Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 04:59:10.220 00:00:11.244 TCP 1.101.0.1:3000 -> 23.104.0.1:43390 12 10369 1 2025-11-01 04:54:53.401 00:06:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 05:00:11.502 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35186 10 6452 1 2025-11-01 04:55:53.404 00:06:00.252 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 05:00:59.262 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 05:00:59.165 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 05:00:59.004 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:00:59.179 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:00:59.258 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 05:01:11.919 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:41572 10 6452 1 2025-11-01 05:02:12.289 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:34920 10 6452 1 2025-11-01 05:03:12.657 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53090 10 6452 1 2025-11-01 05:04:13.068 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:50922 10 6452 1 2025-11-01 05:05:13.481 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37670 10 6452 1 2025-11-01 05:05:59.356 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 05:05:59.277 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:05:59.365 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:05:59.354 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 05:05:59.448 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 05:06:13.881 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:53892 10 6452 1 2025-11-01 05:01:53.406 00:06:00.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 05:07:14.307 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41336 10 6452 1 2025-11-01 05:02:53.407 00:06:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 05:08:14.708 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:32914 10 6452 1 2025-11-01 05:09:15.099 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52542 10 6452 1 2025-11-01 05:10:15.503 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56388 10 6452 1 2025-11-01 05:10:59.170 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 05:10:59.420 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:10:59.427 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:10:59.516 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 05:10:59.511 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 05:11:15.904 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51112 10 6452 1 2025-11-01 05:12:16.313 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33044 10 6452 1 2025-11-01 05:13:16.718 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43186 10 6452 1 2025-11-01 05:08:53.405 00:06:00.256 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 05:14:17.129 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59112 10 6452 1 2025-11-01 05:09:53.408 00:06:00.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 05:15:17.537 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35078 10 6452 1 2025-11-01 05:15:59.730 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 05:15:59.480 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 05:15:59.388 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:15:59.647 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:15:59.636 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 05:16:17.900 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54794 12 6556 1 2025-11-01 05:17:18.317 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59388 10 6452 1 2025-11-01 05:18:18.725 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44308 10 6452 1 2025-11-01 05:19:19.147 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44654 10 6452 1 2025-11-01 05:20:19.548 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53804 10 6452 1 2025-11-01 05:15:53.407 00:06:00.258 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 05:20:59.548 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 05:20:59.562 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 05:20:59.702 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:20:59.465 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:20:59.557 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 05:21:19.917 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58730 10 6452 1 2025-11-01 05:16:53.410 00:06:00.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 05:22:20.318 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46628 10 6452 1 2025-11-01 05:23:20.720 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52594 10 6452 1 2025-11-01 05:24:21.128 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54804 10 6452 1 2025-11-01 05:25:21.530 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:36792 11 6504 1 2025-11-01 05:26:00.140 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 05:25:59.976 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 05:25:59.952 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:26:00.058 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:25:59.913 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 05:26:21.982 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56678 10 6452 1 2025-11-01 05:27:22.399 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52534 10 6452 1 2025-11-01 05:22:53.407 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 05:28:22.803 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:44088 10 6452 1 2025-11-01 05:23:53.410 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 05:29:23.177 00:00:12.744 TCP 1.101.0.1:3000 -> 23.104.0.1:47432 10 6452 1 2025-11-01 05:30:25.975 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56654 10 6452 1 2025-11-01 05:30:59.979 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:30:59.932 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 05:30:59.760 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 05:30:59.784 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:31:00.062 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 05:31:26.389 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38458 10 6452 1 2025-11-01 05:32:26.795 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41298 10 6452 1 2025-11-01 05:33:27.203 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51390 10 6452 1 2025-11-01 05:34:27.609 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:41336 10 6452 1 2025-11-01 05:29:53.411 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 05:35:28.048 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37622 10 6452 1 2025-11-01 05:30:53.415 00:06:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 05:36:00.341 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 05:36:00.177 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 05:36:00.069 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:36:00.260 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:35:59.984 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 05:36:28.411 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57236 10 6452 1 2025-11-01 05:37:28.777 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56994 10 6452 1 2025-11-01 05:38:29.188 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49650 10 6452 1 2025-11-01 05:39:29.597 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50242 10 6452 1 2025-11-01 05:40:30.033 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60172 10 6452 1 2025-11-01 05:40:59.960 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 05:40:59.895 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:41:00.140 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:41:00.144 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 05:41:00.223 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 05:41:30.441 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53516 10 6452 1 2025-11-01 05:36:53.415 00:06:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 05:42:30.860 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:53144 10 6452 1 2025-11-01 05:37:53.416 00:06:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 05:43:31.235 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53148 10 6452 1 2025-11-01 05:44:31.599 00:00:11.669 TCP 1.101.0.1:3000 -> 23.104.0.1:34314 12 10369 1 2025-11-01 05:45:33.302 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39838 10 6452 1 2025-11-01 05:46:00.228 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 05:45:59.964 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:46:00.185 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:46:00.063 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 05:46:00.267 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 05:46:33.710 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57132 10 6452 1 2025-11-01 05:47:34.115 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33646 10 6452 1 2025-11-01 05:48:34.475 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35026 10 6452 1 2025-11-01 05:43:53.418 00:06:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 05:49:34.876 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32878 10 6452 1 2025-11-01 05:44:53.422 00:06:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 05:50:35.279 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49478 10 6452 1 2025-11-01 05:51:00.116 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 05:51:00.143 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:51:00.225 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:51:00.227 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 05:51:00.308 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 05:51:35.640 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53686 10 6452 1 2025-11-01 05:52:36.002 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41250 10 6452 1 2025-11-01 05:53:36.405 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60670 10 6452 1 2025-11-01 05:54:36.767 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:54936 10 6452 1 2025-11-01 05:55:37.188 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57788 10 6452 1 2025-11-01 05:50:53.420 00:06:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 05:56:00.275 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 05:56:00.240 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:56:00.336 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 05:56:00.380 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 05:56:00.418 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 05:56:37.589 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43782 10 6452 1 2025-11-01 05:51:53.423 00:06:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 05:57:37.997 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57880 10 6452 1 2025-11-01 05:58:38.401 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57148 10 6452 1 Summary: total flows: 138, total bytes: 425728, total packets: 1039, avg bps: 888, avg pps: 0, avg bpp: 409 Time window: 2025-11-01 04:54:53 - 2025-11-01 05:58:48 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0036s User: 0.0027s Wall: 0.0024s flows/second: 58673.5 Runtime: 0.0024s