Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 23:59:06.140 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36906 10 6452 1 2025-11-21 23:56:04.308 00:04:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-22 00:00:06.538 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36334 10 6452 1 2025-11-22 00:01:01.136 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:01:01.142 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:01:00.944 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:01:01.378 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:01:01.461 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 23:59:04.307 00:02:00.296 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 00:01:06.952 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54058 10 6452 1 2025-11-22 00:01:04.309 00:01:00.291 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 00:02:07.365 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56490 10 6452 1 2025-11-22 00:02:04.307 00:01:00.296 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 00:03:07.767 00:00:11.020 TCP 1.101.0.1:3000 -> 23.104.0.1:46730 10 6452 1 2025-11-22 00:04:08.825 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52478 10 6452 1 2025-11-22 00:03:04.309 00:02:00.291 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 00:05:09.189 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58736 10 6452 1 2025-11-22 00:06:01.495 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:06:01.272 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:06:01.440 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:06:01.344 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:06:01.524 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:04:04.307 00:02:00.297 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 00:06:09.593 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51508 10 6452 1 2025-11-22 00:06:04.309 00:01:00.291 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 00:07:09.994 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34816 10 6452 1 2025-11-22 00:07:04.308 00:01:00.297 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 00:08:10.398 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47232 10 6452 1 2025-11-22 00:09:10.800 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44586 10 6452 1 2025-11-22 00:08:04.309 00:02:00.293 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 00:10:11.199 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59904 10 6452 1 2025-11-22 00:11:01.664 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:11:01.542 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:11:01.419 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:11:01.658 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:11:01.741 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:09:04.307 00:02:00.297 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 00:11:11.558 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42226 10 6452 1 2025-11-22 00:11:04.309 00:01:00.292 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 00:12:11.955 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33118 10 6452 1 2025-11-22 00:12:04.311 00:01:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 00:13:12.381 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:48070 12 10375 1 2025-11-22 00:14:12.859 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:45724 10 6452 1 2025-11-22 00:13:04.313 00:02:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 00:15:13.278 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48172 10 6452 1 2025-11-22 00:16:01.785 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:16:01.468 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:16:01.460 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:16:01.664 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:16:01.702 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:16:13.689 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44962 10 6452 1 2025-11-22 00:16:04.319 00:01:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 00:17:14.108 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36496 10 6452 1 2025-11-22 00:14:04.311 00:04:00.295 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-22 00:18:14.513 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41074 10 6452 1 2025-11-22 00:19:14.921 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44556 10 6452 1 2025-11-22 00:20:15.339 00:00:18.903 TCP 1.101.0.1:3000 -> 23.104.0.1:48440 10 6452 1 2025-11-22 00:21:01.738 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:21:01.722 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:21:01.823 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:21:01.566 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:21:01.655 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:21:24.347 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33462 10 6452 1 2025-11-22 00:18:04.320 00:04:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-22 00:22:24.754 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58962 10 6452 1 2025-11-22 00:19:04.317 00:04:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-22 00:23:25.151 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50976 10 6452 1 2025-11-22 00:24:25.551 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57974 10 6452 1 2025-11-22 00:24:04.317 00:01:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 00:25:25.950 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:38786 10 6452 1 2025-11-22 00:26:01.814 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:26:02.048 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:26:01.865 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:26:01.816 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:26:01.899 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:26:26.318 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52520 10 6452 1 2025-11-22 00:23:04.319 00:04:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-22 00:27:26.729 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52300 10 6452 1 2025-11-22 00:26:04.317 00:02:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 00:28:27.142 00:00:14.437 TCP 1.101.0.1:3000 -> 23.104.0.1:59516 12 10369 1 2025-11-22 00:28:04.321 00:01:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 00:29:31.620 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53672 10 6452 1 2025-11-22 00:29:04.319 00:01:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 00:30:32.020 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55158 10 6452 1 2025-11-22 00:31:01.901 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:31:01.893 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:31:01.820 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:31:01.827 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:31:01.894 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:31:32.430 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39386 10 6452 1 2025-11-22 00:30:04.323 00:02:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 00:32:32.836 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60064 10 6452 1 2025-11-22 00:31:04.320 00:02:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 00:33:33.235 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:40664 12 10369 1 2025-11-22 00:33:04.323 00:01:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 00:34:33.722 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45814 10 6452 1 2025-11-22 00:34:04.321 00:01:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 00:35:34.134 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37592 10 6452 1 2025-11-22 00:36:01.977 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:36:02.084 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:36:01.808 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:36:01.743 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:36:01.894 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:36:34.536 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35942 10 6452 1 2025-11-22 00:35:04.322 00:02:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 00:37:34.943 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:54308 10 6452 1 2025-11-22 00:36:04.322 00:02:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 00:38:35.367 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53238 10 6452 1 2025-11-22 00:38:04.324 00:01:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 00:39:35.773 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50828 10 6452 1 2025-11-22 00:39:04.321 00:01:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 00:40:36.186 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56544 10 6452 1 2025-11-22 00:41:02.202 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:41:01.992 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:41:02.041 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:41:01.978 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:41:02.063 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:41:36.584 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42128 10 6452 1 2025-11-22 00:40:04.324 00:02:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 00:42:36.986 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60826 10 6452 1 2025-11-22 00:41:04.321 00:02:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 00:43:37.355 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34636 10 6452 1 2025-11-22 00:43:04.328 00:01:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 00:44:37.763 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60508 10 6452 1 2025-11-22 00:44:04.325 00:01:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 00:45:38.169 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39008 10 6452 1 2025-11-22 00:46:02.338 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:46:02.349 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:46:02.296 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:46:02.254 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:46:02.338 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:46:38.576 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42550 10 6452 1 2025-11-22 00:45:04.327 00:02:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 00:47:38.980 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34046 10 6452 1 2025-11-22 00:48:39.386 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:43772 10 6452 1 2025-11-22 00:48:04.329 00:01:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 00:49:39.741 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49746 10 6452 1 2025-11-22 00:46:04.325 00:04:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-22 00:50:40.110 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35428 10 6452 1 2025-11-22 00:51:02.739 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:51:02.661 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:51:02.557 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:51:02.225 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:51:02.656 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:51:40.515 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42368 10 6452 1 2025-11-22 00:50:04.329 00:02:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 00:52:40.886 00:00:12.029 TCP 1.101.0.1:3000 -> 23.104.0.1:57986 12 6556 1 2025-11-22 00:53:42.998 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33912 10 6452 1 2025-11-22 00:53:04.330 00:01:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 00:54:43.402 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43602 10 6452 1 2025-11-22 00:51:04.328 00:04:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-22 00:55:43.805 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60248 10 6452 1 2025-11-22 00:56:02.518 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 00:56:02.517 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 00:56:02.153 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 00:56:02.320 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:56:02.436 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 00:56:44.210 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:35062 10 6452 1 2025-11-22 00:57:44.604 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50672 10 6452 1 Summary: total flows: 159, total bytes: 421917, total packets: 1010, avg bps: 909, avg pps: 0, avg bpp: 417 Time window: 2025-11-21 23:56:04 - 2025-11-22 00:57:54 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0044s User: 0.0018s Wall: 0.0018s flows/second: 86039.8 Runtime: 0.0019s