Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-06 19:53:56.310 00:06:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 19:59:10.057 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53908 10 6452 1 2025-11-06 20:00:10.458 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48478 10 6452 1 2025-11-06 20:01:10.820 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42810 10 6452 1 2025-11-06 20:02:11.224 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43096 10 6452 1 2025-11-06 20:03:11.629 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54824 10 6452 1 2025-11-06 20:03:41.939 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 20:03:41.868 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 20:03:41.439 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:03:41.993 00:00:00.047 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:03:42.076 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 19:58:56.314 00:06:00.194 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 20:04:12.030 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48094 10 6452 1 2025-11-06 20:05:12.397 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52728 10 6452 1 2025-11-06 20:00:56.313 00:06:00.198 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 20:06:12.764 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41476 10 6452 1 2025-11-06 20:07:13.171 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55600 10 6452 1 2025-11-06 20:08:13.576 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:38404 11 6504 1 2025-11-06 20:08:41.987 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 20:08:41.819 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 20:08:41.916 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:08:41.906 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:08:41.989 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 20:09:14.037 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34796 10 6452 1 2025-11-06 20:10:14.399 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53042 10 6452 1 2025-11-06 20:05:56.315 00:06:00.194 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 20:11:14.767 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58582 10 6452 1 2025-11-06 20:12:15.191 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:32844 12 10369 1 2025-11-06 20:07:56.313 00:06:00.199 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 20:13:15.690 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57852 10 6452 1 2025-11-06 20:13:42.118 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 20:13:42.059 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 20:13:41.964 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:13:42.077 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:13:42.160 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 20:14:16.118 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44050 10 6452 1 2025-11-06 20:15:16.517 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41224 10 6452 1 2025-11-06 20:16:16.920 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51314 10 6452 1 2025-11-06 20:17:17.323 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46500 10 6452 1 2025-11-06 20:12:56.321 00:06:00.189 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 20:18:17.691 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34350 10 6452 1 2025-11-06 20:18:42.190 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 20:18:42.065 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 20:18:41.973 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 20:18:42.076 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:18:42.106 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:19:18.059 00:00:10.514 TCP 1.101.0.1:3000 -> 23.104.0.1:52010 10 6452 1 2025-11-06 20:14:56.317 00:06:00.196 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 20:20:18.622 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35988 10 6452 1 2025-11-06 20:21:19.028 00:00:10.706 TCP 1.101.0.1:3000 -> 23.104.0.1:56148 10 6452 1 2025-11-06 20:22:19.770 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57776 10 6452 1 2025-11-06 20:23:20.181 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51624 10 6452 1 2025-11-06 20:23:42.341 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 20:23:42.180 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 20:23:42.088 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:23:42.190 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:23:42.272 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 20:24:20.537 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42828 10 6452 1 2025-11-06 20:19:56.323 00:06:00.190 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 20:25:20.898 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51354 12 6556 1 2025-11-06 20:26:21.312 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36602 10 6452 1 2025-11-06 20:21:56.322 00:06:00.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 20:27:21.717 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33924 10 6452 1 2025-11-06 20:28:22.136 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47418 10 6452 1 2025-11-06 20:28:42.274 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:28:42.455 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 20:28:42.445 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 20:28:42.259 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:28:42.357 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 20:29:22.540 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38280 10 6452 1 2025-11-06 20:30:22.939 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:40786 10 6452 1 2025-11-06 20:31:23.365 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:48118 11 6504 1 2025-11-06 20:26:56.326 00:06:00.189 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 20:32:23.820 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55216 10 6452 1 2025-11-06 20:33:24.234 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44094 10 6452 1 2025-11-06 20:33:42.506 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 20:33:42.460 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 20:33:42.515 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:33:42.501 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:33:42.583 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 20:28:56.323 00:06:00.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 20:34:24.633 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39454 10 6452 1 2025-11-06 20:35:25.054 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37252 10 6452 1 2025-11-06 20:36:25.465 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60680 10 6452 1 2025-11-06 20:37:25.869 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:37758 10 6452 1 2025-11-06 20:38:26.242 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54774 10 6452 1 2025-11-06 20:38:42.448 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 20:38:42.389 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:38:42.451 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:38:42.369 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 20:38:42.535 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 20:33:56.328 00:06:00.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 20:39:26.646 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41682 10 6452 1 2025-11-06 20:40:27.060 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38700 10 6452 1 2025-11-06 20:35:56.325 00:06:00.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 20:41:27.474 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44218 10 6452 1 2025-11-06 20:42:27.876 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34500 10 6452 1 2025-11-06 20:43:28.278 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48386 10 6452 1 2025-11-06 20:43:42.533 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 20:43:42.598 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 20:43:42.659 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:43:42.591 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:43:42.673 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 20:44:28.680 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48458 10 6452 1 2025-11-06 20:45:29.103 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58484 10 6452 1 2025-11-06 20:40:56.329 00:06:00.190 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 20:46:29.508 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47146 10 6452 1 2025-11-06 20:47:29.905 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59690 12 6556 1 2025-11-06 20:42:56.327 00:06:00.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 20:48:42.907 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:48:42.764 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 20:48:42.759 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 20:48:42.303 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:48:30.325 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47908 10 6452 1 2025-11-06 20:48:42.989 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 20:49:30.695 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36732 10 6452 1 2025-11-06 20:50:31.113 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34226 10 6452 1 2025-11-06 20:51:31.517 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46554 10 6452 1 2025-11-06 20:52:31.918 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39444 10 6452 1 2025-11-06 20:47:56.333 00:06:00.187 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 20:53:42.438 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 20:53:42.770 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 20:53:42.681 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:53:42.774 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:53:32.319 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39888 10 6452 1 2025-11-06 20:53:42.858 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 20:54:32.740 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36744 10 6452 1 2025-11-06 20:49:56.330 00:06:00.192 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 20:55:33.145 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55746 10 6452 1 2025-11-06 20:56:33.555 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57450 10 6452 1 2025-11-06 20:57:33.956 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33418 10 6452 1 2025-11-06 20:58:42.970 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 20:58:42.884 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 20:58:42.784 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:58:34.362 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40656 10 6452 1 2025-11-06 20:58:42.928 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 20:58:43.011 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 137, total bytes: 421106, total packets: 1026, avg bps: 866, avg pps: 0, avg bpp: 410 Time window: 2025-11-06 19:53:56 - 2025-11-06 20:58:44 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0045s User: 0.0009s Wall: 0.0046s flows/second: 29691.5 Runtime: 0.0046s