Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 00:58:58.915 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40782 10 6452 1 2025-11-04 00:59:59.320 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51528 10 6452 1 2025-11-04 00:56:54.807 00:05:00.391 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 01:00:59.724 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52218 10 6452 1 2025-11-04 01:02:00.121 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57976 10 6452 1 2025-11-04 01:02:21.881 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 01:02:21.727 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 01:02:21.357 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:02:21.798 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:02:21.842 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 00:58:54.812 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 01:03:00.520 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41440 10 6452 1 2025-11-04 01:04:00.926 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:39906 10 6452 1 2025-11-04 01:05:01.302 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57804 10 6452 1 2025-11-04 01:06:01.704 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38108 10 6452 1 2025-11-04 01:02:54.812 00:05:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 01:07:02.113 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37748 10 6452 1 2025-11-04 01:07:20.915 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 01:07:21.305 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 01:07:21.098 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:07:21.223 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:07:21.216 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 01:08:02.511 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59376 10 6452 1 2025-11-04 01:04:54.815 00:05:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 01:09:02.911 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55968 10 6452 1 2025-11-04 01:10:03.319 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55712 10 6452 1 2025-11-04 01:11:03.723 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58046 10 6452 1 2025-11-04 01:12:04.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42274 10 6452 1 2025-11-04 01:12:21.285 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 01:12:21.394 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 01:12:21.298 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:12:21.202 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:12:21.390 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 01:08:54.813 00:05:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 01:13:04.511 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57208 10 6452 1 2025-11-04 01:14:04.917 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:39208 10 6452 1 2025-11-04 01:10:54.816 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 01:15:05.340 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55344 10 6452 1 2025-11-04 01:16:05.703 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36992 10 6452 1 2025-11-04 01:17:06.110 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51364 10 6452 1 2025-11-04 01:17:21.420 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 01:17:21.439 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:17:21.406 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:17:21.253 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 01:17:21.489 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 01:18:06.470 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46316 10 6452 1 2025-11-04 01:14:54.814 00:05:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 01:19:06.878 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34410 10 6452 1 2025-11-04 01:20:07.284 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37272 10 6452 1 2025-11-04 01:16:54.817 00:05:00.388 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 01:21:07.692 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50388 10 6452 1 2025-11-04 01:22:08.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46436 10 6452 1 2025-11-04 01:22:21.564 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 01:22:21.582 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:22:21.561 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:22:21.652 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 01:22:21.644 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 01:23:08.519 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57556 10 6452 1 2025-11-04 01:24:08.921 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43354 10 6452 1 2025-11-04 01:20:54.815 00:05:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 01:25:09.327 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33784 10 6452 1 2025-11-04 01:26:09.691 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39272 10 6452 1 2025-11-04 01:22:54.817 00:05:00.389 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 01:27:10.114 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52784 10 6452 1 2025-11-04 01:27:21.590 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 01:27:21.508 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 01:27:21.536 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:27:21.508 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:27:21.680 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 01:28:10.474 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55218 10 6452 1 2025-11-04 01:29:10.875 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40514 10 6452 1 2025-11-04 01:30:11.235 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40178 10 6452 1 2025-11-04 01:26:54.815 00:05:00.395 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 01:31:11.637 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:38272 10 6452 1 2025-11-04 01:32:21.714 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 01:32:21.734 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:32:11.995 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40936 10 6452 1 2025-11-04 01:32:21.764 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:32:21.837 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 01:32:21.847 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 01:28:54.817 00:05:00.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 01:33:12.401 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49896 10 6452 1 2025-11-04 01:34:12.773 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37012 10 6452 1 2025-11-04 01:35:13.183 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33206 10 6452 1 2025-11-04 01:36:13.587 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36240 10 6452 1 2025-11-04 01:32:54.817 00:05:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 01:37:21.795 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 01:37:21.786 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 01:37:21.811 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:37:21.712 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:37:21.858 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 01:37:13.992 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:54920 10 6452 1 2025-11-04 01:38:14.416 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39978 10 6452 1 2025-11-04 01:34:54.818 00:05:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 01:39:14.823 00:00:10.709 TCP 1.101.0.1:3000 -> 23.104.0.1:35934 10 6452 1 2025-11-04 01:40:15.576 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60644 10 6452 1 2025-11-04 01:41:15.971 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43990 10 6452 1 2025-11-04 01:42:21.858 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:42:21.856 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 01:42:21.843 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 01:42:21.617 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:42:21.942 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 01:42:16.385 00:00:10.764 TCP 1.101.0.1:3000 -> 23.104.0.1:57262 10 6452 1 2025-11-04 01:38:54.817 00:05:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 01:43:17.205 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54502 10 6452 1 2025-11-04 01:44:17.616 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47686 10 6452 1 2025-11-04 01:40:54.820 00:05:00.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 01:45:18.032 00:00:10.483 TCP 1.101.0.1:3000 -> 23.104.0.1:44918 10 6452 1 2025-11-04 01:46:18.559 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35662 12 6556 1 2025-11-04 01:47:22.530 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 01:47:22.524 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 01:47:21.718 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:47:22.447 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:47:22.249 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 01:47:18.969 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:38504 10 6452 1 2025-11-04 01:48:19.407 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:55090 10 6452 1 2025-11-04 01:44:54.818 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 01:49:19.805 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56918 10 6452 1 2025-11-04 01:50:20.209 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35134 10 6452 1 2025-11-04 01:46:54.823 00:05:00.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 01:51:20.610 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42184 10 6452 1 2025-11-04 01:52:22.111 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 01:52:22.050 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 01:52:22.072 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:52:22.028 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:52:22.148 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 01:52:20.975 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44644 10 6452 1 2025-11-04 01:53:21.388 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:44278 10 6452 1 2025-11-04 01:54:21.745 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34464 10 6452 1 2025-11-04 01:50:54.820 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 01:55:22.149 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51364 10 6452 1 2025-11-04 01:56:22.553 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49366 10 6452 1 2025-11-04 01:52:54.825 00:05:00.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 01:57:22.432 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 01:57:22.198 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 01:57:22.083 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:57:22.350 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 01:57:22.129 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 01:57:22.914 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53040 10 6452 1 2025-11-04 01:58:23.314 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38928 10 6452 1 Summary: total flows: 140, total bytes: 417104, total packets: 1022, avg bps: 902, avg pps: 0, avg bpp: 408 Time window: 2025-11-04 00:56:54 - 2025-11-04 01:58:33 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0033s User: 0.0022s Wall: 0.0028s flows/second: 49415.3 Runtime: 0.0028s