Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 15:53:54.619 00:06:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 15:59:18.949 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39948 10 6452 1 2025-11-03 16:00:19.360 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58004 10 6452 1 2025-11-03 16:01:19.718 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51030 10 6452 1 2025-11-03 16:02:10.643 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 16:02:10.338 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 16:02:10.097 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:02:10.559 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:02:10.432 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 16:02:20.133 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53184 10 6452 1 2025-11-03 16:03:20.548 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50250 10 6452 1 2025-11-03 15:58:54.617 00:06:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 16:04:20.952 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35700 10 6452 1 2025-11-03 16:05:21.354 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58434 10 6452 1 2025-11-03 16:00:54.621 00:06:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 16:06:21.762 00:00:10.513 TCP 1.101.0.1:3000 -> 23.104.0.1:46672 10 6452 1 2025-11-03 16:07:10.523 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 16:07:10.246 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 16:07:10.338 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:07:10.440 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:07:10.435 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 16:07:22.325 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55782 10 6452 1 2025-11-03 16:08:22.682 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:60830 10 6452 1 2025-11-03 16:09:23.113 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51666 10 6452 1 2025-11-03 16:10:23.478 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55498 10 6452 1 2025-11-03 16:05:54.621 00:06:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 16:11:23.843 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:35636 10 6452 1 2025-11-03 16:12:10.429 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 16:12:10.565 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 16:12:10.547 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:12:10.348 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:12:10.610 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 16:12:24.268 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49552 10 6452 1 2025-11-03 16:07:54.624 00:06:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 16:13:24.670 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44630 10 6452 1 2025-11-03 16:14:25.104 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:52696 10 6452 1 2025-11-03 16:15:25.532 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:37304 10 6452 1 2025-11-03 16:16:25.901 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43706 10 6452 1 2025-11-03 16:17:10.641 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 16:17:10.455 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:17:10.691 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:17:10.644 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 16:17:10.775 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 16:17:26.267 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58782 10 6452 1 2025-11-03 16:12:54.621 00:06:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 16:18:26.673 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33044 10 6452 1 2025-11-03 16:19:27.098 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51058 10 6452 1 2025-11-03 16:14:54.625 00:06:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 16:20:27.456 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35286 10 6452 1 2025-11-03 16:21:27.824 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34484 10 6452 1 2025-11-03 16:22:10.974 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 16:22:10.653 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:22:10.533 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:22:10.633 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 16:22:10.616 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 16:22:28.231 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44326 10 6452 1 2025-11-03 16:23:28.629 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35056 10 6452 1 2025-11-03 16:24:29.032 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46898 10 6452 1 2025-11-03 16:19:54.622 00:06:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 16:25:29.435 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38788 10 6452 1 2025-11-03 16:26:29.840 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:49956 10 6452 1 2025-11-03 16:21:54.626 00:06:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 16:27:10.913 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:27:10.921 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:27:11.005 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 16:27:11.067 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 16:27:11.167 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 16:27:30.271 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:32994 10 6452 1 2025-11-03 16:28:30.629 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52012 10 6452 1 2025-11-03 16:29:30.995 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51398 10 6452 1 2025-11-03 16:30:31.397 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42154 10 6452 1 2025-11-03 16:31:31.797 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45932 10 6452 1 2025-11-03 16:26:54.624 00:06:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 16:32:10.946 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 16:32:10.858 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 16:32:10.897 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:32:10.984 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:32:11.068 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 16:32:32.155 00:00:10.852 TCP 1.101.0.1:3000 -> 23.104.0.1:35632 10 6452 1 2025-11-03 16:33:33.041 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33654 10 6452 1 2025-11-03 16:28:54.628 00:06:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 16:34:33.442 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43438 10 6452 1 2025-11-03 16:35:33.846 00:00:10.763 TCP 1.101.0.1:3000 -> 23.104.0.1:43916 10 6452 1 2025-11-03 16:36:34.648 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38458 10 6452 1 2025-11-03 16:37:10.923 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 16:37:10.872 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:37:11.082 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:37:11.077 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 16:37:11.164 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 16:37:35.060 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:53334 10 6452 1 2025-11-03 16:38:35.469 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56918 10 6452 1 2025-11-03 16:33:54.626 00:06:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 16:39:35.870 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36792 10 6452 1 2025-11-03 16:40:36.279 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47752 10 6452 1 2025-11-03 16:35:54.629 00:06:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 16:41:36.681 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57856 10 6452 1 2025-11-03 16:42:10.786 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:42:11.348 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 16:42:11.268 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 16:42:11.265 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:42:11.080 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 16:42:37.113 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41134 10 6452 1 2025-11-03 16:43:37.472 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36306 10 6452 1 2025-11-03 16:44:37.832 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:60734 10 6452 1 2025-11-03 16:45:38.287 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37818 10 6452 1 2025-11-03 16:40:54.628 00:06:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 16:46:38.697 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34100 10 6452 1 2025-11-03 16:47:11.443 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 16:47:11.524 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:47:11.580 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:47:11.447 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 16:47:11.661 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 16:47:39.116 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39548 10 6452 1 2025-11-03 16:42:54.634 00:06:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 16:48:39.519 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38492 10 6452 1 2025-11-03 16:49:39.922 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:35958 10 6452 1 2025-11-03 16:50:40.354 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40832 10 6452 1 2025-11-03 16:51:40.719 00:00:10.630 TCP 1.101.0.1:3000 -> 23.104.0.1:56378 10 6452 1 2025-11-03 16:52:11.254 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 16:52:11.108 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:52:11.079 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:52:11.320 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 16:52:11.161 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 16:52:41.388 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49944 10 6452 1 2025-11-03 16:47:54.630 00:06:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-03 16:53:41.794 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47842 10 6452 1 2025-11-03 16:54:42.196 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34940 10 6452 1 2025-11-03 16:49:54.633 00:06:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-03 16:55:42.605 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:46594 10 6452 1 2025-11-03 16:56:42.965 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36060 10 6452 1 2025-11-03 16:57:11.386 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 16:57:11.348 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:57:11.229 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 16:57:11.379 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 16:57:11.322 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 16:57:43.370 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40790 10 6452 1 Summary: total flows: 136, total bytes: 410425, total packets: 1008, avg bps: 855, avg pps: 0, avg bpp: 407 Time window: 2025-11-03 15:53:54 - 2025-11-03 16:57:53 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0052s User: 0.0010s Wall: 0.0024s flows/second: 57191.2 Runtime: 0.0024s