Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 20:58:43.394 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36340 10 6452 1 2025-11-03 20:59:43.750 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47526 10 6452 1 2025-11-03 21:00:44.153 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56378 10 6452 1 2025-11-03 20:56:54.731 00:05:00.383 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 21:01:44.556 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53312 10 6452 1 2025-11-03 21:02:16.389 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 21:02:16.023 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 21:02:16.316 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 21:02:16.331 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:02:16.307 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 20:58:54.744 00:05:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 21:02:44.962 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57062 10 6452 1 2025-11-03 21:03:45.362 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56502 10 6452 1 2025-11-03 21:04:45.766 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54288 10 6452 1 2025-11-03 21:05:46.131 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51416 10 6452 1 2025-11-03 21:02:54.744 00:05:00.372 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 21:06:46.505 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45116 10 6452 1 2025-11-03 21:07:16.404 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 21:07:16.327 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 21:07:16.354 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:07:16.319 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:07:16.402 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 21:07:46.907 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59520 12 6556 1 2025-11-03 21:04:54.747 00:05:00.367 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 21:08:47.314 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48048 10 6452 1 2025-11-03 21:09:47.748 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:48762 10 6452 1 2025-11-03 21:10:48.185 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33778 10 6452 1 2025-11-03 21:11:48.584 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46500 10 6452 1 2025-11-03 21:12:16.439 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 21:12:16.595 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 21:12:16.368 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:12:16.437 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:12:16.522 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 21:08:54.745 00:05:00.371 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 21:12:48.987 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59856 10 6452 1 2025-11-03 21:13:49.394 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40658 10 6452 1 2025-11-03 21:10:54.749 00:05:00.366 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 21:14:49.793 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44830 10 6452 1 2025-11-03 21:15:50.191 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:38018 12 10369 1 2025-11-03 21:16:50.667 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:37742 10 6452 1 2025-11-03 21:17:16.669 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 21:17:16.593 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 21:17:16.593 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 21:17:16.560 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:17:16.587 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:17:51.091 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:53612 10 6452 1 2025-11-03 21:14:54.747 00:05:00.370 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 21:18:51.508 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42784 10 6452 1 2025-11-03 21:19:51.871 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35852 10 6452 1 2025-11-03 21:16:54.751 00:05:00.366 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 21:20:52.279 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52516 10 6452 1 2025-11-03 21:21:52.683 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50280 10 6452 1 2025-11-03 21:22:17.067 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 21:22:16.987 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 21:22:16.811 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 21:22:16.837 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:22:16.986 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:22:53.119 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51770 10 6452 1 2025-11-03 21:23:53.529 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55640 10 6452 1 2025-11-03 21:20:54.748 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 21:24:53.937 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41424 10 6452 1 2025-11-03 21:25:54.345 00:00:10.753 TCP 1.101.0.1:3000 -> 23.104.0.1:48950 10 6452 1 2025-11-03 21:22:54.750 00:05:00.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 21:26:55.136 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36266 10 6452 1 2025-11-03 21:27:16.791 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 21:27:16.496 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 21:27:16.600 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:27:16.795 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:27:16.877 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 21:27:55.539 00:00:10.578 TCP 1.101.0.1:3000 -> 23.104.0.1:50718 10 6452 1 2025-11-03 21:28:56.155 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60658 10 6452 1 2025-11-03 21:29:56.520 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45512 10 6452 1 2025-11-03 21:26:54.750 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 21:30:56.937 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:56152 10 6452 1 2025-11-03 21:31:57.359 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52270 10 6452 1 2025-11-03 21:32:17.002 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 21:32:17.004 00:00:00.034 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 21:32:16.949 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:32:16.938 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:32:17.022 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 21:28:54.754 00:05:00.369 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 21:32:57.763 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47882 10 6452 1 2025-11-03 21:33:58.130 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45240 10 6452 1 2025-11-03 21:34:58.531 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48572 10 6452 1 2025-11-03 21:35:58.935 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44534 10 6452 1 2025-11-03 21:32:54.752 00:05:00.374 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 21:36:59.354 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56614 10 6452 1 2025-11-03 21:37:17.147 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 21:37:16.972 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 21:37:16.986 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:37:17.067 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:37:16.979 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 21:37:59.758 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48342 10 6452 1 2025-11-03 21:34:54.755 00:05:00.371 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 21:39:00.180 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50246 10 6452 1 2025-11-03 21:40:00.544 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42952 10 6452 1 2025-11-03 21:41:00.950 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:56058 12 10375 1 2025-11-03 21:42:01.437 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39732 10 6452 1 2025-11-03 21:42:17.886 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 21:42:17.697 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 21:42:17.704 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 21:42:17.703 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:42:17.803 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:38:54.756 00:05:00.374 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 21:43:01.839 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:52480 10 6452 1 2025-11-03 21:44:02.259 00:00:12.662 TCP 1.101.0.1:3000 -> 23.104.0.1:50120 10 6452 1 2025-11-03 21:40:54.759 00:05:00.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 21:45:04.956 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:34864 10 6452 1 2025-11-03 21:46:05.363 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37362 10 6452 1 2025-11-03 21:47:17.004 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 21:47:16.917 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 21:47:17.180 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:47:05.775 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44770 10 6452 1 2025-11-03 21:47:16.921 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:47:17.235 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 21:48:06.180 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60756 10 6452 1 2025-11-03 21:44:54.760 00:05:00.370 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 21:49:06.586 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57102 10 6452 1 2025-11-03 21:50:06.948 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55938 10 6452 1 2025-11-03 21:46:54.763 00:05:00.365 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 21:51:07.363 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51072 10 6452 1 2025-11-03 21:52:07.770 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38190 10 6452 1 2025-11-03 21:52:17.241 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 21:52:17.159 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 21:52:17.240 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:52:17.303 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:52:17.387 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 21:53:08.180 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40512 10 6452 1 2025-11-03 21:54:08.588 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54630 10 6452 1 2025-11-03 21:50:54.760 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-03 21:55:08.954 00:00:10.588 TCP 1.101.0.1:3000 -> 23.104.0.1:52784 10 6452 1 2025-11-03 21:56:09.594 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53720 10 6452 1 2025-11-03 21:52:54.764 00:05:00.369 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-03 21:57:17.421 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-03 21:57:17.324 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-03 21:57:17.542 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-03 21:57:17.276 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:57:17.337 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-03 21:57:10.001 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55614 10 6452 1 2025-11-03 21:58:10.407 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56894 10 6452 1 Summary: total flows: 140, total bytes: 424944, total packets: 1026, avg bps: 922, avg pps: 0, avg bpp: 414 Time window: 2025-11-03 20:56:54 - 2025-11-03 21:58:20 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0025s User: 0.0025s Wall: 0.0026s flows/second: 54135.0 Runtime: 0.0026s