Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 19:58:59.706 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40174 10 6452 1 2025-11-01 20:00:00.112 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37014 10 6452 1 2025-11-01 20:01:00.519 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46116 10 6452 1 2025-11-01 20:01:17.060 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 20:01:17.277 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:01:17.259 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:01:17.331 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 20:01:17.341 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 20:02:00.888 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38080 10 6452 1 2025-11-01 19:57:53.696 00:06:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 20:03:01.301 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55972 10 6452 1 2025-11-01 19:58:53.698 00:06:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 20:04:01.700 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43272 10 6452 1 2025-11-01 20:05:02.106 00:00:10.954 TCP 1.101.0.1:3000 -> 23.104.0.1:37780 10 6452 1 2025-11-01 20:06:03.094 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39294 10 6452 1 2025-11-01 20:06:17.493 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 20:06:17.393 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:06:17.445 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:06:17.535 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 20:06:17.529 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 20:07:03.456 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44666 10 6452 1 2025-11-01 20:08:03.860 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56980 10 6452 1 2025-11-01 20:09:04.280 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46804 10 6452 1 2025-11-01 20:04:53.696 00:06:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 20:10:04.686 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51676 10 6452 1 2025-11-01 20:05:53.701 00:06:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 20:11:17.632 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 20:11:05.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43490 10 6452 1 2025-11-01 20:11:17.470 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 20:11:17.488 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:11:17.549 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:11:17.371 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 20:12:05.514 00:00:20.757 TCP 1.101.0.1:3000 -> 23.104.0.1:55620 10 6452 1 2025-11-01 20:13:16.336 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55242 10 6452 1 2025-11-01 20:14:16.741 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42790 10 6452 1 2025-11-01 20:15:17.147 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56438 10 6452 1 2025-11-01 20:16:18.503 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 20:16:18.527 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 20:16:18.342 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:16:18.421 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:16:18.469 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 20:16:17.559 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52568 10 6452 1 2025-11-01 20:11:53.698 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 20:17:17.957 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35882 10 6452 1 2025-11-01 20:12:53.702 00:06:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 20:18:18.360 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36326 10 6452 1 2025-11-01 20:19:18.768 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:55238 12 10375 1 2025-11-01 20:20:19.258 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37846 10 6452 1 2025-11-01 20:21:17.737 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 20:21:17.678 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:21:17.585 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:21:17.575 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 20:21:17.669 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 20:21:19.622 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50426 10 6452 1 2025-11-01 20:22:20.029 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52188 10 6452 1 2025-11-01 20:23:20.430 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51052 10 6452 1 2025-11-01 20:18:53.700 00:06:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 20:24:20.792 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56824 10 6452 1 2025-11-01 20:19:53.702 00:06:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 20:25:21.153 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59176 10 6452 1 2025-11-01 20:26:17.843 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 20:26:17.908 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:26:17.839 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:26:17.759 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 20:26:17.923 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 20:26:21.575 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46414 10 6452 1 2025-11-01 20:27:21.943 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58908 10 6452 1 2025-11-01 20:28:22.352 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58174 10 6452 1 2025-11-01 20:29:22.754 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:56426 10 6452 1 2025-11-01 20:30:23.184 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40456 10 6452 1 2025-11-01 20:25:53.701 00:06:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 20:31:17.880 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 20:31:17.745 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:31:17.875 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:31:17.814 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 20:31:17.957 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 20:31:23.584 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48746 10 6452 1 2025-11-01 20:26:53.704 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 20:32:23.944 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:37522 10 6452 1 2025-11-01 20:33:24.362 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48580 10 6452 1 2025-11-01 20:34:24.766 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:57300 10 6452 1 2025-11-01 20:35:25.132 00:00:11.567 TCP 1.101.0.1:3000 -> 23.104.0.1:53832 10 6452 1 2025-11-01 20:36:18.026 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 20:36:17.878 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 20:36:17.868 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:36:17.945 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:36:18.112 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 20:36:26.737 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43400 10 6452 1 2025-11-01 20:37:27.111 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54382 10 6452 1 2025-11-01 20:32:53.702 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 20:38:27.481 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57972 10 6452 1 2025-11-01 20:33:53.705 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 20:39:27.898 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:45536 10 6452 1 2025-11-01 20:40:28.316 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52782 10 6452 1 2025-11-01 20:41:18.116 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 20:41:17.940 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:41:18.212 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:41:18.107 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 20:41:18.295 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 20:41:28.715 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:56178 10 6452 1 2025-11-01 20:42:29.185 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59006 10 6452 1 2025-11-01 20:43:29.594 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53564 10 6452 1 2025-11-01 20:44:29.995 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60398 10 6452 1 2025-11-01 20:39:53.706 00:06:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 20:45:30.398 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35600 10 6452 1 2025-11-01 20:40:53.709 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 20:46:18.465 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 20:46:18.708 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 20:46:18.396 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:46:18.382 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:46:18.704 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 20:46:30.802 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34856 10 6452 1 2025-11-01 20:47:31.229 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35524 10 6452 1 2025-11-01 20:48:31.590 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45162 10 6452 1 2025-11-01 20:49:31.998 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35730 10 6452 1 2025-11-01 20:50:32.403 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56360 10 6452 1 2025-11-01 20:51:18.139 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 20:51:18.045 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:51:18.449 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:51:18.334 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 20:51:18.532 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 20:51:32.766 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:34032 10 6452 1 2025-11-01 20:46:53.709 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-01 20:52:33.187 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51488 10 6452 1 2025-11-01 20:47:53.713 00:06:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-01 20:53:33.608 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:46252 10 6452 1 2025-11-01 20:54:34.011 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48058 10 6452 1 2025-11-01 20:55:34.388 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50586 10 6452 1 2025-11-01 20:56:18.591 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 20:56:18.461 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:56:18.508 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 20:56:18.459 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 20:56:18.270 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 20:56:34.755 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:56222 10 6452 1 2025-11-01 20:57:35.191 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56796 10 6452 1 2025-11-01 20:58:35.593 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47920 10 6452 1 Summary: total flows: 136, total bytes: 419939, total packets: 1006, avg bps: 919, avg pps: 0, avg bpp: 417 Time window: 2025-11-01 19:57:53 - 2025-11-01 20:58:45 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0036s User: 0.0014s Wall: 0.0024s flows/second: 56877.6 Runtime: 0.0024s