Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-06 14:59:06.636 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50530 10 6452 1 2025-11-06 15:00:07.047 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36182 10 6452 1 2025-11-06 15:01:07.452 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54286 10 6452 1 2025-11-06 15:02:07.854 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:46858 10 6452 1 2025-11-06 14:57:56.231 00:06:00.167 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 15:03:08.233 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:57406 10 6452 1 2025-11-06 15:03:35.916 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 15:03:35.650 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 15:03:35.743 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:03:35.834 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:03:35.803 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 15:04:08.605 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42220 10 6452 1 2025-11-06 14:59:56.228 00:06:00.173 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 15:05:09.007 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54332 10 6452 1 2025-11-06 15:06:09.419 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55934 10 6452 1 2025-11-06 15:07:09.826 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:57146 12 10375 1 2025-11-06 15:08:10.307 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38854 10 6452 1 2025-11-06 15:08:35.961 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 15:08:35.741 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:08:35.949 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:08:35.966 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 15:08:36.031 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 15:09:10.710 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60212 10 6452 1 2025-11-06 15:04:56.232 00:06:00.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 15:10:11.099 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52944 10 6452 1 2025-11-06 15:11:11.503 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47288 10 6452 1 2025-11-06 15:06:56.229 00:06:00.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 15:12:11.906 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:39668 14 10479 1 2025-11-06 15:13:12.389 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37744 10 6452 1 2025-11-06 15:13:35.963 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 15:13:35.539 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:13:35.973 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 15:13:35.998 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:13:36.081 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 15:14:12.790 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50922 10 6452 1 2025-11-06 15:15:13.155 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40862 10 6452 1 2025-11-06 15:16:13.574 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53618 10 6452 1 2025-11-06 15:11:56.235 00:06:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 15:17:13.996 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38606 10 6452 1 2025-11-06 15:18:14.363 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43310 10 6452 1 2025-11-06 15:18:35.941 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 15:18:35.975 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:18:35.941 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:18:36.113 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 15:18:36.025 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 15:13:56.233 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 15:19:14.776 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52156 10 6452 1 2025-11-06 15:20:15.182 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35926 10 6452 1 2025-11-06 15:21:15.584 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59582 10 6452 1 2025-11-06 15:22:15.987 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51170 10 6452 1 2025-11-06 15:23:16.406 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47282 10 6452 1 2025-11-06 15:23:36.554 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 15:23:36.383 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 15:23:36.542 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:23:36.472 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:23:36.574 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 15:18:56.242 00:06:00.165 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 15:24:16.810 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36330 10 6452 1 2025-11-06 15:25:17.216 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57662 10 6452 1 2025-11-06 15:20:56.237 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 15:26:17.578 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51444 10 6452 1 2025-11-06 15:27:17.940 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54628 10 6452 1 2025-11-06 15:28:18.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34184 10 6452 1 2025-11-06 15:28:36.365 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 15:28:36.196 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 15:28:36.308 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:28:36.283 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:28:36.332 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 15:29:18.775 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42990 10 6452 1 2025-11-06 15:30:19.195 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46750 10 6452 1 2025-11-06 15:25:56.242 00:06:00.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 15:31:19.596 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51982 10 6452 1 2025-11-06 15:32:20.034 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40662 10 6452 1 2025-11-06 15:27:56.239 00:06:00.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 15:33:20.439 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51646 10 6452 1 2025-11-06 15:33:36.619 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 15:33:36.359 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 15:33:36.494 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:33:36.536 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:33:36.538 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 15:34:20.843 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:52218 10 6452 1 2025-11-06 15:35:21.278 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53316 10 6452 1 2025-11-06 15:36:21.681 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53110 10 6452 1 2025-11-06 15:37:22.050 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:54682 12 10375 1 2025-11-06 15:32:56.243 00:06:00.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 15:38:22.539 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44186 10 6452 1 2025-11-06 15:38:36.476 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 15:38:36.260 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:38:36.485 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:38:36.481 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 15:38:36.565 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 15:39:22.944 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49366 10 6452 1 2025-11-06 15:34:56.249 00:06:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 15:40:23.359 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36126 10 6452 1 2025-11-06 15:41:23.760 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:54442 10 6452 1 2025-11-06 15:42:24.183 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50238 10 6452 1 2025-11-06 15:43:36.526 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 15:43:24.589 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33218 10 6452 1 2025-11-06 15:43:36.540 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 15:43:36.486 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:43:36.445 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:43:36.438 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 15:44:24.995 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38806 10 6452 1 2025-11-06 15:39:56.252 00:06:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 15:45:25.401 00:00:10.589 TCP 1.101.0.1:3000 -> 23.104.0.1:33438 10 6452 1 2025-11-06 15:46:26.036 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33456 10 6452 1 2025-11-06 15:41:56.251 00:06:00.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 15:47:26.400 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34772 10 6452 1 2025-11-06 15:48:36.608 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 15:48:36.635 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 15:48:36.611 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:48:36.526 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:48:36.550 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 15:48:26.805 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:48240 10 6452 1 2025-11-06 15:49:27.172 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41892 10 6452 1 2025-11-06 15:50:27.533 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42374 10 6452 1 2025-11-06 15:51:27.939 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:36132 10 6452 1 2025-11-06 15:46:56.255 00:06:00.164 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-06 15:52:28.363 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43282 10 6452 1 2025-11-06 15:53:36.843 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 15:53:36.824 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 15:53:36.529 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:53:36.760 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:53:36.759 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 15:53:28.764 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55968 10 6452 1 2025-11-06 15:48:56.252 00:06:00.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-06 15:54:29.175 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56078 10 6452 1 2025-11-06 15:55:29.581 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37878 10 6452 1 2025-11-06 15:56:29.984 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47056 10 6452 1 2025-11-06 15:57:30.395 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33582 10 6452 1 2025-11-06 15:58:36.950 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-06 15:58:36.922 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:58:36.848 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-06 15:58:36.942 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-06 15:58:36.930 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-06 15:58:30.755 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55588 10 6452 1 Summary: total flows: 136, total bytes: 427889, total packets: 1012, avg bps: 939, avg pps: 0, avg bpp: 422 Time window: 2025-11-06 14:57:56 - 2025-11-06 15:58:41 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0045s User: 0.0009s Wall: 0.0041s flows/second: 33430.5 Runtime: 0.0041s