Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 21:54:54.220 00:04:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 21:58:58.584 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:54452 10 6452 1 2025-11-02 21:59:58.938 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52882 10 6452 1 2025-11-02 21:59:54.220 00:01:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-02 22:00:59.351 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37068 10 6452 1 2025-11-02 22:01:50.468 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 22:01:50.385 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:01:50.318 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 22:01:50.317 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 22:01:50.075 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:01:59.752 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:34508 10 6452 1 2025-11-02 21:58:54.222 00:04:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 22:03:00.185 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44734 10 6452 1 2025-11-02 22:01:54.220 00:02:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-02 22:04:00.548 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42654 10 6452 1 2025-11-02 22:03:54.223 00:01:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-02 22:05:00.950 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:53902 12 10369 1 2025-11-02 22:04:54.220 00:01:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-02 22:06:01.433 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44820 10 6452 1 2025-11-02 22:06:48.833 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 22:06:48.588 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:06:48.713 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:06:48.712 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 22:06:48.795 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 22:07:01.838 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48768 10 6452 1 2025-11-02 22:05:54.223 00:02:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-02 22:08:02.237 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39528 10 6452 1 2025-11-02 22:09:02.641 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52628 10 6452 1 2025-11-02 22:08:54.223 00:01:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-02 22:10:03.051 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39776 10 6452 1 2025-11-02 22:06:54.221 00:04:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 22:11:03.453 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44282 10 6452 1 2025-11-02 22:11:48.882 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 22:11:48.774 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 22:11:48.882 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:11:48.766 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:11:48.848 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 22:12:03.864 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37660 10 6452 1 2025-11-02 22:13:04.270 00:00:10.783 TCP 1.101.0.1:3000 -> 23.104.0.1:38348 10 6452 1 2025-11-02 22:14:05.137 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37718 10 6452 1 2025-11-02 22:10:54.224 00:04:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 22:15:05.539 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45370 10 6452 1 2025-11-02 22:11:54.221 00:04:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 22:16:05.941 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49572 10 6452 1 2025-11-02 22:16:49.332 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 22:16:48.959 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 22:16:49.337 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 22:16:49.263 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:16:49.248 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:17:06.360 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51864 10 6452 1 2025-11-02 22:18:06.763 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51844 10 6452 1 2025-11-02 22:19:07.185 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36704 10 6452 1 2025-11-02 22:15:54.225 00:04:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 22:20:07.589 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59772 10 6452 1 2025-11-02 22:16:54.222 00:04:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 22:21:07.991 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49146 10 6452 1 2025-11-02 22:21:48.989 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 22:21:49.122 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 22:21:49.232 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 22:21:49.056 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:21:48.907 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:22:08.391 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48996 10 6452 1 2025-11-02 22:23:08.750 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46566 10 6452 1 2025-11-02 22:24:09.160 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51786 10 6452 1 2025-11-02 22:20:54.229 00:04:00.335 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 22:25:09.562 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35744 10 6452 1 2025-11-02 22:21:54.226 00:04:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 22:26:09.963 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33978 10 6452 1 2025-11-02 22:26:49.322 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 22:26:49.177 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 22:26:49.312 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 22:26:49.178 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:26:49.240 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:27:10.363 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56158 10 6452 1 2025-11-02 22:28:10.727 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42590 10 6452 1 2025-11-02 22:29:11.137 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48126 10 6452 1 2025-11-02 22:25:54.230 00:04:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 22:30:11.539 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36762 10 6452 1 2025-11-02 22:26:54.226 00:04:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 22:31:11.947 00:00:10.610 TCP 1.101.0.1:3000 -> 23.104.0.1:37698 10 6452 1 2025-11-02 22:31:49.078 00:00:00.045 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 22:31:49.172 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 22:31:49.170 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 22:31:49.004 00:00:00.050 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:31:48.997 00:00:00.045 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:32:12.610 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39254 10 6452 1 2025-11-02 22:31:54.226 00:01:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-02 22:33:13.015 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46144 10 6452 1 2025-11-02 22:34:13.423 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56940 10 6452 1 2025-11-02 22:30:54.230 00:04:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 22:35:13.826 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53282 10 6452 1 2025-11-02 22:33:54.228 00:02:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-02 22:36:14.226 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40344 10 6452 1 2025-11-02 22:36:49.362 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 22:36:49.411 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 22:36:49.190 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 22:36:49.336 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:36:49.279 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:35:54.231 00:01:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-02 22:37:14.624 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37002 10 6452 1 2025-11-02 22:36:54.230 00:01:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-02 22:38:15.033 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33362 10 6452 1 2025-11-02 22:39:15.435 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42396 10 6452 1 2025-11-02 22:37:54.232 00:02:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-02 22:40:15.803 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34128 10 6452 1 2025-11-02 22:41:16.205 00:00:10.725 TCP 1.101.0.1:3000 -> 23.104.0.1:41872 10 6452 1 2025-11-02 22:41:49.427 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 22:41:49.425 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 22:41:49.030 00:00:00.020 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:41:49.425 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:41:49.507 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 22:40:54.237 00:01:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-02 22:42:16.969 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55124 10 6452 1 2025-11-02 22:38:54.231 00:04:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 22:43:17.332 00:00:10.847 TCP 1.101.0.1:3000 -> 23.104.0.1:38098 10 6452 1 2025-11-02 22:44:18.220 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47666 10 6452 1 2025-11-02 22:45:18.624 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54040 10 6452 1 2025-11-02 22:46:18.986 00:00:11.087 TCP 1.101.0.1:3000 -> 23.104.0.1:55340 10 6452 1 2025-11-02 22:46:49.492 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 22:46:49.414 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 22:46:49.516 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:46:49.544 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:46:49.626 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 22:42:54.238 00:04:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 22:47:20.114 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50330 10 6452 1 2025-11-02 22:43:54.238 00:04:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 22:48:20.521 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37268 10 6452 1 2025-11-02 22:49:20.929 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36812 10 6452 1 2025-11-02 22:50:21.338 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35386 10 6452 1 2025-11-02 22:51:21.737 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56836 10 6452 1 2025-11-02 22:51:49.604 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 22:51:49.520 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:51:49.652 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:51:49.651 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 22:51:49.735 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 22:47:54.241 00:04:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 22:52:22.144 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53758 10 6452 1 2025-11-02 22:48:54.237 00:04:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 22:53:22.541 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:57130 11 6504 1 2025-11-02 22:54:23.001 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54772 10 6452 1 2025-11-02 22:55:23.402 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45626 10 6452 1 2025-11-02 22:56:23.802 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38778 10 6452 1 2025-11-02 22:56:49.968 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 22:56:49.873 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:56:50.236 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 22:56:50.154 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:56:50.156 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 22:52:54.242 00:04:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 22:57:24.212 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55440 10 6452 1 2025-11-02 22:53:54.240 00:04:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 22:58:24.619 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46708 10 6452 1 Summary: total flows: 151, total bytes: 421338, total packets: 1029, avg bps: 882, avg pps: 0, avg bpp: 409 Time window: 2025-11-02 21:54:54 - 2025-11-02 22:58:34 Total flows processed: 151, passed: 151, Blocks skipped: 0, Bytes read: 15768 Sys: 0.0039s User: 0.0010s Wall: 0.0021s flows/second: 73584.3 Runtime: 0.0021s