Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 22:59:34.663 00:00:10.802 TCP 1.101.0.1:3000 -> 23.104.0.1:47928 12 10375 1 2025-11-01 23:00:35.503 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36424 10 6452 1 2025-11-01 22:56:53.749 00:05:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:01:20.875 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:01:20.873 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:01:20.660 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:01:20.710 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:01:20.792 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:01:35.911 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57696 10 6452 1 2025-11-01 23:02:36.272 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47802 10 6452 1 2025-11-01 23:03:36.678 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56324 10 6452 1 2025-11-01 22:59:53.756 00:05:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:04:37.116 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54330 10 6452 1 2025-11-01 23:05:37.491 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50266 10 6452 1 2025-11-01 23:06:20.920 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:06:20.923 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:06:20.826 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:06:21.188 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:06:21.271 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:06:37.858 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34228 10 6452 1 2025-11-01 23:02:53.753 00:05:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:07:38.272 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59932 10 6452 1 2025-11-01 23:08:38.673 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59868 10 6452 1 2025-11-01 23:09:39.041 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36956 10 6452 1 2025-11-01 23:05:53.757 00:05:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:10:39.450 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60856 10 6452 1 2025-11-01 23:11:21.437 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:11:21.356 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:11:21.433 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:11:21.441 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:11:21.110 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:11:39.809 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:52106 10 6452 1 2025-11-01 23:12:40.179 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59648 10 6452 1 2025-11-01 23:08:53.757 00:05:00.345 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:13:40.576 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56122 10 6452 1 2025-11-01 23:14:40.985 00:00:11.418 TCP 1.101.0.1:3000 -> 23.104.0.1:33886 12 10375 1 2025-11-01 23:15:42.440 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42308 10 6452 1 2025-11-01 23:11:53.760 00:05:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:16:21.331 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:16:21.091 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:16:21.189 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:16:21.234 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:16:21.249 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:16:42.805 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37054 10 6452 1 2025-11-01 23:17:43.206 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34218 10 6452 1 2025-11-01 23:18:43.566 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33724 10 6452 1 2025-11-01 23:14:53.757 00:05:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:19:43.976 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40540 10 6452 1 2025-11-01 23:20:44.399 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44112 10 6452 1 2025-11-01 23:21:21.251 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:21:21.261 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:21:21.058 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:21:21.168 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:21:21.374 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:17:53.760 00:05:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:21:44.803 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57232 10 6452 1 2025-11-01 23:22:45.204 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46708 10 6452 1 2025-11-01 23:23:45.572 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44084 10 6452 1 2025-11-01 23:20:53.759 00:05:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:24:45.977 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43088 10 6452 1 2025-11-01 23:25:46.388 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60930 10 6452 1 2025-11-01 23:26:21.769 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:26:21.629 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:26:21.628 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:26:21.176 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:26:21.686 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:26:46.797 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:53752 10 6452 1 2025-11-01 23:23:53.762 00:05:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:27:47.172 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41364 10 6452 1 2025-11-01 23:28:47.582 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50208 10 6452 1 2025-11-01 23:29:47.947 00:00:10.525 TCP 1.101.0.1:3000 -> 23.104.0.1:59872 14 14292 1 2025-11-01 23:26:53.761 00:05:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:30:48.506 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35334 10 6452 1 2025-11-01 23:31:21.777 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:31:21.682 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:31:21.486 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:31:21.680 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:31:21.763 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:31:48.913 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56720 10 6452 1 2025-11-01 23:32:49.322 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39362 10 6452 1 2025-11-01 23:29:53.764 00:05:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:33:49.730 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55782 10 6452 1 2025-11-01 23:34:50.139 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37122 10 6452 1 2025-11-01 23:35:50.543 00:00:10.620 TCP 1.101.0.1:3000 -> 23.104.0.1:36420 10 6452 1 2025-11-01 23:36:21.752 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:36:21.672 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:36:21.534 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:36:21.480 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:36:21.670 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:32:53.763 00:05:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:36:51.200 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39140 10 6452 1 2025-11-01 23:37:51.601 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53334 10 6452 1 2025-11-01 23:38:52.007 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38860 10 6452 1 2025-11-01 23:35:53.769 00:05:00.338 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:39:52.404 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:50362 10 6452 1 2025-11-01 23:40:52.830 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46240 10 6452 1 2025-11-01 23:41:21.755 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:41:21.711 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:41:21.726 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:41:21.760 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:41:21.842 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:41:53.202 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39746 10 6452 1 2025-11-01 23:38:53.769 00:05:00.345 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:42:53.601 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53514 10 6452 1 2025-11-01 23:43:54.004 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55474 10 6452 1 2025-11-01 23:44:54.411 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53432 10 6452 1 2025-11-01 23:41:53.770 00:05:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:45:54.776 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51120 10 6452 1 2025-11-01 23:46:22.030 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:46:21.679 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:46:21.883 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:46:21.867 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:46:21.947 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:46:55.179 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35430 10 6452 1 2025-11-01 23:47:55.585 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46466 10 6452 1 2025-11-01 23:44:53.769 00:05:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:48:55.998 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42120 10 6452 1 2025-11-01 23:49:56.367 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60506 10 6452 1 2025-11-01 23:50:56.767 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35552 10 6452 1 2025-11-01 23:51:22.257 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:51:22.316 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:51:22.244 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:51:22.205 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:51:22.289 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:47:53.772 00:05:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:51:57.172 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44412 10 6452 1 2025-11-01 23:52:57.574 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46956 10 6452 1 2025-11-01 23:53:57.931 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:39876 10 6452 1 2025-11-01 23:50:53.769 00:05:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-01 23:54:58.360 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33078 10 6452 1 2025-11-01 23:55:58.770 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46068 10 6452 1 2025-11-01 23:56:22.341 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-01 23:56:22.113 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-01 23:56:22.110 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-01 23:56:22.052 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:56:22.258 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-01 23:56:59.186 00:00:10.542 TCP 1.101.0.1:3000 -> 23.104.0.1:43450 10 6452 1 2025-11-01 23:53:53.773 00:05:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-01 23:57:59.771 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40668 10 6452 1 Summary: total flows: 139, total bytes: 426234, total packets: 1018, avg bps: 916, avg pps: 0, avg bpp: 418 Time window: 2025-11-01 22:56:53 - 2025-11-01 23:58:54 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0045s User: 0.0023s Wall: 0.0022s flows/second: 64257.5 Runtime: 0.0022s