Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 10:59:38.230 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35000 10 6452 1 2025-11-02 11:00:38.628 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34310 10 6452 1 2025-11-02 10:56:53.978 00:05:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 11:01:35.449 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 11:01:35.111 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:01:35.202 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:01:35.517 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 11:01:35.285 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 11:01:39.032 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55890 10 6452 1 2025-11-02 11:02:39.435 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56252 10 6452 1 2025-11-02 10:59:53.983 00:05:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 11:03:39.799 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47016 10 6452 1 2025-11-02 11:04:40.205 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40704 10 6452 1 2025-11-02 11:05:40.605 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50884 10 6452 1 2025-11-02 11:06:35.693 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 11:06:35.523 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 11:06:35.311 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:06:35.607 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:06:35.691 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 11:06:41.008 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54698 10 6452 1 2025-11-02 11:02:53.980 00:05:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 11:07:41.412 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44116 10 6452 1 2025-11-02 11:08:41.780 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58736 10 6452 1 2025-11-02 11:05:53.984 00:05:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 11:09:42.145 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50384 10 6452 1 2025-11-02 11:10:42.554 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48698 10 6452 1 2025-11-02 11:11:35.790 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 11:11:35.712 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 11:11:35.902 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 11:11:35.401 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:11:35.708 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:11:42.956 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60230 10 6452 1 2025-11-02 11:08:53.982 00:05:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 11:12:43.367 00:00:16.412 TCP 1.101.0.1:3000 -> 23.104.0.1:58466 10 6452 1 2025-11-02 11:13:49.848 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:56946 10 6452 1 2025-11-02 11:14:50.275 00:00:10.490 TCP 1.101.0.1:3000 -> 23.104.0.1:56728 13 10427 1 2025-11-02 11:11:53.985 00:05:00.363 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 11:15:50.806 00:00:16.553 TCP 1.101.0.1:3000 -> 23.104.0.1:41612 10 6452 1 2025-11-02 11:16:36.089 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 11:16:35.950 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:16:36.081 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:16:35.954 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 11:16:36.163 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 11:16:57.411 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:55570 10 6452 1 2025-11-02 11:17:57.778 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:38404 10 6452 1 2025-11-02 11:14:53.983 00:05:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 11:18:58.143 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32988 10 6452 1 2025-11-02 11:19:58.544 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47590 10 6452 1 2025-11-02 11:20:58.956 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44552 10 6452 1 2025-11-02 11:21:35.893 00:00:00.014 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:21:36.127 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:21:36.236 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 11:21:36.188 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 11:21:36.209 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 11:17:53.986 00:05:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 11:21:59.360 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41036 10 6452 1 2025-11-02 11:22:59.761 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47034 10 6452 1 2025-11-02 11:24:00.132 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41092 10 6452 1 2025-11-02 11:20:53.984 00:05:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 11:25:00.497 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46976 10 6452 1 2025-11-02 11:26:00.864 00:00:21.939 TCP 1.101.0.1:3000 -> 23.104.0.1:41622 10 6452 1 2025-11-02 11:26:35.805 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 11:26:35.806 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 11:26:35.562 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:26:35.883 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:26:35.964 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 11:27:12.842 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:33880 10 6452 1 2025-11-02 11:23:53.988 00:05:00.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 11:28:13.218 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57614 10 6452 1 2025-11-02 11:29:13.622 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34102 10 6452 1 2025-11-02 11:30:14.028 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:33300 12 10369 1 2025-11-02 11:26:53.988 00:05:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 11:31:14.469 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38816 10 6452 1 2025-11-02 11:31:36.006 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 11:31:35.922 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:31:35.993 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 11:31:35.834 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 11:31:35.888 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:32:14.876 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44118 10 6452 1 2025-11-02 11:33:15.283 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51680 10 6452 1 2025-11-02 11:29:53.991 00:05:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 11:34:15.685 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56734 10 6452 1 2025-11-02 11:35:16.064 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:43014 10 6452 1 2025-11-02 11:36:16.458 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42504 10 6452 1 2025-11-02 11:36:36.180 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 11:36:35.983 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 11:36:35.994 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 11:36:36.104 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:36:36.097 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:32:53.989 00:05:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 11:37:16.865 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49060 10 6452 1 2025-11-02 11:38:17.283 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33672 10 6452 1 2025-11-02 11:39:17.687 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47618 10 6452 1 2025-11-02 11:35:53.993 00:05:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 11:40:18.114 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56186 10 6452 1 2025-11-02 11:41:18.515 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53162 10 6452 1 2025-11-02 11:41:36.687 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 11:41:36.601 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 11:41:36.689 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 11:41:36.466 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:41:36.604 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:42:18.918 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57360 10 6452 1 2025-11-02 11:38:53.992 00:05:00.361 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 11:43:19.283 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38240 10 6452 1 2025-11-02 11:44:19.684 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51576 10 6452 1 2025-11-02 11:45:20.114 00:00:11.126 TCP 1.101.0.1:3000 -> 23.104.0.1:47882 10 6452 1 2025-11-02 11:41:53.996 00:05:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 11:46:21.277 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38812 10 6452 1 2025-11-02 11:46:36.309 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 11:46:36.293 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 11:46:36.357 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 11:46:36.043 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:46:36.225 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:47:21.652 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44116 10 6452 1 2025-11-02 11:48:22.070 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36694 10 6452 1 2025-11-02 11:44:53.993 00:05:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 11:49:22.473 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38828 10 6452 1 2025-11-02 11:50:22.877 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41140 10 6452 1 2025-11-02 11:51:23.275 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:40478 10 6452 1 2025-11-02 11:51:36.753 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 11:51:36.724 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 11:51:36.620 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 11:51:36.581 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:51:36.670 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:47:53.995 00:05:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 11:52:23.643 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52734 10 6452 1 2025-11-02 11:50:53.995 00:02:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-02 11:53:24.057 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:52970 10 6452 1 2025-11-02 11:54:24.427 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33768 10 6452 1 2025-11-02 11:55:24.830 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37914 10 6452 1 2025-11-02 11:56:36.549 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:56:36.642 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 11:56:36.551 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 11:56:36.552 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 11:56:25.233 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35946 10 6452 1 2025-11-02 11:56:36.633 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 11:53:53.996 00:03:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 8 492 1 2025-11-02 11:57:25.635 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35074 10 6452 1 2025-11-02 11:53:53.995 00:05:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 11:58:26.038 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42510 10 6452 1 Summary: total flows: 140, total bytes: 418563, total packets: 1017, avg bps: 900, avg pps: 0, avg bpp: 411 Time window: 2025-11-02 10:56:53 - 2025-11-02 11:58:54 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0036s User: 0.0012s Wall: 0.0025s flows/second: 55053.7 Runtime: 0.0026s