Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 11:53:54.516 00:06:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 11:59:32.510 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54634 10 6452 1 2025-11-03 12:00:32.918 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50742 10 6452 1 2025-11-03 11:55:54.519 00:06:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 12:01:33.321 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58796 10 6452 1 2025-11-03 12:02:05.453 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 12:02:05.493 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 12:02:05.443 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:02:05.370 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:02:05.527 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 12:02:33.720 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56176 10 6452 1 2025-11-03 12:03:34.139 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44436 10 6452 1 2025-11-03 12:04:34.542 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38782 10 6452 1 2025-11-03 12:05:34.955 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59862 10 6452 1 2025-11-03 12:00:54.519 00:06:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 12:06:35.362 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46348 10 6452 1 2025-11-03 12:07:05.825 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 12:07:05.693 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 12:07:05.587 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:07:05.744 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:07:05.694 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 12:07:35.766 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:33390 10 6452 1 2025-11-03 12:02:54.523 00:06:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 12:08:36.186 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39688 12 6556 1 2025-11-03 12:09:36.595 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33820 10 6452 1 2025-11-03 12:10:37.002 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50174 10 6452 1 2025-11-03 12:11:37.405 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41752 10 6452 1 2025-11-03 12:12:05.626 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 12:12:05.677 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:12:05.564 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:12:05.562 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 12:12:05.646 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 12:12:37.767 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49938 10 6452 1 2025-11-03 12:07:54.520 00:06:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 12:13:38.181 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46118 10 6452 1 2025-11-03 12:14:38.591 00:00:11.087 TCP 1.101.0.1:3000 -> 23.104.0.1:43164 10 6452 1 2025-11-03 12:09:54.523 00:06:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 12:15:39.715 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36710 10 6452 1 2025-11-03 12:16:40.125 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55966 10 6452 1 2025-11-03 12:17:05.719 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 12:17:05.640 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:17:05.779 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:17:05.728 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 12:17:05.860 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 12:17:40.533 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:39724 10 6452 1 2025-11-03 12:18:41.004 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50662 10 6452 1 2025-11-03 12:14:54.526 00:06:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 12:19:41.408 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60922 10 6452 1 2025-11-03 12:20:41.806 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39810 10 6452 1 2025-11-03 12:21:42.211 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:46330 10 6452 1 2025-11-03 12:16:54.528 00:06:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 12:22:05.875 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 12:22:05.792 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:22:05.793 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:22:05.597 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 12:22:06.007 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 12:22:42.637 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44988 10 6452 1 2025-11-03 12:23:43.038 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:54800 10 6452 1 2025-11-03 12:24:43.470 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50128 10 6452 1 2025-11-03 12:25:43.834 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46818 10 6452 1 2025-11-03 12:21:54.526 00:06:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 12:26:44.254 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57466 10 6452 1 2025-11-03 12:27:05.911 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:27:05.957 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:27:06.039 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 12:27:06.007 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 12:27:06.008 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 12:27:44.657 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46864 10 6452 1 2025-11-03 12:28:45.070 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46570 10 6452 1 2025-11-03 12:23:54.531 00:06:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 12:29:45.479 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35866 10 6452 1 2025-11-03 12:30:45.839 00:00:11.001 TCP 1.101.0.1:3000 -> 23.104.0.1:45268 10 6452 1 2025-11-03 12:31:46.879 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48170 10 6452 1 2025-11-03 12:32:06.392 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 12:32:06.374 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:32:06.012 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:32:06.224 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 12:32:06.093 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 12:32:47.296 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56796 10 6452 1 2025-11-03 12:28:54.530 00:06:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 12:33:47.658 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57104 10 6452 1 2025-11-03 12:34:48.069 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37880 10 6452 1 2025-11-03 12:30:54.533 00:06:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 12:35:48.470 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36642 10 6452 1 2025-11-03 12:36:48.877 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58280 10 6452 1 2025-11-03 12:37:05.802 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:37:05.882 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 12:37:06.180 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 12:37:06.227 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:37:06.310 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 12:37:49.283 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34782 12 6556 1 2025-11-03 12:38:49.688 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54736 10 6452 1 2025-11-03 12:39:50.118 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44526 10 6452 1 2025-11-03 12:35:54.530 00:06:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 12:40:50.519 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54226 10 6452 1 2025-11-03 12:41:50.882 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52302 10 6452 1 2025-11-03 12:42:06.336 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 12:42:06.310 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:42:06.335 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:42:06.118 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 12:42:06.418 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 12:37:54.535 00:06:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 12:42:51.244 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44258 10 6452 1 2025-11-03 12:43:51.609 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48336 10 6452 1 2025-11-03 12:44:52.013 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49458 10 6452 1 2025-11-03 12:45:52.430 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42654 10 6452 1 2025-11-03 12:46:52.832 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:51240 10 6452 1 2025-11-03 12:47:06.458 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 12:47:06.375 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 12:47:06.096 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:47:06.375 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:47:06.202 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 12:42:54.533 00:06:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 12:47:53.226 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33846 10 6452 1 2025-11-03 12:48:53.639 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60266 10 6452 1 2025-11-03 12:44:54.538 00:06:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 12:49:54.075 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48524 12 6556 1 2025-11-03 12:50:54.486 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53020 10 6452 1 2025-11-03 12:51:54.896 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:41756 10 6452 1 2025-11-03 12:52:06.441 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 12:52:06.459 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:52:06.440 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:52:06.441 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 12:52:06.524 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 12:52:55.321 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41604 10 6452 1 2025-11-03 12:53:55.721 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60796 10 6452 1 2025-11-03 12:49:54.539 00:06:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 12:54:56.134 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55106 10 6452 1 2025-11-03 12:55:56.493 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36892 10 6452 1 2025-11-03 12:51:54.540 00:06:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 12:57:07.188 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 12:56:56.896 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:49040 12 6556 1 2025-11-03 12:57:06.585 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:57:06.994 00:00:00.044 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 12:57:06.994 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 12:57:07.076 00:00:00.045 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 12:57:57.320 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42410 10 6452 1 Summary: total flows: 137, total bytes: 411702, total packets: 1030, avg bps: 854, avg pps: 0, avg bpp: 399 Time window: 2025-11-03 11:53:54 - 2025-11-03 12:58:07 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0048s User: 0.0010s Wall: 0.0025s flows/second: 54194.1 Runtime: 0.0025s