Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 09:58:56.186 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45052 10 6452 1 2025-11-12 09:59:56.590 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50016 10 6452 1 2025-11-12 09:55:59.494 00:06:00.186 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 10:00:56.995 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38656 10 6452 1 2025-11-12 10:01:23.345 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 10:01:23.460 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 10:01:23.286 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:01:23.262 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:01:23.456 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 09:56:59.498 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 10:01:57.393 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54534 10 6452 1 2025-11-12 10:02:57.795 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59642 10 6452 1 2025-11-12 10:03:58.195 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38476 10 6452 1 2025-11-12 10:04:58.601 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45184 10 6452 1 2025-11-12 10:05:58.962 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48338 10 6452 1 2025-11-12 10:06:22.977 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:06:23.113 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:06:23.114 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 10:06:22.959 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 10:06:23.195 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 10:06:59.325 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:33132 10 6452 1 2025-11-12 10:02:59.501 00:06:00.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 10:07:59.680 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59594 10 6452 1 2025-11-12 10:03:59.503 00:06:00.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 10:09:00.063 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:39924 12 10375 1 2025-11-12 10:10:00.548 00:00:10.732 TCP 1.101.0.1:3000 -> 23.104.0.1:34584 10 6452 1 2025-11-12 10:11:01.321 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58270 10 6452 1 2025-11-12 10:11:23.210 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 10:11:23.171 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:11:23.003 00:00:00.049 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:11:23.147 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 10:11:23.085 00:00:00.049 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 10:12:01.726 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:58292 10 6452 1 2025-11-12 10:13:02.145 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52070 10 6452 1 2025-11-12 10:14:02.548 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48796 10 6452 1 2025-11-12 10:09:59.502 00:06:00.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 10:15:02.908 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:38508 10 6452 1 2025-11-12 10:10:59.508 00:06:00.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 10:16:03.296 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45160 10 6452 1 2025-11-12 10:16:23.325 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 10:16:23.561 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 10:16:23.436 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:16:23.243 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:16:23.440 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 10:17:03.704 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52922 10 6452 1 2025-11-12 10:18:04.120 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48296 10 6452 1 2025-11-12 10:19:04.526 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50894 10 6452 1 2025-11-12 10:20:04.924 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:48300 10 6452 1 2025-11-12 10:21:05.349 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54018 10 6452 1 2025-11-12 10:21:23.325 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 10:21:23.353 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:21:23.266 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:21:23.415 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 10:21:23.347 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 10:16:59.507 00:06:00.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 10:22:05.753 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52422 10 6452 1 2025-11-12 10:17:59.510 00:06:00.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 10:23:06.157 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58238 10 6452 1 2025-11-12 10:24:06.519 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38038 10 6452 1 2025-11-12 10:25:06.962 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52076 10 6452 1 2025-11-12 10:26:07.373 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46246 10 6452 1 2025-11-12 10:26:23.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 10:26:23.660 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:26:23.654 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:26:23.560 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 10:26:23.736 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 10:27:07.735 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44666 10 6452 1 2025-11-12 10:28:08.142 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58952 10 6452 1 2025-11-12 10:23:59.508 00:06:00.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 10:29:08.549 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55842 10 6452 1 2025-11-12 10:24:59.512 00:06:00.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 10:30:08.911 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51322 10 6452 1 2025-11-12 10:31:09.325 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37696 10 6452 1 2025-11-12 10:31:23.717 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 10:31:23.559 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 10:31:23.498 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:31:23.635 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:31:23.623 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 10:32:09.743 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44262 10 6452 1 2025-11-12 10:33:10.150 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51072 10 6452 1 2025-11-12 10:34:10.557 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49814 10 6452 1 2025-11-12 10:35:10.964 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59408 10 6452 1 2025-11-12 10:30:59.511 00:06:00.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 10:36:11.363 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54150 10 6452 1 2025-11-12 10:36:23.548 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 10:36:23.554 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:36:23.720 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:36:23.550 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 10:36:23.801 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 10:31:59.513 00:06:00.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 10:37:11.766 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60454 10 6452 1 2025-11-12 10:38:12.136 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52784 10 6452 1 2025-11-12 10:39:12.504 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50306 10 6452 1 2025-11-12 10:40:12.867 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59592 10 6452 1 2025-11-12 10:41:13.278 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38760 10 6452 1 2025-11-12 10:41:23.834 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 10:41:23.497 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:41:23.487 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:41:23.666 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 10:41:23.570 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 10:42:13.644 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:34632 10 6452 1 2025-11-12 10:37:59.514 00:06:00.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 10:43:14.008 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58870 10 6452 1 2025-11-12 10:38:59.518 00:06:00.185 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 10:44:14.432 00:00:23.138 TCP 1.101.0.1:3000 -> 23.104.0.1:53992 10 6452 1 2025-11-12 10:45:27.651 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39346 10 6452 1 2025-11-12 10:46:23.792 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:46:23.675 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:46:23.759 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 10:46:23.885 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 10:46:23.758 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 10:46:28.085 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34096 10 6452 1 2025-11-12 10:47:28.484 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43820 10 6452 1 2025-11-12 10:48:28.890 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54076 12 6556 1 2025-11-12 10:49:29.311 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51028 10 6452 1 2025-11-12 10:44:59.527 00:06:00.176 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 10:50:29.673 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39580 10 6452 1 2025-11-12 10:45:59.525 00:06:00.174 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 10:51:23.959 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 10:51:23.876 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:51:23.799 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 10:51:23.925 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 10:51:23.636 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:51:30.121 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41654 10 6452 1 2025-11-12 10:52:30.484 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42106 10 6452 1 2025-11-12 10:53:30.885 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:54792 12 10369 1 2025-11-12 10:54:31.372 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43526 10 6452 1 2025-11-12 10:55:31.778 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57158 10 6452 1 2025-11-12 10:56:24.008 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 10:56:24.067 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 10:56:24.097 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:56:23.925 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 10:56:23.930 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 10:56:32.191 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58970 10 6452 1 2025-11-12 10:51:59.528 00:06:00.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-12 10:57:32.553 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54992 10 6452 1 2025-11-12 10:52:59.530 00:06:00.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-12 10:58:32.954 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50392 10 6452 1 Summary: total flows: 138, total bytes: 425682, total packets: 1038, avg bps: 900, avg pps: 0, avg bpp: 410 Time window: 2025-11-12 09:55:59 - 2025-11-12 10:58:59 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0040s User: 0.0010s Wall: 0.0020s flows/second: 68385.4 Runtime: 0.0020s