Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 11:59:02.958 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:41602 10 6452 1 2025-11-14 11:55:00.576 00:06:00.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 12:00:03.389 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48930 10 6452 1 2025-11-14 12:01:03.790 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38650 10 6452 1 2025-11-14 12:02:04.199 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33324 10 6452 1 2025-11-14 12:02:23.088 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 12:02:22.988 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 12:02:22.834 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:02:23.187 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:02:23.271 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 11:58:00.580 00:06:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 12:03:04.604 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56560 10 6452 1 2025-11-14 12:04:05.014 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56342 10 6452 1 2025-11-14 12:05:05.416 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56550 10 6452 1 2025-11-14 12:06:05.824 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56640 10 6452 1 2025-11-14 12:02:00.579 00:06:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 12:07:06.229 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36204 10 6452 1 2025-11-14 12:07:23.065 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 12:07:23.188 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 12:07:23.185 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 12:07:22.930 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:07:22.984 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:08:06.650 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51308 10 6452 1 2025-11-14 12:09:07.069 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:56658 10 6452 1 2025-11-14 12:05:00.582 00:06:00.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 12:10:07.438 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49038 10 6452 1 2025-11-14 12:11:07.847 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:39348 10 6452 1 2025-11-14 12:12:08.273 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56088 10 6452 1 2025-11-14 12:12:22.978 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 12:12:23.285 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 12:12:23.213 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:12:23.097 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:12:23.180 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 12:13:08.678 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53634 10 6452 1 2025-11-14 12:09:00.579 00:06:00.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 12:14:09.056 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52476 10 6452 1 2025-11-14 12:15:09.418 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:35600 12 10369 1 2025-11-14 12:16:09.897 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52706 10 6452 1 2025-11-14 12:12:00.584 00:06:00.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 12:17:23.279 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 12:17:23.280 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 12:17:23.152 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:17:23.282 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:17:10.309 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:38284 10 6452 1 2025-11-14 12:17:23.364 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 12:18:10.677 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47532 10 6452 1 2025-11-14 12:19:11.107 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:56358 10 6452 1 2025-11-14 12:20:11.529 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41834 10 6452 1 2025-11-14 12:16:00.583 00:06:00.155 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 12:21:11.932 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:57366 10 6452 1 2025-11-14 12:22:23.625 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 12:22:23.537 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 12:22:23.263 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:22:12.326 00:00:10.863 TCP 1.101.0.1:3000 -> 23.104.0.1:55382 10 6452 1 2025-11-14 12:22:23.540 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:22:23.625 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 12:23:13.255 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34828 10 6452 1 2025-11-14 12:19:00.586 00:06:00.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 12:24:13.663 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:40522 11 6504 1 2025-11-14 12:25:14.125 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37494 10 6452 1 2025-11-14 12:26:14.522 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:34476 11 6504 1 2025-11-14 12:27:23.577 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 12:27:23.630 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 12:27:23.383 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:27:23.721 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:27:23.803 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 12:27:14.975 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43108 10 6452 1 2025-11-14 12:23:00.586 00:06:00.155 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 12:28:15.342 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55832 10 6452 1 2025-11-14 12:29:15.746 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33506 10 6452 1 2025-11-14 12:30:16.150 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52876 10 6452 1 2025-11-14 12:26:00.588 00:06:00.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 12:31:16.514 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46534 10 6452 1 2025-11-14 12:32:23.831 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 12:32:23.614 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 12:32:23.698 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 12:32:23.560 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:32:23.748 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:32:16.927 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:46918 10 6452 1 2025-11-14 12:33:17.353 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43232 10 6452 1 2025-11-14 12:34:17.756 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53242 10 6452 1 2025-11-14 12:30:00.590 00:06:00.159 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 12:35:18.172 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56100 10 6452 1 2025-11-14 12:36:18.579 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52856 10 6452 1 2025-11-14 12:37:23.739 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 12:37:23.792 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 12:37:23.717 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:37:23.727 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:37:23.810 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 12:37:18.979 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45614 10 6452 1 2025-11-14 12:33:00.589 00:06:00.172 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 12:38:19.382 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52776 10 6452 1 2025-11-14 12:39:19.792 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40540 10 6452 1 2025-11-14 12:40:20.157 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:60866 10 6452 1 2025-11-14 12:41:20.579 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46782 10 6452 1 2025-11-14 12:37:00.588 00:06:00.163 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 12:42:24.241 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 12:42:24.373 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 12:42:24.151 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:42:24.315 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:42:24.397 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 12:42:20.981 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:41260 10 6452 1 2025-11-14 12:43:21.357 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57434 10 6452 1 2025-11-14 12:44:21.731 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46448 10 6452 1 2025-11-14 12:40:00.590 00:06:00.160 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 12:45:22.137 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41526 10 6452 1 2025-11-14 12:46:22.543 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41556 10 6452 1 2025-11-14 12:47:24.215 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 12:47:23.977 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 12:47:23.982 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 12:47:23.846 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:47:24.133 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:47:22.957 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37540 10 6452 1 2025-11-14 12:48:23.374 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38372 10 6452 1 2025-11-14 12:44:00.589 00:06:00.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 12:49:23.780 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34540 10 6452 1 2025-11-14 12:50:24.190 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48676 10 6452 1 2025-11-14 12:51:24.592 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54510 10 6452 1 2025-11-14 12:47:00.593 00:06:00.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 12:52:24.142 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 12:52:24.058 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 12:52:24.172 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 12:52:23.905 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:52:24.058 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:52:24.950 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58670 10 6452 1 2025-11-14 12:53:25.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40752 10 6452 1 2025-11-14 12:54:25.761 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:40376 10 6452 1 2025-11-14 12:55:26.187 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:45442 12 10369 1 2025-11-14 12:51:00.591 00:06:00.163 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 12:56:26.660 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55274 10 6452 1 2025-11-14 12:57:24.339 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 12:57:24.199 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 12:57:24.307 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:57:23.988 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 12:57:24.070 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 12:57:27.081 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38546 10 6452 1 2025-11-14 12:58:27.506 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36390 10 6452 1 Summary: total flows: 137, total bytes: 424815, total packets: 1024, avg bps: 890, avg pps: 0, avg bpp: 414 Time window: 2025-11-14 11:55:00 - 2025-11-14 12:58:37 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0026s User: 0.0026s Wall: 0.0021s flows/second: 64289.5 Runtime: 0.0021s