Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 08:59:11.967 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37902 10 6452 1 2025-11-04 09:00:12.370 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42508 10 6452 1 2025-11-04 08:56:54.974 00:05:00.369 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 09:01:12.779 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51688 10 6452 1 2025-11-04 09:02:13.191 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53680 10 6452 1 2025-11-04 09:02:30.872 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 09:02:30.786 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:02:30.702 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 09:02:30.710 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 09:02:30.790 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 08:58:54.976 00:05:00.365 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 09:03:13.599 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38244 10 6452 1 2025-11-04 09:04:14.005 00:00:10.653 TCP 1.101.0.1:3000 -> 23.104.0.1:44160 10 6452 1 2025-11-04 09:05:14.696 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:37622 10 6452 1 2025-11-04 09:06:15.063 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54102 10 6452 1 2025-11-04 09:02:54.974 00:05:00.369 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 09:07:15.478 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59064 10 6452 1 2025-11-04 09:07:30.689 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:07:30.762 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:07:30.770 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 09:07:30.846 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 09:07:31.041 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 09:08:15.891 00:00:18.143 TCP 1.101.0.1:3000 -> 23.104.0.1:34874 10 6452 1 2025-11-04 09:04:54.977 00:05:00.364 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 09:09:24.103 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:36634 10 6452 1 2025-11-04 09:10:24.465 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57130 10 6452 1 2025-11-04 09:11:24.872 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:46720 12 10369 1 2025-11-04 09:12:30.968 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 09:12:30.731 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:12:30.779 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:12:30.958 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 09:12:30.861 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 09:12:25.356 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46758 10 6452 1 2025-11-04 09:08:54.978 00:05:00.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 09:13:25.759 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:51660 10 6452 1 2025-11-04 09:14:26.183 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54136 10 6452 1 2025-11-04 09:10:54.981 00:05:00.366 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 09:15:26.541 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34274 10 6452 1 2025-11-04 09:16:26.943 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54932 10 6452 1 2025-11-04 09:17:31.010 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 09:17:31.103 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:17:31.192 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:17:31.094 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 09:17:31.274 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 09:17:27.357 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60282 10 6452 1 2025-11-04 09:18:27.772 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53092 10 6452 1 2025-11-04 09:14:54.981 00:05:00.370 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 09:19:28.143 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36722 10 6452 1 2025-11-04 09:20:28.550 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54874 10 6452 1 2025-11-04 09:16:54.984 00:05:00.364 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 09:21:28.955 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36494 10 6452 1 2025-11-04 09:22:31.630 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 09:22:31.420 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:22:31.277 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:22:31.549 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 09:22:31.361 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 09:22:29.365 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44766 10 6452 1 2025-11-04 09:23:29.726 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:40240 10 6452 1 2025-11-04 09:20:54.984 00:03:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 8 492 1 2025-11-04 09:24:30.115 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39344 10 6452 1 2025-11-04 09:25:30.517 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54538 10 6452 1 2025-11-04 09:26:30.918 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47952 10 6452 1 2025-11-04 09:22:54.986 00:05:00.363 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 09:27:30.930 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:27:31.288 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 09:27:31.087 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:27:31.178 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 09:27:31.170 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 09:27:31.318 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59286 10 6452 1 2025-11-04 09:28:31.727 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37802 10 6452 1 2025-11-04 09:24:54.985 00:05:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 09:29:32.141 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44276 10 6452 1 2025-11-04 09:30:32.540 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42224 10 6452 1 2025-11-04 09:31:32.942 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:41446 12 10375 1 2025-11-04 09:32:32.186 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 09:32:31.871 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:32:32.059 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:32:32.352 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 09:32:32.142 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 09:32:33.382 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52038 10 6452 1 2025-11-04 09:28:54.989 00:05:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 09:33:33.793 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51240 10 6452 1 2025-11-04 09:34:34.198 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:48564 10 6452 1 2025-11-04 09:30:54.988 00:05:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 09:35:34.625 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50318 10 6452 1 2025-11-04 09:36:35.053 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:36510 10 6452 1 2025-11-04 09:37:31.560 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 09:37:31.411 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:37:31.375 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:37:31.439 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 09:37:31.458 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 09:37:35.496 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:40292 10 6452 1 2025-11-04 09:38:35.945 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33758 10 6452 1 2025-11-04 09:34:54.992 00:05:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 09:39:36.354 00:00:10.974 TCP 1.101.0.1:3000 -> 23.104.0.1:60968 10 6452 1 2025-11-04 09:40:37.363 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50938 10 6452 1 2025-11-04 09:36:54.989 00:05:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 09:41:37.764 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53740 10 6452 1 2025-11-04 09:42:31.574 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 09:42:31.406 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:42:31.530 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:42:31.528 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 09:42:31.612 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 09:42:38.129 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48290 10 6452 1 2025-11-04 09:43:38.533 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:50028 10 6452 1 2025-11-04 09:44:38.933 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35214 10 6452 1 2025-11-04 09:40:54.992 00:05:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 09:45:39.350 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47974 10 6452 1 2025-11-04 09:46:39.765 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:48342 10 6452 1 2025-11-04 09:42:54.990 00:05:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 09:47:31.733 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 09:47:31.744 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 09:47:31.663 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:47:31.652 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:47:31.648 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 09:47:40.183 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44736 10 6452 1 2025-11-04 09:48:40.587 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50622 10 6452 1 2025-11-04 09:49:40.998 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47622 10 6452 1 2025-11-04 09:46:54.995 00:05:00.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 09:50:41.399 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60466 10 6452 1 2025-11-04 09:51:41.808 00:00:17.255 TCP 1.101.0.1:3000 -> 23.104.0.1:59506 10 6452 1 2025-11-04 09:52:31.831 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 09:52:31.825 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 09:52:31.496 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:52:31.749 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:52:31.825 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 09:48:54.994 00:05:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 09:52:49.117 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34806 10 6452 1 2025-11-04 09:53:49.532 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48824 10 6452 1 2025-11-04 09:54:49.933 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:51132 10 6452 1 2025-11-04 09:54:55.000 00:01:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-04 09:55:50.359 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40268 10 6452 1 2025-11-04 09:52:54.998 00:05:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 11 667 1 2025-11-04 09:56:50.723 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50340 10 6452 1 2025-11-04 09:57:31.883 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 09:57:31.673 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:57:31.927 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 09:57:31.771 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 09:57:32.011 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 09:57:51.123 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35774 10 6452 1 Summary: total flows: 140, total bytes: 418317, total packets: 1013, avg bps: 912, avg pps: 0, avg bpp: 412 Time window: 2025-11-04 08:56:54 - 2025-11-04 09:58:01 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0048s User: 0.0008s Wall: 0.0014s flows/second: 97428.7 Runtime: 0.0015s