 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:11:26.698 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 21:12:12.847 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:54568 10 6452 1 2025-11-22 21:13:13.280 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41474 10 6452 1 2025-11-22 21:14:13.686 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58116 10 6452 1 2025-11-22 21:11:04.736 00:05:00.522 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 21:11:04.738 00:05:00.517 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 21:15:14.110 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40782 10 6452 1 2025-11-22 21:16:14.517 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60248 10 6452 1 2025-11-22 21:16:26.962 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 21:16:26.747 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 21:16:26.776 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:16:26.879 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:16:26.935 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 21:17:14.921 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:52634 10 6452 1 2025-11-22 21:18:15.286 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38562 10 6452 1 2025-11-22 21:19:15.690 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:44472 12 10375 1 2025-11-22 21:20:16.180 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48180 10 6452 1 2025-11-22 21:17:04.740 00:05:00.520 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 21:17:04.737 00:05:00.525 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 21:21:26.977 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 21:21:27.003 00:00:00.041 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:21:26.977 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:21:27.054 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 21:21:16.547 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34338 10 6452 1 2025-11-22 21:21:27.062 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 21:22:16.906 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52806 10 6452 1 2025-11-22 21:23:17.315 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49138 10 6452 1 2025-11-22 21:24:17.715 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:34974 10 6452 1 2025-11-22 21:25:18.102 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58828 10 6452 1 2025-11-22 21:26:27.254 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 21:26:26.833 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:26:18.506 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50984 10 6452 1 2025-11-22 21:26:27.080 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:26:27.148 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 21:26:27.165 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 21:23:04.741 00:05:00.525 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 21:23:04.744 00:05:00.520 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 21:27:18.914 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44352 10 6452 1 2025-11-22 21:28:19.321 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41372 10 6452 1 2025-11-22 21:29:19.751 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56710 10 6452 1 2025-11-22 21:30:20.153 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55090 10 6452 1 2025-11-22 21:31:27.515 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 21:31:27.378 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:31:27.434 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:31:27.431 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 21:31:20.569 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38134 10 6452 1 2025-11-22 21:31:27.488 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 21:32:20.971 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56680 10 6452 1 2025-11-22 21:29:04.743 00:05:00.522 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 21:29:04.747 00:05:00.517 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 21:33:21.378 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56040 10 6452 1 2025-11-22 21:34:21.782 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40502 10 6452 1 2025-11-22 21:35:22.141 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57142 10 6452 1 2025-11-22 21:36:27.187 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:36:27.274 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:36:27.355 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 21:36:27.352 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 21:36:27.356 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 21:36:22.544 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57826 10 6452 1 2025-11-22 21:37:22.908 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54696 10 6452 1 2025-11-22 21:38:23.313 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39692 10 6452 1 2025-11-22 21:35:04.746 00:05:00.521 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 21:35:04.749 00:05:00.516 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 21:39:23.715 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:46722 12 10375 1 2025-11-22 21:40:24.213 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44442 10 6452 1 2025-11-22 21:41:27.234 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 21:41:27.304 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:41:27.419 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:41:27.415 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 21:41:27.502 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 21:41:24.577 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57786 10 6452 1 2025-11-22 21:42:24.981 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50130 10 6452 1 2025-11-22 21:43:25.390 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:59238 10 6452 1 2025-11-22 21:44:25.796 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47296 10 6452 1 2025-11-22 21:41:04.750 00:05:00.516 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 21:41:04.749 00:05:00.521 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 21:45:26.200 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54558 10 6452 1 2025-11-22 21:46:27.903 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 21:46:27.744 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 21:46:27.939 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:46:27.821 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:46:27.836 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 21:46:26.603 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47716 10 6452 1 2025-11-22 21:47:27.028 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47462 10 6452 1 2025-11-22 21:48:27.430 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:54770 11 6504 1 2025-11-22 21:49:27.884 00:00:10.715 TCP 1.101.0.1:3000 -> 23.104.0.1:48904 10 6452 1 2025-11-22 21:50:28.657 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35692 10 6452 1 2025-11-22 21:47:04.751 00:05:00.518 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 21:47:04.750 00:05:00.523 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 21:51:27.673 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 21:51:27.637 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:51:27.471 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:51:27.611 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 21:51:27.554 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 21:51:29.061 00:00:11.088 TCP 1.101.0.1:3000 -> 23.104.0.1:50488 10 6452 1 2025-11-22 21:52:30.190 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:41976 10 6452 1 2025-11-22 21:53:30.544 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:42054 10 6452 1 2025-11-22 21:54:30.898 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:34408 10 6452 1 2025-11-22 21:55:31.318 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47962 10 6452 1 2025-11-22 21:56:27.557 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 21:56:27.591 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:56:27.664 00:00:00.018 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 21:56:27.664 00:00:00.018 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 21:56:27.747 00:00:00.017 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 21:56:31.683 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60986 10 6452 1 2025-11-22 21:53:04.750 00:05:00.523 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-22 21:53:04.752 00:05:00.518 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-22 21:57:32.112 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35090 10 6452 1 2025-11-22 21:58:32.519 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34300 10 6452 1 Summary: total flows: 140, total bytes: 424898, total packets: 1025, avg bps: 949, avg pps: 0, avg bpp: 414 Time window: 2025-11-22 20:59:04 - 2025-11-22 21:58:42 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0053s User: 0.0009s Wall: 0.0020s flows/second: 70247.9 Runtime: 0.0020s