Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 05:54:53.875 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 05:59:16.203 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47190 10 6452 1 2025-11-02 05:55:53.878 00:05:00.366 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 06:00:16.569 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38544 10 6452 1 2025-11-02 06:01:16.972 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51210 10 6452 1 2025-11-02 06:01:29.661 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 06:01:29.481 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:01:29.329 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:01:29.589 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 06:01:29.414 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 06:02:17.333 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:50298 10 6452 1 2025-11-02 06:03:17.689 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56572 10 6452 1 2025-11-02 06:04:18.068 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57604 10 6452 1 2025-11-02 06:00:53.879 00:05:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 06:05:18.431 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59180 10 6452 1 2025-11-02 06:01:53.883 00:05:00.363 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 06:06:29.625 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 06:06:18.795 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44180 10 6452 1 2025-11-02 06:06:29.580 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 06:06:29.551 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:06:29.542 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:06:29.420 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 06:07:19.200 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55520 10 6452 1 2025-11-02 06:08:19.604 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46408 10 6452 1 2025-11-02 06:09:20.013 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35486 10 6452 1 2025-11-02 06:10:20.374 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59020 10 6452 1 2025-11-02 06:06:53.881 00:05:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 06:11:29.611 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 06:11:29.532 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 06:11:29.494 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:11:29.528 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:11:29.530 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 06:11:20.777 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57698 10 6452 1 2025-11-02 06:07:53.884 00:05:00.363 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 06:12:21.191 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60994 10 6452 1 2025-11-02 06:13:21.554 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56206 10 6452 1 2025-11-02 06:14:21.959 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40086 10 6452 1 2025-11-02 06:15:22.363 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51680 10 6452 1 2025-11-02 06:16:29.759 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 06:16:29.473 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 06:16:29.744 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:16:29.676 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:16:29.696 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 06:16:22.765 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:60064 10 6452 1 2025-11-02 06:12:53.883 00:05:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 06:17:23.126 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35584 10 6452 1 2025-11-02 06:13:53.888 00:05:00.363 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 06:18:23.492 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:46562 10 6452 1 2025-11-02 06:19:23.942 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:42546 10 6452 1 2025-11-02 06:20:24.342 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33362 10 6452 1 2025-11-02 06:21:30.200 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 06:21:30.062 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 06:21:29.905 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:21:30.118 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:21:29.863 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 06:21:24.742 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42938 10 6452 1 2025-11-02 06:22:25.156 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42170 10 6452 1 2025-11-02 06:18:53.888 00:05:00.365 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 06:23:25.563 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41392 10 6452 1 2025-11-02 06:19:53.890 00:05:00.361 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 06:24:25.963 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38118 10 6452 1 2025-11-02 06:25:26.367 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37260 10 6452 1 2025-11-02 06:26:29.654 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 06:26:29.742 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 06:26:29.687 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:26:29.570 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:26:29.877 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 06:26:26.762 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:60842 10 6452 1 2025-11-02 06:27:27.133 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51544 10 6452 1 2025-11-02 06:28:27.537 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58720 10 6452 1 2025-11-02 06:24:53.889 00:05:00.366 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 06:29:27.941 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:42118 12 10375 1 2025-11-02 06:25:53.891 00:05:00.363 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 06:30:28.393 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43062 10 6452 1 2025-11-02 06:31:30.050 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 06:31:29.969 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:31:30.005 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 06:31:29.807 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 06:31:29.756 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:31:28.795 00:00:11.003 TCP 1.101.0.1:3000 -> 23.104.0.1:38832 10 6452 1 2025-11-02 06:32:29.835 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:52622 10 6452 1 2025-11-02 06:33:30.227 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42324 10 6452 1 2025-11-02 06:34:30.632 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55034 10 6452 1 2025-11-02 06:30:53.893 00:05:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 06:35:31.035 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:47676 10 6452 1 2025-11-02 06:31:53.895 00:05:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 06:36:29.986 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 06:36:29.988 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 06:36:30.058 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:36:29.904 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:36:29.974 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 06:36:31.437 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:47720 10 6452 1 2025-11-02 06:37:31.804 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57954 10 6452 1 2025-11-02 06:38:32.205 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56262 10 6452 1 2025-11-02 06:39:32.606 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34314 10 6452 1 2025-11-02 06:40:33.011 00:00:10.948 TCP 1.101.0.1:3000 -> 23.104.0.1:55136 10 6452 1 2025-11-02 06:36:53.894 00:05:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 06:41:30.131 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 06:41:29.919 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:41:30.194 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:41:30.185 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 06:41:30.275 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 06:41:33.993 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50938 10 6452 1 2025-11-02 06:37:53.897 00:05:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 06:42:34.359 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35654 10 6452 1 2025-11-02 06:43:34.762 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49496 10 6452 1 2025-11-02 06:44:35.181 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39994 10 6452 1 2025-11-02 06:45:35.580 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50368 10 6452 1 2025-11-02 06:46:30.422 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 06:46:30.215 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:46:30.474 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:46:30.431 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 06:46:30.556 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 06:46:35.942 00:00:10.592 TCP 1.101.0.1:3000 -> 23.104.0.1:49552 10 6452 1 2025-11-02 06:42:53.896 00:05:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 06:47:36.570 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60332 10 6452 1 2025-11-02 06:43:53.899 00:05:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 06:48:36.969 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37550 10 6452 1 2025-11-02 06:49:37.380 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:40178 12 10369 1 2025-11-02 06:50:37.819 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38454 10 6452 1 2025-11-02 06:51:30.370 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 06:51:30.177 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:51:30.367 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:51:30.370 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 06:51:30.449 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 06:51:38.218 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:34960 10 6452 1 2025-11-02 06:52:38.587 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51238 10 6452 1 2025-11-02 06:48:53.898 00:05:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 06:53:38.992 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:52738 10 6452 1 2025-11-02 06:49:53.901 00:05:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 06:54:39.417 00:00:10.643 TCP 1.101.0.1:3000 -> 23.104.0.1:35516 11 6504 1 2025-11-02 06:55:40.124 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41474 10 6452 1 2025-11-02 06:56:30.487 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 06:56:30.365 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:56:30.545 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 06:56:30.579 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 06:56:30.629 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 06:56:40.490 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:33816 10 6452 1 2025-11-02 06:57:40.869 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52142 10 6452 1 Summary: total flows: 139, total bytes: 418440, total packets: 1015, avg bps: 886, avg pps: 0, avg bpp: 412 Time window: 2025-11-02 05:54:53 - 2025-11-02 06:57:51 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0044s User: 0.0017s Wall: 0.0023s flows/second: 59430.0 Runtime: 0.0024s