Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 14:58:55.724 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44660 10 6452 1 2025-11-13 14:55:00.104 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 14:59:56.138 00:00:14.852 TCP 1.101.0.1:3000 -> 23.104.0.1:46164 12 10369 1 2025-11-13 15:01:01.032 00:00:10.482 TCP 1.101.0.1:3000 -> 23.104.0.1:52782 10 6452 1 2025-11-13 15:01:57.822 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:01:57.889 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:01:57.734 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:01:57.866 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:01:57.740 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:02:01.555 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36738 10 6452 1 2025-11-13 14:58:00.113 00:06:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 15:03:01.917 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34662 10 6452 1 2025-11-13 15:04:02.318 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36834 10 6452 1 2025-11-13 15:05:02.719 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42632 10 6452 1 2025-11-13 15:06:03.122 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52372 10 6452 1 2025-11-13 15:06:57.992 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:06:57.961 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:06:58.005 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:06:57.837 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:06:57.909 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:02:00.111 00:06:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 15:07:03.489 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35694 10 6452 1 2025-11-13 15:08:03.886 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52260 10 6452 1 2025-11-13 15:09:04.292 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36980 10 6452 1 2025-11-13 15:05:00.116 00:06:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 15:10:04.690 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45032 10 6452 1 2025-11-13 15:11:05.063 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53478 10 6452 1 2025-11-13 15:11:58.262 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:11:58.486 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:11:58.183 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:11:57.829 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:11:58.181 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:12:05.430 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36996 10 6452 1 2025-11-13 15:13:05.833 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52262 10 6452 1 2025-11-13 15:09:00.114 00:06:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 15:14:06.237 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34248 10 6452 1 2025-11-13 15:15:06.639 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59628 10 6452 1 2025-11-13 15:16:07.000 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40062 10 6452 1 2025-11-13 15:16:58.256 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:16:58.119 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:16:58.114 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:16:57.983 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:16:58.173 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:12:00.116 00:06:00.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 15:17:07.370 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46702 10 6452 1 2025-11-13 15:18:07.770 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44238 10 6452 1 2025-11-13 15:19:08.179 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35258 10 6452 1 2025-11-13 15:20:08.588 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:44614 10 6452 1 2025-11-13 15:16:00.119 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 15:21:08.959 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38550 10 6452 1 2025-11-13 15:21:58.614 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:21:58.532 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:21:58.465 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:21:58.282 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:21:58.532 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:22:09.363 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35164 10 6452 1 2025-11-13 15:23:09.784 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58912 10 6452 1 2025-11-13 15:19:00.120 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 15:24:10.191 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47136 10 6452 1 2025-11-13 15:25:10.564 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:41210 10 6452 1 2025-11-13 15:26:10.960 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39058 10 6452 1 2025-11-13 15:26:58.062 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:26:58.218 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:26:58.300 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:26:58.158 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:26:57.981 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:27:11.371 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52058 10 6452 1 2025-11-13 15:23:00.119 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 15:28:11.778 00:00:10.507 TCP 1.101.0.1:3000 -> 23.104.0.1:33712 10 6452 1 2025-11-13 15:29:12.324 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41692 10 6452 1 2025-11-13 15:30:12.680 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40568 10 6452 1 2025-11-13 15:26:00.122 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 15:31:13.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51604 10 6452 1 2025-11-13 15:31:58.456 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:31:58.394 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:31:58.397 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:31:58.335 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:31:58.418 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:32:13.518 00:00:10.866 TCP 1.101.0.1:3000 -> 23.104.0.1:45434 10 6452 1 2025-11-13 15:33:14.423 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51654 10 6452 1 2025-11-13 15:34:14.789 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:59910 12 10369 1 2025-11-13 15:30:00.121 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 15:35:15.265 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53162 10 6452 1 2025-11-13 15:36:15.630 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35508 12 6556 1 2025-11-13 15:36:58.588 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:36:58.438 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:36:58.565 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:36:58.528 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:36:58.505 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:37:16.036 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45580 10 6452 1 2025-11-13 15:33:00.125 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 15:38:16.438 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40410 10 6452 1 2025-11-13 15:39:16.859 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60888 10 6452 1 2025-11-13 15:40:17.273 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37050 10 6452 1 2025-11-13 15:41:17.673 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40774 10 6452 1 2025-11-13 15:41:58.694 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:41:58.653 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:41:58.511 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:41:58.623 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:41:58.613 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:37:00.123 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 15:42:18.116 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44160 10 6452 1 2025-11-13 15:43:18.520 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58720 10 6452 1 2025-11-13 15:44:18.923 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53982 10 6452 1 2025-11-13 15:40:00.126 00:06:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 15:45:19.338 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39562 10 6452 1 2025-11-13 15:46:19.751 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57478 10 6452 1 2025-11-13 15:46:59.163 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:46:59.078 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:46:58.996 00:00:00.045 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:46:58.856 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:46:59.080 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:47:20.115 00:00:18.539 TCP 1.101.0.1:3000 -> 23.104.0.1:38830 10 6452 1 2025-11-13 15:48:28.715 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33962 10 6452 1 2025-11-13 15:44:00.124 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 15:49:29.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42410 10 6452 1 2025-11-13 15:50:29.522 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35918 10 6452 1 2025-11-13 15:51:29.887 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43666 10 6452 1 2025-11-13 15:51:58.911 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:51:58.877 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:51:58.819 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:51:58.754 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:51:58.829 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:47:00.128 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 15:52:30.304 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38616 10 6452 1 2025-11-13 15:53:30.704 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:57574 10 6452 1 2025-11-13 15:54:31.135 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:33972 12 10375 1 2025-11-13 15:55:31.613 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48096 10 6452 1 2025-11-13 15:51:00.125 00:06:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 15:56:32.029 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50248 10 6452 1 2025-11-13 15:56:58.860 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:56:58.860 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:56:58.756 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:56:58.859 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:56:58.942 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:57:32.390 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38898 10 6452 1 2025-11-13 15:58:32.793 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46968 10 6452 1 Summary: total flows: 137, total bytes: 428738, total packets: 1026, avg bps: 897, avg pps: 0, avg bpp: 417 Time window: 2025-11-13 14:55:00 - 2025-11-13 15:58:43 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0020s User: 0.0030s Wall: 0.0036s flows/second: 37948.7 Runtime: 0.0036s