Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 08:59:36.271 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52580 10 6452 1 2025-11-01 08:54:53.497 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:00:36.675 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54144 10 6452 1 2025-11-01 09:01:03.950 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:01:04.066 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:01:03.799 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:01:03.951 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:01:04.035 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:01:37.107 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38594 10 6452 1 2025-11-01 09:02:37.504 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39284 10 6452 1 2025-11-01 08:57:53.500 00:06:00.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:03:37.871 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55256 10 6452 1 2025-11-01 09:04:38.290 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:43070 12 10375 1 2025-11-01 09:05:38.773 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52540 10 6452 1 2025-11-01 09:06:04.165 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:06:04.090 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:06:03.857 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:06:04.146 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:06:04.083 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:06:39.190 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49706 10 6452 1 2025-11-01 09:01:53.499 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:07:39.550 00:00:10.980 TCP 1.101.0.1:3000 -> 23.104.0.1:52094 10 6452 1 2025-11-01 09:08:40.568 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38464 10 6452 1 2025-11-01 09:04:53.501 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:09:40.969 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38646 10 6452 1 2025-11-01 09:10:41.379 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50528 10 6452 1 2025-11-01 09:11:04.328 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:11:04.178 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:11:04.186 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:11:04.215 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:11:04.246 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:11:41.776 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48188 10 6452 1 2025-11-01 09:12:42.181 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35110 10 6452 1 2025-11-01 09:08:53.499 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:13:42.584 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50130 10 6452 1 2025-11-01 09:14:42.985 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60932 10 6452 1 2025-11-01 09:15:43.403 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60128 10 6452 1 2025-11-01 09:16:04.314 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:16:04.482 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:16:04.254 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:16:04.391 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:16:04.474 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:11:53.503 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:16:43.828 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:34008 10 6452 1 2025-11-01 09:17:44.200 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:59808 10 6452 1 2025-11-01 09:18:44.630 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40368 10 6452 1 2025-11-01 09:19:45.038 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55380 10 6452 1 2025-11-01 09:15:53.501 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:20:45.440 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56880 10 6452 1 2025-11-01 09:21:04.560 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:21:04.535 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:21:04.482 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:21:04.271 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:21:04.477 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:21:45.846 00:00:10.472 TCP 1.101.0.1:3000 -> 23.104.0.1:35058 10 6452 1 2025-11-01 09:22:46.362 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40902 10 6452 1 2025-11-01 09:18:53.503 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:23:46.771 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41618 10 6452 1 2025-11-01 09:24:47.172 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43858 10 6452 1 2025-11-01 09:25:47.582 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40502 10 6452 1 2025-11-01 09:26:04.563 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:26:04.481 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:26:04.662 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:26:04.492 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:26:04.306 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:26:47.987 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38666 10 6452 1 2025-11-01 09:22:53.502 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:27:48.360 00:00:10.585 TCP 1.101.0.1:3000 -> 23.104.0.1:32874 10 6452 1 2025-11-01 09:28:48.985 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42002 10 6452 1 2025-11-01 09:29:49.397 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54488 10 6452 1 2025-11-01 09:25:53.507 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:31:04.881 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:31:04.725 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:31:04.799 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:31:04.508 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:30:49.804 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45998 10 6452 1 2025-11-01 09:31:04.799 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:31:50.201 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43932 10 6452 1 2025-11-01 09:32:50.600 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41606 10 6452 1 2025-11-01 09:33:50.962 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58924 10 6452 1 2025-11-01 09:29:53.505 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:34:51.367 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:35148 12 10369 1 2025-11-01 09:36:04.781 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:35:51.850 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:52086 10 6452 1 2025-11-01 09:36:04.698 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:36:04.830 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:36:04.772 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:36:04.732 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:36:52.229 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58930 10 6452 1 2025-11-01 09:32:53.508 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:37:52.636 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53926 10 6452 1 2025-11-01 09:38:53.037 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:41996 10 6452 1 2025-11-01 09:39:53.401 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46370 10 6452 1 2025-11-01 09:41:04.744 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:41:04.809 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:41:04.578 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:41:04.944 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:40:53.813 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60054 10 6452 1 2025-11-01 09:41:05.027 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:36:53.507 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:41:54.237 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:34162 10 6452 1 2025-11-01 09:42:54.614 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57200 10 6452 1 2025-11-01 09:43:55.018 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51474 10 6452 1 2025-11-01 09:39:53.509 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:44:55.420 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35094 10 6452 1 2025-11-01 09:46:04.928 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:46:04.766 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:46:04.744 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:46:04.980 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:45:55.821 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:60012 10 6452 1 2025-11-01 09:46:05.012 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:46:56.190 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55232 10 6452 1 2025-11-01 09:47:56.591 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46328 10 6452 1 2025-11-01 09:43:53.515 00:06:00.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:48:56.996 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38014 10 6452 1 2025-11-01 09:49:57.404 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53250 10 6452 1 2025-11-01 09:51:04.804 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:51:04.887 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:51:04.971 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:51:05.071 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:51:05.144 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:50:57.807 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52196 10 6452 1 2025-11-01 09:46:53.521 00:06:00.249 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:51:58.216 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53540 10 6452 1 2025-11-01 09:52:58.586 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:49988 10 6452 1 2025-11-01 09:53:58.954 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49466 10 6452 1 2025-11-01 09:54:59.363 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54882 10 6452 1 2025-11-01 09:50:53.520 00:06:00.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:56:05.248 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:56:05.161 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:56:05.156 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:56:05.124 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:56:05.166 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:55:59.760 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58490 10 6452 1 2025-11-01 09:57:00.170 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41194 10 6452 1 2025-11-01 09:58:00.568 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46568 10 6452 1 Summary: total flows: 136, total bytes: 418265, total packets: 1012, avg bps: 881, avg pps: 0, avg bpp: 413 Time window: 2025-11-01 08:54:53 - 2025-11-01 09:58:10 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0036s User: 0.0014s Wall: 0.0024s flows/second: 56271.6 Runtime: 0.0024s