Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 22:54:00.260 00:06:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 22:58:58.025 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59590 10 6452 1 2025-11-13 22:59:58.423 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43464 10 6452 1 2025-11-13 23:00:58.828 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48026 10 6452 1 2025-11-13 23:02:07.370 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:02:07.468 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:02:07.400 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:02:07.208 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:01:59.229 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54188 10 6452 1 2025-11-13 23:02:07.288 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 22:58:00.259 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 23:02:59.633 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39884 10 6452 1 2025-11-13 23:04:00.034 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60912 10 6452 1 2025-11-13 23:05:00.436 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:40958 12 10375 1 2025-11-13 23:01:00.260 00:06:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 23:06:00.918 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36522 10 6452 1 2025-11-13 23:07:07.518 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:07:07.571 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:07:07.503 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:07:07.365 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:07:07.436 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:07:01.317 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:40774 10 6452 1 2025-11-13 23:08:01.719 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55688 10 6452 1 2025-11-13 23:09:02.105 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34708 10 6452 1 2025-11-13 23:05:00.259 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 23:10:02.510 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48810 10 6452 1 2025-11-13 23:11:02.921 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53846 10 6452 1 2025-11-13 23:12:07.639 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:12:07.563 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:12:07.403 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:12:07.557 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:12:07.758 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:12:03.341 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59178 10 6452 1 2025-11-13 23:08:00.262 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 23:13:03.712 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:59570 10 6452 1 2025-11-13 23:14:04.091 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:36348 10 6452 1 2025-11-13 23:15:04.469 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58742 10 6452 1 2025-11-13 23:16:04.838 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:51940 10 6452 1 2025-11-13 23:12:00.261 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 23:17:07.766 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:17:07.824 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:17:07.671 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:17:07.827 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:17:07.910 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:17:05.261 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60402 10 6452 1 2025-11-13 23:18:05.661 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39126 10 6452 1 2025-11-13 23:19:06.099 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58692 10 6452 1 2025-11-13 23:15:00.266 00:06:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 23:20:06.509 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55512 10 6452 1 2025-11-13 23:21:06.872 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37578 10 6452 1 2025-11-13 23:22:07.768 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:22:07.924 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:22:07.793 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:22:07.776 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:22:07.858 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:22:07.280 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54602 10 6452 1 2025-11-13 23:23:07.681 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48474 10 6452 1 2025-11-13 23:19:00.264 00:06:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 23:24:08.110 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57730 10 6452 1 2025-11-13 23:25:08.511 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43054 10 6452 1 2025-11-13 23:26:08.915 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54488 10 6452 1 2025-11-13 23:22:00.268 00:06:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 23:27:07.924 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:27:07.775 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:27:07.950 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:27:07.917 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:27:07.999 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:27:09.321 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45946 10 6452 1 2025-11-13 23:28:09.725 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35014 10 6452 1 2025-11-13 23:29:10.126 00:00:16.711 TCP 1.101.0.1:3000 -> 23.104.0.1:55148 10 6452 1 2025-11-13 23:30:16.877 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41280 10 6452 1 2025-11-13 23:26:00.268 00:06:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 23:31:17.291 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41840 10 6452 1 2025-11-13 23:32:08.154 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:32:08.056 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:32:08.198 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:32:07.939 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:32:08.071 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:32:17.661 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40930 10 6452 1 2025-11-13 23:33:18.091 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53734 10 6452 1 2025-11-13 23:29:00.272 00:06:00.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 23:34:18.499 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37146 10 6452 1 2025-11-13 23:35:18.906 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51056 10 6452 1 2025-11-13 23:36:19.307 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55776 10 6452 1 2025-11-13 23:37:08.244 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:37:08.068 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:37:08.197 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:37:08.184 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:37:08.160 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:37:19.706 00:00:10.452 TCP 1.101.0.1:3000 -> 23.104.0.1:54456 11 6504 1 2025-11-13 23:33:00.269 00:06:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 23:38:20.223 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57118 10 6452 1 2025-11-13 23:39:20.632 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53898 10 6452 1 2025-11-13 23:40:21.005 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46652 10 6452 1 2025-11-13 23:36:00.273 00:06:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 23:41:21.418 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32944 10 6452 1 2025-11-13 23:42:08.074 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:42:08.228 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:42:08.139 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:42:08.085 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:42:07.991 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:42:21.829 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47916 10 6452 1 2025-11-13 23:43:22.234 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55498 10 6452 1 2025-11-13 23:44:22.593 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43308 10 6452 1 2025-11-13 23:40:00.270 00:06:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 23:45:23.004 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55792 10 6452 1 2025-11-13 23:46:23.405 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59642 10 6452 1 2025-11-13 23:47:08.332 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:47:08.261 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:47:08.103 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:47:08.046 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:47:08.129 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:47:23.807 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36918 10 6452 1 2025-11-13 23:43:00.273 00:06:00.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 23:48:24.211 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53908 10 6452 1 2025-11-13 23:49:24.616 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60774 10 6452 1 2025-11-13 23:50:25.022 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37206 10 6452 1 2025-11-13 23:51:25.424 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35122 10 6452 1 2025-11-13 23:47:00.272 00:06:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 23:52:08.347 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:52:08.264 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:52:08.377 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:52:08.291 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:52:08.265 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:52:25.828 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58260 10 6452 1 2025-11-13 23:53:26.235 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:36558 10 6452 1 2025-11-13 23:54:26.689 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:59400 10 6452 1 2025-11-13 23:50:00.276 00:06:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 23:55:27.095 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50158 10 6452 1 2025-11-13 23:56:27.501 00:00:13.689 TCP 1.101.0.1:3000 -> 23.104.0.1:59072 10 6452 1 2025-11-13 23:57:08.798 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:57:08.757 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:57:08.730 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:57:08.921 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:57:08.716 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:57:31.258 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53602 10 6452 1 2025-11-13 23:58:31.670 00:00:10.426 TCP 1.101.0.1:3000 -> 23.104.0.1:45970 10 6452 1 Summary: total flows: 137, total bytes: 420852, total packets: 1021, avg bps: 867, avg pps: 0, avg bpp: 412 Time window: 2025-11-13 22:54:00 - 2025-11-13 23:58:42 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0035s User: 0.0018s Wall: 0.0051s flows/second: 26741.4 Runtime: 0.0051s