Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 22:59:25.028 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54700 10 6452 1 2025-11-02 23:00:25.427 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48284 10 6452 1 2025-11-02 23:01:25.838 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49994 10 6452 1 2025-11-02 23:01:49.763 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:01:49.775 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:01:49.930 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:01:49.760 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:01:49.680 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 22:57:54.244 00:04:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 23:02:26.239 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58722 10 6452 1 2025-11-02 22:58:54.241 00:04:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 23:03:26.650 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53346 11 6492 1 2025-11-02 23:04:27.056 00:00:10.629 TCP 1.101.0.1:3000 -> 23.104.0.1:58568 10 6452 1 2025-11-02 23:05:27.726 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58164 10 6452 1 2025-11-02 23:06:28.145 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47244 10 6452 1 2025-11-02 23:06:49.858 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:06:49.968 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:06:49.884 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:06:49.942 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:02:54.245 00:04:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 23:06:50.051 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:07:28.546 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54410 10 6452 1 2025-11-02 23:03:54.241 00:04:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 23:08:28.953 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42854 10 6452 1 2025-11-02 23:07:54.246 00:01:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-02 23:09:29.359 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52674 10 6452 1 2025-11-02 23:08:54.244 00:01:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-02 23:10:29.760 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59696 10 6452 1 2025-11-02 23:11:30.177 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45728 10 6452 1 2025-11-02 23:11:50.016 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:11:49.863 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:11:49.777 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:11:49.843 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:11:49.931 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:09:54.247 00:02:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-02 23:12:30.587 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41612 10 6452 1 2025-11-02 23:13:30.990 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46788 10 6452 1 2025-11-02 23:12:54.248 00:01:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-02 23:14:31.400 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53318 10 6452 1 2025-11-02 23:10:54.244 00:04:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 23:15:31.808 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55382 10 6452 1 2025-11-02 23:16:32.224 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35324 10 6452 1 2025-11-02 23:16:49.944 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:14:54.248 00:02:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-02 23:16:50.012 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:16:50.068 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:16:50.014 00:00:00.034 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:16:50.095 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:17:32.626 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38182 10 6452 1 2025-11-02 23:18:33.030 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44192 10 6452 1 2025-11-02 23:17:54.248 00:01:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-02 23:19:33.438 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54310 10 6452 1 2025-11-02 23:15:54.245 00:04:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 23:20:33.845 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:37588 10 6452 1 2025-11-02 23:21:34.266 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58378 10 6452 1 2025-11-02 23:21:50.242 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:21:50.313 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:21:50.277 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:21:50.178 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:21:50.157 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:22:34.673 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34578 10 6452 1 2025-11-02 23:23:35.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33758 10 6452 1 2025-11-02 23:19:54.248 00:04:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 23:24:35.516 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:57212 10 6452 1 2025-11-02 23:20:54.245 00:04:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 23:25:35.891 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55928 10 6452 1 2025-11-02 23:26:36.310 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43626 10 6452 1 2025-11-02 23:26:50.351 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:26:50.329 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:26:50.275 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:26:50.003 00:00:00.035 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:26:50.269 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:27:36.719 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56090 10 6452 1 2025-11-02 23:28:37.114 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57682 10 6452 1 2025-11-02 23:24:54.250 00:04:00.335 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 23:29:37.519 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38200 10 6452 1 2025-11-02 23:25:54.246 00:04:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 23:30:37.923 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50570 10 6452 1 2025-11-02 23:31:38.332 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:37630 10 6452 1 2025-11-02 23:31:50.456 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:31:50.375 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:31:50.265 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:31:50.499 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:31:50.373 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:32:38.687 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50416 10 6452 1 2025-11-02 23:33:39.115 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33550 10 6452 1 2025-11-02 23:29:54.250 00:04:00.336 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 23:34:39.515 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41414 10 6452 1 2025-11-02 23:30:54.246 00:04:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 23:35:39.922 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:44628 10 6452 1 2025-11-02 23:36:50.433 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:36:50.497 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:36:50.563 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:36:40.284 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45024 10 6452 1 2025-11-02 23:36:50.425 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:36:50.508 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:35:54.248 00:01:00.339 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-02 23:37:40.699 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49500 10 6452 1 2025-11-02 23:38:41.108 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:47274 11 6504 1 2025-11-02 23:34:54.252 00:04:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 23:39:41.570 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46598 10 6452 1 2025-11-02 23:37:54.250 00:02:00.339 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-02 23:39:54.252 00:01:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-02 23:40:41.984 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44076 10 6452 1 2025-11-02 23:41:50.731 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:40:54.249 00:01:00.339 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-02 23:41:50.709 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:41:42.387 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45710 10 6452 1 2025-11-02 23:41:50.644 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:41:50.713 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:41:50.648 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:42:42.793 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53430 10 6452 1 2025-11-02 23:43:43.205 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60574 10 6452 1 2025-11-02 23:44:43.613 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53314 10 6452 1 2025-11-02 23:42:54.249 00:02:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-02 23:45:44.018 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48324 10 6452 1 2025-11-02 23:41:54.253 00:04:00.338 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 23:46:50.906 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:45:54.250 00:01:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-02 23:46:50.684 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:46:50.830 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:46:50.793 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:46:44.428 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53444 10 6452 1 2025-11-02 23:46:50.824 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:47:44.839 00:00:11.012 TCP 1.101.0.1:3000 -> 23.104.0.1:56598 10 6452 1 2025-11-02 23:48:45.888 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:38918 10 6452 1 2025-11-02 23:49:46.270 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:56012 10 6452 1 2025-11-02 23:46:54.252 00:04:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 23:50:46.748 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36810 10 6452 1 2025-11-02 23:51:51.030 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:47:54.252 00:04:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 23:51:51.181 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:51:51.068 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:51:50.886 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:51:50.946 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:51:47.155 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40304 10 6452 1 2025-11-02 23:52:47.556 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34018 10 6452 1 2025-11-02 23:53:47.921 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54618 10 6452 1 2025-11-02 23:54:48.338 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43258 10 6452 1 2025-11-02 23:51:54.255 00:04:00.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-02 23:55:48.698 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39772 10 6452 1 2025-11-02 23:52:54.254 00:04:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-02 23:56:50.868 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 23:56:50.772 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 23:56:50.858 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 23:56:50.624 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:56:50.786 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 23:56:49.070 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:59246 11 6504 1 2025-11-02 23:57:49.526 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49718 10 6452 1 Summary: total flows: 149, total bytes: 410446, total packets: 1009, avg bps: 910, avg pps: 0, avg bpp: 406 Time window: 2025-11-02 22:57:54 - 2025-11-02 23:57:59 Total flows processed: 149, passed: 149, Blocks skipped: 0, Bytes read: 15560 Sys: 0.0043s User: 0.0000s Wall: 0.0021s flows/second: 69983.3 Runtime: 0.0021s