Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 03:58:48.679 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42354 10 6452 1 2025-11-14 03:59:49.102 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56056 10 6452 1 2025-11-14 03:55:00.387 00:06:00.191 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 04:00:49.521 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58182 10 6452 1 2025-11-14 04:01:49.921 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:33254 10 6452 1 2025-11-14 04:02:13.658 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 04:02:13.692 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 04:02:13.575 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 04:02:13.139 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:02:13.576 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:02:50.348 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42280 10 6452 1 2025-11-14 04:03:50.748 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38484 10 6452 1 2025-11-14 03:59:00.385 00:06:00.197 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 04:04:51.161 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49352 10 6452 1 2025-11-14 04:05:51.561 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:55112 10 6452 1 2025-11-14 04:02:00.387 00:06:00.193 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 04:06:52.010 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46854 10 6452 1 2025-11-14 04:07:13.709 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 04:07:13.702 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 04:07:13.790 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 04:07:13.522 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:07:13.625 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:07:52.381 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58340 10 6452 1 2025-11-14 04:08:52.788 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38954 10 6452 1 2025-11-14 04:09:53.187 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37414 10 6452 1 2025-11-14 04:06:00.385 00:06:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 04:10:53.587 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43690 10 6452 1 2025-11-14 04:11:53.999 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37596 10 6452 1 2025-11-14 04:12:13.863 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 04:12:13.813 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 04:12:13.844 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 04:12:13.610 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:12:13.780 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:12:54.401 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34322 10 6452 1 2025-11-14 04:09:00.389 00:06:00.194 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 04:13:54.808 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52814 10 6452 1 2025-11-14 04:14:55.210 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35744 10 6452 1 2025-11-14 04:15:55.574 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47008 10 6452 1 2025-11-14 04:17:13.907 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 04:16:55.983 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:40042 10 6452 1 2025-11-14 04:17:13.753 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 04:17:13.679 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 04:17:13.711 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:17:13.824 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:13:00.389 00:06:00.200 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 04:17:56.344 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54184 10 6452 1 2025-11-14 04:18:56.747 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56944 10 6452 1 2025-11-14 04:19:57.150 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40246 10 6452 1 2025-11-14 04:16:00.389 00:06:00.196 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 04:20:57.554 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42396 10 6452 1 2025-11-14 04:21:57.918 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49216 10 6452 1 2025-11-14 04:22:14.187 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 04:22:14.109 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 04:22:14.336 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 04:22:14.171 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:22:14.106 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:22:58.320 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35840 10 6452 1 2025-11-14 04:23:58.725 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43844 10 6452 1 2025-11-14 04:20:00.389 00:06:00.202 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 04:24:59.134 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43620 10 6452 1 2025-11-14 04:25:59.495 00:00:10.887 TCP 1.101.0.1:3000 -> 23.104.0.1:51648 10 6452 1 2025-11-14 04:27:14.205 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 04:27:14.123 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:27:00.417 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44518 10 6452 1 2025-11-14 04:27:13.958 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 04:27:14.016 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 04:27:13.812 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:23:00.393 00:06:00.199 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 04:28:00.794 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:44052 10 6452 1 2025-11-14 04:29:01.224 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41806 10 6452 1 2025-11-14 04:30:01.637 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58508 10 6452 1 2025-11-14 04:31:02.042 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58354 10 6452 1 2025-11-14 04:27:00.392 00:06:00.204 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 04:32:14.199 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 04:32:02.444 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36134 10 6452 1 2025-11-14 04:32:14.087 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 04:32:14.187 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:32:14.097 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:32:14.179 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 04:33:02.845 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:52688 10 6452 1 2025-11-14 04:34:03.261 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60810 10 6452 1 2025-11-14 04:30:00.395 00:06:00.199 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 04:35:03.666 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37306 10 6452 1 2025-11-14 04:36:04.096 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:56446 10 6452 1 2025-11-14 04:37:14.279 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 04:37:14.426 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 04:37:14.344 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:37:14.427 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:37:04.451 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40564 10 6452 1 2025-11-14 04:37:14.510 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 04:38:04.818 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39876 10 6452 1 2025-11-14 04:34:00.395 00:06:00.204 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 04:39:05.221 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39244 10 6452 1 2025-11-14 04:40:05.632 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50718 10 6452 1 2025-11-14 04:41:06.035 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60032 10 6452 1 2025-11-14 04:37:00.398 00:06:00.200 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 04:42:14.368 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 04:42:14.193 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 04:42:14.230 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:42:14.208 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:42:14.291 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 04:42:06.431 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:57992 10 6452 1 2025-11-14 04:43:06.893 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35090 10 6452 1 2025-11-14 04:44:07.318 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50176 10 6452 1 2025-11-14 04:45:07.689 00:00:10.457 TCP 1.101.0.1:3000 -> 23.104.0.1:38898 14 10479 1 2025-11-14 04:41:00.395 00:06:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 04:46:08.184 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58528 10 6452 1 2025-11-14 04:47:14.435 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 04:47:14.401 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 04:47:14.194 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 04:47:14.290 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:47:14.352 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:47:08.544 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48548 10 6452 1 2025-11-14 04:48:08.947 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52966 10 6452 1 2025-11-14 04:44:00.399 00:06:00.200 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 04:49:09.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53908 10 6452 1 2025-11-14 04:50:09.758 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:43276 10 6452 1 2025-11-14 04:51:10.185 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46202 10 6452 1 2025-11-14 04:52:14.442 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 04:52:14.438 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 04:52:14.225 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:52:14.438 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:52:14.521 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 04:52:10.593 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59956 10 6452 1 2025-11-14 04:48:00.402 00:06:00.201 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 04:53:11.000 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37778 10 6452 1 2025-11-14 04:54:11.402 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:55552 10 6452 1 2025-11-14 04:55:11.775 00:00:20.910 TCP 1.101.0.1:3000 -> 23.104.0.1:42376 10 6452 1 2025-11-14 04:51:00.400 00:06:00.199 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 04:56:22.733 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39900 10 6452 1 2025-11-14 04:57:14.809 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 04:57:14.566 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 04:57:14.636 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 04:57:14.490 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:57:14.728 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 04:57:23.170 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:34458 10 6452 1 2025-11-14 04:58:23.571 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42740 10 6452 1 Summary: total flows: 137, total bytes: 420904, total packets: 1022, avg bps: 882, avg pps: 0, avg bpp: 411 Time window: 2025-11-14 03:55:00 - 2025-11-14 04:58:33 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0037s User: 0.0012s Wall: 0.0022s flows/second: 62875.5 Runtime: 0.0022s