Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 16:59:14.273 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47782 10 6452 1 2025-11-23 17:00:14.681 00:00:10.481 TCP 1.101.0.1:3000 -> 23.104.0.1:38600 10 6452 1 2025-11-23 17:01:15.204 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:39432 12 10375 1 2025-11-23 17:01:50.738 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:01:50.737 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:01:50.590 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:01:50.692 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:01:50.774 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 16:58:05.129 00:05:00.918 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:02:15.645 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44280 10 6452 1 2025-11-23 16:59:05.133 00:05:00.913 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:03:16.057 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55876 10 6452 1 2025-11-23 17:04:16.462 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42162 10 6452 1 2025-11-23 17:05:16.863 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46926 10 6452 1 2025-11-23 17:06:17.279 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35448 10 6452 1 2025-11-23 17:06:50.713 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:06:50.529 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:06:50.836 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:06:50.663 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:06:50.632 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:07:17.642 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45208 10 6452 1 2025-11-23 17:04:05.130 00:05:00.918 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:08:18.048 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44752 10 6452 1 2025-11-23 17:05:05.133 00:05:00.914 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:09:18.458 00:00:11.316 TCP 1.101.0.1:3000 -> 23.104.0.1:49784 10 6452 1 2025-11-23 17:10:19.815 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47628 10 6452 1 2025-11-23 17:11:20.218 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57612 10 6452 1 2025-11-23 17:11:51.072 00:00:00.051 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:11:50.993 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:11:50.985 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:11:50.933 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:11:50.990 00:00:00.051 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:12:20.621 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58648 10 6452 1 2025-11-23 17:13:21.024 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:52976 10 6452 1 2025-11-23 17:10:05.135 00:05:00.917 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:14:21.446 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41296 10 6452 1 2025-11-23 17:11:05.138 00:05:00.911 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:15:21.856 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33640 10 6452 1 2025-11-23 17:16:22.277 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39672 10 6452 1 2025-11-23 17:16:50.849 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:16:51.047 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:16:50.961 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:16:50.850 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:16:50.932 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:17:22.697 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57890 10 6452 1 2025-11-23 17:18:23.113 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35040 10 6452 1 2025-11-23 17:19:23.509 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47434 10 6452 1 2025-11-23 17:16:05.136 00:05:00.918 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:20:23.915 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39316 10 6452 1 2025-11-23 17:17:05.139 00:05:00.912 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:21:24.322 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33204 10 6452 1 2025-11-23 17:21:50.991 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:21:50.979 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:21:51.014 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:21:51.079 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:21:51.161 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:22:24.729 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47370 10 6452 1 2025-11-23 17:23:25.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53246 10 6452 1 2025-11-23 17:24:25.515 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36246 10 6452 1 2025-11-23 17:25:25.884 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39556 10 6452 1 2025-11-23 17:22:05.138 00:05:00.916 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:26:26.283 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51474 10 6452 1 2025-11-23 17:26:51.286 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:26:51.194 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:26:51.247 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:26:51.064 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:26:51.204 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:23:05.141 00:05:00.910 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:27:26.689 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60726 10 6452 1 2025-11-23 17:28:27.108 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33596 10 6452 1 2025-11-23 17:29:27.519 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37268 10 6452 1 2025-11-23 17:30:27.918 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43840 10 6452 1 2025-11-23 17:31:28.323 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46926 10 6452 1 2025-11-23 17:31:51.573 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:31:51.441 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:31:51.447 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:31:51.314 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:31:51.491 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:28:05.150 00:05:00.905 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:32:28.719 00:00:10.682 TCP 1.101.0.1:3000 -> 23.104.0.1:59130 10 6452 1 2025-11-23 17:29:05.154 00:05:00.900 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:33:29.442 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34896 10 6452 1 2025-11-23 17:34:29.805 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52084 10 6452 1 2025-11-23 17:35:30.211 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:55786 11 6504 1 2025-11-23 17:36:30.671 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60636 10 6452 1 2025-11-23 17:36:51.540 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:36:51.271 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:36:51.306 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:36:51.378 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:36:51.461 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:37:31.103 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54880 10 6452 1 2025-11-23 17:34:05.152 00:05:00.906 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:38:31.509 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50418 10 6452 1 2025-11-23 17:35:05.155 00:05:00.900 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:39:31.915 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48866 10 6452 1 2025-11-23 17:40:32.317 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37916 10 6452 1 2025-11-23 17:41:32.719 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:55188 10 6452 1 2025-11-23 17:41:51.512 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:41:51.432 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:41:51.484 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:41:51.364 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:41:51.430 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:42:33.148 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57626 10 6452 1 2025-11-23 17:43:33.548 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:33748 10 6452 1 2025-11-23 17:40:05.152 00:05:00.909 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:44:33.941 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:49826 10 6452 1 2025-11-23 17:41:05.154 00:05:00.907 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:45:34.361 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35904 10 6452 1 2025-11-23 17:46:51.622 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:46:51.591 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:46:51.453 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:46:51.361 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:46:51.534 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:46:34.765 00:00:20.819 TCP 1.101.0.1:3000 -> 23.104.0.1:43200 10 6452 1 2025-11-23 17:47:45.645 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43676 10 6452 1 2025-11-23 17:48:46.057 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59276 10 6452 1 2025-11-23 17:49:46.459 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53038 10 6452 1 2025-11-23 17:46:05.153 00:05:00.918 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:50:46.856 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57622 10 6452 1 2025-11-23 17:47:05.155 00:05:00.912 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:51:51.736 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:51:51.717 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:51:51.649 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:51:51.607 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:51:51.653 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:51:47.287 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35768 10 6452 1 2025-11-23 17:52:47.686 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41632 10 6452 1 2025-11-23 17:53:48.064 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57968 10 6452 1 2025-11-23 17:54:48.470 00:00:16.317 TCP 1.101.0.1:3000 -> 23.104.0.1:56488 10 6452 1 2025-11-23 17:55:54.825 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:42154 10 6452 1 2025-11-23 17:52:05.156 00:05:00.916 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:56:51.813 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:56:51.819 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:56:51.582 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:56:51.817 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:56:51.900 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:53:05.158 00:05:00.911 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:56:55.267 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34352 10 6452 1 2025-11-23 17:57:55.676 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:57162 10 6452 1 Summary: total flows: 139, total bytes: 414523, total packets: 1013, avg bps: 920, avg pps: 0, avg bpp: 409 Time window: 2025-11-23 16:58:05 - 2025-11-23 17:58:06 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0030s User: 0.0022s Wall: 0.0021s flows/second: 64923.0 Runtime: 0.0022s