Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 04:59:06.956 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52474 10 6452 1 2025-11-10 04:54:58.281 00:06:00.015 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 04:54:58.292 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 05:00:19.111 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:00:19.089 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:00:19.171 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 05:00:07.358 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43246 10 6452 1 2025-11-10 05:00:19.309 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 05:00:19.172 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 05:01:07.768 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:38106 10 6452 1 2025-11-10 05:02:08.178 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39492 10 6452 1 2025-11-10 05:03:08.582 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59858 10 6452 1 2025-11-10 05:04:08.945 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:37100 10 6452 1 2025-11-10 05:05:19.578 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 05:05:19.223 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 05:05:19.261 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:05:19.495 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:05:19.291 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 05:05:09.363 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59898 10 6452 1 2025-11-10 05:06:09.763 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36942 10 6452 1 2025-11-10 05:01:58.294 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 05:01:58.284 00:06:00.013 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 05:07:10.174 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35142 10 6452 1 2025-11-10 05:08:10.580 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:43378 12 10369 1 2025-11-10 05:09:11.068 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32920 10 6452 1 2025-11-10 05:10:19.345 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 05:10:19.353 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 05:10:19.483 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:10:19.261 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:10:19.345 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 05:10:11.465 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35230 10 6452 1 2025-11-10 05:11:11.866 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53592 10 6452 1 2025-11-10 05:12:12.287 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55926 10 6452 1 2025-11-10 05:13:12.686 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57454 10 6452 1 2025-11-10 05:08:58.284 00:06:00.029 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 05:08:58.295 00:06:00.016 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 05:14:13.104 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53522 10 6452 1 2025-11-10 05:15:19.354 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 05:15:19.372 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 05:15:19.294 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:15:19.272 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:15:19.364 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 05:15:13.506 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39692 10 6452 1 2025-11-10 05:16:13.910 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39134 10 6452 1 2025-11-10 05:17:14.314 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52504 10 6452 1 2025-11-10 05:18:14.720 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34486 10 6452 1 2025-11-10 05:19:15.130 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53962 10 6452 1 2025-11-10 05:20:19.495 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 05:20:19.413 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:20:19.498 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 05:20:19.565 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 05:20:19.171 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:20:15.493 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41730 10 6452 1 2025-11-10 05:15:58.310 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 05:15:58.287 00:06:00.030 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 05:21:15.911 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60718 10 6452 1 2025-11-10 05:22:16.334 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48160 10 6452 1 2025-11-10 05:23:16.701 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57462 10 6452 1 2025-11-10 05:24:17.114 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44792 10 6452 1 2025-11-10 05:25:19.757 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 05:25:19.683 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:25:19.755 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:25:20.050 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 05:25:19.838 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 05:25:17.480 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44388 10 6452 1 2025-11-10 05:26:17.901 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40196 10 6452 1 2025-11-10 05:27:18.327 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37876 10 6452 1 2025-11-10 05:22:58.314 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 05:22:58.289 00:06:00.030 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 05:28:18.690 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37482 10 6452 1 2025-11-10 05:29:19.106 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:43214 10 6452 1 2025-11-10 05:30:19.609 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 05:30:19.590 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:30:19.606 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:30:19.966 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 05:30:19.688 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 05:30:19.472 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36640 10 6452 1 2025-11-10 05:31:19.878 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44736 10 6452 1 2025-11-10 05:32:20.279 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47164 10 6452 1 2025-11-10 05:33:20.691 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:59288 10 6452 1 2025-11-10 05:34:21.061 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58060 10 6452 1 2025-11-10 05:29:58.293 00:06:00.025 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 05:29:58.316 00:06:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 05:35:19.903 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 05:35:19.862 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:35:19.908 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:35:19.912 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 05:35:19.992 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 05:35:21.433 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59782 10 6452 1 2025-11-10 05:36:21.847 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:43860 10 6452 1 2025-11-10 05:37:22.277 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43200 10 6452 1 2025-11-10 05:38:22.678 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:50096 10 6452 1 2025-11-10 05:39:23.117 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42224 12 6556 1 2025-11-10 05:40:19.697 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 05:40:19.810 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 05:40:19.515 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:40:19.615 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:40:19.805 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 05:40:23.523 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57072 10 6452 1 2025-11-10 05:41:23.934 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53808 10 6452 1 2025-11-10 05:36:58.294 00:06:00.027 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 05:36:58.317 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 05:42:24.356 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37820 10 6452 1 2025-11-10 05:43:24.725 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:36440 10 6452 1 2025-11-10 05:44:25.140 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54338 10 6452 1 2025-11-10 05:45:20.087 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 05:45:20.144 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 05:45:19.982 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:45:20.006 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:45:19.998 00:00:00.038 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 05:45:25.537 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59142 10 6452 1 2025-11-10 05:46:25.900 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45622 10 6452 1 2025-11-10 05:47:26.270 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36276 10 6452 1 2025-11-10 05:48:26.673 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58322 10 6452 1 2025-11-10 05:43:58.320 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 05:43:58.298 00:06:00.027 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 05:49:27.097 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45346 10 6452 1 2025-11-10 05:50:20.206 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 05:50:20.195 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:50:20.265 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:50:19.950 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 05:50:20.347 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 05:50:27.499 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35742 10 6452 1 2025-11-10 05:51:27.864 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40570 10 6452 1 2025-11-10 05:52:28.287 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58636 10 6452 1 2025-11-10 05:53:28.702 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43726 10 6452 1 2025-11-10 05:54:29.107 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34512 10 6452 1 2025-11-10 05:55:20.145 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 05:55:19.908 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:55:20.044 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 05:55:20.211 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 05:55:20.127 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 05:55:29.509 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:40970 10 6452 1 2025-11-10 05:50:58.298 00:06:00.031 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 05:50:58.323 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-11-10 05:56:29.954 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34164 10 6452 1 2025-11-10 05:57:30.362 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40114 10 6452 1 2025-11-10 05:58:30.762 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:32934 10 6452 1 Summary: total flows: 138, total bytes: 418483, total packets: 973, avg bps: 875, avg pps: 0, avg bpp: 430 Time window: 2025-11-10 04:54:58 - 2025-11-10 05:58:41 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0036s User: 0.0027s Wall: 0.0020s flows/second: 70441.0 Runtime: 0.0020s