Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 03:59:39.321 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37142 10 6452 1 2025-11-03 04:00:39.723 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47766 10 6452 1 2025-11-03 04:01:40.131 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39764 10 6452 1 2025-11-03 04:01:55.821 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:01:55.862 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:01:55.947 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 04:01:56.026 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 04:01:56.083 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 04:02:40.493 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41092 10 6452 1 2025-11-03 03:57:54.334 00:06:00.361 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 04:03:40.893 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43686 10 6452 1 2025-11-03 04:04:41.264 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:32862 10 6452 1 2025-11-03 03:59:54.338 00:06:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 04:05:41.664 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54198 10 6452 1 2025-11-03 04:06:55.889 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:06:55.875 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 04:06:42.095 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36110 10 6452 1 2025-11-03 04:06:55.972 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 04:06:56.049 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 04:06:56.081 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:07:42.498 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49874 10 6452 1 2025-11-03 04:08:42.905 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41672 12 6556 1 2025-11-03 04:09:43.314 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47668 10 6452 1 2025-11-03 04:04:54.335 00:06:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 04:10:43.692 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53922 10 6452 1 2025-11-03 04:11:44.115 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51034 10 6452 1 2025-11-03 04:11:55.919 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:11:55.933 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 04:06:54.341 00:06:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 04:11:56.184 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 04:11:55.995 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 04:11:56.101 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:12:44.517 00:00:16.305 TCP 1.101.0.1:3000 -> 23.104.0.1:48654 10 6452 1 2025-11-03 04:13:50.859 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49124 10 6452 1 2025-11-03 04:14:51.283 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:58466 10 6452 1 2025-11-03 04:15:51.644 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53494 10 6452 1 2025-11-03 04:16:55.917 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:11:54.342 00:06:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 04:16:56.270 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 04:16:56.081 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 04:16:56.182 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:16:56.186 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 04:16:52.010 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52514 10 6452 1 2025-11-03 04:17:52.379 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54942 10 6452 1 2025-11-03 04:13:54.344 00:06:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 04:18:52.784 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38596 10 6452 1 2025-11-03 04:19:53.147 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52270 10 6452 1 2025-11-03 04:20:53.548 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44232 10 6452 1 2025-11-03 04:21:56.318 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 04:21:56.228 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 04:21:56.164 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:21:56.238 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:21:56.153 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 04:21:53.947 00:00:10.724 TCP 1.101.0.1:3000 -> 23.104.0.1:48336 10 6452 1 2025-11-03 04:22:54.714 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54898 10 6452 1 2025-11-03 04:18:54.344 00:06:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 04:23:55.117 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57132 10 6452 1 2025-11-03 04:24:55.518 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53748 10 6452 1 2025-11-03 04:20:54.345 00:06:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 04:25:55.879 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48054 10 6452 1 2025-11-03 04:26:56.672 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 04:26:56.382 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 04:26:56.384 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:26:56.591 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:26:56.467 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 04:26:56.238 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55740 10 6452 1 2025-11-03 04:27:56.599 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47794 10 6452 1 2025-11-03 04:28:57.008 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49938 10 6452 1 2025-11-03 04:29:57.405 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43342 10 6452 1 2025-11-03 04:25:54.347 00:06:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 04:30:57.814 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52072 10 6452 1 2025-11-03 04:31:56.350 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 04:31:56.508 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:31:56.540 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:31:56.348 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 04:31:56.623 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 04:31:58.216 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38582 10 6452 1 2025-11-03 04:27:54.345 00:06:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 04:32:58.612 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52182 10 6452 1 2025-11-03 04:33:58.974 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44060 10 6452 1 2025-11-03 04:34:59.395 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:46482 10 6452 1 2025-11-03 04:35:59.777 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57122 10 6452 1 2025-11-03 04:36:56.568 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 04:36:56.580 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:36:56.730 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:36:56.576 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 04:36:56.814 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 04:37:00.182 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40692 10 6452 1 2025-11-03 04:32:54.350 00:06:00.361 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 04:38:00.598 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43744 10 6452 1 2025-11-03 04:39:00.964 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:39622 10 6452 1 2025-11-03 04:34:54.356 00:06:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 04:40:01.335 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:34302 10 6452 1 2025-11-03 04:41:01.710 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47248 10 6452 1 2025-11-03 04:41:56.647 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 04:41:56.552 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:41:56.354 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:41:56.737 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 04:41:56.438 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 04:42:02.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49600 10 6452 1 2025-11-03 04:43:02.513 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54864 10 6452 1 2025-11-03 04:44:02.877 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55410 10 6452 1 2025-11-03 04:39:54.354 00:06:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 04:45:03.238 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58088 10 6452 1 2025-11-03 04:46:03.639 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56072 10 6452 1 2025-11-03 04:41:54.357 00:06:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 04:46:56.637 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 04:46:56.576 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:46:56.536 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:46:56.630 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 04:46:56.619 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 04:47:04.039 00:00:10.654 TCP 1.101.0.1:3000 -> 23.104.0.1:48068 10 6452 1 2025-11-03 04:48:04.731 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58942 10 6452 1 2025-11-03 04:49:05.139 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60034 10 6452 1 2025-11-03 04:50:05.500 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56124 10 6452 1 2025-11-03 04:51:05.902 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46090 10 6452 1 2025-11-03 04:51:57.063 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 04:51:56.905 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:51:56.918 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:51:56.908 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 04:46:54.356 00:06:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 04:51:57.002 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 04:52:06.307 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56096 10 6452 1 2025-11-03 04:53:06.703 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47782 10 6452 1 2025-11-03 04:48:54.359 00:06:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 04:54:07.113 00:00:11.196 TCP 1.101.0.1:3000 -> 23.104.0.1:40412 10 6452 1 2025-11-03 04:55:08.346 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51162 10 6452 1 2025-11-03 04:56:08.749 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55256 10 6452 1 2025-11-03 04:56:57.199 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 04:56:56.876 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:56:57.156 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 04:56:57.080 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 04:56:57.238 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 04:57:09.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53232 10 6452 1 2025-11-03 04:58:09.515 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51508 10 6452 1 Summary: total flows: 135, total bytes: 409668, total packets: 996, avg bps: 903, avg pps: 0, avg bpp: 411 Time window: 2025-11-03 03:57:54 - 2025-11-03 04:58:19 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0040s User: 0.0010s Wall: 0.0022s flows/second: 60917.8 Runtime: 0.0022s