Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 11:58:56.537 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40742 10 6452 1 2025-11-05 11:59:56.899 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52682 12 6556 1 2025-11-05 12:00:57.312 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:36482 10 6452 1 2025-11-05 12:01:57.670 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51746 10 6452 1 2025-11-05 11:57:55.665 00:06:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 12:03:03.313 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 12:03:03.467 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 12:03:03.338 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 12:03:03.051 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:03:03.229 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:02:58.110 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35382 10 6452 1 2025-11-05 12:03:58.512 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49768 10 6452 1 2025-11-05 11:59:55.668 00:06:00.195 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 12:04:58.928 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43888 10 6452 1 2025-11-05 12:05:59.342 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60660 10 6452 1 2025-11-05 12:06:59.699 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55500 10 6452 1 2025-11-05 12:08:03.425 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 12:08:03.331 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 12:08:03.096 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:08:03.384 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:08:03.468 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 12:08:00.113 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54570 12 6556 1 2025-11-05 12:09:00.518 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57412 10 6452 1 2025-11-05 12:04:55.667 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 12:10:00.911 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40522 10 6452 1 2025-11-05 12:11:01.315 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56904 10 6452 1 2025-11-05 12:06:55.670 00:06:00.194 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 12:12:01.716 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:55058 10 6452 1 2025-11-05 12:13:03.543 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 12:13:03.343 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 12:13:03.136 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:13:03.431 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:13:03.514 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 12:13:02.150 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35380 10 6452 1 2025-11-05 12:14:02.557 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36958 10 6452 1 2025-11-05 12:15:02.962 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39444 10 6452 1 2025-11-05 12:16:03.370 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48668 10 6452 1 2025-11-05 12:11:55.669 00:06:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 12:17:03.772 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47990 10 6452 1 2025-11-05 12:18:03.611 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 12:18:03.530 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 12:18:03.533 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 12:18:03.489 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:18:03.528 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:18:04.143 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41990 10 6452 1 2025-11-05 12:13:55.673 00:06:00.192 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 12:19:04.543 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36824 10 6452 1 2025-11-05 12:20:04.912 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36502 10 6452 1 2025-11-05 12:21:05.320 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34856 10 6452 1 2025-11-05 12:22:05.725 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59844 10 6452 1 2025-11-05 12:23:03.553 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 12:23:03.554 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 12:23:03.735 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:23:03.554 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:23:03.637 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 12:23:06.107 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:47732 10 6452 1 2025-11-05 12:18:55.672 00:06:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 12:24:06.474 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39458 10 6452 1 2025-11-05 12:25:06.875 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47846 10 6452 1 2025-11-05 12:20:55.674 00:06:00.192 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 12:26:07.279 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52582 10 6452 1 2025-11-05 12:27:07.685 00:00:10.454 TCP 1.101.0.1:3000 -> 23.104.0.1:51050 12 10375 1 2025-11-05 12:28:03.862 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 12:28:03.676 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 12:28:03.780 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 12:28:03.621 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:28:03.781 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:28:08.180 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48416 10 6452 1 2025-11-05 12:29:08.582 00:00:10.564 TCP 1.101.0.1:3000 -> 23.104.0.1:46122 10 6452 1 2025-11-05 12:30:09.181 00:00:11.591 TCP 1.101.0.1:3000 -> 23.104.0.1:46176 10 6452 1 2025-11-05 12:25:55.673 00:06:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 12:31:10.812 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41842 10 6452 1 2025-11-05 12:32:11.217 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42170 10 6452 1 2025-11-05 12:27:55.676 00:06:00.193 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 12:33:04.034 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 12:33:03.674 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 12:33:03.894 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 12:33:03.814 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:33:03.952 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:33:11.576 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49322 10 6452 1 2025-11-05 12:34:11.975 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56658 10 6452 1 2025-11-05 12:35:12.340 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57674 10 6452 1 2025-11-05 12:36:12.705 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39826 10 6452 1 2025-11-05 12:37:13.113 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45630 10 6452 1 2025-11-05 12:32:55.674 00:06:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 12:38:04.115 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 12:38:03.948 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 12:38:03.583 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:38:04.004 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:38:04.088 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 12:38:13.520 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55030 10 6452 1 2025-11-05 12:39:13.920 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:49400 10 6452 1 2025-11-05 12:34:55.680 00:06:00.192 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 12:40:14.336 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55762 10 6452 1 2025-11-05 12:41:14.738 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:34744 10 6452 1 2025-11-05 12:42:15.168 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46018 10 6452 1 2025-11-05 12:43:04.071 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 12:43:04.099 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 12:43:03.816 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:43:03.989 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:43:04.101 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 12:43:15.533 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47584 10 6452 1 2025-11-05 12:44:15.932 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:42902 10 6452 1 2025-11-05 12:39:55.678 00:06:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 12:45:16.359 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54204 10 6452 1 2025-11-05 12:46:16.763 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44412 10 6452 1 2025-11-05 12:41:55.682 00:06:00.193 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 12:47:17.163 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56750 10 6452 1 2025-11-05 12:48:04.001 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 12:48:04.172 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 12:48:04.012 00:00:00.040 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 12:48:03.944 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:48:03.918 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:48:17.571 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50352 10 6452 1 2025-11-05 12:49:17.985 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41346 10 6452 1 2025-11-05 12:50:18.390 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48582 10 6452 1 2025-11-05 12:51:18.749 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:36392 10 6452 1 2025-11-05 12:46:55.680 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 12:52:19.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46084 10 6452 1 2025-11-05 12:53:04.543 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 12:53:04.383 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 12:53:04.391 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 12:53:04.099 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:53:04.443 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:53:19.553 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50792 10 6452 1 2025-11-05 12:48:55.683 00:06:00.193 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 12:54:19.954 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50472 10 6452 1 2025-11-05 12:55:20.357 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60724 10 6452 1 2025-11-05 12:56:20.767 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:59338 10 6452 1 2025-11-05 12:57:21.188 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56732 10 6452 1 2025-11-05 12:58:04.412 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 12:58:04.236 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 12:58:04.066 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:58:04.236 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 12:58:04.317 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 12:58:21.594 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56336 10 6452 1 Summary: total flows: 136, total bytes: 420147, total packets: 1010, avg bps: 924, avg pps: 0, avg bpp: 415 Time window: 2025-11-05 11:57:55 - 2025-11-05 12:58:31 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0062s User: 0.0000s Wall: 0.0022s flows/second: 62532.9 Runtime: 0.0022s