Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 08:53:53.501 00:06:00.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 08:59:36.271 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52580 10 6452 1 2025-11-01 09:00:36.675 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54144 10 6452 1 2025-11-01 09:01:04.034 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:01:03.951 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:01:03.800 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:01:03.952 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:01:04.067 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:01:37.107 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38594 10 6452 1 2025-11-01 09:02:37.505 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39284 10 6452 1 2025-11-01 09:03:37.871 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55256 10 6452 1 2025-11-01 09:04:38.289 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:43070 12 10375 1 2025-11-01 08:59:53.497 00:06:00.259 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:05:38.772 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52540 10 6452 1 2025-11-01 09:00:53.502 00:06:00.254 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:06:04.090 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:06:04.146 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:06:04.083 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:06:03.858 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:06:04.166 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:06:39.191 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49706 10 6452 1 2025-11-01 09:07:39.550 00:00:10.980 TCP 1.101.0.1:3000 -> 23.104.0.1:52094 10 6452 1 2025-11-01 09:08:40.567 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38464 10 6452 1 2025-11-01 09:09:40.969 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38646 10 6452 1 2025-11-01 09:10:41.380 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50528 10 6452 1 2025-11-01 09:11:04.216 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:11:04.247 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:11:04.186 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:11:04.179 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:11:04.329 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:11:41.776 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48188 10 6452 1 2025-11-01 09:06:53.499 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:12:42.182 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35110 10 6452 1 2025-11-01 09:07:53.502 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:13:42.584 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50130 10 6452 1 2025-11-01 09:14:42.985 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:60932 10 6452 1 2025-11-01 09:15:43.403 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60128 10 6452 1 2025-11-01 09:16:04.315 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:16:04.254 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:16:04.392 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:16:04.483 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:16:04.474 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:16:43.827 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:34008 10 6452 1 2025-11-01 09:17:44.200 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:59808 10 6452 1 2025-11-01 09:13:53.500 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:18:44.629 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40368 10 6452 1 2025-11-01 09:19:45.036 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55380 10 6452 1 2025-11-01 09:14:53.503 00:06:00.255 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:20:45.439 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56880 10 6452 1 2025-11-01 09:21:04.558 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:21:04.535 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:21:04.270 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:21:04.476 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:21:04.482 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:21:45.846 00:00:10.472 TCP 1.101.0.1:3000 -> 23.104.0.1:35058 10 6452 1 2025-11-01 09:22:46.362 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40902 10 6452 1 2025-11-01 09:23:46.771 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41618 10 6452 1 2025-11-01 09:24:47.173 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43858 10 6452 1 2025-11-01 09:20:53.501 00:06:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:25:47.582 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40502 10 6452 1 2025-11-01 09:26:04.563 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:26:04.663 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:26:04.307 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:26:04.481 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:26:04.492 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:21:53.504 00:06:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:26:47.987 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38666 10 6452 1 2025-11-01 09:27:48.360 00:00:10.586 TCP 1.101.0.1:3000 -> 23.104.0.1:32874 10 6452 1 2025-11-01 09:28:48.986 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42002 10 6452 1 2025-11-01 09:29:49.397 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54488 10 6452 1 2025-11-01 09:30:49.805 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45998 10 6452 1 2025-11-01 09:31:04.724 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:31:04.508 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:31:04.799 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:31:04.798 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:31:04.881 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:31:50.201 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43932 10 6452 1 2025-11-01 09:27:53.504 00:06:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:32:50.600 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41606 10 6452 1 2025-11-01 09:28:53.506 00:06:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:33:50.962 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58924 10 6452 1 2025-11-01 09:34:51.367 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:35148 12 10369 1 2025-11-01 09:35:51.850 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:52086 10 6452 1 2025-11-01 09:36:04.829 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:36:04.732 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:36:04.698 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:36:04.771 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:36:04.780 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:36:52.230 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58930 10 6452 1 2025-11-01 09:37:52.635 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53926 10 6452 1 2025-11-01 09:38:53.039 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41996 10 6452 1 2025-11-01 09:34:53.506 00:06:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:39:53.402 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46370 10 6452 1 2025-11-01 09:35:53.508 00:06:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:41:05.026 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:41:04.744 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:41:04.577 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:41:04.943 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:41:04.808 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:40:53.812 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60054 10 6452 1 2025-11-01 09:41:54.237 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:34162 10 6452 1 2025-11-01 09:42:54.616 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57200 10 6452 1 2025-11-01 09:43:55.018 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51474 10 6452 1 2025-11-01 09:44:55.420 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35094 10 6452 1 2025-11-01 09:46:05.011 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:46:04.766 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:46:04.744 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:46:04.928 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:46:04.980 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:45:55.821 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:60012 10 6452 1 2025-11-01 09:41:53.515 00:06:00.255 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:46:56.189 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55232 10 6452 1 2025-11-01 09:42:53.518 00:06:00.250 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:47:56.592 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46328 10 6452 1 2025-11-01 09:48:56.996 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38014 10 6452 1 2025-11-01 09:49:57.405 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53250 10 6452 1 2025-11-01 09:51:05.071 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:51:04.804 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:51:04.887 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:51:05.144 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:51:04.971 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:50:57.808 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52196 10 6452 1 2025-11-01 09:51:58.215 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53540 10 6452 1 2025-11-01 09:52:58.585 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:49988 10 6452 1 2025-11-01 09:48:53.520 00:06:00.253 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 09:53:58.954 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49466 10 6452 1 2025-11-01 09:49:53.522 00:06:00.251 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 09:54:59.362 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54882 10 6452 1 2025-11-01 09:56:05.160 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 09:56:05.123 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:56:05.166 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 09:56:05.156 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 09:56:05.249 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 09:55:59.762 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58490 10 6452 1 2025-11-01 09:57:00.170 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41194 10 6452 1 2025-11-01 09:58:00.568 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46568 10 6452 1 Summary: total flows: 136, total bytes: 418265, total packets: 1012, avg bps: 867, avg pps: 0, avg bpp: 413 Time window: 2025-11-01 08:53:53 - 2025-11-01 09:58:10 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0037s User: 0.0018s Wall: 0.0017s flows/second: 77852.5 Runtime: 0.0018s