Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 21:59:35.315 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33542 10 6452 1 2025-11-25 22:00:35.720 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:52918 10 6452 1 2025-11-25 22:01:36.150 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41494 10 6452 1 2025-11-25 21:58:06.276 00:05:01.412 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 22:02:54.574 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 22:02:36.558 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50694 10 6452 1 2025-11-25 22:02:54.548 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 22:02:54.622 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 22:02:54.365 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:02:54.492 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 21:59:06.279 00:05:01.406 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 22:03:36.967 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42190 10 6452 1 2025-11-25 22:04:37.372 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53232 10 6452 1 2025-11-25 22:05:37.776 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:52252 10 6452 1 2025-11-25 22:06:38.155 00:00:10.779 TCP 1.101.0.1:3000 -> 23.104.0.1:45468 10 6452 1 2025-11-25 22:07:38.978 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33314 10 6452 1 2025-11-25 22:07:54.377 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 22:07:54.641 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 22:07:54.579 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:07:54.296 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:07:54.562 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 22:04:06.279 00:05:01.413 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 22:08:39.380 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53242 10 6452 1 2025-11-25 22:05:06.281 00:05:01.409 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 22:09:39.744 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53642 10 6452 1 2025-11-25 22:10:40.114 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33116 10 6452 1 2025-11-25 22:11:40.517 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59070 10 6452 1 2025-11-25 22:12:54.591 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 22:12:54.720 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 22:12:54.396 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 22:12:54.545 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:12:40.922 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:56038 10 6452 1 2025-11-25 22:12:54.508 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:13:41.349 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60408 10 6452 1 2025-11-25 22:10:06.283 00:05:01.413 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 22:14:41.747 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:48440 10 6452 1 2025-11-25 22:11:06.284 00:05:01.409 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 22:15:42.137 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51632 10 6452 1 2025-11-25 22:16:42.543 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:43744 10 6452 1 2025-11-25 22:17:42.976 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:40424 10 6452 1 2025-11-25 22:17:54.571 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:17:55.083 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 22:17:55.119 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 22:17:55.089 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:17:55.173 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 22:18:43.343 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47218 10 6452 1 2025-11-25 22:19:43.746 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:42260 10 6452 1 2025-11-25 22:16:06.282 00:05:01.413 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 22:20:44.156 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37440 10 6452 1 2025-11-25 22:17:06.286 00:05:01.408 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 22:21:44.561 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55238 10 6452 1 2025-11-25 22:22:54.859 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 22:22:54.906 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:22:54.775 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:22:55.045 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 22:22:44.975 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34974 10 6452 1 2025-11-25 22:22:55.002 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 22:23:45.391 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54906 10 6452 1 2025-11-25 22:24:45.795 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47290 10 6452 1 2025-11-25 22:25:46.198 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60412 10 6452 1 2025-11-25 22:22:06.284 00:05:01.418 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 22:26:46.560 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:38612 10 6452 1 2025-11-25 22:23:06.286 00:05:01.418 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 22:27:54.967 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 22:27:54.724 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:27:54.903 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:27:55.060 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 22:27:46.952 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41950 10 6452 1 2025-11-25 22:27:54.985 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 22:28:47.363 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47736 10 6452 1 2025-11-25 22:29:47.729 00:00:10.425 TCP 1.101.0.1:3000 -> 23.104.0.1:42378 10 6452 1 2025-11-25 22:30:48.190 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40580 10 6452 1 2025-11-25 22:31:48.590 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54918 10 6452 1 2025-11-25 22:28:06.285 00:05:01.425 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 22:32:54.837 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:32:55.176 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 22:32:55.103 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 22:32:48.996 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55278 10 6452 1 2025-11-25 22:32:55.215 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 22:32:55.093 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:29:06.289 00:05:01.420 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 22:33:49.404 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41620 10 6452 1 2025-11-25 22:34:49.805 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49304 10 6452 1 2025-11-25 22:35:50.211 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53930 10 6452 1 2025-11-25 22:36:50.575 00:00:10.502 TCP 1.101.0.1:3000 -> 23.104.0.1:57538 10 6452 1 2025-11-25 22:37:55.119 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:37:55.074 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:37:55.255 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 22:37:55.199 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 22:37:55.157 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 22:37:51.140 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41916 10 6452 1 2025-11-25 22:34:06.286 00:05:01.431 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 22:38:51.544 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52678 10 6452 1 2025-11-25 22:35:06.288 00:05:01.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 22:39:51.950 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57316 10 6452 1 2025-11-25 22:40:52.357 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43906 10 6452 1 2025-11-25 22:41:52.756 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50660 10 6452 1 2025-11-25 22:42:55.279 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 22:42:55.334 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 22:42:55.222 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:42:55.373 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:42:55.456 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 22:42:53.173 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52854 10 6452 1 2025-11-25 22:43:53.574 00:00:10.578 TCP 1.101.0.1:3000 -> 23.104.0.1:59128 10 6452 1 2025-11-25 22:40:06.288 00:05:01.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 22:44:54.201 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60354 10 6452 1 2025-11-25 22:41:06.289 00:05:01.427 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 22:45:54.611 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36400 10 6452 1 2025-11-25 22:46:55.014 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47514 10 6452 1 2025-11-25 22:47:55.188 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 22:47:55.382 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 22:47:55.446 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:47:55.403 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:47:55.487 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 22:47:55.376 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41150 10 6452 1 2025-11-25 22:48:55.790 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38404 10 6452 1 2025-11-25 22:49:56.186 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53112 10 6452 1 2025-11-25 22:46:06.288 00:05:01.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 22:50:56.587 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49072 10 6452 1 2025-11-25 22:47:06.294 00:05:01.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 22:51:56.946 00:00:10.473 TCP 1.101.0.1:3000 -> 23.104.0.1:40494 10 6452 1 2025-11-25 22:52:55.634 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 22:52:55.611 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 22:52:55.605 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 22:52:55.203 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:52:55.548 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:52:57.460 00:00:11.030 TCP 1.101.0.1:3000 -> 23.104.0.1:45216 10 6452 1 2025-11-25 22:53:58.534 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:56618 10 6452 1 2025-11-25 22:54:58.898 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:59986 10 6452 1 2025-11-25 22:55:59.273 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40520 10 6452 1 2025-11-25 22:52:06.291 00:05:01.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 22:53:06.295 00:05:01.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 22:56:59.683 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51278 10 6452 1 2025-11-25 22:57:55.766 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 22:57:55.525 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 22:57:55.516 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 22:57:55.663 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:57:55.684 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 22:58:00.106 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56362 10 6452 1 Summary: total flows: 139, total bytes: 410548, total packets: 1010, avg bps: 911, avg pps: 0, avg bpp: 406 Time window: 2025-11-25 21:58:06 - 2025-11-25 22:58:10 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0024s User: 0.0024s Wall: 0.0024s flows/second: 58306.7 Runtime: 0.0024s