Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 20:59:36.272 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57936 10 6452 1 2025-11-21 20:56:04.257 00:04:00.276 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 21:00:36.635 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:49328 10 6452 1 2025-11-21 21:00:57.575 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 21:00:57.872 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 21:00:57.666 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:00:57.744 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:00:57.827 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 20:57:04.255 00:04:00.282 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 21:01:36.995 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59524 10 6452 1 2025-11-21 21:02:37.400 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:57884 10 6452 1 2025-11-21 21:03:37.765 00:00:10.516 TCP 1.101.0.1:3000 -> 23.104.0.1:48468 14 14501 1 2025-11-21 21:04:38.320 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52626 10 6661 1 2025-11-21 21:01:04.257 00:04:00.278 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 21:05:38.726 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32866 10 6661 1 2025-11-21 21:05:58.011 00:00:00.035 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 21:05:57.845 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 21:05:57.707 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:05:58.012 00:00:00.039 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:05:58.094 00:00:00.041 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 21:02:04.255 00:04:00.281 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 21:06:39.137 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38252 10 6661 1 2025-11-21 21:07:39.555 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58338 10 6661 1 2025-11-21 21:08:39.956 00:00:13.016 TCP 1.101.0.1:3000 -> 23.104.0.1:48598 10 6661 1 2025-11-21 21:09:43.026 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52874 10 6661 1 2025-11-21 21:06:04.259 00:04:00.277 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 21:10:43.392 00:00:10.835 TCP 1.101.0.1:3000 -> 23.104.0.1:38300 10 6661 1 2025-11-21 21:10:57.959 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 21:10:57.776 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:10:57.842 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:10:58.001 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 21:10:57.926 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 21:07:04.258 00:04:00.283 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 21:11:44.261 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42678 10 6661 1 2025-11-21 21:12:44.668 00:00:11.021 TCP 1.101.0.1:3000 -> 23.104.0.1:49596 10 6661 1 2025-11-21 21:12:04.259 00:01:00.281 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-21 21:13:45.728 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:53496 10 6661 1 2025-11-21 21:14:46.116 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40836 10 6661 1 2025-11-21 21:11:04.260 00:04:00.278 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 21:15:58.540 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 21:15:58.627 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 21:15:58.213 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:15:58.537 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:15:46.523 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45280 10 6661 1 2025-11-21 21:15:58.621 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 21:14:04.260 00:02:00.282 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-21 21:16:46.921 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39544 10 6661 1 2025-11-21 21:17:47.320 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:60790 12 10793 1 2025-11-21 21:17:04.259 00:01:00.282 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-21 21:18:47.796 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56628 10 6870 1 2025-11-21 21:19:48.201 00:00:10.426 TCP 1.101.0.1:3000 -> 23.104.0.1:48648 10 6870 1 2025-11-21 21:16:04.263 00:04:00.277 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 21:20:58.078 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 21:20:57.771 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:20:48.664 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39358 10 6870 1 2025-11-21 21:20:57.970 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:20:57.964 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 21:20:58.053 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 21:19:04.259 00:02:00.284 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-21 21:21:49.081 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:45658 10 6870 1 2025-11-21 21:21:04.263 00:01:00.278 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-21 21:22:49.438 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59248 10 6870 1 2025-11-21 21:22:04.261 00:01:00.283 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-21 21:23:49.854 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41786 10 6870 1 2025-11-21 21:23:04.263 00:02:00.279 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-21 21:24:50.284 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39754 10 6870 1 2025-11-21 21:25:58.241 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 21:25:58.075 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 21:25:58.075 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 21:25:58.116 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:25:58.159 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:25:50.684 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59810 10 6870 1 2025-11-21 21:26:51.106 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43742 10 6870 1 2025-11-21 21:26:04.263 00:01:00.279 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-21 21:27:51.510 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53592 10 6870 1 2025-11-21 21:24:04.260 00:04:00.285 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 21:28:51.914 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57098 10 6870 1 2025-11-21 21:29:52.313 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33444 10 6870 1 2025-11-21 21:30:59.573 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 21:30:59.430 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 21:30:59.221 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:30:59.574 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:30:59.657 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 21:30:52.715 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58942 10 6870 1 2025-11-21 21:28:04.264 00:04:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 21:31:53.142 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52788 10 6870 1 2025-11-21 21:29:04.260 00:04:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 21:32:53.543 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58528 10 6870 1 2025-11-21 21:33:53.952 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46576 10 6870 1 2025-11-21 21:34:54.368 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53980 12 6974 1 2025-11-21 21:35:58.329 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 21:35:58.328 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 21:35:58.172 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:35:58.488 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:35:58.572 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 21:35:54.766 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:44688 10 6870 1 2025-11-21 21:33:04.264 00:04:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 21:36:55.184 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35686 10 6870 1 2025-11-21 21:34:04.263 00:04:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 21:37:55.553 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:37754 10 6870 1 2025-11-21 21:38:55.932 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:49816 10 6870 1 2025-11-21 21:39:56.320 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:32886 10 6870 1 2025-11-21 21:40:58.674 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 21:40:58.416 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 21:40:58.312 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 21:40:58.391 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:40:58.592 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:40:56.677 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44174 10 6870 1 2025-11-21 21:38:04.265 00:04:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 21:41:57.113 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35726 10 6870 1 2025-11-21 21:39:04.264 00:04:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 21:42:57.513 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:60450 12 11002 1 2025-11-21 21:43:57.996 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56388 10 7079 1 2025-11-21 21:44:04.267 00:01:00.284 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-21 21:44:58.400 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35388 10 7079 1 2025-11-21 21:45:58.549 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 21:45:58.637 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 21:45:58.487 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:45:58.456 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:45:58.540 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 21:45:58.798 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56040 10 7079 1 2025-11-21 21:43:04.269 00:04:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 21:46:59.209 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35058 10 7079 1 2025-11-21 21:46:04.266 00:02:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-21 21:47:59.615 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36656 10 7079 1 2025-11-21 21:49:00.032 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49688 10 7079 1 2025-11-21 21:49:04.273 00:01:00.283 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-21 21:50:00.439 00:00:10.661 TCP 1.101.0.1:3000 -> 23.104.0.1:35918 10 7079 1 2025-11-21 21:50:58.723 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 21:50:58.567 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 21:50:58.587 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:50:58.657 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:50:58.740 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 21:51:01.139 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53298 10 7079 1 2025-11-21 21:48:04.271 00:04:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 21:52:01.539 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54548 10 7079 1 2025-11-21 21:51:04.275 00:02:00.283 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-21 21:53:01.954 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44996 10 7079 1 2025-11-21 21:53:04.279 00:01:00.275 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-21 21:54:02.372 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50948 10 7079 1 2025-11-21 21:54:04.278 00:01:00.279 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-21 21:55:02.770 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40114 10 7079 1 2025-11-21 21:55:58.732 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 21:55:58.646 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 21:55:58.795 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 21:55:58.474 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:55:58.649 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 21:56:03.187 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48204 10 7079 1 2025-11-21 21:55:04.282 00:02:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-21 21:57:03.590 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48736 10 7079 1 2025-11-21 21:56:04.281 00:02:00.278 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-21 21:58:03.991 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48596 10 7079 1 Summary: total flows: 152, total bytes: 450238, total packets: 1028, avg bps: 965, avg pps: 0, avg bpp: 437 Time window: 2025-11-21 20:56:04 - 2025-11-21 21:58:14 Total flows processed: 152, passed: 152, Blocks skipped: 0, Bytes read: 15872 Sys: 0.0062s User: 0.0000s Wall: 0.0036s flows/second: 42756.0 Runtime: 0.0036s