Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 05:59:18.093 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:34626 10 6452 1 2025-11-13 05:55:59.900 00:05:00.242 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 06:00:18.516 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56202 10 6452 1 2025-11-13 06:01:18.931 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:35228 10 6452 1 2025-11-13 06:01:47.157 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 06:01:47.174 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:01:46.846 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:01:47.065 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:01:46.946 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 05:57:59.899 00:05:00.246 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 06:02:19.373 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52736 10 6452 1 2025-11-13 06:03:19.741 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41046 10 6452 1 2025-11-13 06:04:20.149 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54008 10 6452 1 2025-11-13 06:05:20.552 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43772 10 6452 1 2025-11-13 06:01:59.901 00:05:00.244 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 06:06:20.957 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40226 10 6452 1 2025-11-13 06:06:47.145 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:06:47.166 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:06:47.061 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:06:47.086 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:06:47.143 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 06:07:21.363 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58894 10 6452 1 2025-11-13 06:03:59.898 00:05:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 06:08:21.773 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57136 10 6452 1 2025-11-13 06:09:22.182 00:00:10.750 TCP 1.101.0.1:3000 -> 23.104.0.1:59734 10 6452 1 2025-11-13 06:10:22.970 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56626 10 6452 1 2025-11-13 06:11:23.383 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41140 10 6452 1 2025-11-13 06:11:47.368 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 06:11:47.289 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:11:47.299 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:11:47.286 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:11:47.141 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:07:59.904 00:05:00.240 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 06:12:23.787 00:00:10.454 TCP 1.101.0.1:3000 -> 23.104.0.1:34640 10 6452 1 2025-11-13 06:13:24.283 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55768 10 6452 1 2025-11-13 06:09:59.903 00:05:00.246 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 06:14:24.683 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56268 10 6452 1 2025-11-13 06:15:25.062 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53512 10 6452 1 2025-11-13 06:16:25.425 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46428 10 6452 1 2025-11-13 06:16:47.862 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:16:47.011 00:00:00.043 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:16:47.860 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:16:47.614 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:16:47.943 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 06:17:25.839 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:45454 10 6452 1 2025-11-13 06:13:59.906 00:05:00.240 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 06:18:26.278 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33520 10 6452 1 2025-11-13 06:19:26.687 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56816 10 6452 1 2025-11-13 06:15:59.902 00:05:00.250 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 06:20:27.111 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48602 10 6452 1 2025-11-13 06:21:27.470 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44806 10 6452 1 2025-11-13 06:21:47.495 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:21:47.349 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:21:47.499 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:21:47.537 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:21:47.583 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 06:22:27.870 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33112 10 6452 1 2025-11-13 06:23:28.290 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50690 10 6452 1 2025-11-13 06:19:59.908 00:05:00.247 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 06:24:28.653 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48594 10 6452 1 2025-11-13 06:25:29.064 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33340 10 6452 1 2025-11-13 06:21:59.907 00:05:00.251 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 06:26:29.427 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58380 10 6452 1 2025-11-13 06:26:47.584 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 06:26:47.437 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:26:47.439 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:26:47.501 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:26:47.432 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:27:29.832 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37588 10 6452 1 2025-11-13 06:28:30.232 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40634 10 6452 1 2025-11-13 06:29:30.591 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59290 10 6452 1 2025-11-13 06:25:59.913 00:05:00.243 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 06:30:30.997 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59296 10 6452 1 2025-11-13 06:31:31.403 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:50010 10 6452 1 2025-11-13 06:31:47.666 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:31:47.682 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:31:47.666 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:31:47.586 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:31:47.748 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 06:27:59.910 00:05:00.248 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 06:32:31.820 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53138 10 6452 1 2025-11-13 06:33:32.221 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38936 10 6452 1 2025-11-13 06:34:32.585 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35876 10 6452 1 2025-11-13 06:35:32.997 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38240 10 6452 1 2025-11-13 06:31:59.917 00:05:00.241 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 06:36:33.404 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33986 10 6452 1 2025-11-13 06:36:47.824 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:36:47.815 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:36:47.916 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:36:47.828 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:36:47.997 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 06:37:33.806 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49424 10 6452 1 2025-11-13 06:33:59.913 00:05:00.246 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 06:38:34.207 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59932 10 6452 1 2025-11-13 06:39:34.571 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:33554 12 10375 1 2025-11-13 06:40:35.058 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:35588 10 6452 1 2025-11-13 06:41:35.436 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49230 10 6452 1 2025-11-13 06:41:47.941 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:41:47.921 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:41:47.788 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:41:47.923 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:41:48.004 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 06:37:59.917 00:05:00.240 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 06:42:35.797 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40080 10 6452 1 2025-11-13 06:43:36.197 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60392 10 6452 1 2025-11-13 06:39:59.916 00:05:00.245 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 06:44:36.604 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50880 10 6452 1 2025-11-13 06:45:37.014 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42474 10 6452 1 2025-11-13 06:46:47.948 00:00:00.054 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:46:47.931 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:46:48.105 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:46:47.681 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:46:37.416 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36268 10 6452 1 2025-11-13 06:46:48.032 00:00:00.054 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 06:47:37.810 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57210 10 6452 1 2025-11-13 06:43:59.921 00:05:00.239 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 06:48:38.176 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33758 10 6452 1 2025-11-13 06:49:38.582 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46962 10 6452 1 2025-11-13 06:45:59.918 00:05:00.247 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 06:50:38.988 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48688 10 6452 1 2025-11-13 06:51:47.933 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 06:51:48.098 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:51:47.753 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:51:47.850 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:51:47.940 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:51:39.357 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35924 10 6452 1 2025-11-13 06:52:39.728 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42250 10 6452 1 2025-11-13 06:53:40.144 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:35108 10 6452 1 2025-11-13 06:49:59.922 00:05:00.240 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-13 06:54:40.523 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:40920 10 6452 1 2025-11-13 06:55:40.885 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:45922 10 6452 1 2025-11-13 06:51:59.920 00:05:00.245 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-13 06:56:48.125 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 06:56:47.896 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:56:47.900 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 06:56:48.123 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 06:56:47.982 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 06:56:41.310 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:45450 10 6452 1 2025-11-13 06:57:41.682 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33270 10 6452 1 Summary: total flows: 139, total bytes: 414471, total packets: 1012, avg bps: 893, avg pps: 0, avg bpp: 409 Time window: 2025-11-13 05:55:59 - 2025-11-13 06:57:52 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0052s User: 0.0010s Wall: 0.0020s flows/second: 68508.6 Runtime: 0.0020s