Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 23:59:09.397 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51018 10 6452 1 2025-11-05 00:00:09.757 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:40306 10 6452 1 2025-11-05 00:01:10.184 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60508 10 6452 1 2025-11-04 23:56:55.388 00:06:00.257 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 00:02:10.584 00:00:18.702 TCP 1.101.0.1:3000 -> 23.104.0.1:38946 10 6452 1 2025-11-05 00:02:48.833 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 00:02:48.750 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:02:48.643 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 00:02:48.634 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 00:02:48.735 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:03:19.351 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:43834 10 6452 1 2025-11-04 23:58:55.391 00:06:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 00:04:19.709 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51292 10 6452 1 2025-11-05 00:05:20.119 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35816 10 6452 1 2025-11-05 00:06:20.524 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52474 10 6452 1 2025-11-05 00:07:20.940 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57148 10 6452 1 2025-11-05 00:07:48.857 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 00:07:48.708 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 00:07:48.819 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:07:48.939 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:07:49.023 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 00:08:21.358 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50198 10 6452 1 2025-11-05 00:03:55.396 00:06:00.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 00:09:21.726 00:00:18.271 TCP 1.101.0.1:3000 -> 23.104.0.1:56706 12 6556 1 2025-11-05 00:10:30.056 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50624 10 6452 1 2025-11-05 00:05:55.404 00:06:00.241 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 00:11:30.423 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34346 10 6452 1 2025-11-05 00:12:30.831 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:60436 12 6556 1 2025-11-05 00:12:49.013 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 00:12:48.818 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 00:12:48.988 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 00:12:48.993 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:12:48.929 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:13:31.256 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43092 10 6452 1 2025-11-05 00:14:31.660 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41322 10 6452 1 2025-11-05 00:15:32.068 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41638 10 6452 1 2025-11-05 00:10:55.400 00:06:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 00:16:32.465 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58744 10 6452 1 2025-11-05 00:17:32.864 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43564 10 6452 1 2025-11-05 00:17:49.094 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 00:17:49.007 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 00:17:49.148 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 00:17:48.828 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:17:49.011 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:12:55.403 00:06:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 00:18:33.274 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42296 10 6452 1 2025-11-05 00:19:33.670 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34596 10 6452 1 2025-11-05 00:20:34.102 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34276 10 6452 1 2025-11-05 00:21:34.508 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47046 10 6452 1 2025-11-05 00:22:49.590 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 00:22:49.430 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 00:22:34.912 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35598 10 6452 1 2025-11-05 00:22:49.494 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 00:22:49.269 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:22:49.507 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:17:55.401 00:06:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 00:23:35.276 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45390 10 6452 1 2025-11-05 00:24:35.676 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58826 10 6452 1 2025-11-05 00:19:55.451 00:06:00.199 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 00:25:36.107 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58734 10 6452 1 2025-11-05 00:26:36.511 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34386 10 6452 1 2025-11-05 00:27:49.237 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 00:27:49.330 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 00:27:49.260 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 00:27:49.260 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:27:36.868 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45216 10 6452 1 2025-11-05 00:27:49.154 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:28:37.276 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42802 10 6452 1 2025-11-05 00:29:37.680 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45686 10 6452 1 2025-11-05 00:24:55.404 00:06:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 00:30:38.103 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35746 10 6452 1 2025-11-05 00:31:38.506 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:41514 12 10375 1 2025-11-05 00:26:55.408 00:06:00.242 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 00:32:49.444 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 00:32:49.433 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 00:32:49.556 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 00:32:49.117 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:32:49.362 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:32:38.981 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:37068 10 6452 1 2025-11-05 00:33:39.361 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36358 10 6452 1 2025-11-05 00:34:39.760 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:59322 10 6452 1 2025-11-05 00:35:40.182 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39164 10 6452 1 2025-11-05 00:36:40.587 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51938 10 6452 1 2025-11-05 00:31:55.408 00:06:00.244 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 00:37:49.377 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 00:37:49.384 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 00:37:49.384 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 00:37:49.056 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:37:49.294 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:37:40.990 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:32928 10 6452 1 2025-11-05 00:38:41.407 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:39804 10 6452 1 2025-11-05 00:33:55.411 00:06:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 00:39:41.786 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42404 10 6452 1 2025-11-05 00:40:42.197 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42016 10 6452 1 2025-11-05 00:41:42.560 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58036 10 6452 1 2025-11-05 00:42:49.608 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 00:42:49.657 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 00:42:49.424 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 00:42:49.631 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:42:49.526 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:42:42.967 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34774 10 6452 1 2025-11-05 00:43:43.370 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38278 10 6452 1 2025-11-05 00:38:55.409 00:06:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 00:44:43.774 00:00:17.512 TCP 1.101.0.1:3000 -> 23.104.0.1:53860 10 6452 1 2025-11-05 00:40:55.414 00:06:00.241 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 00:45:51.345 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52382 10 6452 1 2025-11-05 00:46:51.746 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59830 10 6452 1 2025-11-05 00:47:49.568 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 00:47:49.487 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 00:47:49.703 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 00:47:49.782 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:47:49.485 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:47:52.159 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57048 10 6452 1 2025-11-05 00:48:52.523 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40858 10 6452 1 2025-11-05 00:49:52.928 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:43980 10 6452 1 2025-11-05 00:45:55.411 00:06:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 00:50:53.303 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55210 10 6452 1 2025-11-05 00:51:53.714 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46110 10 6452 1 2025-11-05 00:52:49.823 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 00:52:49.879 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 00:52:49.784 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:52:49.916 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:52:50.001 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 00:47:55.413 00:06:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 00:52:54.117 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54128 10 6452 1 2025-11-05 00:53:54.515 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54608 10 6452 1 2025-11-05 00:54:54.880 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50730 10 6452 1 2025-11-05 00:55:55.246 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57330 10 6452 1 2025-11-05 00:56:55.653 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48564 10 6452 1 2025-11-05 00:57:49.942 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 00:57:49.618 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:57:49.939 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 00:57:49.978 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 00:57:50.025 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 00:52:55.413 00:06:00.255 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 00:57:56.061 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35180 10 6452 1 Summary: total flows: 136, total bytes: 414556, total packets: 1014, avg bps: 891, avg pps: 0, avg bpp: 408 Time window: 2025-11-04 23:56:55 - 2025-11-05 00:58:55 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0029s User: 0.0020s Wall: 0.0013s flows/second: 101481.1 Runtime: 0.0014s