Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 03:58:46.429 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60092 10 6452 1 2025-11-04 03:59:46.794 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50268 10 6452 1 2025-11-04 03:56:54.862 00:05:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 04:00:47.154 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:37656 11 6504 1 2025-11-04 04:01:47.605 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55730 10 6452 1 2025-11-04 04:02:24.648 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 04:02:24.654 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:02:24.683 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:02:24.565 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:02:24.836 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 03:58:54.864 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 04:02:48.012 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40332 10 6452 1 2025-11-04 04:03:48.416 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34828 10 6452 1 2025-11-04 04:04:48.825 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43084 10 6452 1 2025-11-04 04:05:49.188 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59240 10 6452 1 2025-11-04 04:02:54.863 00:05:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 04:06:49.592 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51730 10 6452 1 2025-11-04 04:07:24.785 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:07:24.837 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:07:24.895 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:07:24.829 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:07:24.920 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 04:07:49.996 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60132 10 6452 1 2025-11-04 04:04:54.866 00:05:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 04:08:50.400 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51444 10 6452 1 2025-11-04 04:09:50.762 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 10 6452 1 2025-11-04 04:10:51.173 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40426 10 6452 1 2025-11-04 04:11:51.534 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58192 10 6452 1 2025-11-04 04:12:24.802 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 04:12:24.799 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:12:24.799 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:12:24.721 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:12:24.798 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:08:54.865 00:05:00.388 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 04:12:51.948 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60404 10 6452 1 2025-11-04 04:13:52.310 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46630 10 6452 1 2025-11-04 04:10:54.868 00:05:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 04:14:52.719 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:56646 10 6452 1 2025-11-04 04:15:53.142 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42724 10 6452 1 2025-11-04 04:16:53.517 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46892 10 6452 1 2025-11-04 04:17:25.301 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:17:24.886 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:17:25.203 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:17:25.203 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:17:25.286 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 04:17:53.885 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36852 10 6452 1 2025-11-04 04:14:54.866 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 04:18:54.295 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40236 10 6452 1 2025-11-04 04:19:54.702 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:37266 10 6452 1 2025-11-04 04:16:54.869 00:05:00.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 04:20:55.109 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40226 10 6452 1 2025-11-04 04:21:55.511 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38840 10 6452 1 2025-11-04 04:22:24.977 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:22:25.162 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:22:25.221 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:22:25.228 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:22:25.303 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 04:22:55.909 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42896 10 6452 1 2025-11-04 04:23:56.275 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39374 10 6452 1 2025-11-04 04:20:54.866 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 04:24:56.681 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58144 10 6452 1 2025-11-04 04:25:57.056 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60878 10 6452 1 2025-11-04 04:22:54.874 00:05:00.387 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 04:26:57.454 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42954 10 6452 1 2025-11-04 04:27:25.412 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 04:27:25.143 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:27:25.181 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:27:25.331 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:27:25.210 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:27:57.818 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35642 10 6452 1 2025-11-04 04:28:58.223 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40874 10 6452 1 2025-11-04 04:29:58.628 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47450 10 6452 1 2025-11-04 04:26:54.876 00:05:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 04:30:59.054 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32960 10 6452 1 2025-11-04 04:31:59.453 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60600 10 6452 1 2025-11-04 04:32:25.389 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 04:32:25.303 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:32:25.242 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:32:25.307 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:32:25.366 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:28:54.879 00:05:00.384 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 04:32:59.851 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34856 10 6452 1 2025-11-04 04:34:00.280 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:49646 10 6452 1 2025-11-04 04:35:00.708 00:00:11.150 TCP 1.101.0.1:3000 -> 23.104.0.1:59244 10 6452 1 2025-11-04 04:36:01.898 00:00:10.450 TCP 1.101.0.1:3000 -> 23.104.0.1:43882 13 10421 1 2025-11-04 04:32:54.878 00:05:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 04:37:02.393 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47410 10 6452 1 2025-11-04 04:37:25.733 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 04:37:25.459 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:37:25.185 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:37:25.650 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:37:25.553 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:38:02.799 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52952 10 6452 1 2025-11-04 04:34:54.880 00:05:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 04:39:03.203 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58968 10 6452 1 2025-11-04 04:40:03.606 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53156 10 6452 1 2025-11-04 04:41:04.006 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58134 10 6452 1 2025-11-04 04:42:04.406 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46206 10 6452 1 2025-11-04 04:42:25.571 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 04:42:25.522 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:42:25.407 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:42:25.489 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:42:25.487 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:38:54.879 00:05:00.389 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 04:43:04.806 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32820 10 6452 1 2025-11-04 04:44:05.210 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40304 10 6452 1 2025-11-04 04:40:54.882 00:05:00.383 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 04:45:05.610 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34436 10 6452 1 2025-11-04 04:46:06.013 00:00:10.548 TCP 1.101.0.1:3000 -> 23.104.0.1:36208 16 18424 1 2025-11-04 04:47:06.597 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53256 10 6661 1 2025-11-04 04:47:25.672 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:47:25.634 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:47:25.687 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:47:25.494 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:47:25.770 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 04:48:07.004 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44484 10 6661 1 2025-11-04 04:44:54.884 00:05:00.384 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 04:49:07.415 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52086 10 6661 1 2025-11-04 04:50:07.821 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43210 10 6661 1 2025-11-04 04:46:54.887 00:05:00.380 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 04:51:08.227 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51140 10 6661 1 2025-11-04 04:52:08.628 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36024 10 6661 1 2025-11-04 04:52:25.608 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:52:25.510 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:52:25.672 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:52:25.685 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:52:25.755 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 04:53:09.030 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57574 10 6661 1 2025-11-04 04:54:09.438 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45730 10 6661 1 2025-11-04 04:50:54.887 00:05:00.385 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-04 04:55:09.838 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:52856 10 6661 1 2025-11-04 04:56:10.265 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36968 10 6661 1 2025-11-04 04:52:54.889 00:05:00.379 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-04 04:57:25.688 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 04:57:25.842 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 04:57:25.755 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:57:25.606 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 04:57:25.884 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 04:57:10.629 00:00:10.586 TCP 1.101.0.1:3000 -> 23.104.0.1:45116 10 6661 1 2025-11-04 04:58:11.250 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45376 10 6661 1 Summary: total flows: 140, total bytes: 435501, total packets: 1030, avg bps: 945, avg pps: 0, avg bpp: 422 Time window: 2025-11-04 03:56:54 - 2025-11-04 04:58:21 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0039s User: 0.0020s Wall: 0.0018s flows/second: 76628.3 Runtime: 0.0018s