Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 16:58:51.486 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55394 10 6452 1 2025-11-16 16:55:01.693 00:06:00.108 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 16:59:51.893 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51646 10 6452 1 2025-11-16 17:00:52.308 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43720 10 6452 1 2025-11-16 17:01:52.709 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60396 10 6452 1 2025-11-16 17:02:53.115 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43664 10 6452 1 2025-11-16 17:03:26.979 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:03:26.892 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:03:26.751 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:03:26.621 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:03:26.895 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:03:53.521 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46474 10 6452 1 2025-11-16 17:00:01.699 00:06:00.103 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:04:53.923 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45266 10 6452 1 2025-11-16 17:05:54.286 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55764 10 6452 1 2025-11-16 17:02:01.698 00:06:00.108 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:06:54.650 00:00:11.057 TCP 1.101.0.1:3000 -> 23.104.0.1:38530 10 6452 1 2025-11-16 17:07:55.750 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55118 10 6452 1 2025-11-16 17:08:26.939 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:08:26.884 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:08:26.962 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:08:26.883 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:08:26.967 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:08:56.151 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59176 10 6452 1 2025-11-16 17:09:56.557 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46862 10 6452 1 2025-11-16 17:10:56.961 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60752 10 6452 1 2025-11-16 17:07:01.702 00:06:00.102 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:11:57.362 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:40090 12 10369 1 2025-11-16 17:12:57.839 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50014 10 6452 1 2025-11-16 17:13:27.165 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:13:27.121 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:13:26.735 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:13:26.888 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:13:27.084 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:09:01.700 00:06:00.108 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:13:58.257 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35454 10 6452 1 2025-11-16 17:14:58.662 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37844 10 6452 1 2025-11-16 17:15:59.089 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57928 10 6452 1 2025-11-16 17:16:59.497 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49392 10 6452 1 2025-11-16 17:17:59.900 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46762 10 6452 1 2025-11-16 17:18:27.169 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:18:26.941 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:18:26.777 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:18:27.241 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:18:27.323 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:14:01.704 00:06:00.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:19:00.314 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48308 10 6452 1 2025-11-16 17:20:00.673 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:41418 10 6452 1 2025-11-16 17:16:01.702 00:06:00.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:21:01.041 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44014 10 6452 1 2025-11-16 17:22:01.404 00:00:10.483 TCP 1.101.0.1:3000 -> 23.104.0.1:41088 13 10427 1 2025-11-16 17:23:01.930 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59896 10 6452 1 2025-11-16 17:23:27.130 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:23:27.217 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:23:27.221 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:23:27.094 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:23:27.048 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:24:02.349 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36084 10 6452 1 2025-11-16 17:25:02.754 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42980 10 6452 1 2025-11-16 17:21:01.705 00:06:00.109 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:26:03.153 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38252 10 6452 1 2025-11-16 17:27:03.554 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59710 10 6452 1 2025-11-16 17:23:01.704 00:06:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:28:03.958 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54992 10 6452 1 2025-11-16 17:28:27.401 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:28:27.239 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:28:27.314 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:28:27.327 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:28:27.319 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:29:04.363 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53138 10 6452 1 2025-11-16 17:30:04.727 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:49030 10 6452 1 2025-11-16 17:31:05.117 00:00:17.640 TCP 1.101.0.1:3000 -> 23.104.0.1:40806 10 6452 1 2025-11-16 17:32:12.793 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44624 10 6452 1 2025-11-16 17:28:01.706 00:06:00.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:33:13.199 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44946 10 6452 1 2025-11-16 17:33:27.540 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:33:27.468 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:33:27.501 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:33:27.099 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:33:27.458 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:34:13.598 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34198 10 6452 1 2025-11-16 17:30:01.705 00:06:00.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:35:14.004 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:32944 10 6452 1 2025-11-16 17:36:14.403 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:54902 10 6452 1 2025-11-16 17:37:14.806 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:53818 10 6452 1 2025-11-16 17:38:27.715 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:38:27.484 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:38:27.477 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:38:27.498 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:38:15.236 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 10 6452 1 2025-11-16 17:38:27.632 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:39:15.639 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55148 10 6452 1 2025-11-16 17:35:01.708 00:06:00.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:40:16.071 00:00:10.524 TCP 1.101.0.1:3000 -> 23.104.0.1:55296 10 6452 1 2025-11-16 17:41:16.631 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53798 10 6452 1 2025-11-16 17:37:01.706 00:06:00.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:42:17.058 00:00:11.115 TCP 1.101.0.1:3000 -> 23.104.0.1:49952 10 6452 1 2025-11-16 17:43:27.721 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:43:27.576 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:43:27.570 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:43:18.212 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54808 10 6452 1 2025-11-16 17:43:27.588 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:43:27.637 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:44:18.577 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40450 10 6452 1 2025-11-16 17:45:18.982 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48962 10 6452 1 2025-11-16 17:46:19.345 00:00:11.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42862 10 6452 1 2025-11-16 17:42:01.709 00:06:00.112 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:47:20.751 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53608 10 6452 1 2025-11-16 17:48:27.836 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:48:27.750 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:48:27.699 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:48:27.768 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:48:27.752 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:48:21.169 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50338 10 6452 1 2025-11-16 17:44:01.706 00:06:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:49:21.584 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38610 10 6452 1 2025-11-16 17:50:21.995 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58952 10 6452 1 2025-11-16 17:51:22.397 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41344 10 6452 1 2025-11-16 17:52:22.801 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:38072 10 6452 1 2025-11-16 17:53:27.777 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:53:27.725 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:53:27.737 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:53:27.908 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:53:27.993 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:53:23.208 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50440 10 6452 1 2025-11-16 17:49:01.712 00:06:00.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 17:54:23.611 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:52594 10 6452 1 2025-11-16 17:55:24.042 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33474 10 6452 1 2025-11-16 17:51:01.710 00:06:00.114 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 17:56:24.440 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:35202 12 10369 1 2025-11-16 17:57:24.918 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40066 10 6452 1 2025-11-16 17:58:28.088 00:00:00.045 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 17:58:27.977 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 17:58:27.818 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:58:27.987 00:00:00.063 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 17:58:27.905 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 17:58:25.287 00:00:11.152 TCP 1.101.0.1:3000 -> 23.104.0.1:36918 12 6556 1 Summary: total flows: 137, total bytes: 428790, total packets: 1027, avg bps: 899, avg pps: 0, avg bpp: 417 Time window: 2025-11-16 16:55:01 - 2025-11-16 17:58:36 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0036s User: 0.0018s Wall: 0.0014s flows/second: 94994.2 Runtime: 0.0015s