Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 00:59:39.548 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35422 10 6452 1 2025-11-02 01:00:39.906 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45944 10 6452 1 2025-11-02 00:56:53.793 00:05:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 01:01:23.601 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 01:01:23.606 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 01:01:23.591 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:01:23.691 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:01:23.774 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 01:01:40.321 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35918 10 6452 1 2025-11-02 01:02:40.720 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44996 10 6452 1 2025-11-02 00:59:53.795 00:05:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 01:03:41.137 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35686 10 6452 1 2025-11-02 01:04:41.500 00:00:20.823 TCP 1.101.0.1:3000 -> 23.104.0.1:54618 10 6452 1 2025-11-02 01:05:52.358 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42178 10 6452 1 2025-11-02 01:06:23.418 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 01:06:23.349 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 01:06:23.306 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:06:23.341 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:06:23.425 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 01:02:53.793 00:05:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 01:06:52.758 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34038 10 6452 1 2025-11-02 01:07:53.177 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42966 10 6452 1 2025-11-02 01:08:53.576 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36916 10 6452 1 2025-11-02 01:05:53.797 00:05:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 01:09:53.983 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37324 10 6452 1 2025-11-02 01:10:54.386 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52786 10 6452 1 2025-11-02 01:11:23.556 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 01:11:23.589 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 01:11:23.586 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 01:11:23.436 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:11:23.474 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:11:54.787 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34448 10 6452 1 2025-11-02 01:08:53.794 00:05:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 01:12:55.188 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:32780 10 6452 1 2025-11-02 01:13:55.594 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50124 10 6452 1 2025-11-02 01:14:55.994 00:00:10.566 TCP 1.101.0.1:3000 -> 23.104.0.1:46056 10 6452 1 2025-11-02 01:11:53.797 00:05:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 01:15:56.596 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53900 10 6452 1 2025-11-02 01:16:23.619 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:16:23.717 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 01:16:23.790 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 01:16:23.680 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:16:23.701 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 01:16:57.004 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60318 10 6452 1 2025-11-02 01:17:57.405 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49630 10 6452 1 2025-11-02 01:14:53.796 00:05:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 01:18:57.813 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44728 10 6452 1 2025-11-02 01:19:58.221 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54792 10 6452 1 2025-11-02 01:20:58.627 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:56262 10 6452 1 2025-11-02 01:21:23.005 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 01:21:23.037 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 01:21:22.887 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:21:23.045 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:21:23.127 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 01:17:53.798 00:05:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 01:21:59.001 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44450 10 6452 1 2025-11-02 01:22:59.401 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60932 10 6452 1 2025-11-02 01:23:59.801 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58766 10 6452 1 2025-11-02 01:20:53.796 00:05:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 01:25:00.206 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:51172 12 10375 1 2025-11-02 01:26:00.683 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39142 10 6452 1 2025-11-02 01:26:23.857 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 01:26:23.666 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 01:26:23.618 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:26:23.861 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:26:23.946 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 01:27:01.107 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33154 10 6452 1 2025-11-02 01:23:53.800 00:05:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 01:28:01.478 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38376 10 6452 1 2025-11-02 01:29:01.876 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57796 10 6452 1 2025-11-02 01:30:02.281 00:00:20.656 TCP 1.101.0.1:3000 -> 23.104.0.1:45368 12 10375 1 2025-11-02 01:26:53.797 00:05:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 01:31:23.904 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:31:23.725 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:31:12.973 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47270 10 6452 1 2025-11-02 01:31:23.889 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 01:31:23.901 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 01:31:23.808 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 01:32:13.396 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58152 10 6452 1 2025-11-02 01:33:13.794 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:39882 10 6452 1 2025-11-02 01:29:53.801 00:05:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 01:34:14.151 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56926 10 6452 1 2025-11-02 01:35:14.557 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41858 10 6452 1 2025-11-02 01:36:24.541 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 01:36:24.397 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 01:36:24.397 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 01:36:24.132 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:36:24.457 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:36:14.959 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48692 10 6452 1 2025-11-02 01:32:53.800 00:05:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 01:37:15.366 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36030 10 6452 1 2025-11-02 01:38:15.764 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42522 10 6452 1 2025-11-02 01:39:16.179 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41282 10 6452 1 2025-11-02 01:35:53.802 00:05:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 01:40:16.582 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59536 10 6452 1 2025-11-02 01:41:24.227 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 01:41:24.233 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 01:41:24.167 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:41:24.126 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:41:24.210 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 01:41:16.985 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47108 10 6452 1 2025-11-02 01:42:17.351 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37270 10 6452 1 2025-11-02 01:38:53.800 00:05:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 01:43:17.754 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42396 10 6452 1 2025-11-02 01:44:18.157 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47100 10 6452 1 2025-11-02 01:45:18.521 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39668 10 6452 1 2025-11-02 01:41:53.803 00:05:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 01:46:24.363 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 01:46:24.037 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 01:46:24.273 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 01:46:24.273 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:46:24.280 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:46:18.924 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:35952 10 6452 1 2025-11-02 01:47:19.356 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:58460 10 6452 1 2025-11-02 01:48:19.793 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38434 10 6452 1 2025-11-02 01:44:53.802 00:05:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 01:49:20.204 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57688 10 6452 1 2025-11-02 01:50:20.614 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49566 10 6452 1 2025-11-02 01:51:24.782 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 01:51:24.625 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 01:51:24.722 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:51:24.627 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:51:24.709 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 01:51:21.030 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54580 10 6452 1 2025-11-02 01:47:53.807 00:05:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 01:52:21.441 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45918 10 6452 1 2025-11-02 01:53:21.843 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:35382 10 6452 1 2025-11-02 01:54:22.227 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44216 10 6452 1 2025-11-02 01:50:53.805 00:05:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 01:55:22.631 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43722 10 6452 1 2025-11-02 01:56:24.293 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 01:56:24.389 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 01:56:24.388 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:56:24.279 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 01:56:24.362 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 01:56:23.035 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45406 10 6452 1 2025-11-02 01:57:23.436 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38918 10 6452 1 2025-11-02 01:53:53.808 00:05:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 01:58:23.803 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38642 10 6452 1 Summary: total flows: 139, total bytes: 418394, total packets: 1014, avg bps: 899, avg pps: 0, avg bpp: 412 Time window: 2025-11-02 00:56:53 - 2025-11-02 01:58:54 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0045s User: 0.0011s Wall: 0.0018s flows/second: 78445.7 Runtime: 0.0018s