Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 06:53:53.444 00:06:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 06:58:46.311 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42882 10 6452 1 2025-11-01 06:54:53.448 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 06:59:46.721 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55160 10 6452 1 2025-11-01 07:00:47.130 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38120 10 6452 1 2025-11-01 07:01:01.536 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 07:01:01.648 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:01:01.627 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:01:01.810 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 07:01:01.708 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 07:01:47.531 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:55078 10 6452 1 2025-11-01 07:02:47.888 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:54606 10 6452 1 2025-11-01 07:03:48.271 00:00:10.959 TCP 1.101.0.1:3000 -> 23.104.0.1:45632 10 6452 1 2025-11-01 07:04:49.268 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37444 10 6452 1 2025-11-01 07:00:53.448 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 07:05:49.672 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49022 10 6452 1 2025-11-01 07:06:01.855 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 07:06:01.409 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:06:02.045 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:06:01.867 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 07:06:02.128 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 07:01:53.452 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 07:06:50.114 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36200 10 6452 1 2025-11-01 07:07:50.484 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58240 10 6452 1 2025-11-01 07:08:50.887 00:00:10.460 TCP 1.101.0.1:3000 -> 23.104.0.1:56744 14 10473 1 2025-11-01 07:09:51.391 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33970 10 6452 1 2025-11-01 07:11:01.860 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 07:11:01.768 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 07:11:01.956 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 07:10:51.789 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43384 10 6452 1 2025-11-01 07:11:01.602 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:11:01.778 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:11:52.201 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42068 10 6452 1 2025-11-01 07:07:53.452 00:06:00.266 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 07:12:52.564 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57464 10 6452 1 2025-11-01 07:08:53.453 00:06:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 07:13:52.927 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:34662 10 6452 1 2025-11-01 07:14:53.302 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46872 10 6452 1 2025-11-01 07:16:01.757 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 07:15:53.705 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40832 10 6452 1 2025-11-01 07:16:01.742 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:16:01.979 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:16:02.054 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 07:16:02.063 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 07:16:54.110 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59602 10 6452 1 2025-11-01 07:17:54.518 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:52526 10 6452 1 2025-11-01 07:18:54.975 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55934 10 6452 1 2025-11-01 07:14:53.452 00:06:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 07:19:55.386 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:32896 10 6452 1 2025-11-01 07:15:53.455 00:06:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 07:21:01.942 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 07:21:01.955 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:21:01.935 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:21:01.930 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 07:21:02.018 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 07:20:55.786 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:52270 12 6556 1 2025-11-01 07:21:56.210 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56498 10 6452 1 2025-11-01 07:22:56.614 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42048 10 6452 1 2025-11-01 07:23:57.039 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59132 10 6452 1 2025-11-01 07:24:57.452 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39630 10 6452 1 2025-11-01 07:26:02.582 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 07:26:02.597 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 07:26:02.553 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:26:02.500 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:26:02.601 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 07:25:57.854 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34318 10 6452 1 2025-11-01 07:21:53.458 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 07:26:58.279 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55706 10 6452 1 2025-11-01 07:22:53.459 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 07:27:58.639 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44752 10 6452 1 2025-11-01 07:28:59.045 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49848 10 6452 1 2025-11-01 07:29:59.450 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:38622 10 6452 1 2025-11-01 07:31:02.380 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 07:31:02.340 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 07:31:01.863 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:31:02.297 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:31:02.295 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 07:30:59.845 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:42446 10 6452 1 2025-11-01 07:32:00.269 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49862 10 6452 1 2025-11-01 07:33:00.634 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39478 10 6452 1 2025-11-01 07:28:53.459 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 07:34:01.056 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50536 10 6452 1 2025-11-01 07:29:53.461 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 07:35:01.460 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34392 10 6452 1 2025-11-01 07:36:02.418 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 07:36:02.342 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:36:02.250 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:36:02.421 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 07:36:02.332 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 07:36:01.872 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50694 10 6452 1 2025-11-01 07:37:02.235 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55582 10 6452 1 2025-11-01 07:38:02.591 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39428 10 6452 1 2025-11-01 07:39:02.997 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47242 10 6452 1 2025-11-01 07:40:03.394 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50620 10 6452 1 2025-11-01 07:35:53.460 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 07:41:02.515 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 07:41:02.320 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:41:02.451 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:41:02.387 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 07:41:02.534 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 07:41:03.797 00:00:10.569 TCP 1.101.0.1:3000 -> 23.104.0.1:42076 10 6452 1 2025-11-01 07:36:53.465 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 07:42:04.403 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34310 10 6452 1 2025-11-01 07:43:04.804 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34144 10 6452 1 2025-11-01 07:44:05.209 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32838 10 6452 1 2025-11-01 07:45:05.609 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53722 10 6452 1 2025-11-01 07:46:02.817 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 07:46:02.393 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:46:02.455 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:46:02.485 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 07:46:02.539 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 07:46:06.015 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38730 10 6452 1 2025-11-01 07:47:06.435 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:55474 10 6452 1 2025-11-01 07:42:53.463 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 07:48:06.870 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55888 10 6452 1 2025-11-01 07:43:53.466 00:06:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 07:49:07.280 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60096 10 6452 1 2025-11-01 07:50:07.684 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40318 10 6452 1 2025-11-01 07:51:02.649 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 07:51:02.718 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:51:02.648 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:51:02.638 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 07:51:02.729 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 07:51:08.105 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:49340 11 6504 1 2025-11-01 07:52:08.564 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33396 10 6452 1 2025-11-01 07:53:08.973 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:50666 10 6452 1 2025-11-01 07:54:09.343 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49712 10 6452 1 2025-11-01 07:49:53.464 00:06:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 07:55:09.746 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45134 10 6452 1 2025-11-01 07:50:53.466 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 07:56:02.825 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 07:56:02.697 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:56:02.737 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 07:56:02.906 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 07:56:02.820 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 07:56:10.149 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57978 10 6452 1 2025-11-01 07:57:10.513 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52600 10 6452 1 2025-11-01 07:58:10.929 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:52138 10 6452 1 Summary: total flows: 138, total bytes: 421915, total packets: 1039, avg bps: 872, avg pps: 0, avg bpp: 406 Time window: 2025-11-01 06:53:53 - 2025-11-01 07:58:21 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0045s User: 0.0018s Wall: 0.0018s flows/second: 74878.9 Runtime: 0.0019s