Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 00:58:48.352 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60932 10 6452 1 2025-11-13 00:59:48.711 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:38220 10 6452 1 2025-11-13 00:55:59.788 00:05:00.259 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:00:49.106 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:35366 10 6452 1 2025-11-13 01:01:41.229 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:01:41.056 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:01:41.122 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:01:41.147 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:01:41.104 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:01:49.493 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55524 10 6452 1 2025-11-13 00:57:59.787 00:05:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:02:49.897 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43118 10 6452 1 2025-11-13 01:03:50.268 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39036 10 6452 1 2025-11-13 01:04:50.667 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38362 10 6452 1 2025-11-13 01:01:59.790 00:05:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:05:51.105 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36840 10 6452 1 2025-11-13 01:06:40.966 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:06:41.169 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:06:41.005 00:00:00.045 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:06:41.169 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:06:41.087 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:06:51.513 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51264 10 6452 1 2025-11-13 01:03:59.788 00:05:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:07:51.919 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55674 10 6452 1 2025-11-13 01:08:52.318 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52334 10 6452 1 2025-11-13 01:09:52.679 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42856 10 6452 1 2025-11-13 01:10:53.107 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:42342 10 6452 1 2025-11-13 01:11:41.648 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:11:41.622 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:11:41.330 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:11:41.564 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:11:41.622 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:07:59.793 00:05:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:11:53.489 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52854 10 6452 1 2025-11-13 01:12:53.893 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:47684 12 6556 1 2025-11-13 01:09:59.791 00:05:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:13:54.315 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:56684 13 13949 1 2025-11-13 01:14:54.789 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58062 10 6452 1 2025-11-13 01:15:55.195 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41336 10 6452 1 2025-11-13 01:16:41.391 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:16:41.261 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:16:41.140 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:16:41.309 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:16:41.203 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:16:55.559 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53660 10 6452 1 2025-11-13 01:13:59.795 00:05:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:17:55.964 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60228 10 6452 1 2025-11-13 01:18:56.373 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40608 10 6452 1 2025-11-13 01:15:59.793 00:05:00.261 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:19:56.776 00:00:10.946 TCP 1.101.0.1:3000 -> 23.104.0.1:37848 10 6452 1 2025-11-13 01:20:57.757 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54638 10 6452 1 2025-11-13 01:21:41.488 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:21:41.483 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:21:41.384 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:21:41.407 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:21:41.226 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:21:58.168 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57118 10 6452 1 2025-11-13 01:22:58.569 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38472 10 6452 1 2025-11-13 01:19:59.795 00:05:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:23:58.972 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44044 10 6452 1 2025-11-13 01:24:59.383 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57860 10 6452 1 2025-11-13 01:21:59.793 00:05:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:25:59.807 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:60720 10 6452 1 2025-11-13 01:26:41.439 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:26:41.581 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:26:41.270 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:26:41.357 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:26:41.351 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:27:00.209 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35710 10 6452 1 2025-11-13 01:28:00.613 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36736 10 6452 1 2025-11-13 01:29:01.022 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38462 10 6452 1 2025-11-13 01:25:59.799 00:05:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:30:01.425 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49032 10 6452 1 2025-11-13 01:31:01.831 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36054 10 6452 1 2025-11-13 01:31:41.540 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:31:41.261 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:31:41.553 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:31:41.622 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:31:41.636 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:27:59.796 00:05:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:32:02.248 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49486 10 6452 1 2025-11-13 01:33:02.615 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36566 10 6452 1 2025-11-13 01:34:03.020 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39206 10 6452 1 2025-11-13 01:35:03.422 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59952 10 6452 1 2025-11-13 01:31:59.799 00:05:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:36:03.784 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52146 10 6452 1 2025-11-13 01:36:41.773 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:36:41.699 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:36:41.522 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:36:41.689 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:36:41.696 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:37:04.186 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35482 10 6452 1 2025-11-13 01:33:59.795 00:05:00.264 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:38:04.594 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52370 10 6452 1 2025-11-13 01:39:04.994 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59530 10 6452 1 2025-11-13 01:40:05.367 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52736 10 6452 1 2025-11-13 01:41:05.765 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:34216 10 6452 1 2025-11-13 01:41:42.086 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:41:41.795 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:41:42.004 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:41:41.823 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:41:41.814 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:37:59.799 00:05:00.258 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:42:06.196 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40362 10 6452 1 2025-11-13 01:43:06.599 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58052 10 6452 1 2025-11-13 01:39:59.797 00:05:00.263 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:44:07.022 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:45970 10 6452 1 2025-11-13 01:45:07.387 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48842 10 6452 1 2025-11-13 01:46:07.792 00:00:10.891 TCP 1.101.0.1:3000 -> 23.104.0.1:52336 10 6452 1 2025-11-13 01:46:42.046 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:46:41.910 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:46:41.880 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:46:41.955 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:46:41.963 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:47:08.719 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55250 10 6452 1 2025-11-13 01:43:59.802 00:05:00.257 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:48:09.116 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:39258 10 6452 1 2025-11-13 01:49:09.611 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47574 10 6452 1 2025-11-13 01:45:59.800 00:05:00.262 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:50:10.017 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34886 10 6452 1 2025-11-13 01:51:10.419 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45804 10 6452 1 2025-11-13 01:51:42.109 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:51:41.942 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:51:42.118 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:51:42.152 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:51:42.200 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:52:10.824 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55704 10 6452 1 2025-11-13 01:53:11.227 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33092 10 6452 1 2025-11-13 01:49:59.805 00:05:00.256 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 01:54:11.588 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59968 10 6452 1 2025-11-13 01:55:11.988 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39314 10 6452 1 2025-11-13 01:51:59.803 00:05:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 01:56:12.429 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33152 10 6452 1 2025-11-13 01:56:42.520 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 01:56:42.427 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 01:56:42.210 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:56:42.437 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 01:56:42.523 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 01:57:12.793 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41302 10 6452 1 2025-11-13 01:58:13.211 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53092 10 6452 1 Summary: total flows: 140, total bytes: 424601, total packets: 1025, avg bps: 907, avg pps: 0, avg bpp: 414 Time window: 2025-11-13 00:55:59 - 2025-11-13 01:58:23 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0044s User: 0.0007s Wall: 0.0026s flows/second: 54285.2 Runtime: 0.0026s