Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 01:53:59.338 00:06:00.127 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 01:58:53.706 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49544 10 6452 1 2025-11-12 01:59:54.118 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33408 10 6452 1 2025-11-12 02:00:54.523 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45518 10 6452 1 2025-11-12 02:01:13.219 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:01:13.297 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:01:13.277 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:01:13.137 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:01:13.231 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:01:54.928 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:56858 10 6452 1 2025-11-12 02:02:55.356 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45998 10 6452 1 2025-11-12 02:03:55.758 00:00:10.692 TCP 1.101.0.1:3000 -> 23.104.0.1:52292 10 6452 1 2025-11-12 01:59:59.338 00:06:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 02:04:56.488 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49562 10 6452 1 2025-11-12 02:00:59.340 00:06:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 02:05:56.894 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:39880 10 6452 1 2025-11-12 02:06:13.533 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:06:13.594 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:06:13.558 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:06:13.453 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:06:13.454 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:06:57.265 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52308 10 6452 1 2025-11-12 02:07:57.666 00:00:11.679 TCP 1.101.0.1:3000 -> 23.104.0.1:51490 10 6452 1 2025-11-12 02:08:59.387 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:47600 10 6452 1 2025-11-12 02:09:59.744 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56202 10 6452 1 2025-11-12 02:11:13.569 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:11:13.550 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:11:13.525 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:11:00.150 00:00:10.862 TCP 1.101.0.1:3000 -> 23.104.0.1:36094 10 6452 1 2025-11-12 02:11:13.487 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:11:13.550 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:06:59.339 00:06:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 02:12:01.052 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36192 10 6452 1 2025-11-12 02:07:59.341 00:06:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 02:13:01.455 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33230 10 6452 1 2025-11-12 02:14:01.860 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52198 10 6452 1 2025-11-12 02:15:02.273 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41108 10 6452 1 2025-11-12 02:16:13.749 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:16:13.658 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:16:13.625 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:16:02.677 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58380 10 6452 1 2025-11-12 02:16:13.668 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:16:13.612 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:17:03.110 00:00:10.518 TCP 1.101.0.1:3000 -> 23.104.0.1:41396 10 6452 1 2025-11-12 02:18:03.669 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51320 10 6452 1 2025-11-12 02:13:59.341 00:06:00.137 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 02:19:04.097 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36374 10 6452 1 2025-11-12 02:14:59.343 00:06:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 02:20:04.455 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58856 10 6452 1 2025-11-12 02:21:04.857 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42726 10 6452 1 2025-11-12 02:21:13.610 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:21:13.452 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:21:13.602 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:21:13.532 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:21:13.684 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:22:05.274 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53552 10 6452 1 2025-11-12 02:23:05.693 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52618 10 6452 1 2025-11-12 02:24:06.109 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46874 10 6452 1 2025-11-12 02:25:06.514 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38214 10 6452 1 2025-11-12 02:20:59.343 00:06:00.138 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 02:26:13.910 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:26:13.677 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:26:13.794 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:26:13.727 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:26:13.876 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:26:06.921 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37180 10 6452 1 2025-11-12 02:21:59.345 00:06:00.133 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 02:27:07.338 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43512 10 6452 1 2025-11-12 02:28:07.736 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58822 10 6452 1 2025-11-12 02:29:08.144 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51772 10 6452 1 2025-11-12 02:30:08.551 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40404 10 6452 1 2025-11-12 02:31:14.057 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:31:13.847 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:31:13.696 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:31:13.973 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:31:13.767 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:31:08.953 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54412 10 6452 1 2025-11-12 02:32:09.361 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49124 10 6452 1 2025-11-12 02:27:59.344 00:06:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 02:33:09.767 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56828 10 6452 1 2025-11-12 02:28:59.348 00:06:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 02:34:10.180 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51040 10 6452 1 2025-11-12 02:35:10.550 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51342 10 6452 1 2025-11-12 02:36:14.133 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:36:13.967 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:36:14.101 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:36:13.896 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:36:14.183 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:36:10.947 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51740 10 6452 1 2025-11-12 02:37:11.353 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44848 10 6452 1 2025-11-12 02:38:11.765 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42116 10 6452 1 2025-11-12 02:39:12.133 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45302 10 6452 1 2025-11-12 02:34:59.352 00:06:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 02:40:12.537 00:00:11.135 TCP 1.101.0.1:3000 -> 23.104.0.1:55038 10 6452 1 2025-11-12 02:35:59.348 00:06:00.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 02:41:14.140 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:41:13.935 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:41:13.992 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:41:14.140 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:41:14.074 00:00:00.046 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:41:13.711 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41456 10 6452 1 2025-11-12 02:42:14.115 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54776 10 6452 1 2025-11-12 02:43:14.518 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57944 10 6452 1 2025-11-12 02:44:14.883 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45314 10 6452 1 2025-11-12 02:45:15.287 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57724 10 6452 1 2025-11-12 02:46:14.172 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:46:13.914 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:46:14.110 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:46:14.168 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:46:14.194 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:46:15.709 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34920 10 6452 1 2025-11-12 02:41:59.346 00:06:00.148 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 02:47:16.116 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39964 10 6452 1 2025-11-12 02:42:59.350 00:06:00.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 02:48:16.521 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58836 10 6452 1 2025-11-12 02:49:16.922 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34446 10 6452 1 2025-11-12 02:50:17.342 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48064 10 6452 1 2025-11-12 02:51:14.061 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:51:14.366 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:51:14.157 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:51:14.343 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:51:14.240 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:51:17.744 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37724 10 6452 1 2025-11-12 02:52:18.158 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56534 10 6452 1 2025-11-12 02:53:18.563 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47890 10 6452 1 2025-11-12 02:48:59.351 00:06:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 02:54:18.961 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37204 10 6452 1 2025-11-12 02:49:59.353 00:06:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 02:55:19.365 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59512 10 6452 1 2025-11-12 02:56:15.092 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:56:15.182 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:56:14.852 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:56:15.010 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:56:14.948 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:56:19.766 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:52060 10 6452 1 2025-11-12 02:57:20.187 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57600 10 6452 1 2025-11-12 02:58:20.594 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56294 10 6452 1 Summary: total flows: 137, total bytes: 416877, total packets: 1018, avg bps: 861, avg pps: 0, avg bpp: 409 Time window: 2025-11-12 01:53:59 - 2025-11-12 02:58:30 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0039s User: 0.0023s Wall: 0.0022s flows/second: 61000.0 Runtime: 0.0023s