Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 12:58:57.719 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:53990 10 6452 1 2025-11-03 12:59:58.136 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57922 10 6452 1 2025-11-03 13:00:58.536 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38722 10 6452 1 2025-11-03 12:56:54.539 00:06:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 13:02:06.650 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 13:02:06.646 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 13:02:06.413 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:02:06.568 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:02:06.641 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 13:01:58.952 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:54140 10 6452 1 2025-11-03 13:02:59.362 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52892 10 6452 1 2025-11-03 12:58:54.542 00:06:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 13:03:59.772 00:00:10.832 TCP 1.101.0.1:3000 -> 23.104.0.1:49498 10 6452 1 2025-11-03 13:05:00.642 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48088 10 6452 1 2025-11-03 13:06:00.997 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43146 10 6452 1 2025-11-03 13:07:06.778 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 13:07:06.931 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 13:07:06.800 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:07:06.696 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:07:06.695 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 13:07:01.410 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44292 10 6452 1 2025-11-03 13:08:01.811 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34048 10 6452 1 2025-11-03 13:03:54.539 00:06:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 13:09:02.219 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34534 10 6452 1 2025-11-03 13:10:02.620 00:00:15.532 TCP 1.101.0.1:3000 -> 23.104.0.1:54444 10 6452 1 2025-11-03 13:05:54.544 00:06:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 13:11:08.190 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42526 10 6452 1 2025-11-03 13:12:06.658 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 13:12:06.705 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:12:06.935 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:12:06.897 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 13:12:07.018 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 13:12:08.589 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40926 10 6452 1 2025-11-03 13:13:09.000 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52584 10 6452 1 2025-11-03 13:14:09.399 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44970 10 6452 1 2025-11-03 13:15:09.801 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51132 10 6452 1 2025-11-03 13:10:54.544 00:06:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 13:16:10.205 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41230 10 6452 1 2025-11-03 13:17:06.919 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 13:17:06.792 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:17:06.905 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:17:07.000 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 13:17:06.988 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 13:17:10.610 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34468 10 6452 1 2025-11-03 13:12:54.548 00:06:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 13:18:11.021 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50632 10 6452 1 2025-11-03 13:19:11.384 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44732 10 6452 1 2025-11-03 13:20:11.748 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:56266 13 13955 1 2025-11-03 13:21:12.233 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55450 10 6452 1 2025-11-03 13:22:07.354 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 13:22:06.957 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:22:07.266 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:22:07.150 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 13:22:07.349 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 13:22:12.637 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39208 10 6452 1 2025-11-03 13:17:54.545 00:06:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 13:23:13.077 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34436 10 6452 1 2025-11-03 13:24:13.439 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:54658 10 6452 1 2025-11-03 13:19:54.547 00:06:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 13:25:13.836 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:44986 10 6452 1 2025-11-03 13:26:14.263 00:00:10.619 TCP 1.101.0.1:3000 -> 23.104.0.1:51870 10 6452 1 2025-11-03 13:27:06.787 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 13:27:06.866 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:27:06.914 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:27:06.797 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 13:27:06.997 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 13:27:14.929 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:44778 10 6452 1 2025-11-03 13:28:15.355 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59418 10 6452 1 2025-11-03 13:29:15.762 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:56212 10 6452 1 2025-11-03 13:24:54.546 00:06:00.369 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 13:30:16.134 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50850 10 6452 1 2025-11-03 13:31:16.538 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39168 10 6452 1 2025-11-03 13:26:54.549 00:06:00.365 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 13:32:07.314 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 13:32:07.146 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:32:07.300 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:32:07.377 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 13:32:07.383 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 13:32:16.899 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:44140 10 6452 1 2025-11-03 13:33:17.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60748 10 6452 1 2025-11-03 13:34:17.720 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57324 10 6452 1 2025-11-03 13:35:18.132 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41332 10 6452 1 2025-11-03 13:36:18.552 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39732 10 6452 1 2025-11-03 13:31:54.549 00:06:00.369 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 13:37:08.033 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 13:37:07.951 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 13:37:07.842 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:37:07.949 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:37:07.670 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 13:37:18.953 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56306 10 6452 1 2025-11-03 13:38:19.314 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57528 10 6452 1 2025-11-03 13:33:54.553 00:06:00.363 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 13:39:19.715 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41068 10 6452 1 2025-11-03 13:40:20.136 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41904 10 6452 1 2025-11-03 13:41:20.545 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44700 10 6452 1 2025-11-03 13:42:07.246 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 13:42:07.287 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 13:42:07.330 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:42:07.163 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:42:07.164 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 13:42:20.954 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:45292 10 6452 1 2025-11-03 13:43:21.431 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51078 10 6452 1 2025-11-03 13:38:54.570 00:06:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 13:44:21.837 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:36220 10 6452 1 2025-11-03 13:45:22.218 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49280 10 6452 1 2025-11-03 13:40:54.572 00:06:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 13:46:22.621 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35626 10 6452 1 2025-11-03 13:47:07.368 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 13:47:07.564 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:47:07.534 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:47:07.538 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 13:47:07.618 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 13:47:23.033 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59066 10 6452 1 2025-11-03 13:48:23.438 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42922 10 6452 1 2025-11-03 13:49:23.842 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:46304 10 6452 1 2025-11-03 13:50:24.271 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60260 10 6452 1 2025-11-03 13:45:54.569 00:06:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 13:51:24.676 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:46040 10 6452 1 2025-11-03 13:52:07.745 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 13:52:07.643 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:52:07.633 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:52:07.631 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 13:52:07.716 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 13:52:25.111 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41708 10 6452 1 2025-11-03 13:47:54.571 00:06:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 13:53:25.474 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:51394 10 6452 1 2025-11-03 13:54:25.850 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:47866 10 6452 1 2025-11-03 13:55:26.292 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:59142 12 10375 1 2025-11-03 13:56:26.730 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49966 10 6452 1 2025-11-03 13:57:07.673 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 13:57:07.640 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:57:07.691 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 13:57:07.823 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 13:57:07.774 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 13:57:27.142 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38988 10 6452 1 2025-11-03 13:52:54.570 00:06:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 13:58:27.554 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43596 10 6452 1 Summary: total flows: 137, total bytes: 428303, total packets: 1023, avg bps: 920, avg pps: 0, avg bpp: 418 Time window: 2025-11-03 12:56:54 - 2025-11-03 13:58:54 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0041s User: 0.0016s Wall: 0.0015s flows/second: 89784.3 Runtime: 0.0015s