Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 14:59:12.350 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45614 10 6452 1 2025-11-05 14:54:55.728 00:06:00.192 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 15:00:12.748 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56628 10 6452 1 2025-11-05 15:01:13.155 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55050 10 6452 1 2025-11-05 15:02:13.562 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58166 10 6452 1 2025-11-05 15:03:06.985 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 15:03:06.897 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 15:03:06.723 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 15:03:06.512 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:03:06.903 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:03:13.964 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44632 10 6452 1 2025-11-05 15:04:14.369 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47794 10 6452 1 2025-11-05 14:59:55.728 00:06:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 15:05:14.772 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39958 10 6452 1 2025-11-05 15:06:15.186 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:54804 10 6452 1 2025-11-05 15:01:55.730 00:06:00.190 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 15:07:15.610 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58134 10 6452 1 2025-11-05 15:08:06.976 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 15:08:06.896 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 15:08:06.840 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 15:08:06.679 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:08:06.894 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:08:16.026 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42374 10 6452 1 2025-11-05 15:09:16.433 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37210 10 6452 1 2025-11-05 15:10:16.846 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:46196 10 6452 1 2025-11-05 15:11:17.271 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:52710 10 6452 1 2025-11-05 15:06:55.728 00:06:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 15:12:17.682 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35920 10 6452 1 2025-11-05 15:13:07.614 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 15:13:07.430 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:13:07.454 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:13:07.502 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 15:13:07.537 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 15:13:18.115 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38230 10 6452 1 2025-11-05 15:08:55.731 00:06:00.192 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 15:14:18.521 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:50066 10 6452 1 2025-11-05 15:15:18.933 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:38666 10 6452 1 2025-11-05 15:16:19.315 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42162 10 6452 1 2025-11-05 15:17:19.719 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:34220 10 6452 1 2025-11-05 15:18:07.252 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 15:18:07.170 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 15:18:07.104 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 15:18:06.993 00:00:00.051 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:18:07.169 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:18:20.148 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:46744 10 6452 1 2025-11-05 15:13:55.729 00:06:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 15:19:20.518 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43400 10 6452 1 2025-11-05 15:20:20.923 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:48808 10 6452 1 2025-11-05 15:15:55.732 00:06:00.193 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 15:21:21.340 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47552 10 6452 1 2025-11-05 15:22:21.745 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45024 10 6452 1 2025-11-05 15:23:07.392 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:23:07.303 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 15:23:07.471 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 15:23:07.239 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:23:07.473 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 15:23:22.147 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60730 10 6452 1 2025-11-05 15:24:22.563 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38858 10 6452 1 2025-11-05 15:25:22.977 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46034 10 6452 1 2025-11-05 15:20:55.731 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 15:26:23.394 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41980 10 6452 1 2025-11-05 15:27:23.795 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42728 10 6452 1 2025-11-05 15:22:55.735 00:06:00.194 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 15:28:07.413 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 15:28:07.331 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:28:07.328 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 15:28:07.269 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 15:28:07.012 00:00:00.043 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:28:24.198 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58238 10 6452 1 2025-11-05 15:29:24.561 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59872 10 6452 1 2025-11-05 15:30:24.969 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:55708 10 6452 1 2025-11-05 15:31:25.388 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:53972 10 6452 1 2025-11-05 15:32:25.749 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58304 10 6452 1 2025-11-05 15:27:55.732 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 15:33:07.853 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 15:33:07.542 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 15:33:07.768 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 15:33:07.471 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:33:07.771 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:33:26.151 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39552 10 6452 1 2025-11-05 15:34:26.553 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55820 10 6452 1 2025-11-05 15:29:55.736 00:06:00.196 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 15:35:26.957 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35952 10 6452 1 2025-11-05 15:36:27.373 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55204 10 6452 1 2025-11-05 15:37:27.777 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:40386 10 6452 1 2025-11-05 15:38:07.567 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 15:38:07.580 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 15:38:07.577 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 15:38:07.417 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:38:07.485 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:38:28.173 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60200 10 6452 1 2025-11-05 15:39:28.577 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36196 10 6452 1 2025-11-05 15:34:55.738 00:06:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 15:40:28.991 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33838 11 6504 1 2025-11-05 15:41:29.411 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36338 10 6452 1 2025-11-05 15:36:55.742 00:06:00.191 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 15:42:29.818 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42908 10 6452 1 2025-11-05 15:43:08.314 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 15:43:08.233 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:43:07.927 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 15:43:07.926 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 15:43:08.298 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:43:30.226 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60172 10 6452 1 2025-11-05 15:44:30.630 00:00:10.626 TCP 1.101.0.1:3000 -> 23.104.0.1:57722 10 6452 1 2025-11-05 15:45:31.295 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35404 10 6452 1 2025-11-05 15:46:31.665 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59162 10 6452 1 2025-11-05 15:41:55.742 00:06:00.196 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 15:47:32.098 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34706 10 6452 1 2025-11-05 15:48:07.804 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 15:48:07.805 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 15:48:07.387 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:48:07.636 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:48:07.719 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 15:48:32.499 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47930 10 6452 1 2025-11-05 15:43:55.743 00:06:00.193 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 15:49:32.906 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42454 10 6452 1 2025-11-05 15:50:33.309 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58260 10 6452 1 2025-11-05 15:51:33.710 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42402 10 6452 1 2025-11-05 15:52:34.117 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45936 10 6452 1 2025-11-05 15:53:07.878 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 15:53:07.897 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 15:53:07.794 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 15:53:07.691 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:53:07.796 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:53:34.520 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41242 10 6452 1 2025-11-05 15:48:55.741 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-05 15:54:34.920 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55162 10 6452 1 2025-11-05 15:55:35.324 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36298 10 6452 1 2025-11-05 15:50:55.744 00:06:00.194 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-05 15:56:35.689 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48004 10 6452 1 2025-11-05 15:57:36.111 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59422 10 6452 1 2025-11-05 15:58:08.070 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-05 15:58:08.091 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-05 15:58:07.908 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-05 15:58:07.825 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:58:07.987 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-05 15:58:36.476 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41546 10 6452 1 Summary: total flows: 137, total bytes: 416929, total packets: 1019, avg bps: 870, avg pps: 0, avg bpp: 409 Time window: 2025-11-05 14:54:55 - 2025-11-05 15:58:46 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0059s User: 0.0007s Wall: 0.0031s flows/second: 44022.0 Runtime: 0.0031s