Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 17:59:08.300 00:00:10.777 TCP 1.101.0.1:3000 -> 23.104.0.1:41782 10 6452 1 2025-11-03 18:00:09.117 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:53804 10 6452 1 2025-11-03 17:56:54.647 00:05:00.371 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 18:01:09.486 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43890 10 6452 1 2025-11-03 18:02:12.565 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 18:02:12.709 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 18:02:12.505 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:02:12.483 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:02:12.578 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 18:02:09.890 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:41736 10 6452 1 2025-11-03 17:58:54.650 00:05:00.376 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 18:03:10.260 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54054 10 6452 1 2025-11-03 18:04:10.616 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33522 10 6452 1 2025-11-03 18:05:11.021 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56224 10 6452 1 2025-11-03 18:06:11.387 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:58894 10 6452 1 2025-11-03 18:02:54.649 00:05:00.400 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 18:07:12.801 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 18:07:12.913 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:07:12.669 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:07:12.876 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 18:07:12.752 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 18:07:11.833 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33078 10 6452 1 2025-11-03 18:08:12.260 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48150 10 6452 1 2025-11-03 18:04:54.652 00:05:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 18:09:12.671 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37456 10 6452 1 2025-11-03 18:10:13.101 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33284 10 6452 1 2025-11-03 18:11:13.506 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38764 10 6452 1 2025-11-03 18:12:12.774 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 18:12:12.891 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 18:12:12.937 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:12:12.692 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:12:12.933 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 18:12:13.907 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41092 12 6556 1 2025-11-03 18:08:54.649 00:05:00.402 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 18:13:14.327 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50902 10 6452 1 2025-11-03 18:14:14.725 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58510 10 6452 1 2025-11-03 18:10:54.653 00:05:00.397 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 18:15:15.135 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45176 10 6452 1 2025-11-03 18:16:15.501 00:00:13.968 TCP 1.101.0.1:3000 -> 23.104.0.1:33332 10 6452 1 2025-11-03 18:17:13.065 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 18:17:12.980 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:17:12.878 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:17:12.982 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 18:17:12.960 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 18:17:19.545 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43278 10 6452 1 2025-11-03 18:18:19.956 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37344 10 6452 1 2025-11-03 18:14:54.653 00:05:00.406 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 18:19:20.329 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38082 10 6452 1 2025-11-03 18:20:20.732 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49850 10 6452 1 2025-11-03 18:16:54.655 00:05:00.400 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 18:21:21.101 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38146 10 6452 1 2025-11-03 18:22:13.309 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 18:22:13.031 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 18:22:13.131 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 18:22:12.910 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:22:13.227 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:22:21.502 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50574 10 6452 1 2025-11-03 18:23:21.907 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:56216 10 6452 1 2025-11-03 18:24:22.276 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56588 10 6452 1 2025-11-03 18:20:54.654 00:05:00.406 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 18:25:22.674 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54556 10 6452 1 2025-11-03 18:26:23.099 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43076 10 6452 1 2025-11-03 18:22:54.656 00:05:00.401 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 18:27:13.520 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 18:27:13.257 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:27:13.478 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:27:13.217 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 18:27:13.561 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 18:27:23.502 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54580 10 6452 1 2025-11-03 18:28:23.909 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41236 10 6452 1 2025-11-03 18:29:24.318 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:59720 10 6452 1 2025-11-03 18:30:24.690 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45338 10 6452 1 2025-11-03 18:26:54.656 00:05:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 18:31:25.114 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50230 10 6452 1 2025-11-03 18:32:13.492 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 18:32:13.248 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 18:32:13.275 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:32:13.409 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:32:13.412 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 18:32:25.537 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:46948 10 6452 1 2025-11-03 18:28:54.660 00:05:00.399 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 18:33:25.953 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43120 10 6452 1 2025-11-03 18:34:26.361 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34564 10 6452 1 2025-11-03 18:35:26.729 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46690 10 6452 1 2025-11-03 18:36:27.141 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:54978 10 6452 1 2025-11-03 18:32:54.657 00:05:00.404 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 18:37:13.351 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 18:37:13.304 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:37:13.267 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:37:13.410 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 18:37:13.349 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 18:37:27.565 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36682 10 6452 1 2025-11-03 18:38:27.971 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54190 10 6452 1 2025-11-03 18:34:54.662 00:05:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 18:39:28.388 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56854 10 6452 1 2025-11-03 18:40:28.785 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47102 10 6452 1 2025-11-03 18:41:29.150 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58796 10 6452 1 2025-11-03 18:42:13.503 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 18:42:13.371 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:42:13.653 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:42:13.547 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 18:42:13.734 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 18:42:29.558 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49256 10 6452 1 2025-11-03 18:38:54.663 00:05:00.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 18:43:29.918 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57780 10 6452 1 2025-11-03 18:44:30.320 00:00:11.144 TCP 1.101.0.1:3000 -> 23.104.0.1:34742 10 6452 1 2025-11-03 18:40:54.668 00:05:00.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 18:45:31.503 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37220 10 6452 1 2025-11-03 18:46:31.906 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56758 10 6452 1 2025-11-03 18:47:13.756 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 18:47:13.550 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:47:13.459 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:47:13.711 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 18:47:13.542 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 18:47:32.310 00:00:14.588 TCP 1.101.0.1:3000 -> 23.104.0.1:46472 10 6452 1 2025-11-03 18:48:36.937 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59648 10 6452 1 2025-11-03 18:44:54.667 00:05:00.402 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 18:49:37.352 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57668 10 6452 1 2025-11-03 18:50:37.756 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:45504 10 6452 1 2025-11-03 18:46:54.670 00:05:00.396 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 18:51:38.180 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:43974 10 6452 1 2025-11-03 18:52:13.738 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 18:52:13.771 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:52:13.634 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:52:13.736 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 18:52:13.718 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 18:52:38.586 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:36074 10 6452 1 2025-11-03 18:53:38.952 00:00:11.005 TCP 1.101.0.1:3000 -> 23.104.0.1:37940 10 6452 1 2025-11-03 18:54:39.992 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36024 10 6452 1 2025-11-03 18:50:54.667 00:05:00.403 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 18:55:40.411 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54250 10 6452 1 2025-11-03 18:56:40.825 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55430 10 6452 1 2025-11-03 18:52:54.670 00:05:00.398 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 18:57:14.142 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 18:57:13.862 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 18:57:13.894 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:57:14.059 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 18:57:13.777 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 18:57:41.228 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:38360 10 6452 1 Summary: total flows: 139, total bytes: 410652, total packets: 1012, avg bps: 897, avg pps: 0, avg bpp: 405 Time window: 2025-11-03 17:56:54 - 2025-11-03 18:57:55 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0047s User: 0.0009s Wall: 0.0013s flows/second: 108851.4 Runtime: 0.0013s