Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 01:54:54.295 00:04:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-03 01:58:48.473 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45040 10 6452 1 2025-11-03 01:58:54.293 00:01:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-03 01:59:48.886 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 10 6452 1 2025-11-03 02:00:49.269 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43168 10 6452 1 2025-11-03 02:01:53.431 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:01:53.537 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:01:53.344 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:01:53.374 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:01:53.349 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:01:49.629 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37848 10 6452 1 2025-11-03 02:02:50.041 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42684 10 6452 1 2025-11-03 01:59:54.295 00:04:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-03 02:03:50.401 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41140 10 6452 1 2025-11-03 02:00:54.294 00:04:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-03 02:04:50.809 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47004 10 6452 1 2025-11-03 02:05:51.211 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58788 10 6452 1 2025-11-03 02:06:53.459 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:06:53.477 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:06:53.504 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:06:53.625 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:06:53.709 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:06:51.618 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43032 10 6452 1 2025-11-03 02:07:52.025 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35638 10 6452 1 2025-11-03 02:04:54.297 00:04:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-03 02:08:52.433 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59838 10 6452 1 2025-11-03 02:05:54.294 00:04:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-03 02:09:52.832 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42536 10 6452 1 2025-11-03 02:09:54.300 00:01:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-03 02:10:53.233 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60414 10 6452 1 2025-11-03 02:11:53.646 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:11:53.564 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:11:53.729 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:11:53.627 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:11:53.496 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:11:53.594 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43216 10 6452 1 2025-11-03 02:12:53.997 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41976 10 6452 1 2025-11-03 02:11:54.301 00:02:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-03 02:13:54.360 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49766 10 6452 1 2025-11-03 02:10:54.299 00:04:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-03 02:14:54.725 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59514 10 6452 1 2025-11-03 02:14:54.303 00:01:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-03 02:15:55.103 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55838 10 6452 1 2025-11-03 02:15:54.301 00:01:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-03 02:16:53.961 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:16:53.878 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:16:53.656 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:16:53.716 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:16:53.816 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:16:55.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45356 10 6452 1 2025-11-03 02:17:55.927 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:54426 10 6452 1 2025-11-03 02:16:54.303 00:02:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-03 02:18:56.349 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33538 10 6452 1 2025-11-03 02:17:54.300 00:02:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-03 02:19:56.753 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56160 10 6452 1 2025-11-03 02:19:54.304 00:01:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-03 02:20:57.116 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42084 10 6452 1 2025-11-03 02:21:53.969 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:21:53.960 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:21:53.684 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:21:53.819 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:20:54.302 00:01:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-03 02:21:53.902 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:21:57.481 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38792 10 6452 1 2025-11-03 02:22:57.885 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:52026 10 6452 1 2025-11-03 02:21:54.304 00:02:00.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-03 02:23:58.274 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40350 10 6452 1 2025-11-03 02:22:54.302 00:02:00.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-03 02:24:58.677 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47892 10 6452 1 2025-11-03 02:24:54.306 00:01:00.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-03 02:25:59.035 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53776 10 6452 1 2025-11-03 02:26:54.070 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:26:53.946 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:26:53.960 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:26:53.993 00:00:00.050 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:26:54.076 00:00:00.049 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:25:54.303 00:01:00.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-03 02:26:59.439 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33436 10 6452 1 2025-11-03 02:27:59.837 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:37232 10 6452 1 2025-11-03 02:29:00.233 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47046 10 6452 1 2025-11-03 02:27:54.302 00:02:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-03 02:30:00.636 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:34908 12 10369 1 2025-11-03 02:26:54.307 00:04:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-03 02:31:01.113 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41092 10 6452 1 2025-11-03 02:31:54.108 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:30:54.304 00:01:00.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-03 02:31:53.849 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:31:54.011 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:31:53.989 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:31:54.026 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:32:01.525 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36094 10 6452 1 2025-11-03 02:33:01.929 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:54194 10 6452 1 2025-11-03 02:34:02.346 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53372 10 6452 1 2025-11-03 02:35:02.754 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33694 10 6452 1 2025-11-03 02:31:54.305 00:04:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-03 02:36:03.121 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55590 10 6452 1 2025-11-03 02:36:54.305 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:32:54.303 00:04:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-03 02:36:54.094 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:36:54.270 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:36:54.092 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:36:54.223 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:37:03.524 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44136 10 6452 1 2025-11-03 02:38:03.924 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:43464 10 6452 1 2025-11-03 02:39:04.349 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47686 10 6452 1 2025-11-03 02:40:04.752 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42764 10 6452 1 2025-11-03 02:36:54.306 00:04:00.371 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-03 02:41:05.151 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37934 10 6452 1 2025-11-03 02:41:54.366 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:37:54.304 00:04:00.367 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-03 02:41:54.127 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:41:54.348 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:41:54.273 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:41:54.284 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:42:05.556 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45986 10 6452 1 2025-11-03 02:41:54.308 00:01:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-03 02:43:05.956 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:38938 11 6504 1 2025-11-03 02:44:06.423 00:00:10.577 TCP 1.101.0.1:3000 -> 23.104.0.1:60196 10 6452 1 2025-11-03 02:45:07.039 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:47968 12 10375 1 2025-11-03 02:43:54.312 00:02:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-03 02:46:07.520 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47742 10 6452 1 2025-11-03 02:46:54.488 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:46:54.437 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:46:54.191 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:46:54.174 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:42:54.306 00:04:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-03 02:46:54.258 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:47:07.919 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39072 10 6452 1 2025-11-03 02:46:54.313 00:01:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-03 02:48:08.326 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41486 10 6452 1 2025-11-03 02:47:54.310 00:01:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-03 02:49:08.727 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52312 10 6452 1 2025-11-03 02:50:09.106 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54200 10 6452 1 2025-11-03 02:48:54.313 00:02:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-03 02:51:09.472 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33622 10 6452 1 2025-11-03 02:51:54.246 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:51:54.465 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:51:54.254 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:51:54.510 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:51:54.593 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:49:54.310 00:02:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-03 02:52:09.876 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40570 10 6452 1 2025-11-03 02:51:54.313 00:01:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-03 02:53:10.281 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39714 10 6452 1 2025-11-03 02:52:54.311 00:01:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-03 02:54:10.682 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51162 10 6452 1 2025-11-03 02:55:11.107 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55964 10 6452 1 2025-11-03 02:53:54.314 00:02:00.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-03 02:56:11.517 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56040 10 6452 1 2025-11-03 02:56:54.710 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 02:54:54.312 00:02:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-03 02:56:54.396 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 02:56:54.507 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 02:56:54.546 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:56:54.627 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 02:57:11.945 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35498 10 6452 1 2025-11-03 02:56:54.314 00:01:00.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-03 02:58:12.365 00:00:10.738 TCP 1.101.0.1:3000 -> 23.104.0.1:56246 10 6452 1 Summary: total flows: 158, total bytes: 425261, total packets: 1031, avg bps: 893, avg pps: 0, avg bpp: 412 Time window: 2025-11-03 01:54:54 - 2025-11-03 02:58:23 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0010s User: 0.0031s Wall: 0.0016s flows/second: 100959.8 Runtime: 0.0016s