Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 18:59:14.341 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35318 10 6452 1 2025-11-04 18:55:55.240 00:04:00.303 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 19:00:14.745 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54170 10 6452 1 2025-11-04 19:01:15.152 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50396 10 6452 1 2025-11-04 19:02:15.526 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58364 10 6452 1 2025-11-04 19:02:42.703 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 19:02:42.762 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:02:42.622 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:02:42.744 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 19:02:42.801 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 18:58:55.242 00:04:00.298 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 19:03:15.930 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:46776 10 6452 1 2025-11-04 19:04:16.360 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48084 10 6452 1 2025-11-04 19:00:55.241 00:04:00.303 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 19:05:16.764 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35134 10 6452 1 2025-11-04 19:06:17.173 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38782 10 6452 1 2025-11-04 19:07:17.539 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47106 10 6452 1 2025-11-04 19:07:42.960 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 19:07:42.878 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:07:42.953 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 19:07:42.708 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 19:07:42.749 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:03:55.246 00:04:00.296 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 19:08:17.944 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:42990 10 6452 1 2025-11-04 19:09:18.397 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38442 10 6452 1 2025-11-04 19:05:55.243 00:04:00.301 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 19:10:18.767 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51872 10 6452 1 2025-11-04 19:11:19.183 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:52820 12 10369 1 2025-11-04 19:12:19.663 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40560 10 6452 1 2025-11-04 19:12:43.104 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 19:12:42.639 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:12:43.064 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:12:42.945 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 19:12:43.147 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 19:08:55.246 00:04:00.297 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 19:13:20.068 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58780 10 6452 1 2025-11-04 19:14:20.470 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57424 10 6452 1 2025-11-04 19:10:55.244 00:04:00.302 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 19:15:20.835 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:48344 10 6452 1 2025-11-04 19:16:21.263 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40750 10 6452 1 2025-11-04 19:17:21.671 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39892 10 6452 1 2025-11-04 19:17:43.099 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 19:17:42.820 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:17:43.108 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:17:43.117 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 19:17:43.191 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 19:13:55.248 00:04:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 19:18:22.034 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45442 10 6452 1 2025-11-04 19:19:22.396 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37712 10 6452 1 2025-11-04 19:15:55.250 00:04:00.297 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 19:20:22.795 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56382 10 6452 1 2025-11-04 19:21:23.204 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43178 10 6452 1 2025-11-04 19:22:23.609 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:59458 10 6452 1 2025-11-04 19:22:43.204 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 19:22:43.218 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 19:22:43.014 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:22:43.122 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:22:42.989 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 19:18:55.252 00:04:00.293 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 19:23:23.968 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49824 10 6452 1 2025-11-04 19:24:24.373 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36576 10 6452 1 2025-11-04 19:23:55.254 00:01:00.291 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-04 19:20:55.250 00:04:00.298 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 19:25:24.771 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43390 10 6452 1 2025-11-04 19:26:25.174 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36294 10 6452 1 2025-11-04 19:25:55.252 00:01:00.296 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-04 19:27:25.540 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56620 10 6452 1 2025-11-04 19:27:43.509 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 19:27:43.133 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:27:43.314 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:27:43.542 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 19:27:43.397 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 19:25:55.254 00:02:00.291 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-04 19:28:25.908 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:35288 10 6452 1 2025-11-04 19:29:26.345 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37656 12 6556 1 2025-11-04 19:28:55.261 00:01:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-04 19:27:55.261 00:02:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-04 19:30:26.759 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45238 10 6452 1 2025-11-04 19:31:27.123 00:00:10.889 TCP 1.101.0.1:3000 -> 23.104.0.1:41136 10 6452 1 2025-11-04 19:30:55.259 00:01:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-04 19:32:43.641 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 19:32:28.054 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49412 10 6452 1 2025-11-04 19:32:43.563 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 19:32:43.685 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:32:43.559 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:32:43.809 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 19:33:28.454 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57730 10 6452 1 2025-11-04 19:34:28.818 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52968 10 6452 1 2025-11-04 19:30:55.261 00:04:00.288 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 19:35:29.223 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44256 10 6452 1 2025-11-04 19:36:29.623 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57630 10 6452 1 2025-11-04 19:32:55.259 00:04:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 19:37:30.023 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34036 10 6452 1 2025-11-04 19:37:43.528 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 19:37:43.136 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:37:43.450 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:37:43.356 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 19:37:43.532 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 19:38:30.383 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50706 10 6452 1 2025-11-04 19:39:30.785 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57914 10 6452 1 2025-11-04 19:35:55.265 00:04:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 19:40:31.189 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41424 10 6452 1 2025-11-04 19:41:31.591 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39604 10 6452 1 2025-11-04 19:37:55.261 00:04:00.299 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 19:42:43.738 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 19:42:43.437 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 19:42:43.443 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:42:43.656 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:42:43.602 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 19:42:32.000 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39288 10 6452 1 2025-11-04 19:43:32.402 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34138 10 6452 1 2025-11-04 19:44:32.805 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54742 10 6452 1 2025-11-04 19:40:55.278 00:04:00.279 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 19:45:33.213 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34250 10 6452 1 2025-11-04 19:46:33.621 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:47256 10 6452 1 2025-11-04 19:42:55.277 00:04:00.284 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 19:47:43.540 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 19:47:43.521 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:47:43.624 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:47:43.801 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 19:47:34.029 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55464 10 6452 1 2025-11-04 19:47:43.706 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 19:48:34.386 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32864 10 6452 1 2025-11-04 19:49:34.781 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48186 10 6452 1 2025-11-04 19:45:55.281 00:04:00.278 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 19:50:35.196 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54314 10 6452 1 2025-11-04 19:47:55.278 00:04:00.283 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 19:50:55.284 00:01:00.276 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-04 19:51:35.559 00:00:19.878 TCP 1.101.0.1:3000 -> 23.104.0.1:53476 10 6452 1 2025-11-04 19:52:43.877 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 19:52:43.703 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:52:43.772 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:52:43.869 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 19:52:43.855 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 19:52:45.479 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51054 10 6452 1 2025-11-04 19:53:45.883 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:41950 12 6556 1 2025-11-04 19:52:55.285 00:02:00.276 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-04 19:54:46.307 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46658 10 6452 1 2025-11-04 19:55:46.714 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46888 10 6452 1 2025-11-04 19:55:55.284 00:01:00.276 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-04 19:52:55.281 00:04:00.282 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 19:56:47.123 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34142 10 6452 1 2025-11-04 19:57:43.975 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 19:57:43.890 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 19:57:43.781 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:57:43.892 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 19:57:43.886 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 19:57:47.487 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44202 10 6452 1 Summary: total flows: 148, total bytes: 414796, total packets: 1018, avg bps: 891, avg pps: 0, avg bpp: 407 Time window: 2025-11-04 18:55:55 - 2025-11-04 19:57:57 Total flows processed: 148, passed: 148, Blocks skipped: 0, Bytes read: 15456 Sys: 0.0046s User: 0.0009s Wall: 0.0034s flows/second: 43696.8 Runtime: 0.0034s