Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 22:54:01.821 00:06:00.119 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 22:59:38.688 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34082 10 6452 1 2025-11-16 22:55:01.818 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 23:00:39.063 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52984 10 6452 1 2025-11-16 23:01:39.428 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35596 10 6452 1 2025-11-16 23:02:39.792 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48144 10 6452 1 2025-11-16 23:03:34.076 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 23:03:33.862 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 23:03:34.107 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:03:33.993 00:00:00.034 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:03:34.099 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 23:03:40.198 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56356 10 6452 1 2025-11-16 23:04:40.600 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40750 10 6452 1 2025-11-16 23:05:41.006 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35048 10 6452 1 2025-11-16 23:01:01.822 00:06:00.121 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 23:06:41.407 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35636 10 6452 1 2025-11-16 23:02:01.819 00:06:00.126 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 23:07:41.769 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:59450 10 6452 1 2025-11-16 23:08:34.286 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 23:08:34.245 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 23:08:34.128 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:08:34.204 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:08:34.289 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 23:08:42.257 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34806 10 6452 1 2025-11-16 23:09:42.663 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46732 10 6452 1 2025-11-16 23:10:43.067 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:56374 10 6452 1 2025-11-16 23:11:43.491 00:00:10.639 TCP 1.101.0.1:3000 -> 23.104.0.1:33444 10 6452 1 2025-11-16 23:12:44.162 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38610 10 6452 1 2025-11-16 23:08:01.823 00:06:00.120 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 23:13:34.257 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 23:13:34.243 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 23:13:34.108 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:13:34.174 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:13:34.291 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 23:13:44.562 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58464 10 6452 1 2025-11-16 23:09:01.820 00:06:00.126 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 23:14:44.965 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37492 10 6452 1 2025-11-16 23:15:45.368 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38056 10 6452 1 2025-11-16 23:16:45.774 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37628 10 6452 1 2025-11-16 23:17:46.187 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:34268 10 6452 1 2025-11-16 23:18:34.453 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 23:18:34.183 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 23:18:34.331 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:18:34.372 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:18:34.183 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 23:18:46.586 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51626 10 6452 1 2025-11-16 23:19:46.993 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35820 10 6452 1 2025-11-16 23:15:01.827 00:06:00.117 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 23:20:47.412 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41264 10 6452 1 2025-11-16 23:16:01.825 00:06:00.122 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 23:21:47.810 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33274 10 6452 1 2025-11-16 23:22:48.213 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53104 10 6452 1 2025-11-16 23:23:34.506 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 23:23:34.331 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:23:34.502 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:23:34.461 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 23:23:34.584 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 23:23:48.621 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38242 10 6452 1 2025-11-16 23:24:49.025 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43650 10 6452 1 2025-11-16 23:25:49.389 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49224 10 6452 1 2025-11-16 23:26:49.794 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39700 10 6452 1 2025-11-16 23:22:01.830 00:06:00.118 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 23:27:50.151 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44750 10 6452 1 2025-11-16 23:23:01.827 00:06:00.123 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 23:28:34.654 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 23:28:34.795 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:28:34.825 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:28:34.735 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 23:28:34.908 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 23:28:50.554 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59382 10 6452 1 2025-11-16 23:29:50.950 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36300 10 6452 1 2025-11-16 23:30:51.361 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52330 10 6452 1 2025-11-16 23:31:51.760 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:48612 10 6452 1 2025-11-16 23:32:52.179 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44544 10 6452 1 2025-11-16 23:33:34.691 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 23:33:34.611 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 23:33:34.674 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:33:34.608 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:33:34.706 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 23:33:52.578 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40462 10 6452 1 2025-11-16 23:29:01.831 00:06:00.119 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 23:30:01.829 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 23:34:52.939 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:36976 10 6452 1 2025-11-16 23:35:53.360 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44396 10 6452 1 2025-11-16 23:36:53.725 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57050 10 6452 1 2025-11-16 23:37:54.143 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48952 10 6452 1 2025-11-16 23:38:34.782 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 23:38:34.816 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:38:34.825 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:38:34.674 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 23:38:34.908 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 23:38:54.508 00:00:10.782 TCP 1.101.0.1:3000 -> 23.104.0.1:46794 10 6452 1 2025-11-16 23:39:55.330 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37790 10 6452 1 2025-11-16 23:36:01.832 00:06:00.119 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 23:40:55.732 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53300 10 6452 1 2025-11-16 23:37:01.830 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 23:41:56.145 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59854 10 6452 1 2025-11-16 23:42:56.551 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34748 10 6452 1 2025-11-16 23:43:34.638 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 23:43:34.846 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:43:34.831 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:43:34.924 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 23:43:34.915 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 23:43:56.953 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56218 10 6452 1 2025-11-16 23:44:57.356 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:47198 10 6452 1 2025-11-16 23:45:57.728 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56994 10 6452 1 2025-11-16 23:46:58.131 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38104 10 6452 1 2025-11-16 23:43:01.833 00:06:00.119 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 23:47:58.536 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43172 10 6452 1 2025-11-16 23:48:35.117 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 23:48:35.250 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:48:35.114 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:48:35.204 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 23:48:35.197 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 23:44:01.832 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 23:48:58.939 00:00:10.948 TCP 1.101.0.1:3000 -> 23.104.0.1:53234 10 6452 1 2025-11-16 23:49:59.930 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59530 10 6452 1 2025-11-16 23:51:00.348 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59962 10 6452 1 2025-11-16 23:52:00.718 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:59698 10 6452 1 2025-11-16 23:53:01.158 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34174 10 6452 1 2025-11-16 23:53:35.394 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-16 23:53:34.981 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 23:53:35.143 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:53:35.313 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:53:35.351 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 23:54:01.524 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45778 10 6452 1 2025-11-16 23:50:01.835 00:06:00.120 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-16 23:55:01.883 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:40586 12 6556 1 2025-11-16 23:51:01.832 00:06:00.125 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-16 23:56:02.314 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53768 10 6452 1 2025-11-16 23:57:02.713 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54996 10 6452 1 2025-11-16 23:58:03.113 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53572 10 6452 1 2025-11-16 23:58:34.955 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:58:35.252 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-16 23:58:35.156 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-16 23:58:35.062 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-16 23:58:35.335 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 137, total bytes: 411390, total packets: 1024, avg bps: 849, avg pps: 0, avg bpp: 401 Time window: 2025-11-16 22:54:01 - 2025-11-16 23:58:35 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0042s User: 0.0021s Wall: 0.0023s flows/second: 58875.0 Runtime: 0.0023s