Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 12:53:55.681 00:06:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 12:59:21.996 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41876 10 6452 1 2025-11-05 13:00:22.404 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53172 10 6452 1 2025-11-05 12:55:55.684 00:06:00.193 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 13:01:22.766 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57926 10 6452 1 2025-11-05 13:02:23.173 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37372 10 6452 1 2025-11-05 13:03:04.259 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 13:03:04.539 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 13:03:04.264 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:03:04.465 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:03:04.549 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 13:03:23.581 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44090 10 6452 1 2025-11-05 13:04:23.985 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:54212 10 6452 1 2025-11-05 13:05:24.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49180 10 6452 1 2025-11-05 13:00:55.683 00:06:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 13:06:24.766 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:32944 10 6452 1 2025-11-05 13:07:25.183 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:55956 10 6452 1 2025-11-05 13:08:04.475 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 13:02:55.686 00:06:00.192 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 13:08:04.734 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 13:08:04.673 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 13:08:04.333 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:08:04.393 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:08:25.581 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38312 10 6452 1 2025-11-05 13:09:25.982 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47536 10 6452 1 2025-11-05 13:10:26.397 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38622 10 6452 1 2025-11-05 13:11:26.753 00:00:10.910 TCP 1.101.0.1:3000 -> 23.104.0.1:58236 10 6452 1 2025-11-05 13:12:27.704 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34588 10 6452 1 2025-11-05 13:13:04.453 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 13:13:04.685 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 13:13:04.571 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:13:04.610 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:07:55.686 00:06:00.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 13:13:04.692 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 13:13:28.112 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37584 10 6452 1 2025-11-05 13:14:28.516 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42256 10 6452 1 2025-11-05 13:09:55.691 00:06:00.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 13:15:28.926 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:37034 13 6608 1 2025-11-05 13:16:29.376 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38128 10 6452 1 2025-11-05 13:17:29.785 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36904 10 6452 1 2025-11-05 13:18:04.840 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 13:18:04.724 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 13:18:04.490 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:18:04.843 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:18:04.925 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 13:18:30.157 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52368 10 6452 1 2025-11-05 13:19:30.564 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53546 10 6452 1 2025-11-05 13:14:55.689 00:06:00.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 13:20:30.973 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:50172 10 6452 1 2025-11-05 13:21:31.400 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56790 10 6452 1 2025-11-05 13:16:55.695 00:06:00.186 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 13:22:31.808 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52206 10 6452 1 2025-11-05 13:23:04.720 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 13:23:04.801 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 13:23:04.817 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:23:04.916 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:23:04.997 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 13:23:32.214 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33354 10 6452 1 2025-11-05 13:24:32.621 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34474 10 6452 1 2025-11-05 13:25:32.990 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45468 10 6452 1 2025-11-05 13:26:33.400 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56998 10 6452 1 2025-11-05 13:21:55.693 00:06:00.191 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 13:27:33.799 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:40292 10 6452 1 2025-11-05 13:28:04.886 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 13:28:04.964 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 13:28:04.717 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:28:05.110 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:28:05.193 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 13:28:34.182 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37608 10 6452 1 2025-11-05 13:23:55.695 00:06:00.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 13:29:34.581 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37200 10 6452 1 2025-11-05 13:30:34.949 00:00:11.196 TCP 1.101.0.1:3000 -> 23.104.0.1:43862 10 6452 1 2025-11-05 13:31:36.184 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40592 10 6452 1 2025-11-05 13:32:36.586 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39126 10 6452 1 2025-11-05 13:33:04.990 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 13:33:04.973 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 13:33:04.594 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:33:04.909 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:33:05.108 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 13:33:36.992 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:55032 10 6452 1 2025-11-05 13:28:55.698 00:06:00.191 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 13:34:37.369 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37468 10 6452 1 2025-11-05 13:35:37.766 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:41106 10 6452 1 2025-11-05 13:30:55.699 00:06:00.184 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 13:36:38.181 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42732 10 6452 1 2025-11-05 13:37:38.581 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47572 10 6452 1 2025-11-05 13:38:05.194 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:38:05.089 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:38:05.167 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 13:38:05.099 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 13:38:05.172 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 13:38:38.985 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34568 10 6452 1 2025-11-05 13:39:39.390 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42520 10 6452 1 2025-11-05 13:40:39.788 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48440 10 6452 1 2025-11-05 13:35:55.702 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 13:41:40.186 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56880 10 6452 1 2025-11-05 13:42:40.588 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40376 10 6452 1 2025-11-05 13:37:55.707 00:06:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 13:43:05.362 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 13:43:05.287 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 13:43:05.220 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:43:05.276 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:43:05.358 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 13:43:40.990 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57498 10 6452 1 2025-11-05 13:44:41.399 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:44266 10 6452 1 2025-11-05 13:45:41.827 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:46926 10 6452 1 2025-11-05 13:46:42.284 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33120 10 6452 1 2025-11-05 13:47:42.688 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51112 10 6452 1 2025-11-05 13:42:55.706 00:06:00.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 13:48:05.464 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 13:48:05.314 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 13:48:05.373 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 13:48:05.406 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:48:05.381 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:48:43.116 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52704 10 6452 1 2025-11-05 13:49:43.520 00:00:10.406 TCP 1.101.0.1:3000 -> 23.104.0.1:46202 10 6452 1 2025-11-05 13:44:55.710 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 13:50:43.965 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54318 10 6452 1 2025-11-05 13:51:44.366 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52904 12 6556 1 2025-11-05 13:52:44.777 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42712 10 6452 1 2025-11-05 13:53:05.430 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 13:53:05.381 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 13:53:05.248 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:53:05.484 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:53:05.566 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 13:53:45.183 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58246 10 6452 1 2025-11-05 13:54:45.584 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:40854 10 6452 1 2025-11-05 13:49:55.708 00:06:00.189 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 13:55:46.009 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43414 10 6452 1 2025-11-05 13:51:55.710 00:06:00.184 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 13:56:46.414 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:49080 11 6504 1 2025-11-05 13:57:46.874 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52254 10 6452 1 2025-11-05 13:58:05.800 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 13:58:05.663 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 13:58:05.608 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 13:58:05.489 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 13:58:05.718 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 137, total bytes: 411598, total packets: 1028, avg bps: 855, avg pps: 0, avg bpp: 400 Time window: 2025-11-05 12:53:55 - 2025-11-05 13:58:05 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0036s User: 0.0018s Wall: 0.0018s flows/second: 76882.5 Runtime: 0.0018s