Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 01:53:54.295 00:06:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 01:58:48.474 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45040 10 6452 1 2025-11-03 01:59:48.886 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 10 6452 1 2025-11-03 02:00:49.269 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43168 10 6452 1 2025-11-03 02:01:53.537 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:01:53.374 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:01:53.349 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:01:53.344 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:01:53.431 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:01:49.629 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37848 10 6452 1 2025-11-03 02:02:50.040 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42684 10 6452 1 2025-11-03 01:58:54.293 00:06:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 02:03:50.401 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41140 10 6452 1 2025-11-03 02:04:50.808 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47004 10 6452 1 2025-11-03 02:00:54.296 00:06:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 02:05:51.212 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58788 10 6452 1 2025-11-03 02:06:53.707 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:06:53.458 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:06:53.504 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:06:53.624 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:06:53.476 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:06:51.618 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43032 10 6452 1 2025-11-03 02:07:52.025 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35638 10 6452 1 2025-11-03 02:08:52.433 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59838 10 6452 1 2025-11-03 02:09:52.832 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42536 10 6452 1 2025-11-03 02:05:54.295 00:06:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 02:10:53.232 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60414 10 6452 1 2025-11-03 02:11:53.645 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:11:53.729 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:11:53.496 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:11:53.563 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:11:53.627 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:11:53.594 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43216 10 6452 1 2025-11-03 02:07:54.301 00:06:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 02:12:53.997 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41976 10 6452 1 2025-11-03 02:13:54.360 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49766 10 6452 1 2025-11-03 02:14:54.725 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59514 10 6452 1 2025-11-03 02:15:55.104 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55838 10 6452 1 2025-11-03 02:16:53.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:16:53.815 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:16:53.878 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:16:53.715 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:16:53.961 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:16:55.514 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45356 10 6452 1 2025-11-03 02:12:54.300 00:06:00.361 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 02:17:55.927 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:54426 10 6452 1 2025-11-03 02:18:56.347 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33538 10 6452 1 2025-11-03 02:14:54.301 00:06:00.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 02:19:56.754 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56160 10 6452 1 2025-11-03 02:20:57.117 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42084 10 6452 1 2025-11-03 02:21:53.970 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:21:53.684 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:21:53.819 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:21:53.961 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:21:53.901 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:21:57.480 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38792 10 6452 1 2025-11-03 02:22:57.886 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:52026 10 6452 1 2025-11-03 02:23:58.274 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40350 10 6452 1 2025-11-03 02:19:54.302 00:06:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 02:24:58.678 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47892 10 6452 1 2025-11-03 02:25:59.035 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53776 10 6452 1 2025-11-03 02:26:54.070 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:26:53.960 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:26:53.993 00:00:00.049 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:26:53.946 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:21:54.304 00:06:00.363 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 02:26:54.075 00:00:00.049 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:26:59.438 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33436 10 6452 1 2025-11-03 02:27:59.837 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:37232 10 6452 1 2025-11-03 02:29:00.231 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47046 10 6452 1 2025-11-03 02:30:00.635 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:34908 12 10369 1 2025-11-03 02:31:01.113 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41092 10 6452 1 2025-11-03 02:26:54.302 00:06:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 02:31:54.106 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:31:53.849 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:31:53.989 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:31:54.026 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:31:54.011 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:32:01.524 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36094 10 6452 1 2025-11-03 02:33:01.929 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54194 10 6452 1 2025-11-03 02:28:54.307 00:06:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 02:34:02.346 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53372 10 6452 1 2025-11-03 02:35:02.754 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33694 10 6452 1 2025-11-03 02:36:03.122 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55590 10 6452 1 2025-11-03 02:36:54.094 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:36:54.092 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:36:54.223 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:36:54.270 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:36:54.306 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:37:03.523 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44136 10 6452 1 2025-11-03 02:38:03.923 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:43464 10 6452 1 2025-11-03 02:33:54.304 00:06:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 02:39:04.347 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47686 10 6452 1 2025-11-03 02:40:04.751 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42764 10 6452 1 2025-11-03 02:35:54.306 00:06:00.363 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 02:41:05.152 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37934 10 6452 1 2025-11-03 02:41:54.366 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:41:54.127 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:41:54.274 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:41:54.284 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:41:54.349 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:42:05.554 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45986 10 6452 1 2025-11-03 02:43:05.956 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:38938 11 6504 1 2025-11-03 02:44:06.424 00:00:10.576 TCP 1.101.0.1:3000 -> 23.104.0.1:60196 10 6452 1 2025-11-03 02:45:07.038 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:47968 12 10375 1 2025-11-03 02:40:54.305 00:06:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 02:46:07.521 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47742 10 6452 1 2025-11-03 02:46:54.257 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:46:54.488 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:46:54.191 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:46:54.174 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:46:54.437 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:47:07.918 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39072 10 6452 1 2025-11-03 02:42:54.308 00:06:00.363 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 02:48:08.327 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41486 10 6452 1 2025-11-03 02:49:08.727 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52312 10 6452 1 2025-11-03 02:50:09.107 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54200 10 6452 1 2025-11-03 02:51:09.473 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33622 10 6452 1 2025-11-03 02:51:54.246 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:51:54.255 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:51:54.510 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:51:54.465 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:51:54.593 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:52:09.875 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40570 10 6452 1 2025-11-03 02:47:54.309 00:06:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 02:53:10.281 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39714 10 6452 1 2025-11-03 02:54:10.681 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51162 10 6452 1 2025-11-03 02:49:54.313 00:06:00.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 02:55:11.105 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55964 10 6452 1 2025-11-03 02:56:11.517 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56040 10 6452 1 2025-11-03 02:56:54.398 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:56:54.547 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:56:54.628 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:56:54.508 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:56:54.711 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:57:11.945 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35498 10 6452 1 2025-11-03 02:58:12.365 00:00:10.738 TCP 1.101.0.1:3000 -> 23.104.0.1:56246 10 6452 1 Summary: total flows: 137, total bytes: 424769, total packets: 1023, avg bps: 878, avg pps: 0, avg bpp: 415 Time window: 2025-11-03 01:53:54 - 2025-11-03 02:58:23 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0039s User: 0.0010s Wall: 0.0022s flows/second: 61933.6 Runtime: 0.0022s