Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 22:58:58.026 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59590 10 6452 1 2025-11-13 22:59:58.422 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43464 10 6452 1 2025-11-13 22:57:00.258 00:04:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 22:57:00.261 00:04:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 23:00:58.830 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48026 10 6452 1 2025-11-13 23:02:07.288 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:02:07.400 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:02:07.467 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:01:59.228 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54188 10 6452 1 2025-11-13 23:02:07.208 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:02:07.371 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:02:59.633 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39884 10 6452 1 2025-11-13 23:04:00.034 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60912 10 6452 1 2025-11-13 23:05:00.435 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:40958 12 10375 1 2025-11-13 23:02:00.260 00:04:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 23:02:00.259 00:04:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 23:06:00.919 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36522 10 6452 1 2025-11-13 23:07:07.518 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:07:07.366 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:07:07.436 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:07:07.504 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:07:07.571 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:07:01.317 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:40774 10 6452 1 2025-11-13 23:07:00.259 00:01:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-13 23:08:01.719 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55688 10 6452 1 2025-11-13 23:09:02.106 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34708 10 6452 1 2025-11-13 23:10:02.511 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48810 10 6452 1 2025-11-13 23:07:00.262 00:04:00.220 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 23:09:00.259 00:02:00.225 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-13 23:11:02.921 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53846 10 6452 1 2025-11-13 23:12:07.639 00:00:00.030 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:12:07.757 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:12:07.403 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:12:07.557 00:00:00.030 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:12:07.563 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:12:03.341 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59178 10 6452 1 2025-11-13 23:12:00.264 00:01:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-13 23:12:00.261 00:01:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-13 23:13:03.712 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:59570 10 6452 1 2025-11-13 23:14:04.092 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:36348 10 6452 1 2025-11-13 23:15:04.469 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58742 10 6452 1 2025-11-13 23:14:00.263 00:02:00.223 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-13 23:14:00.267 00:02:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-13 23:16:04.838 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:51940 10 6452 1 2025-11-13 23:17:07.766 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:17:07.671 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:17:07.827 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:17:07.824 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:17:07.910 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:17:05.262 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60402 10 6452 1 2025-11-13 23:17:00.266 00:01:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-13 23:17:00.265 00:01:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-13 23:18:05.660 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39126 10 6452 1 2025-11-13 23:19:06.099 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58692 10 6452 1 2025-11-13 23:20:06.509 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55512 10 6452 1 2025-11-13 23:19:00.266 00:02:00.219 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-13 23:19:00.264 00:02:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-13 23:21:06.872 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37578 10 6452 1 2025-11-13 23:22:07.858 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:22:07.767 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:22:07.792 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:22:07.775 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:22:07.924 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:22:07.280 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54602 10 6452 1 2025-11-13 23:22:00.268 00:01:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-13 23:22:00.264 00:01:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-13 23:23:07.680 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48474 10 6452 1 2025-11-13 23:24:08.110 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57730 10 6452 1 2025-11-13 23:25:08.511 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43054 10 6452 1 2025-11-13 23:26:08.915 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54488 10 6452 1 2025-11-13 23:27:07.998 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:27:07.923 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:27:07.950 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:27:07.916 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:27:07.775 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:27:09.322 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45946 10 6452 1 2025-11-13 23:24:00.268 00:04:00.218 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 23:24:00.264 00:04:00.224 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 23:28:09.725 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35014 10 6452 1 2025-11-13 23:29:10.127 00:00:16.710 TCP 1.101.0.1:3000 -> 23.104.0.1:55148 10 6452 1 2025-11-13 23:30:16.877 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41280 10 6452 1 2025-11-13 23:31:17.291 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41840 10 6452 1 2025-11-13 23:32:08.055 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:32:07.938 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:32:08.071 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:32:08.197 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:32:08.153 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:32:17.660 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40930 10 6452 1 2025-11-13 23:29:00.272 00:04:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 23:29:00.268 00:04:00.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 23:33:18.092 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53734 10 6452 1 2025-11-13 23:34:18.500 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37146 10 6452 1 2025-11-13 23:35:18.904 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51056 10 6452 1 2025-11-13 23:36:19.306 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55776 10 6452 1 2025-11-13 23:37:08.244 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:37:08.069 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:37:08.184 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:37:08.161 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:37:08.198 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:37:19.706 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:54456 11 6504 1 2025-11-13 23:34:00.270 00:04:00.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-13 23:34:00.274 00:04:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 23:38:20.223 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57118 10 6452 1 2025-11-13 23:39:20.632 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53898 10 6452 1 2025-11-13 23:39:00.273 00:01:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-13 23:39:00.269 00:01:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-13 23:40:21.003 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46652 10 6452 1 2025-11-13 23:41:21.418 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32944 10 6452 1 2025-11-13 23:42:08.075 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:42:08.228 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:42:08.086 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:42:07.992 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:42:08.140 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:42:21.829 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47916 10 6452 1 2025-11-13 23:41:00.273 00:02:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-13 23:41:00.270 00:02:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-13 23:43:22.234 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55498 10 6452 1 2025-11-13 23:44:22.594 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43308 10 6452 1 2025-11-13 23:44:00.270 00:01:00.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-13 23:44:00.273 00:01:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-13 23:45:23.003 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55792 10 6452 1 2025-11-13 23:46:23.405 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59642 10 6452 1 2025-11-13 23:47:08.129 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:47:08.332 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:47:08.104 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:47:08.047 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:47:08.261 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:47:23.807 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36918 10 6452 1 2025-11-13 23:46:00.275 00:02:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-13 23:46:00.272 00:02:00.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-13 23:48:24.211 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53908 10 6452 1 2025-11-13 23:49:24.616 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60774 10 6452 1 2025-11-13 23:49:00.274 00:01:00.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-13 23:49:00.276 00:01:00.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-13 23:50:25.022 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37206 10 6452 1 2025-11-13 23:51:25.425 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35122 10 6452 1 2025-11-13 23:52:08.263 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:52:08.290 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:52:08.264 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:52:08.376 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:52:08.346 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:52:25.828 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58260 10 6452 1 2025-11-13 23:51:00.277 00:02:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-13 23:51:00.273 00:02:00.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-13 23:53:26.234 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:36558 10 6452 1 2025-11-13 23:54:26.688 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:59400 10 6452 1 2025-11-13 23:54:00.274 00:01:00.220 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-13 23:54:00.278 00:01:00.215 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-13 23:55:27.096 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50158 10 6452 1 2025-11-13 23:56:27.502 00:00:13.688 TCP 1.101.0.1:3000 -> 23.104.0.1:59072 10 6452 1 2025-11-13 23:57:08.756 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-13 23:57:08.920 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:57:08.715 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-13 23:57:08.729 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-13 23:57:08.798 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-13 23:57:31.257 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53602 10 6452 1 2025-11-13 23:58:31.669 00:00:10.427 TCP 1.101.0.1:3000 -> 23.104.0.1:45970 10 6452 1 Summary: total flows: 157, total bytes: 420729, total packets: 1019, avg bps: 909, avg pps: 0, avg bpp: 412 Time window: 2025-11-13 22:57:00 - 2025-11-13 23:58:42 Total flows processed: 157, passed: 157, Blocks skipped: 0, Bytes read: 16392 Sys: 0.0042s User: 0.0010s Wall: 0.0021s flows/second: 76101.4 Runtime: 0.0021s