Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 13:59:14.546 00:00:10.476 TCP 1.101.0.1:3000 -> 23.104.0.1:54416 10 6452 1 2025-11-02 14:00:15.065 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54522 10 6452 1 2025-11-02 13:59:54.074 00:01:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-02 14:01:15.471 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35648 10 6452 1 2025-11-02 14:01:39.029 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 14:01:39.216 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:01:39.216 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 14:01:38.836 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:01:38.946 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 13:56:54.394 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-11-02 14:02:15.878 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55106 10 6452 1 2025-11-02 14:03:16.295 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39684 10 6452 1 2025-11-02 14:04:16.653 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54582 10 6452 1 2025-11-02 14:03:54.076 00:01:00.320 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-02 14:05:17.070 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39162 10 6452 1 2025-11-02 14:01:54.075 00:04:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 14:06:17.482 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34632 10 6452 1 2025-11-02 14:06:39.221 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 14:06:39.139 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:06:39.130 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:06:39.177 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 14:06:39.059 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:07:17.886 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:34844 10 6452 1 2025-11-02 14:08:18.261 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45484 10 6452 1 2025-11-02 14:09:18.661 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37394 10 6452 1 2025-11-02 14:05:54.076 00:04:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 14:10:19.102 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46158 10 6452 1 2025-11-02 14:06:54.074 00:04:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 14:11:19.502 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45468 10 6452 1 2025-11-02 14:11:39.273 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:11:39.271 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 14:11:38.829 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:11:39.233 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:11:39.316 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 14:12:19.908 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:47018 10 6452 1 2025-11-02 14:13:20.324 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40456 10 6452 1 2025-11-02 14:14:20.691 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58250 10 6452 1 2025-11-02 14:10:54.078 00:04:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 14:15:21.115 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54930 10 6452 1 2025-11-02 14:16:21.521 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57000 10 6452 1 2025-11-02 14:16:39.346 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:16:39.221 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 14:16:39.182 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:16:39.222 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:16:39.305 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 14:11:54.075 00:06:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-02 14:17:21.933 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:57546 10 6452 1 2025-11-02 14:18:22.320 00:00:16.116 TCP 1.101.0.1:3000 -> 23.104.0.1:35726 10 6452 1 2025-11-02 14:19:28.478 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51552 10 6452 1 2025-11-02 14:20:28.882 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:34886 10 6452 1 2025-11-02 14:15:54.079 00:06:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-02 14:21:39.899 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:21:39.901 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 14:21:39.612 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:21:29.300 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52888 10 6452 1 2025-11-02 14:21:39.983 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:21:40.066 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 14:22:29.705 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:49746 10 6452 1 2025-11-02 14:23:30.128 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58274 10 6452 1 2025-11-02 14:18:54.078 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-11-02 14:24:30.527 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46416 10 6452 1 2025-11-02 14:25:30.929 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:56184 10 6452 1 2025-11-02 14:26:39.314 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:26:39.412 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 14:26:39.354 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:26:39.178 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:26:39.260 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 14:26:31.311 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34266 10 6452 1 2025-11-02 14:27:31.716 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:43854 10 6452 1 2025-11-02 14:22:54.082 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-11-02 14:28:32.130 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59548 10 6452 1 2025-11-02 14:29:32.540 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53024 10 6452 1 2025-11-02 14:24:54.409 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 790 1 2025-11-02 14:30:32.900 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55092 12 6556 1 2025-11-02 14:31:39.609 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:31:39.414 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 14:31:39.527 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:31:39.563 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:31:39.646 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 14:31:33.318 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:59650 10 6452 1 2025-11-02 14:32:33.744 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60710 10 6452 1 2025-11-02 14:31:54.082 00:01:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-02 14:33:34.151 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51680 10 6452 1 2025-11-02 14:28:54.408 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-11-02 14:34:34.570 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:49510 12 10375 1 2025-11-02 14:35:35.039 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51470 10 6452 1 2025-11-02 14:36:39.964 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 14:36:39.929 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:36:39.882 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 14:36:39.856 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:36:39.880 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:36:35.437 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41108 10 6452 1 2025-11-02 14:35:54.085 00:01:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-02 14:37:35.847 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:41094 10 6452 1 2025-11-02 14:33:54.081 00:04:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 14:38:36.246 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35174 10 6452 1 2025-11-02 14:39:36.618 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59274 10 6452 1 2025-11-02 14:40:37.025 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34622 10 6452 1 2025-11-02 14:41:39.968 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:41:39.963 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 14:41:39.902 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:41:40.215 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:41:40.297 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 14:41:37.401 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47450 10 6452 1 2025-11-02 14:37:54.085 00:04:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 14:42:37.775 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43312 10 6452 1 2025-11-02 14:38:54.083 00:04:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 14:43:38.191 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59786 10 6452 1 2025-11-02 14:44:38.604 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56188 10 6452 1 2025-11-02 14:45:39.010 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48240 10 6452 1 2025-11-02 14:46:39.843 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:46:39.845 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 14:46:39.802 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:46:39.899 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:46:39.983 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 14:46:39.413 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60742 10 6452 1 2025-11-02 14:42:54.086 00:04:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 14:47:39.819 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40394 10 6452 1 2025-11-02 14:48:40.185 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51746 10 6452 1 2025-11-02 14:43:54.083 00:06:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-02 14:49:40.588 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50076 10 6452 1 2025-11-02 14:50:40.994 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44928 10 6452 1 2025-11-02 14:51:39.915 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 14:51:39.827 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:51:39.851 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:51:39.832 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:51:40.071 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 14:47:54.088 00:04:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 14:51:41.411 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59766 10 6452 1 2025-11-02 14:52:41.811 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41512 10 6452 1 2025-11-02 14:53:42.217 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43988 10 6452 1 2025-11-02 14:54:42.618 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42298 10 6452 1 2025-11-02 14:55:42.982 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46044 10 6452 1 2025-11-02 14:50:54.088 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-11-02 14:56:39.953 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:56:40.036 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 14:56:40.054 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 14:56:40.160 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 14:56:40.121 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 14:56:43.350 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53172 10 6452 1 2025-11-02 14:52:54.091 00:06:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-02 14:57:43.753 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51526 10 6452 1 Summary: total flows: 142, total bytes: 414594, total packets: 1014, avg bps: 891, avg pps: 0, avg bpp: 408 Time window: 2025-11-02 13:56:54 - 2025-11-02 14:58:54 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0025s User: 0.0025s Wall: 0.0029s flows/second: 48214.3 Runtime: 0.0030s