Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 00:58:45.011 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42370 10 6452 1 2025-11-22 00:55:04.333 00:04:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-22 00:59:45.424 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49514 10 6452 1 2025-11-22 00:56:04.329 00:04:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-22 01:00:45.826 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45212 10 6452 1 2025-11-22 01:01:02.648 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:01:02.331 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:01:02.586 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:01:02.589 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:01:02.670 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 01:01:46.228 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33096 10 6452 1 2025-11-22 01:02:46.638 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39352 10 6452 1 2025-11-22 01:03:47.072 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35200 10 6452 1 2025-11-22 01:00:04.332 00:04:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-22 01:04:47.478 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:37870 10 6452 1 2025-11-22 01:01:04.331 00:04:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-22 01:05:47.835 00:00:11.146 TCP 1.101.0.1:3000 -> 23.104.0.1:57948 10 6452 1 2025-11-22 01:06:02.769 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 01:06:02.689 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:05:04.337 00:01:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 01:06:02.762 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:06:02.744 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:06:02.687 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:06:49.017 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41898 10 6452 1 2025-11-22 01:06:04.331 00:01:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 01:07:49.421 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36934 10 6452 1 2025-11-22 01:07:04.334 00:02:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 01:08:49.827 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46938 10 6452 1 2025-11-22 01:09:50.234 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36314 10 6452 1 2025-11-22 01:08:04.332 00:02:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 01:11:02.658 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:10:04.335 00:01:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 01:11:02.648 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:11:02.477 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:11:02.836 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:10:50.592 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52468 10 6452 1 2025-11-22 01:11:02.918 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 01:11:50.954 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:46720 10 6452 1 2025-11-22 01:11:04.333 00:01:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 01:12:51.328 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57146 10 6452 1 2025-11-22 01:12:04.335 00:02:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 01:13:51.736 00:00:11.225 TCP 1.101.0.1:3000 -> 23.104.0.1:55198 10 6452 1 2025-11-22 01:13:04.332 00:02:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 01:14:53.001 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59116 10 6452 1 2025-11-22 01:16:02.911 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:15:04.335 00:01:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 01:16:02.740 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:16:02.760 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:16:02.740 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:15:53.408 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54898 10 6452 1 2025-11-22 01:16:02.822 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 01:16:53.808 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57636 10 6452 1 2025-11-22 01:16:04.334 00:01:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 01:17:54.214 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34006 10 6452 1 2025-11-22 01:17:04.336 00:02:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 01:18:54.577 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:58926 10 6452 1 2025-11-22 01:18:04.333 00:02:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 01:19:55.097 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34210 10 6452 1 2025-11-22 01:21:03.053 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 01:21:02.714 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:20:04.336 00:01:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 01:21:02.870 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:21:02.815 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:21:02.968 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:20:55.503 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46812 10 6452 1 2025-11-22 01:21:04.333 00:01:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 01:21:55.915 00:00:10.793 TCP 1.101.0.1:3000 -> 23.104.0.1:46622 10 6452 1 2025-11-22 01:22:56.762 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38898 10 6452 1 2025-11-22 01:22:04.336 00:02:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 01:23:57.174 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34114 10 6452 1 2025-11-22 01:24:57.582 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55194 10 6452 1 2025-11-22 01:26:03.264 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 01:26:03.421 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:25:04.338 00:01:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 01:26:03.418 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:26:03.364 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:26:03.181 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:25:57.989 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33580 10 6452 1 2025-11-22 01:23:04.334 00:04:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-22 01:26:58.393 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38722 10 6452 1 2025-11-22 01:27:58.795 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58014 10 6452 1 2025-11-22 01:28:04.336 00:01:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 01:28:59.200 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33910 10 6452 1 2025-11-22 01:29:59.605 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55406 10 6452 1 2025-11-22 01:31:03.162 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:27:04.338 00:04:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-22 01:31:03.280 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:31:02.987 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:31:03.068 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:31:03.150 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 01:31:00.015 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48086 10 6452 1 2025-11-22 01:30:04.336 00:02:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 01:32:00.425 00:00:23.227 TCP 1.101.0.1:3000 -> 23.104.0.1:52154 10 6452 1 2025-11-22 01:33:13.726 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51800 10 6452 1 2025-11-22 01:33:04.337 00:01:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 01:34:14.136 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54274 10 6452 1 2025-11-22 01:35:14.498 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49950 10 6452 1 2025-11-22 01:36:03.867 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:32:04.339 00:04:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-22 01:36:03.865 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:36:03.802 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:36:03.688 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:36:03.770 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 01:36:14.899 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:50466 12 6556 1 2025-11-22 01:35:04.336 00:02:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 01:37:15.318 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45150 10 6452 1 2025-11-22 01:37:04.339 00:01:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 01:38:15.727 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37918 10 6452 1 2025-11-22 01:38:04.338 00:01:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 01:39:16.146 00:00:11.134 TCP 1.101.0.1:3000 -> 23.104.0.1:41328 10 6452 1 2025-11-22 01:40:17.311 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36280 10 6452 1 2025-11-22 01:41:03.325 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 01:41:03.320 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:39:04.340 00:02:00.293 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 01:41:03.316 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:41:03.283 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:41:03.242 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:41:17.712 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59988 10 6452 1 2025-11-22 01:40:04.338 00:02:00.298 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 01:42:18.113 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58808 10 6452 1 2025-11-22 01:42:04.347 00:01:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 01:43:18.526 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:49928 10 6452 1 2025-11-22 01:43:04.345 00:01:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 01:44:19.022 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47900 10 6452 1 2025-11-22 01:45:19.429 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60352 10 6452 1 2025-11-22 01:46:03.423 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 01:46:03.334 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:44:04.348 00:02:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 01:46:03.400 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:46:03.368 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:46:03.341 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:46:19.835 00:00:10.850 TCP 1.101.0.1:3000 -> 23.104.0.1:60954 10 6452 1 2025-11-22 01:45:04.345 00:02:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 01:47:20.726 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33020 10 6452 1 2025-11-22 01:47:04.347 00:01:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 01:48:21.139 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51558 10 6452 1 2025-11-22 01:48:04.345 00:01:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 01:49:21.543 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37936 10 6452 1 2025-11-22 01:50:21.948 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:60412 10 6452 1 2025-11-22 01:51:03.470 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:49:04.348 00:02:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 01:51:03.695 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:51:03.417 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:51:03.603 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:51:03.687 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 01:51:22.369 00:00:10.833 TCP 1.101.0.1:3000 -> 23.104.0.1:55846 10 6452 1 2025-11-22 01:50:04.348 00:02:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 01:52:23.235 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:38396 10 6452 1 2025-11-22 01:52:04.352 00:01:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 01:53:23.637 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47416 10 6452 1 2025-11-22 01:53:04.349 00:01:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 01:54:24.038 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51642 10 6452 1 2025-11-22 01:55:24.455 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39224 10 6452 1 2025-11-22 01:56:04.072 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 01:54:04.352 00:02:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 01:56:04.073 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 01:56:03.924 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:56:04.145 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 01:56:04.227 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 01:56:24.856 00:00:11.042 TCP 1.101.0.1:3000 -> 23.104.0.1:33312 10 6452 1 2025-11-22 01:57:25.934 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:42806 10 6452 1 2025-11-22 01:57:04.354 00:01:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 01:58:26.360 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36520 10 6452 1 Summary: total flows: 163, total bytes: 417473, total packets: 1028, avg bps: 876, avg pps: 0, avg bpp: 406 Time window: 2025-11-22 00:55:04 - 2025-11-22 01:58:36 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0035s User: 0.0000s Wall: 0.0016s flows/second: 103242.5 Runtime: 0.0016s