Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 15:59:05.898 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41170 10 6452 1 2025-11-21 15:55:04.135 00:06:00.291 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 16:00:06.317 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57898 10 6452 1 2025-11-21 16:00:51.877 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 16:00:51.831 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 16:00:51.560 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:00:51.795 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:00:51.832 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 15:56:04.131 00:06:00.297 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 16:01:06.732 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44396 10 6452 1 2025-11-21 16:02:07.141 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35062 10 6452 1 2025-11-21 16:03:07.552 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35210 10 6452 1 2025-11-21 16:04:07.957 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53894 10 6452 1 2025-11-21 16:05:08.367 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45360 10 6452 1 2025-11-21 16:05:52.000 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 16:05:51.865 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 16:05:51.591 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:05:51.917 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:05:51.771 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 16:06:08.768 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43672 10 6452 1 2025-11-21 16:02:04.135 00:06:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 16:07:09.180 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52238 10 6452 1 2025-11-21 16:03:04.133 00:06:00.300 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 16:08:09.581 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38374 10 6452 1 2025-11-21 16:09:09.990 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58936 10 6452 1 2025-11-21 16:10:10.391 00:00:12.905 TCP 1.101.0.1:3000 -> 23.104.0.1:58294 10 6452 1 2025-11-21 16:10:51.785 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 16:10:52.002 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:10:51.969 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:10:51.891 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 16:10:52.051 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 16:11:13.339 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51562 10 6452 1 2025-11-21 16:12:13.697 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43874 10 6452 1 2025-11-21 16:13:14.118 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39152 10 6452 1 2025-11-21 16:09:04.138 00:06:00.293 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 16:14:14.478 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46518 10 6452 1 2025-11-21 16:10:04.135 00:06:00.298 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 16:15:14.882 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38342 10 6452 1 2025-11-21 16:15:52.125 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 16:15:51.992 00:00:00.052 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:15:52.072 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:15:52.127 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 16:15:52.155 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 16:16:15.290 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52422 10 6452 1 2025-11-21 16:17:15.715 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:33592 10 6452 1 2025-11-21 16:18:16.098 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38786 10 6452 1 2025-11-21 16:19:16.501 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59338 10 6452 1 2025-11-21 16:20:16.913 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55876 10 6452 1 2025-11-21 16:20:51.981 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:20:52.075 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 16:20:52.078 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 16:20:52.093 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:20:52.063 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 16:16:04.139 00:06:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 16:21:17.315 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37396 10 6452 1 2025-11-21 16:17:04.139 00:06:00.298 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 16:22:17.721 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41636 10 6452 1 2025-11-21 16:23:18.132 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57554 10 6452 1 2025-11-21 16:24:18.535 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42206 10 6452 1 2025-11-21 16:25:18.934 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:36394 10 6452 1 2025-11-21 16:25:52.251 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 16:25:52.190 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:25:52.121 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:25:52.107 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 16:25:52.205 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 16:26:19.393 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60358 10 6452 1 2025-11-21 16:27:19.802 00:00:10.698 TCP 1.101.0.1:3000 -> 23.104.0.1:32852 10 6452 1 2025-11-21 16:23:04.143 00:06:00.294 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 16:28:20.544 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58132 10 6452 1 2025-11-21 16:24:04.141 00:06:00.298 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 16:29:20.950 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50134 10 6452 1 2025-11-21 16:30:21.364 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58258 12 6556 1 2025-11-21 16:30:52.430 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 16:30:52.414 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:30:52.379 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:30:52.383 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 16:30:52.460 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 16:31:21.765 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44514 10 6452 1 2025-11-21 16:32:22.183 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47200 10 6452 1 2025-11-21 16:33:22.592 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46250 10 6452 1 2025-11-21 16:34:22.961 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37620 10 6452 1 2025-11-21 16:30:04.144 00:06:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 16:35:23.379 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46006 10 6452 1 2025-11-21 16:35:52.469 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:35:52.530 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:35:52.370 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 16:35:52.371 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 16:35:52.612 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 16:31:04.142 00:06:00.300 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 16:36:23.740 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38092 10 6452 1 2025-11-21 16:37:24.148 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:45758 10 6452 1 2025-11-21 16:38:24.545 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43388 10 6452 1 2025-11-21 16:39:24.950 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34558 10 6452 1 2025-11-21 16:40:25.364 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:56840 10 6452 1 2025-11-21 16:40:52.566 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 16:40:52.558 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 16:40:52.184 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:40:52.483 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:40:52.605 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 16:41:25.727 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:59296 10 6452 1 2025-11-21 16:37:04.146 00:06:00.293 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 16:42:26.140 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40698 10 6452 1 2025-11-21 16:38:04.144 00:06:00.299 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 16:43:26.505 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38518 10 6452 1 2025-11-21 16:44:26.908 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49616 12 6556 1 2025-11-21 16:45:27.316 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34772 10 6452 1 2025-11-21 16:45:52.669 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 16:45:52.649 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 16:45:52.474 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:45:52.588 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:45:52.461 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 16:46:27.678 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43036 10 6452 1 2025-11-21 16:47:28.110 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:58378 10 6452 1 2025-11-21 16:48:28.528 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51466 10 6452 1 2025-11-21 16:44:04.146 00:06:00.294 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 16:49:28.930 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:39808 10 6452 1 2025-11-21 16:45:04.144 00:06:00.300 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 16:50:29.347 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35894 10 6452 1 2025-11-21 16:50:52.951 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:50:52.928 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:50:52.755 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 16:50:52.851 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 16:50:53.013 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 16:51:29.709 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45574 10 6452 1 2025-11-21 16:52:30.113 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:59084 10 6452 1 2025-11-21 16:53:30.478 00:00:11.559 TCP 1.101.0.1:3000 -> 23.104.0.1:55248 10 6452 1 2025-11-21 16:54:32.097 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40606 10 6452 1 2025-11-21 16:55:32.495 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45556 10 6452 1 2025-11-21 16:55:53.073 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 16:55:52.444 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:55:52.955 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 16:55:52.953 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 16:55:53.038 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 16:51:04.148 00:06:00.295 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 16:56:32.902 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39216 10 6452 1 2025-11-21 16:52:04.145 00:06:00.301 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 16:57:33.267 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51436 10 6452 1 2025-11-21 16:58:33.627 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35184 10 6452 1 Summary: total flows: 138, total bytes: 417946, total packets: 1036, avg bps: 875, avg pps: 0, avg bpp: 403 Time window: 2025-11-21 15:55:04 - 2025-11-21 16:58:43 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0039s User: 0.0013s Wall: 0.0022s flows/second: 63922.0 Runtime: 0.0022s