Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 05:59:26.794 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47500 10 6452 1 2025-11-24 06:00:27.154 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41162 10 6452 1 2025-11-24 06:01:27.554 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36680 10 6452 1 2025-11-24 06:02:06.597 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 05:58:05.420 00:05:00.959 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:02:06.518 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:02:06.516 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:02:06.387 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:02:06.515 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:02:27.958 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54728 10 6452 1 2025-11-24 05:59:05.422 00:05:00.954 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:03:28.364 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43392 10 6452 1 2025-11-24 06:04:28.730 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34788 10 6452 1 2025-11-24 06:05:29.140 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41722 10 6452 1 2025-11-24 06:06:29.539 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48212 10 6452 1 2025-11-24 06:07:06.219 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:07:06.354 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:07:06.370 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:07:06.303 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:07:06.137 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:07:29.939 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:57404 10 6452 1 2025-11-24 06:04:05.424 00:05:00.957 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:08:30.316 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48164 10 6452 1 2025-11-24 06:05:05.429 00:05:00.950 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:09:30.725 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55484 10 6452 1 2025-11-24 06:10:31.140 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45940 10 6452 1 2025-11-24 06:11:31.545 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40662 10 6452 1 2025-11-24 06:12:06.632 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:12:06.444 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:12:06.266 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:12:06.475 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:12:06.551 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:12:31.942 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37686 10 6452 1 2025-11-24 06:13:32.359 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39348 10 6452 1 2025-11-24 06:10:05.429 00:05:00.955 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:14:32.770 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60532 10 6452 1 2025-11-24 06:11:05.431 00:05:00.950 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:15:33.136 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38040 10 6452 1 2025-11-24 06:16:33.495 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47402 10 6452 1 2025-11-24 06:17:06.669 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:17:06.724 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:17:06.722 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:17:06.222 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:17:06.751 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:17:33.899 00:00:11.134 TCP 1.101.0.1:3000 -> 23.104.0.1:49374 12 6556 1 2025-11-24 06:18:35.093 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38652 10 6452 1 2025-11-24 06:19:35.454 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59530 10 6452 1 2025-11-24 06:16:05.430 00:05:00.956 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:20:35.856 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:51728 10 6452 1 2025-11-24 06:17:05.432 00:05:00.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:21:36.280 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49060 10 6452 1 2025-11-24 06:22:06.800 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:22:06.731 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:22:06.498 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:22:06.873 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:22:06.956 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:22:36.694 00:00:10.608 TCP 1.101.0.1:3000 -> 23.104.0.1:58178 10 6452 1 2025-11-24 06:23:37.343 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57934 10 6452 1 2025-11-24 06:24:37.704 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45242 10 6452 1 2025-11-24 06:25:38.102 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:48856 10 6452 1 2025-11-24 06:22:05.430 00:05:00.957 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:26:38.570 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60382 10 6452 1 2025-11-24 06:27:06.990 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:27:06.737 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:23:05.433 00:05:00.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:27:06.921 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:27:06.853 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:27:06.907 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:27:38.971 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33464 10 6452 1 2025-11-24 06:28:39.375 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45822 10 6452 1 2025-11-24 06:29:39.780 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48462 10 6452 1 2025-11-24 06:30:40.183 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53986 10 6452 1 2025-11-24 06:31:40.589 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55820 10 6452 1 2025-11-24 06:28:05.433 00:05:00.958 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:32:06.907 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:32:06.894 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:32:06.950 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:32:06.887 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:32:06.822 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:32:40.987 00:00:23.543 TCP 1.101.0.1:3000 -> 23.104.0.1:36580 10 6452 1 2025-11-24 06:29:05.434 00:05:00.953 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:33:54.576 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57834 10 6452 1 2025-11-24 06:34:54.981 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41930 10 6452 1 2025-11-24 06:35:55.383 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58192 10 6452 1 2025-11-24 06:36:55.788 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46952 10 6452 1 2025-11-24 06:37:07.055 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:37:07.105 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:37:07.064 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:37:06.897 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:37:07.137 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:37:56.147 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41916 10 6452 1 2025-11-24 06:34:05.432 00:05:00.958 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:35:05.435 00:05:00.954 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:38:56.551 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48446 10 6452 1 2025-11-24 06:39:56.920 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48868 10 6452 1 2025-11-24 06:40:57.326 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55538 10 6452 1 2025-11-24 06:42:07.275 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:42:07.088 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:42:07.273 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:42:07.188 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:41:57.725 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57306 10 6452 1 2025-11-24 06:42:07.191 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:42:58.135 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47860 10 6452 1 2025-11-24 06:43:58.536 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50498 10 6452 1 2025-11-24 06:40:05.437 00:05:00.957 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:41:05.439 00:05:00.952 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:44:58.944 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57606 10 6452 1 2025-11-24 06:45:59.365 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45972 10 6452 1 2025-11-24 06:47:07.331 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:47:07.291 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:47:07.192 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:47:07.249 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:47:07.241 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:46:59.761 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55532 10 6452 1 2025-11-24 06:48:00.178 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36734 10 6452 1 2025-11-24 06:49:00.582 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58356 10 6452 1 2025-11-24 06:46:05.437 00:05:00.965 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:50:00.985 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40532 10 6452 1 2025-11-24 06:47:05.442 00:05:00.959 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:51:01.388 00:00:16.351 TCP 1.101.0.1:3000 -> 23.104.0.1:35374 12 10375 1 2025-11-24 06:52:07.353 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:52:07.350 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:52:07.348 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:52:07.291 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:52:07.271 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:52:07.784 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35698 10 6452 1 2025-11-24 06:53:08.189 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36540 10 6452 1 2025-11-24 06:54:08.600 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56830 10 6452 1 2025-11-24 06:55:09.002 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56340 10 6452 1 2025-11-24 06:52:05.440 00:05:00.964 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:56:09.415 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35692 10 6452 1 2025-11-24 06:57:07.314 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:57:07.315 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:53:05.444 00:05:00.958 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:57:07.315 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:57:07.318 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:57:07.397 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:57:09.827 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57310 10 6452 1 2025-11-24 06:58:10.228 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35800 10 6452 1 Summary: total flows: 139, total bytes: 414575, total packets: 1014, avg bps: 917, avg pps: 0, avg bpp: 408 Time window: 2025-11-24 05:58:05 - 2025-11-24 06:58:20 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0031s User: 0.0023s Wall: 0.0025s flows/second: 55667.7 Runtime: 0.0025s