Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 09:59:00.700 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45450 10 6452 1 2025-11-14 10:00:01.123 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45488 10 6452 1 2025-11-14 09:56:00.530 00:06:00.171 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 10:01:01.564 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:53378 10 6452 1 2025-11-14 10:02:01.934 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55096 10 6452 1 2025-11-14 10:02:20.781 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 10:02:20.698 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:02:20.703 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 10:02:20.573 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 10:02:20.522 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:03:02.357 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:48862 10 6452 1 2025-11-14 09:59:00.536 00:06:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 10:04:02.727 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35366 10 6452 1 2025-11-14 10:05:03.147 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32896 10 6452 1 2025-11-14 10:06:03.550 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34730 10 6452 1 2025-11-14 10:07:03.953 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36884 10 6452 1 2025-11-14 10:07:20.848 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 10:07:20.768 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 10:07:20.860 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 10:07:20.791 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:07:20.765 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:03:00.536 00:06:00.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 10:08:04.361 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40912 10 6452 1 2025-11-14 10:09:04.754 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38250 10 6452 1 2025-11-14 10:10:05.120 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52964 10 6452 1 2025-11-14 10:06:00.539 00:06:00.160 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 10:11:05.520 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39574 10 6452 1 2025-11-14 10:12:05.924 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:49542 10 6452 1 2025-11-14 10:12:21.035 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 10:12:20.954 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:12:20.771 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 10:12:20.963 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 10:12:20.560 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:13:06.354 00:00:14.590 TCP 1.101.0.1:3000 -> 23.104.0.1:37290 10 6452 1 2025-11-14 10:14:11.005 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57108 10 6452 1 2025-11-14 10:10:00.537 00:06:00.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 10:15:11.367 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58252 10 6452 1 2025-11-14 10:16:11.774 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45990 10 6452 1 2025-11-14 10:17:21.613 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 10:17:21.390 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 10:17:12.179 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58930 10 6452 1 2025-11-14 10:17:21.650 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 10:17:21.558 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:17:21.530 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:13:00.539 00:06:00.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 10:18:12.574 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36366 10 6452 1 2025-11-14 10:19:12.977 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:40568 10 6452 1 2025-11-14 10:20:13.344 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47310 10 6452 1 2025-11-14 10:21:13.747 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50094 10 6452 1 2025-11-14 10:17:00.540 00:06:00.164 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 10:22:20.779 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 10:22:14.159 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59312 10 6452 1 2025-11-14 10:22:20.939 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:22:20.779 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:22:20.997 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 10:22:20.861 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 10:23:14.523 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56070 10 6452 1 2025-11-14 10:24:14.921 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:58208 10 6452 1 2025-11-14 10:20:00.541 00:06:00.160 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 10:25:15.291 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:38232 12 10375 1 2025-11-14 10:26:15.772 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33872 10 6452 1 2025-11-14 10:27:21.081 00:00:00.053 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 10:27:21.366 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 10:27:21.206 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 10:27:21.008 00:00:00.041 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:27:20.997 00:00:00.042 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:27:16.184 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57700 10 6452 1 2025-11-14 10:28:16.595 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54076 10 6452 1 2025-11-14 10:24:00.540 00:06:00.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 10:29:17.001 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50920 10 6452 1 2025-11-14 10:30:17.404 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53336 10 6452 1 2025-11-14 10:31:17.800 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44542 10 6452 1 2025-11-14 10:27:00.543 00:06:00.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 10:32:21.443 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 10:32:21.241 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 10:32:21.075 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:32:21.357 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:32:21.439 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 10:32:18.203 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45272 10 6452 1 2025-11-14 10:33:18.605 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57190 10 6452 1 2025-11-14 10:34:19.012 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48888 10 6452 1 2025-11-14 10:35:19.414 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33308 10 6452 1 2025-11-14 10:31:00.541 00:06:00.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 10:36:19.819 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37140 10 6452 1 2025-11-14 10:37:21.400 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 10:37:21.314 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 10:37:21.313 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 10:37:21.278 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:37:21.317 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:37:20.219 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37524 10 6452 1 2025-11-14 10:38:20.619 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45644 10 6452 1 2025-11-14 10:34:00.549 00:06:00.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 10:39:20.982 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33834 10 6452 1 2025-11-14 10:40:21.386 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40730 10 6452 1 2025-11-14 10:41:21.792 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47896 10 6452 1 2025-11-14 10:42:21.689 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 10:42:21.429 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 10:42:21.534 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 10:42:21.485 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:42:21.605 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:42:22.193 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50084 10 6452 1 2025-11-14 10:38:00.547 00:06:00.163 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 10:43:22.590 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:39494 10 6452 1 2025-11-14 10:44:22.997 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36008 10 6452 1 2025-11-14 10:45:23.401 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49634 10 6452 1 2025-11-14 10:41:00.551 00:06:00.158 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 10:46:23.820 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57956 10 6452 1 2025-11-14 10:47:21.503 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 10:47:21.507 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 10:47:21.658 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:47:21.577 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:47:21.660 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 10:47:24.240 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:36902 10 6452 1 2025-11-14 10:48:24.610 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47142 10 6452 1 2025-11-14 10:49:25.021 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34896 10 6452 1 2025-11-14 10:45:00.552 00:06:00.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 10:50:25.428 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41000 12 6556 1 2025-11-14 10:51:25.844 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:52052 10 6452 1 2025-11-14 10:52:21.738 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 10:52:21.745 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 10:52:21.776 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 10:52:21.605 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:52:21.655 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:52:26.276 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46204 10 6452 1 2025-11-14 10:48:00.558 00:06:00.153 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 10:53:26.649 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55084 10 6452 1 2025-11-14 10:54:27.059 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54174 10 6452 1 2025-11-14 10:55:27.466 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59056 10 6452 1 2025-11-14 10:56:27.827 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37106 10 6452 1 2025-11-14 10:52:00.555 00:06:00.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 10:57:21.922 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 10:57:21.839 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:57:21.692 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 10:57:21.577 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 10:57:21.437 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 10:57:28.235 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36652 10 6452 1 2025-11-14 10:58:28.639 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52366 10 6452 1 Summary: total flows: 137, total bytes: 420904, total packets: 1022, avg bps: 895, avg pps: 0, avg bpp: 411 Time window: 2025-11-14 09:56:00 - 2025-11-14 10:58:39 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0019s User: 0.0038s Wall: 0.0028s flows/second: 49138.0 Runtime: 0.0028s