Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 08:59:32.917 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43746 10 6452 1 2025-11-02 09:00:33.331 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54022 10 6452 1 2025-11-02 08:56:53.946 00:05:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:01:32.953 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:01:32.877 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:01:32.856 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:01:32.963 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:01:33.046 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:01:33.734 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48406 10 6452 1 2025-11-02 09:02:34.143 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60998 10 6452 1 2025-11-02 09:03:34.547 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58386 10 6452 1 2025-11-02 08:59:53.949 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:04:34.950 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36450 10 6452 1 2025-11-02 09:05:35.359 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34840 10 6452 1 2025-11-02 09:06:33.253 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:06:33.116 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:06:32.979 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:06:33.107 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:06:33.171 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:06:35.764 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36582 10 6452 1 2025-11-02 09:02:53.947 00:05:00.358 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:07:36.183 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39012 10 6452 1 2025-11-02 09:08:36.582 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60200 10 6452 1 2025-11-02 09:09:36.982 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39532 10 6452 1 2025-11-02 09:05:53.952 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:10:37.396 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49606 10 6452 1 2025-11-02 09:11:33.251 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:11:33.089 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:11:33.094 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:11:32.993 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:11:33.168 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:11:37.807 00:00:10.786 TCP 1.101.0.1:3000 -> 23.104.0.1:56920 10 6452 1 2025-11-02 09:12:38.637 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42712 10 6452 1 2025-11-02 09:08:53.949 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:13:39.062 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47944 10 6452 1 2025-11-02 09:14:39.462 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:55920 10 6452 1 2025-11-02 09:11:53.951 00:05:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:15:39.855 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33922 10 6452 1 2025-11-02 09:16:33.295 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:16:33.372 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:16:33.175 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:16:33.211 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:16:33.293 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:16:40.274 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39352 10 6452 1 2025-11-02 09:17:40.677 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33236 10 6452 1 2025-11-02 09:18:41.114 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:38170 10 6452 1 2025-11-02 09:14:53.951 00:05:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:19:41.495 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36990 10 6452 1 2025-11-02 09:20:41.906 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39800 10 6452 1 2025-11-02 09:21:33.659 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:21:33.250 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:21:33.520 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:21:33.381 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:21:33.577 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:21:42.321 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50424 10 6452 1 2025-11-02 09:17:53.953 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:22:42.736 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60802 10 6452 1 2025-11-02 09:23:43.148 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34528 10 6452 1 2025-11-02 09:20:53.952 00:05:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:24:43.558 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41996 10 6452 1 2025-11-02 09:25:43.964 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40968 10 6452 1 2025-11-02 09:26:33.453 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:26:33.452 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:26:33.495 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:26:33.386 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:26:33.468 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:26:44.332 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48074 10 6452 1 2025-11-02 09:23:53.957 00:05:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:27:44.743 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59558 10 6452 1 2025-11-02 09:28:45.149 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58614 10 6452 1 2025-11-02 09:29:45.553 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58968 10 6452 1 2025-11-02 09:30:45.919 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53108 10 6452 1 2025-11-02 09:26:53.956 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:31:33.675 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:31:33.679 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:31:33.232 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:31:33.417 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:31:33.499 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:31:46.283 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60540 10 6452 1 2025-11-02 09:32:46.687 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48312 10 6452 1 2025-11-02 09:29:53.959 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:33:47.102 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41440 10 6452 1 2025-11-02 09:34:47.504 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:44054 10 6452 1 2025-11-02 09:35:47.859 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55484 10 6452 1 2025-11-02 09:36:33.925 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:36:33.981 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:36:33.838 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:36:33.369 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:36:33.843 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:32:53.956 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:36:48.271 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50734 10 6452 1 2025-11-02 09:37:48.672 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52688 10 6452 1 2025-11-02 09:38:49.114 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53796 10 6452 1 2025-11-02 09:35:53.959 00:05:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:39:49.522 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54696 10 6452 1 2025-11-02 09:40:49.925 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60864 10 6452 1 2025-11-02 09:41:33.956 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:41:33.939 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:41:33.871 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:41:33.759 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:41:33.876 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:41:50.342 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33756 10 6452 1 2025-11-02 09:38:53.958 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:42:50.703 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57896 10 6452 1 2025-11-02 09:43:51.123 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60320 10 6452 1 2025-11-02 09:44:51.532 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53224 10 6452 1 2025-11-02 09:41:53.961 00:05:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:45:51.932 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:54672 10 6452 1 2025-11-02 09:46:33.900 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:46:33.899 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:46:33.772 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:46:33.851 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:46:33.855 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:46:52.359 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54810 10 6452 1 2025-11-02 09:47:52.762 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60658 10 6452 1 2025-11-02 09:44:53.960 00:05:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:48:53.177 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55294 10 6452 1 2025-11-02 09:49:53.589 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45320 10 6452 1 2025-11-02 09:50:54.006 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44546 10 6452 1 2025-11-02 09:51:34.005 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:51:33.962 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:51:33.776 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:51:33.744 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:51:33.826 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:47:53.962 00:05:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:51:54.404 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45860 10 6452 1 2025-11-02 09:52:54.832 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51722 10 6452 1 2025-11-02 09:53:55.232 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47464 10 6452 1 2025-11-02 09:50:53.960 00:05:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:54:55.631 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33056 10 6452 1 2025-11-02 09:55:56.030 00:00:26.708 TCP 1.101.0.1:3000 -> 23.104.0.1:39432 10 6452 1 2025-11-02 09:56:34.223 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:56:34.140 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:56:34.145 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:56:34.092 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:56:33.930 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:57:12.798 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42198 10 6452 1 2025-11-02 09:53:53.963 00:05:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:58:13.209 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45218 10 6452 1 Summary: total flows: 139, total bytes: 410548, total packets: 1010, avg bps: 882, avg pps: 0, avg bpp: 406 Time window: 2025-11-02 08:56:53 - 2025-11-02 09:58:54 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0027s User: 0.0027s Wall: 0.0029s flows/second: 47214.8 Runtime: 0.0030s