Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-07 01:58:42.857 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40278 10 6452 1 2025-11-07 01:59:43.281 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35616 10 6452 1 2025-11-07 02:00:43.683 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53292 10 6452 1 2025-11-07 01:55:56.453 00:06:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 02:01:44.109 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55720 10 6452 1 2025-11-07 02:02:44.511 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56298 10 6452 1 2025-11-07 01:57:56.454 00:06:00.173 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 02:03:48.977 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:03:49.116 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:03:48.921 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:03:49.157 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:03:49.240 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 02:03:44.913 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53830 10 6452 1 2025-11-07 02:04:45.313 00:00:18.681 TCP 1.101.0.1:3000 -> 23.104.0.1:46836 10 6452 1 2025-11-07 02:05:54.062 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35542 10 6452 1 2025-11-07 02:06:54.421 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38398 10 6452 1 2025-11-07 02:02:56.454 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 02:07:54.823 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43786 10 6452 1 2025-11-07 02:08:49.081 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 02:08:49.214 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:08:48.914 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:08:49.061 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:08:48.998 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:08:55.226 00:00:11.074 TCP 1.101.0.1:3000 -> 23.104.0.1:40946 10 6452 1 2025-11-07 02:04:56.454 00:06:00.173 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 02:09:56.338 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43378 10 6452 1 2025-11-07 02:10:56.742 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49130 10 6452 1 2025-11-07 02:11:57.150 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46384 10 6452 1 2025-11-07 02:12:57.555 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38512 10 6452 1 2025-11-07 02:13:49.129 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:13:49.040 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:13:49.139 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:13:49.039 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:13:49.122 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 02:13:57.960 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45176 10 6452 1 2025-11-07 02:09:56.455 00:06:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 02:14:58.368 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:42456 10 6452 1 2025-11-07 02:15:58.726 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36192 10 6452 1 2025-11-07 02:11:56.455 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 02:16:59.143 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45846 10 6452 1 2025-11-07 02:17:59.559 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46774 10 6452 1 2025-11-07 02:18:49.333 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:18:49.202 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:18:48.976 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:18:49.198 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:18:49.280 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 02:18:59.961 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38400 10 6452 1 2025-11-07 02:20:00.322 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55526 10 6452 1 2025-11-07 02:21:00.729 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37358 10 6452 1 2025-11-07 02:16:56.459 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 02:22:01.143 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57016 10 6452 1 2025-11-07 02:23:01.554 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:54546 10 6452 1 2025-11-07 02:23:49.366 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 02:23:49.220 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:23:49.315 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:23:49.284 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:23:49.286 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:18:56.457 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 02:24:01.910 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35710 10 6452 1 2025-11-07 02:25:02.312 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46504 10 6452 1 2025-11-07 02:26:02.715 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:52538 10 6452 1 2025-11-07 02:27:03.116 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58848 10 6452 1 2025-11-07 02:28:03.519 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41040 10 6452 1 2025-11-07 02:28:49.535 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:28:49.275 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:28:49.162 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:28:49.429 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:28:49.512 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 02:23:56.461 00:06:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 02:29:03.925 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:60836 10 6452 1 2025-11-07 02:30:04.343 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58504 10 6452 1 2025-11-07 02:25:56.458 00:06:00.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 02:31:04.746 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40286 10 6452 1 2025-11-07 02:32:05.149 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57776 10 6452 1 2025-11-07 02:33:05.555 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33450 10 6452 1 2025-11-07 02:33:49.591 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:33:49.640 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:33:49.441 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:33:49.634 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:33:49.717 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 02:34:05.962 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55608 10 6452 1 2025-11-07 02:35:06.370 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55896 10 6452 1 2025-11-07 02:30:56.462 00:06:00.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 02:36:06.780 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57628 10 6452 1 2025-11-07 02:37:07.187 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37788 10 6452 1 2025-11-07 02:32:56.460 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 02:38:07.588 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50942 10 6452 1 2025-11-07 02:38:49.644 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:38:49.482 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:38:49.786 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:38:49.869 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 02:38:50.056 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:39:07.953 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:54236 10 6452 1 2025-11-07 02:40:08.331 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36416 10 6452 1 2025-11-07 02:41:08.739 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53098 10 6452 1 2025-11-07 02:42:09.124 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38812 10 6452 1 2025-11-07 02:37:56.463 00:06:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 02:43:09.482 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37744 10 6452 1 2025-11-07 02:43:50.268 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 02:43:50.108 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:43:50.109 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:43:50.234 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:43:50.185 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:44:09.886 00:00:10.923 TCP 1.101.0.1:3000 -> 23.104.0.1:34714 10 6452 1 2025-11-07 02:39:56.461 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 02:45:10.857 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:59722 10 6452 1 2025-11-07 02:46:11.275 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49962 10 6452 1 2025-11-07 02:47:11.688 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:43344 12 10375 1 2025-11-07 02:48:12.168 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48278 10 6452 1 2025-11-07 02:48:49.821 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 02:48:49.813 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:48:49.893 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:48:49.739 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:48:49.650 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:49:12.570 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50284 10 6452 1 2025-11-07 02:44:56.466 00:06:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 02:50:12.973 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55860 10 6452 1 2025-11-07 02:51:13.375 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34142 10 6452 1 2025-11-07 02:46:56.463 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 02:52:13.777 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39188 10 6452 1 2025-11-07 02:53:14.138 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50820 10 6452 1 2025-11-07 02:53:49.853 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 02:53:49.892 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:53:49.976 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 02:53:50.060 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 02:53:50.084 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 02:54:14.540 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45366 10 6452 1 2025-11-07 02:55:14.948 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44452 10 6452 1 2025-11-07 02:56:15.361 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40664 10 6452 1 2025-11-07 02:51:56.466 00:06:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 02:57:15.777 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34860 10 6452 1 2025-11-07 02:58:16.184 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46982 10 6452 1 Summary: total flows: 132, total bytes: 419540, total packets: 1005, avg bps: 895, avg pps: 0, avg bpp: 417 Time window: 2025-11-07 01:55:56 - 2025-11-07 02:58:26 Total flows processed: 132, passed: 132, Blocks skipped: 0, Bytes read: 13792 Sys: 0.0038s User: 0.0019s Wall: 0.0018s flows/second: 71503.1 Runtime: 0.0019s