Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 14:58:55.723 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44660 10 6452 1 2025-11-13 14:59:56.137 00:00:14.852 TCP 1.101.0.1:3000 -> 23.104.0.1:46164 12 10369 1 2025-11-13 14:57:00.112 00:04:00.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 15:01:01.033 00:00:10.482 TCP 1.101.0.1:3000 -> 23.104.0.1:52782 10 6452 1 2025-11-13 15:01:57.823 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:01:57.889 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:01:57.866 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:01:57.740 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:01:57.734 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 14:57:00.114 00:06:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 15:02:01.555 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36738 10 6452 1 2025-11-13 15:03:01.918 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34662 10 6452 1 2025-11-13 15:04:02.318 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36834 10 6452 1 2025-11-13 15:05:02.719 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42632 10 6452 1 2025-11-13 15:02:00.110 00:04:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 15:06:03.122 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52372 10 6452 1 2025-11-13 15:06:57.992 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:06:57.962 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:06:57.838 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:06:57.910 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:06:58.006 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:07:03.490 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35694 10 6452 1 2025-11-13 15:04:00.114 00:04:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 15:08:03.885 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52260 10 6452 1 2025-11-13 15:09:04.292 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36980 10 6452 1 2025-11-13 15:10:04.691 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45032 10 6452 1 2025-11-13 15:11:05.065 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53478 10 6452 1 2025-11-13 15:07:00.114 00:06:00.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 15:11:58.263 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:11:58.485 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:11:57.827 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:11:58.180 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:11:58.182 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:12:05.430 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36996 10 6452 1 2025-11-13 15:09:00.116 00:04:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 15:13:05.832 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52262 10 6452 1 2025-11-13 15:14:06.237 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34248 10 6452 1 2025-11-13 15:15:06.639 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59628 10 6452 1 2025-11-13 15:16:07.000 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40062 10 6452 1 2025-11-13 15:16:58.118 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:16:57.982 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:16:58.172 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:16:58.112 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:16:58.256 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:17:07.370 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46702 10 6452 1 2025-11-13 15:14:00.117 00:04:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 15:18:07.770 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44238 10 6452 1 2025-11-13 15:14:00.115 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 15:19:08.179 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35258 10 6452 1 2025-11-13 15:20:08.586 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:44614 10 6452 1 2025-11-13 15:21:08.960 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38550 10 6452 1 2025-11-13 15:21:58.531 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:21:58.280 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:21:58.531 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:21:58.464 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:21:58.613 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:22:09.363 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35164 10 6452 1 2025-11-13 15:21:00.119 00:02:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-13 15:19:00.120 00:04:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 15:23:09.784 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58912 10 6452 1 2025-11-13 15:24:10.192 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47136 10 6452 1 2025-11-13 15:25:10.564 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41210 10 6452 1 2025-11-13 15:26:10.960 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39058 10 6452 1 2025-11-13 15:26:58.063 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:26:58.217 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:26:58.157 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:26:57.979 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:26:58.298 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:27:11.371 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52058 10 6452 1 2025-11-13 15:24:00.120 00:04:00.230 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 15:24:00.121 00:04:00.225 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 15:28:11.778 00:00:10.507 TCP 1.101.0.1:3000 -> 23.104.0.1:33712 10 6452 1 2025-11-13 15:29:12.323 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41692 10 6452 1 2025-11-13 15:30:12.680 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40568 10 6452 1 2025-11-13 15:31:13.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51604 10 6452 1 2025-11-13 15:31:58.456 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:31:58.397 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:31:58.335 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:31:58.394 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:31:58.418 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:32:13.518 00:00:10.866 TCP 1.101.0.1:3000 -> 23.104.0.1:45434 10 6452 1 2025-11-13 15:29:00.121 00:04:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 15:33:14.422 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51654 10 6452 1 2025-11-13 15:29:00.124 00:06:00.224 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-13 15:34:14.790 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:59910 12 10369 1 2025-11-13 15:35:15.266 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53162 10 6452 1 2025-11-13 15:36:15.631 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35508 12 6556 1 2025-11-13 15:36:58.437 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:36:58.527 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:36:58.504 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:36:58.564 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:36:58.588 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:37:16.036 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45580 10 6452 1 2025-11-13 15:34:00.124 00:04:00.226 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 15:38:16.438 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40410 10 6452 1 2025-11-13 15:39:16.858 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60888 10 6452 1 2025-11-13 15:36:00.126 00:04:00.222 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 15:40:17.273 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37050 10 6452 1 2025-11-13 15:41:17.672 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40774 10 6452 1 2025-11-13 15:41:58.652 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:41:58.623 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:41:58.612 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:41:58.511 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:41:58.695 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:42:18.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44160 10 6452 1 2025-11-13 15:43:18.520 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58720 10 6452 1 2025-11-13 15:39:00.124 00:06:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-13 15:44:18.924 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53982 10 6452 1 2025-11-13 15:41:00.127 00:04:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 15:45:19.337 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39562 10 6452 1 2025-11-13 15:46:19.752 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57478 10 6452 1 2025-11-13 15:46:59.164 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:46:59.077 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:46:58.855 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:46:59.080 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:46:58.996 00:00:00.045 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:47:20.115 00:00:18.539 TCP 1.101.0.1:3000 -> 23.104.0.1:38830 10 6452 1 2025-11-13 15:48:28.715 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33962 10 6452 1 2025-11-13 15:49:29.118 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42410 10 6452 1 2025-11-13 15:46:00.127 00:04:00.221 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 15:46:00.124 00:04:00.227 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 15:50:29.522 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35918 10 6452 1 2025-11-13 15:51:29.886 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43666 10 6452 1 2025-11-13 15:51:58.911 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:51:58.876 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:51:58.753 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:51:58.828 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:51:58.818 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:52:30.302 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38616 10 6452 1 2025-11-13 15:53:30.704 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:57574 10 6452 1 2025-11-13 15:54:31.136 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:33972 12 10375 1 2025-11-13 15:51:00.128 00:04:00.223 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 15:51:00.125 00:04:00.228 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 15:55:31.612 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48096 10 6452 1 2025-11-13 15:56:32.027 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50248 10 6452 1 2025-11-13 15:56:58.858 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 15:56:58.754 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:56:58.857 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 15:56:58.858 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 15:56:58.940 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 15:57:32.391 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38898 10 6452 1 2025-11-13 15:58:32.792 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46968 10 6452 1 Summary: total flows: 142, total bytes: 428615, total packets: 1024, avg bps: 925, avg pps: 0, avg bpp: 418 Time window: 2025-11-13 14:57:00 - 2025-11-13 15:58:43 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0042s User: 0.0017s Wall: 0.0021s flows/second: 67550.3 Runtime: 0.0021s