Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 23:59:32.135 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44222 10 6452 1 2025-11-13 23:56:00.277 00:04:00.217 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-13 23:56:00.274 00:04:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-14 00:00:32.546 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41006 10 6452 1 2025-11-14 00:01:32.911 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59668 10 6452 1 2025-11-14 00:02:08.773 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 00:02:08.703 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:02:08.774 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:02:08.619 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 00:02:08.859 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 00:02:33.269 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45666 10 6452 1 2025-11-14 00:03:33.670 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43586 10 6452 1 2025-11-14 00:04:34.093 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:35458 11 6504 1 2025-11-14 00:01:00.279 00:04:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-14 00:01:00.278 00:04:00.221 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-14 00:05:34.553 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44488 10 6452 1 2025-11-14 00:06:34.956 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35942 10 6452 1 2025-11-14 00:07:08.598 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 00:07:08.785 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:07:08.681 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:07:08.674 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 00:07:08.763 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 00:07:35.364 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54466 10 6452 1 2025-11-14 00:08:35.763 00:00:14.465 TCP 1.101.0.1:3000 -> 23.104.0.1:51268 10 6452 1 2025-11-14 00:09:40.293 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40720 10 6452 1 2025-11-14 00:06:00.278 00:04:00.222 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-14 00:06:00.280 00:04:00.216 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-14 00:10:40.691 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47946 10 6452 1 2025-11-14 00:11:41.062 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52364 10 6452 1 2025-11-14 00:12:08.650 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 00:12:08.691 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:12:08.861 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:12:08.658 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 00:12:08.943 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 00:12:41.472 00:00:11.945 TCP 1.101.0.1:3000 -> 23.104.0.1:36118 10 6452 1 2025-11-14 00:13:43.454 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55612 10 6452 1 2025-11-14 00:14:43.853 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60120 10 6452 1 2025-11-14 00:11:00.284 00:04:00.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-14 00:11:00.287 00:04:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-14 00:15:44.273 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35108 10 6452 1 2025-11-14 00:16:44.678 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49262 10 6452 1 2025-11-14 00:16:00.289 00:01:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-14 00:16:00.286 00:01:00.216 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-14 00:17:08.809 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 00:17:08.739 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:17:08.811 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:17:08.880 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 00:17:08.894 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 00:17:45.115 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40130 10 6452 1 2025-11-14 00:18:45.521 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50058 10 6452 1 2025-11-14 00:19:45.927 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:34640 10 6452 1 2025-11-14 00:18:00.289 00:02:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-14 00:18:00.286 00:02:00.216 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-14 00:20:46.356 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42492 10 6452 1 2025-11-14 00:21:46.772 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45676 10 6452 1 2025-11-14 00:21:00.289 00:01:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-14 00:21:00.287 00:01:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-14 00:22:08.721 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 00:22:08.888 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:22:09.051 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:22:09.063 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 00:22:09.132 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 00:22:47.182 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42202 10 6452 1 2025-11-14 00:23:47.543 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52520 10 6452 1 2025-11-14 00:24:47.940 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:47566 10 6452 1 2025-11-14 00:23:00.289 00:02:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-14 00:23:00.287 00:02:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-14 00:25:48.359 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60798 10 6452 1 2025-11-14 00:26:48.763 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:41146 10 6452 1 2025-11-14 00:26:00.291 00:01:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-14 00:26:00.288 00:01:00.216 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-14 00:27:09.261 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 00:27:09.253 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 00:27:09.123 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:27:09.178 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:27:09.415 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 00:27:49.184 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51772 10 6452 1 2025-11-14 00:28:49.550 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40200 10 6452 1 2025-11-14 00:29:49.949 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40988 10 6452 1 2025-11-14 00:30:50.361 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49528 10 6452 1 2025-11-14 00:28:00.287 00:04:00.218 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-14 00:28:00.291 00:04:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-14 00:31:50.734 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56862 10 6452 1 2025-11-14 00:32:09.204 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 00:32:09.085 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:32:09.412 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:32:09.200 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 00:32:09.495 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 00:32:51.144 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33800 10 6452 1 2025-11-14 00:33:51.565 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34068 10 6452 1 2025-11-14 00:34:51.924 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34120 10 6452 1 2025-11-14 00:35:52.337 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36588 10 6452 1 2025-11-14 00:33:00.294 00:04:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-14 00:33:00.291 00:04:00.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-14 00:36:52.694 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43624 10 6452 1 2025-11-14 00:37:09.250 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 00:37:09.150 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:37:09.328 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:37:09.260 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 00:37:09.412 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 00:37:53.115 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47528 10 6452 1 2025-11-14 00:38:53.475 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36550 10 6452 1 2025-11-14 00:39:53.900 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56008 12 6556 1 2025-11-14 00:40:54.320 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57322 10 6452 1 2025-11-14 00:38:00.294 00:04:00.210 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-14 00:38:00.293 00:04:00.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-14 00:41:54.731 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35176 10 6452 1 2025-11-14 00:42:09.589 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 00:42:09.512 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 00:42:09.400 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:42:09.506 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:42:09.289 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 00:42:55.112 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39236 10 6452 1 2025-11-14 00:43:00.293 00:01:00.214 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-14 00:43:55.516 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50186 10 6452 1 2025-11-14 00:44:55.879 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:33040 10 6452 1 2025-11-14 00:45:56.254 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52220 10 6452 1 2025-11-14 00:45:00.293 00:02:00.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-14 00:43:00.296 00:04:00.210 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-14 00:47:09.796 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 00:47:09.794 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 00:47:09.594 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:47:09.714 00:00:00.020 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:47:09.805 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 00:46:56.662 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52000 10 6452 1 2025-11-14 00:47:57.088 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60854 12 6556 1 2025-11-14 00:48:00.296 00:01:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-14 00:48:00.294 00:01:00.215 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-14 00:48:57.494 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50888 10 6452 1 2025-11-14 00:49:57.896 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49210 12 6556 1 2025-11-14 00:50:58.313 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45320 10 6452 1 2025-11-14 00:50:00.294 00:02:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-14 00:50:00.296 00:02:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-14 00:52:09.807 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 00:52:09.558 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 00:52:09.244 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:52:09.725 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:52:09.567 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 00:51:58.716 00:00:10.631 TCP 1.101.0.1:3000 -> 23.104.0.1:44846 10 6452 1 2025-11-14 00:52:59.382 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42072 10 6452 1 2025-11-14 00:53:00.299 00:01:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-14 00:53:00.296 00:01:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-14 00:53:59.788 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46936 10 6452 1 2025-11-14 00:55:00.190 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:35314 10 6452 1 2025-11-14 00:56:00.607 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:54712 10 6452 1 2025-11-14 00:55:00.299 00:02:00.219 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-14 00:55:00.301 00:02:00.214 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-14 00:57:09.857 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 00:57:09.726 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:57:09.824 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 00:57:09.697 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 00:57:09.907 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 00:57:01.005 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32818 10 6452 1 2025-11-14 00:58:01.412 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39742 10 6452 1 Summary: total flows: 154, total bytes: 411404, total packets: 1025, avg bps: 882, avg pps: 0, avg bpp: 401 Time window: 2025-11-13 23:56:00 - 2025-11-14 00:58:11 Total flows processed: 154, passed: 154, Blocks skipped: 0, Bytes read: 16080 Sys: 0.0027s User: 0.0027s Wall: 0.0023s flows/second: 65642.6 Runtime: 0.0024s