Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 16:59:31.422 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54594 10 6452 1 2025-11-14 17:00:31.824 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41906 10 6452 1 2025-11-14 16:56:00.665 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 17:01:32.224 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46408 10 6452 1 2025-11-14 17:02:29.206 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 17:02:29.269 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 17:02:29.164 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:02:29.200 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:02:29.282 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 17:02:32.626 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59472 10 6452 1 2025-11-14 17:03:33.030 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59074 10 6452 1 2025-11-14 16:59:00.668 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 17:04:33.434 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40024 10 6452 1 2025-11-14 17:05:33.791 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:59476 10 6452 1 2025-11-14 17:06:34.267 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35086 10 6452 1 2025-11-14 17:07:29.243 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 17:07:29.092 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 17:07:29.162 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 17:07:28.976 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:07:29.160 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:07:34.629 00:00:11.093 TCP 1.101.0.1:3000 -> 23.104.0.1:36760 10 6452 1 2025-11-14 17:03:00.665 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 17:08:35.760 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:48332 10 6452 1 2025-11-14 17:09:36.185 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:42364 10 6452 1 2025-11-14 17:10:36.598 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48990 10 6452 1 2025-11-14 17:06:00.668 00:06:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 17:11:37.003 00:00:10.754 TCP 1.101.0.1:3000 -> 23.104.0.1:59734 10 6452 1 2025-11-14 17:12:29.257 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 17:12:29.293 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 17:12:29.297 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 17:12:29.310 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:12:29.175 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:12:37.797 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:48058 10 6452 1 2025-11-14 17:13:38.193 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40816 10 6452 1 2025-11-14 17:14:38.593 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59054 10 6452 1 2025-11-14 17:10:00.669 00:06:00.172 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 17:15:39.007 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33044 10 6452 1 2025-11-14 17:16:39.417 00:00:10.479 TCP 1.101.0.1:3000 -> 23.104.0.1:44626 10 6452 1 2025-11-14 17:17:29.509 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 17:17:29.418 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 17:17:29.272 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 17:17:29.205 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:17:29.427 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:17:39.940 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:40574 10 6452 1 2025-11-14 17:13:00.671 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 17:18:40.369 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45328 10 6452 1 2025-11-14 17:19:40.777 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53032 10 6452 1 2025-11-14 17:20:41.144 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38674 10 6452 1 2025-11-14 17:21:41.559 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51420 10 6452 1 2025-11-14 17:17:00.669 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 17:22:29.686 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 17:22:29.605 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 17:22:29.604 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 17:22:29.423 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:22:29.603 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:22:41.972 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44598 10 6452 1 2025-11-14 17:23:42.384 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43148 10 6452 1 2025-11-14 17:24:42.785 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46270 10 6452 1 2025-11-14 17:20:00.674 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 17:25:43.156 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48174 10 6452 1 2025-11-14 17:26:43.566 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47054 10 6452 1 2025-11-14 17:27:29.647 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:27:29.645 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 17:27:29.683 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 17:27:29.456 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:27:29.731 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 17:27:43.927 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:58574 10 6452 1 2025-11-14 17:28:44.355 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:40160 10 6452 1 2025-11-14 17:24:00.673 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 17:29:44.712 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38130 10 6452 1 2025-11-14 17:30:45.114 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42834 10 6452 1 2025-11-14 17:31:45.515 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43208 10 6452 1 2025-11-14 17:27:00.676 00:06:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 17:32:29.657 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 17:32:29.788 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 17:32:29.567 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 17:32:29.766 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:32:29.575 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:32:45.920 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37368 10 6452 1 2025-11-14 17:33:46.319 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37068 10 6452 1 2025-11-14 17:34:46.725 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60184 10 6452 1 2025-11-14 17:35:47.108 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49414 10 6452 1 2025-11-14 17:31:00.675 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 17:36:47.511 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42836 10 6452 1 2025-11-14 17:37:29.892 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 17:37:29.784 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:37:29.808 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:37:29.933 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 17:37:29.860 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 17:37:47.911 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54632 12 6556 1 2025-11-14 17:38:48.311 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42266 10 6452 1 2025-11-14 17:34:00.678 00:06:00.170 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 17:39:48.712 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35016 11 6492 1 2025-11-14 17:40:49.116 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52980 10 6452 1 2025-11-14 17:41:49.521 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36688 10 6452 1 2025-11-14 17:42:29.824 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 17:42:29.768 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 17:42:29.689 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:42:29.758 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:42:29.841 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 17:38:00.677 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 17:42:49.916 00:00:22.625 TCP 1.101.0.1:3000 -> 23.104.0.1:35528 10 6452 1 2025-11-14 17:44:02.576 00:00:10.988 TCP 1.101.0.1:3000 -> 23.104.0.1:32880 10 6452 1 2025-11-14 17:45:03.601 00:00:10.484 TCP 1.101.0.1:3000 -> 23.104.0.1:45340 11 6492 1 2025-11-14 17:41:00.680 00:06:00.168 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 17:46:04.121 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40834 10 6452 1 2025-11-14 17:47:04.528 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60408 10 6452 1 2025-11-14 17:47:29.865 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 17:47:29.774 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 17:47:29.954 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:47:29.867 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:47:29.950 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 17:48:04.934 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:38170 10 6452 1 2025-11-14 17:49:05.367 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56664 12 6556 1 2025-11-14 17:45:00.679 00:06:00.173 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 17:50:05.786 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:59646 12 10369 1 2025-11-14 17:51:06.268 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37640 10 6452 1 2025-11-14 17:52:06.631 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34112 10 6452 1 2025-11-14 17:52:29.956 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:52:30.213 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 17:52:30.130 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 17:52:30.126 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:52:30.208 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 17:48:00.681 00:06:00.169 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 17:53:07.039 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41438 10 6452 1 2025-11-14 17:54:07.440 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:56244 10 6452 1 2025-11-14 17:55:07.795 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:47902 12 10375 1 2025-11-14 17:56:08.280 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56200 10 6452 1 2025-11-14 17:52:00.681 00:06:00.174 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 17:57:08.683 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52682 10 6452 1 2025-11-14 17:57:30.135 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 17:57:30.000 00:00:00.037 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 17:57:30.067 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:57:30.206 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 17:57:30.290 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 17:58:09.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48332 10 6452 1 Summary: total flows: 136, total bytes: 418553, total packets: 1018, avg bps: 895, avg pps: 0, avg bpp: 411 Time window: 2025-11-14 16:56:00 - 2025-11-14 17:58:19 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0035s User: 0.0009s Wall: 0.0023s flows/second: 58571.2 Runtime: 0.0023s