Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 13:59:21.358 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:51186 12 10375 1 2025-11-13 13:55:00.081 00:06:00.235 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 14:00:21.845 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:46580 10 6452 1 2025-11-13 14:01:22.271 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58842 10 6452 1 2025-11-13 14:01:56.749 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 14:01:56.596 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 14:01:56.766 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:01:56.668 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:01:56.670 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 14:02:22.634 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41112 10 6452 1 2025-11-13 13:58:00.079 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 14:03:23.038 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:56040 11 6504 1 2025-11-13 14:02:00.081 00:02:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-13 14:04:23.499 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37324 10 6452 1 2025-11-13 14:05:23.905 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33660 10 6452 1 2025-11-13 14:06:24.309 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49962 10 6452 1 2025-11-13 14:06:56.810 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 14:06:56.658 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:06:56.615 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:06:56.723 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 14:06:56.698 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 14:07:24.714 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52054 10 6452 1 2025-11-13 14:08:25.118 00:00:10.533 TCP 1.101.0.1:3000 -> 23.104.0.1:43460 10 6452 1 2025-11-13 14:05:00.083 00:04:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 14:09:25.697 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58222 10 6452 1 2025-11-13 14:05:00.079 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 14:10:26.106 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:54840 10 6452 1 2025-11-13 14:11:26.473 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49882 10 6452 1 2025-11-13 14:11:56.834 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 14:11:56.721 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:11:57.113 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:11:57.113 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 14:11:57.196 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 14:12:26.900 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58420 10 6452 1 2025-11-13 14:13:27.314 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39588 10 6452 1 2025-11-13 14:10:00.084 00:04:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 14:12:00.082 00:02:00.237 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-13 14:14:27.723 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40398 10 6452 1 2025-11-13 14:15:28.135 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40526 10 6452 1 2025-11-13 14:16:28.544 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43918 10 6452 1 2025-11-13 14:16:56.928 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 14:16:56.694 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:16:56.845 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:16:56.767 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 14:16:56.834 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 14:17:28.907 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56376 10 6452 1 2025-11-13 14:18:29.270 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57000 10 6452 1 2025-11-13 14:15:00.084 00:04:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 14:15:00.087 00:04:00.230 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 14:19:29.638 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58934 10 6452 1 2025-11-13 14:20:30.040 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60536 10 6452 1 2025-11-13 14:21:30.442 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38746 10 6452 1 2025-11-13 14:21:57.050 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 14:21:56.967 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 14:21:56.977 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:21:56.968 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:21:56.969 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 14:22:30.842 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:39178 10 6452 1 2025-11-13 14:23:31.229 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47500 10 6452 1 2025-11-13 14:20:00.092 00:04:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 14:24:31.634 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36942 10 6452 1 2025-11-13 14:20:00.096 00:06:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 14:25:32.038 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:44042 10 6452 1 2025-11-13 14:26:32.515 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39394 10 6452 1 2025-11-13 14:26:57.287 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 14:26:56.947 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 14:26:56.859 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:26:57.205 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:26:56.946 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 14:27:32.883 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48412 10 6452 1 2025-11-13 14:28:33.246 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58052 10 6452 1 2025-11-13 14:25:00.096 00:04:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 14:29:33.648 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53776 10 6452 1 2025-11-13 14:30:34.063 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:53894 10 6452 1 2025-11-13 14:31:34.425 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42614 10 6452 1 2025-11-13 14:27:00.099 00:06:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 14:31:57.261 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 14:31:56.899 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:31:57.157 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:31:57.152 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 14:31:57.241 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 14:32:34.837 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:52346 10 6452 1 2025-11-13 14:33:35.224 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38260 10 6452 1 2025-11-13 14:34:35.630 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46694 10 6452 1 2025-11-13 14:30:00.097 00:06:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 14:35:36.030 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39744 10 6452 1 2025-11-13 14:36:36.426 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54868 10 6452 1 2025-11-13 14:36:57.445 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 14:36:57.433 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 14:36:57.326 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:36:57.364 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:36:57.405 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 14:37:36.835 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:44014 10 6452 1 2025-11-13 14:38:37.266 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46086 10 6452 1 2025-11-13 14:34:00.100 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-11-13 14:39:37.670 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52066 10 6452 1 2025-11-13 14:40:38.093 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53452 10 6452 1 2025-11-13 14:40:00.321 00:01:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 3 194 1 2025-11-13 14:41:38.498 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38536 10 6452 1 2025-11-13 14:37:00.100 00:06:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 14:41:57.510 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 14:41:57.476 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 14:41:57.233 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:41:57.426 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:41:57.366 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 14:42:38.906 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32888 10 6452 1 2025-11-13 14:43:39.315 00:00:20.703 TCP 1.101.0.1:3000 -> 23.104.0.1:45922 10 6452 1 2025-11-13 14:44:50.069 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59076 10 6452 1 2025-11-13 14:45:50.434 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45308 10 6452 1 2025-11-13 14:42:00.103 00:04:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 14:44:00.101 00:02:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-13 14:46:57.419 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 14:46:57.463 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:46:57.310 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:46:57.551 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 14:46:57.393 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 14:46:50.843 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:35902 10 6452 1 2025-11-13 14:47:51.266 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34202 10 6452 1 2025-11-13 14:48:51.674 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37714 10 6452 1 2025-11-13 14:49:52.099 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35356 10 6452 1 2025-11-13 14:47:00.104 00:04:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 14:47:00.103 00:04:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 14:50:52.500 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44066 10 6452 1 2025-11-13 14:51:57.660 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 14:51:57.706 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 14:51:57.418 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:51:57.577 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:51:57.688 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 14:51:52.902 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55004 10 6452 1 2025-11-13 14:52:53.305 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52922 10 6452 1 2025-11-13 14:53:53.713 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58602 10 6452 1 2025-11-13 14:54:54.105 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42930 10 6452 1 2025-11-13 14:52:00.106 00:04:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 14:52:00.103 00:04:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 14:55:54.506 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43472 10 6452 1 2025-11-13 14:56:58.052 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 14:56:57.482 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 14:56:57.859 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:56:57.969 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 14:56:57.744 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 14:56:54.916 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53596 10 6452 1 2025-11-13 14:57:55.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39572 10 6452 1 Summary: total flows: 142, total bytes: 414646, total packets: 1015, avg bps: 876, avg pps: 0, avg bpp: 408 Time window: 2025-11-13 13:55:00 - 2025-11-13 14:58:05 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0019s User: 0.0028s Wall: 0.0019s flows/second: 75372.2 Runtime: 0.0019s