Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 22:59:32.352 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59992 10 7079 1 2025-11-21 22:55:04.294 00:06:00.278 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 23:00:32.712 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:42128 10 7079 1 2025-11-21 23:01:00.184 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 23:00:59.724 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:00:59.977 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:01:00.179 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 23:01:00.059 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 22:56:04.292 00:06:00.283 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 23:01:33.130 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52738 10 7079 1 2025-11-21 23:02:33.538 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43246 10 7079 1 2025-11-21 23:03:33.942 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:52878 12 10375 1 2025-11-21 23:04:34.395 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59940 10 6452 1 2025-11-21 23:05:34.797 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49700 10 6452 1 2025-11-21 23:06:00.063 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 23:06:00.111 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:06:00.410 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:06:00.062 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 23:06:00.494 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 23:06:35.206 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55336 10 6452 1 2025-11-21 23:02:04.296 00:06:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 23:07:35.618 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35970 10 6452 1 2025-11-21 23:03:04.295 00:06:00.284 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 23:08:36.022 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 10 6452 1 2025-11-21 23:09:36.426 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46808 10 6452 1 2025-11-21 23:10:36.784 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56422 10 6452 1 2025-11-21 23:11:00.249 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 23:11:00.268 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:11:00.319 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:11:00.362 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 23:11:00.402 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 23:11:37.195 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45114 10 6452 1 2025-11-21 23:12:37.558 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40888 10 6452 1 2025-11-21 23:13:37.956 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44848 10 6452 1 2025-11-21 23:09:04.298 00:06:00.279 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 23:14:38.361 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53642 10 6452 1 2025-11-21 23:10:04.297 00:06:00.284 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 23:15:38.775 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38488 10 6452 1 2025-11-21 23:16:00.390 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 23:16:00.327 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:16:00.390 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:16:00.387 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 23:16:00.472 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 23:16:39.193 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:46406 10 6452 1 2025-11-21 23:17:39.558 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48066 10 6452 1 2025-11-21 23:18:39.961 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39286 10 6452 1 2025-11-21 23:19:40.322 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56334 10 6452 1 2025-11-21 23:20:40.722 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51764 10 6452 1 2025-11-21 23:21:00.558 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 23:21:00.566 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:21:00.615 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:21:00.648 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 23:21:00.698 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 23:16:04.299 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 23:21:41.139 00:00:11.121 TCP 1.101.0.1:3000 -> 23.104.0.1:52082 10 6452 1 2025-11-21 23:17:04.295 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 23:22:42.317 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56984 10 6452 1 2025-11-21 23:23:42.721 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58068 10 6452 1 2025-11-21 23:24:43.129 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33296 10 6452 1 2025-11-21 23:25:43.531 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44866 10 6452 1 2025-11-21 23:26:01.659 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 23:26:01.574 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 23:26:01.660 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:26:01.576 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:26:01.688 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 23:26:43.930 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:52552 10 6452 1 2025-11-21 23:27:44.354 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47586 10 6452 1 2025-11-21 23:23:04.300 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 23:28:44.762 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36748 10 6452 1 2025-11-21 23:24:04.299 00:06:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 23:29:45.176 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43106 10 6452 1 2025-11-21 23:30:45.581 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52588 10 6452 1 2025-11-21 23:31:00.615 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 23:31:00.743 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:31:00.726 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:31:00.828 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 23:31:00.808 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 23:31:45.979 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47958 10 6452 1 2025-11-21 23:32:46.391 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:45244 10 6452 1 2025-11-21 23:33:46.770 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49514 10 6452 1 2025-11-21 23:30:04.301 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 23:34:47.185 00:00:19.519 TCP 1.101.0.1:3000 -> 23.104.0.1:34398 10 6452 1 2025-11-21 23:36:00.928 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 23:36:01.158 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 23:36:00.977 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:36:01.099 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:31:04.299 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 23:36:01.182 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 23:35:56.748 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60112 10 6452 1 2025-11-21 23:36:57.148 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53772 10 6452 1 2025-11-21 23:37:57.510 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47390 10 6452 1 2025-11-21 23:38:57.910 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60384 10 6452 1 2025-11-21 23:39:58.320 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59154 10 6452 1 2025-11-21 23:41:00.909 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 23:41:00.674 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:41:00.900 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:41:00.824 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 23:41:00.983 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 23:40:58.689 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34264 10 6452 1 2025-11-21 23:37:04.303 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 23:41:59.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51568 10 6452 1 2025-11-21 23:38:04.301 00:06:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 23:42:59.515 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51282 10 6452 1 2025-11-21 23:43:59.923 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48812 10 6452 1 2025-11-21 23:45:00.327 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43996 10 6452 1 2025-11-21 23:46:00.897 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 23:46:00.976 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:46:00.793 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 23:46:00.979 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:46:01.063 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 23:46:00.730 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50594 10 6452 1 2025-11-21 23:47:01.149 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37378 10 6452 1 2025-11-21 23:48:01.554 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53102 10 6452 1 2025-11-21 23:44:04.305 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 23:49:01.954 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41402 10 6452 1 2025-11-21 23:45:04.302 00:06:00.300 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 23:50:02.369 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48696 10 6452 1 2025-11-21 23:51:01.121 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 23:51:01.123 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:51:01.124 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:51:01.120 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 23:51:01.207 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 23:51:02.771 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:53892 10 6452 1 2025-11-21 23:52:03.145 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48268 10 6452 1 2025-11-21 23:53:03.543 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55898 10 6452 1 2025-11-21 23:54:03.948 00:00:10.509 TCP 1.101.0.1:3000 -> 23.104.0.1:57944 10 6452 1 2025-11-21 23:55:04.497 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34546 10 6452 1 2025-11-21 23:56:01.313 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 23:56:01.204 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:56:01.264 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 23:56:01.264 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 23:51:04.307 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 23:56:01.348 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 23:56:04.904 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51060 12 6556 1 2025-11-21 23:52:04.303 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 23:57:05.315 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49448 10 6452 1 2025-11-21 23:58:05.728 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33434 10 6452 1 Summary: total flows: 137, total bytes: 417821, total packets: 1026, avg bps: 881, avg pps: 0, avg bpp: 407 Time window: 2025-11-21 22:55:04 - 2025-11-21 23:58:16 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0022s User: 0.0022s Wall: 0.0013s flows/second: 105628.6 Runtime: 0.0013s