Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 21:59:19.366 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34782 10 6452 1 2025-11-14 22:00:19.764 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41382 10 6452 1 2025-11-14 22:01:20.182 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35382 10 6452 1 2025-11-14 21:57:00.771 00:06:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 22:02:20.580 00:00:10.428 TCP 1.101.0.1:3000 -> 23.104.0.1:56046 11 6504 1 2025-11-14 22:02:35.054 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 22:02:35.137 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:02:35.183 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:02:35.141 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 22:02:35.265 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 22:03:21.059 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:47558 11 6504 1 2025-11-14 22:04:21.513 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43242 10 6452 1 2025-11-14 22:00:00.773 00:06:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 22:05:21.915 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34424 10 6452 1 2025-11-14 22:06:22.329 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46730 10 6452 1 2025-11-14 22:07:22.735 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51004 10 6452 1 2025-11-14 22:07:35.505 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 22:07:35.455 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 22:07:35.273 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:07:35.510 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:07:35.594 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 22:08:23.143 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57920 10 6452 1 2025-11-14 22:04:00.775 00:06:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 22:09:23.561 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:58054 10 6452 1 2025-11-14 22:10:23.960 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57576 10 6452 1 2025-11-14 22:11:24.362 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33590 10 6452 1 2025-11-14 22:07:00.778 00:06:00.135 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 22:12:35.400 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 22:12:35.322 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 22:12:24.765 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39798 10 6452 1 2025-11-14 22:12:35.241 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 22:12:35.333 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:12:35.318 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:13:25.184 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46166 10 6452 1 2025-11-14 22:14:25.587 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55926 10 6452 1 2025-11-14 22:15:25.994 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59800 10 6452 1 2025-11-14 22:11:00.779 00:06:00.138 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 22:16:26.399 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33656 10 6452 1 2025-11-14 22:17:35.294 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 22:17:35.085 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 22:17:35.259 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:17:35.523 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:17:26.809 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43762 10 6452 1 2025-11-14 22:17:35.607 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 22:18:27.209 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57686 10 6452 1 2025-11-14 22:14:00.781 00:06:00.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 22:19:27.609 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49374 10 6452 1 2025-11-14 22:20:27.978 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56864 10 6452 1 2025-11-14 22:21:28.412 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57482 10 6452 1 2025-11-14 22:22:35.411 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 22:22:35.518 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 22:22:35.354 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:22:35.470 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:22:28.818 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:41678 10 6452 1 2025-11-14 22:22:35.553 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 22:18:00.779 00:06:00.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 22:23:29.200 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40214 10 6452 1 2025-11-14 22:24:29.609 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40920 10 6452 1 2025-11-14 22:25:30.031 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44330 10 6452 1 2025-11-14 22:21:00.782 00:06:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 22:26:30.433 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39068 10 6452 1 2025-11-14 22:27:35.600 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:27:35.426 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 22:27:35.586 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 22:27:35.664 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:27:35.684 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 22:27:30.836 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:43450 10 6452 1 2025-11-14 22:28:31.264 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58740 10 6452 1 2025-11-14 22:29:31.670 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57118 10 6452 1 2025-11-14 22:25:00.782 00:06:00.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 22:30:32.106 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:48604 10 6452 1 2025-11-14 22:31:32.468 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:35852 10 6452 1 2025-11-14 22:32:36.208 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 22:32:36.127 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:32:35.982 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 22:32:35.982 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 22:32:35.976 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:32:32.865 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39276 10 6452 1 2025-11-14 22:28:00.784 00:06:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 22:33:33.287 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59970 10 6452 1 2025-11-14 22:34:33.689 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55026 10 6452 1 2025-11-14 22:35:34.110 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57960 10 6452 1 2025-11-14 22:36:34.488 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58930 10 6452 1 2025-11-14 22:32:00.783 00:06:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 22:37:35.811 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 22:37:35.875 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 22:37:35.777 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:37:35.729 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:37:35.813 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 22:37:34.894 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:41378 10 6452 1 2025-11-14 22:38:35.322 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36428 10 6452 1 2025-11-14 22:39:35.683 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:40530 10 6452 1 2025-11-14 22:35:00.785 00:06:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 22:40:36.105 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37548 10 6452 1 2025-11-14 22:41:36.509 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50742 10 6452 1 2025-11-14 22:42:36.029 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 22:42:35.945 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:42:35.900 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 22:42:35.944 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 22:42:35.873 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:42:36.915 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36420 10 6452 1 2025-11-14 22:43:37.276 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59404 10 6452 1 2025-11-14 22:39:00.786 00:06:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 22:44:37.641 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46114 10 6452 1 2025-11-14 22:45:38.055 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:58018 12 10375 1 2025-11-14 22:46:38.532 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55868 10 6452 1 2025-11-14 22:42:00.788 00:06:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 22:47:36.711 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 22:47:36.626 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 22:47:36.621 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 22:47:36.641 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:47:36.629 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:47:38.895 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:47344 10 6452 1 2025-11-14 22:48:39.332 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34024 10 6452 1 2025-11-14 22:49:39.739 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36158 10 6452 1 2025-11-14 22:50:40.151 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45380 10 6452 1 2025-11-14 22:46:00.789 00:06:00.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-14 22:51:40.508 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57096 10 6452 1 2025-11-14 22:52:35.989 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 22:52:36.114 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 22:52:35.786 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:52:36.104 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:52:36.186 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 22:52:40.911 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:51450 10 6452 1 2025-11-14 22:53:41.279 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43444 10 6452 1 2025-11-14 22:49:00.792 00:06:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-14 22:54:41.683 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57882 10 6452 1 2025-11-14 22:55:42.141 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:57680 10 6452 1 2025-11-14 22:56:42.536 00:00:10.582 TCP 1.101.0.1:3000 -> 23.104.0.1:48864 10 6452 1 2025-11-14 22:57:36.175 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 22:57:35.902 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:57:36.090 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 22:57:36.091 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 22:57:36.172 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 22:57:43.159 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:34088 10 6452 1 2025-11-14 22:53:00.791 00:06:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 136, total bytes: 414452, total packets: 1012, avg bps: 891, avg pps: 0, avg bpp: 409 Time window: 2025-11-14 21:57:00 - 2025-11-14 22:59:00 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0019s User: 0.0019s Wall: 0.0014s flows/second: 95229.6 Runtime: 0.0014s