Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 08:54:53.947 00:05:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 08:59:32.917 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43746 10 6452 1 2025-11-02 08:55:53.950 00:05:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:00:33.330 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54022 10 6452 1 2025-11-02 09:01:33.046 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:01:32.954 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:01:32.857 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:01:32.964 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:01:32.877 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:01:33.734 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48406 10 6452 1 2025-11-02 09:02:34.142 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60998 10 6452 1 2025-11-02 09:03:34.548 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58386 10 6452 1 2025-11-02 09:04:34.951 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36450 10 6452 1 2025-11-02 09:00:53.947 00:05:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:05:35.358 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34840 10 6452 1 2025-11-02 09:01:53.949 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:06:33.116 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:06:33.107 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:06:33.171 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:06:32.979 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:06:33.255 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:06:35.764 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36582 10 6452 1 2025-11-02 09:07:36.183 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39012 10 6452 1 2025-11-02 09:08:36.582 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60200 10 6452 1 2025-11-02 09:09:36.984 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39532 10 6452 1 2025-11-02 09:10:37.396 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49606 10 6452 1 2025-11-02 09:06:53.948 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:11:33.251 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:11:33.090 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:11:32.994 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:11:33.169 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:11:33.095 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:11:37.806 00:00:10.786 TCP 1.101.0.1:3000 -> 23.104.0.1:56920 10 6452 1 2025-11-02 09:07:53.950 00:05:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:12:38.639 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42712 10 6452 1 2025-11-02 09:13:39.064 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47944 10 6452 1 2025-11-02 09:14:39.461 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:55920 10 6452 1 2025-11-02 09:15:39.854 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:33922 10 6452 1 2025-11-02 09:16:33.293 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:16:33.175 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:16:33.212 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:16:33.372 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:16:33.296 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:16:40.276 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39352 10 6452 1 2025-11-02 09:12:53.948 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:13:53.951 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:17:40.676 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33236 10 6452 1 2025-11-02 09:18:41.114 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:38170 10 6452 1 2025-11-02 09:19:41.495 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36990 10 6452 1 2025-11-02 09:20:41.906 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39800 10 6452 1 2025-11-02 09:21:33.577 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:21:33.521 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:21:33.251 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:21:33.382 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:21:33.659 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:21:42.321 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50424 10 6452 1 2025-11-02 09:18:53.953 00:05:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:22:42.736 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60802 10 6452 1 2025-11-02 09:23:43.148 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34528 10 6452 1 2025-11-02 09:19:53.955 00:05:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:24:43.557 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41996 10 6452 1 2025-11-02 09:25:43.964 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40968 10 6452 1 2025-11-02 09:26:33.452 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:26:33.494 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:26:33.385 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:26:33.451 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:26:33.468 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:26:44.332 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48074 10 6452 1 2025-11-02 09:27:44.743 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59558 10 6452 1 2025-11-02 09:24:53.955 00:05:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:28:45.150 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58614 10 6452 1 2025-11-02 09:29:45.552 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58968 10 6452 1 2025-11-02 09:25:53.957 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:30:45.920 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53108 10 6452 1 2025-11-02 09:31:33.500 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:31:33.675 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:31:33.232 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:31:33.417 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:31:33.679 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:31:46.283 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60540 10 6452 1 2025-11-02 09:32:46.688 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48312 10 6452 1 2025-11-02 09:33:47.102 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41440 10 6452 1 2025-11-02 09:30:53.957 00:05:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:34:47.504 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:44054 10 6452 1 2025-11-02 09:31:53.960 00:05:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:35:47.860 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55484 10 6452 1 2025-11-02 09:36:33.981 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:36:33.369 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:36:33.843 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:36:33.838 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:36:33.927 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:36:48.271 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50734 10 6452 1 2025-11-02 09:37:48.672 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52688 10 6452 1 2025-11-02 09:38:49.114 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53796 10 6452 1 2025-11-02 09:39:49.522 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54696 10 6452 1 2025-11-02 09:36:53.958 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:40:49.927 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60864 10 6452 1 2025-11-02 09:41:33.937 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:41:33.758 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:41:33.874 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:41:33.869 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:41:33.957 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:37:53.961 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:41:50.342 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33756 10 6452 1 2025-11-02 09:42:50.702 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57896 10 6452 1 2025-11-02 09:43:51.122 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60320 10 6452 1 2025-11-02 09:44:51.533 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53224 10 6452 1 2025-11-02 09:45:51.932 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:54672 10 6452 1 2025-11-02 09:46:33.851 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:46:33.899 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:46:33.772 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:46:33.900 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:46:33.857 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:42:53.959 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:46:52.360 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54810 10 6452 1 2025-11-02 09:43:53.964 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:47:52.763 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60658 10 6452 1 2025-11-02 09:48:53.177 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55294 10 6452 1 2025-11-02 09:49:53.588 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45320 10 6452 1 2025-11-02 09:50:54.005 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44546 10 6452 1 2025-11-02 09:51:34.004 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:51:33.775 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:51:33.743 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:51:33.962 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:51:33.827 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:51:54.404 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45860 10 6452 1 2025-11-02 09:48:53.959 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-02 09:52:54.834 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51722 10 6452 1 2025-11-02 09:49:53.963 00:05:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-02 09:53:55.232 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47464 10 6452 1 2025-11-02 09:54:55.631 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33056 10 6452 1 2025-11-02 09:55:56.030 00:00:26.707 TCP 1.101.0.1:3000 -> 23.104.0.1:39432 10 6452 1 2025-11-02 09:56:34.145 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-02 09:56:33.930 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:56:34.140 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-02 09:56:34.092 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-02 09:56:34.224 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-02 09:57:12.799 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42198 10 6452 1 2025-11-02 09:58:13.209 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45218 10 6452 1 Summary: total flows: 139, total bytes: 410548, total packets: 1010, avg bps: 862, avg pps: 0, avg bpp: 406 Time window: 2025-11-02 08:54:53 - 2025-11-02 09:58:23 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0032s User: 0.0011s Wall: 0.0018s flows/second: 78308.7 Runtime: 0.0018s