Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 01:59:23.778 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:32832 10 6452 1 2025-11-26 02:00:24.139 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52102 10 6452 1 2025-11-26 02:01:24.512 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47410 10 6452 1 2025-11-26 01:58:06.334 00:05:01.499 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:02:24.869 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40734 10 6452 1 2025-11-26 02:02:59.148 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:02:59.237 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:02:59.266 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:02:59.145 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:02:59.227 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 01:59:06.338 00:05:01.493 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:03:25.274 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43350 10 6452 1 2025-11-26 02:04:25.681 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53212 10 6452 1 2025-11-26 02:05:26.102 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33840 12 6556 1 2025-11-26 02:06:26.511 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35588 10 6452 1 2025-11-26 02:07:26.925 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:42960 10 6452 1 2025-11-26 02:07:59.451 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:07:59.267 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:07:59.453 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:07:59.055 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:07:59.368 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:04:06.335 00:05:01.498 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:08:27.343 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46082 10 6452 1 2025-11-26 02:05:06.338 00:05:01.493 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:09:27.744 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35820 10 6452 1 2025-11-26 02:10:28.155 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41976 10 6452 1 2025-11-26 02:11:28.559 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58570 10 6452 1 2025-11-26 02:12:28.960 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58180 10 6452 1 2025-11-26 02:12:59.700 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:12:59.458 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:12:59.425 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:12:59.582 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:12:59.666 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:13:29.364 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39988 10 6452 1 2025-11-26 02:10:06.337 00:05:01.501 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:14:29.729 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57372 10 6452 1 2025-11-26 02:11:06.340 00:05:01.497 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:15:30.145 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39316 12 6556 1 2025-11-26 02:16:30.552 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55254 10 6452 1 2025-11-26 02:17:30.911 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45300 10 6452 1 2025-11-26 02:17:59.755 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:17:59.626 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:17:59.452 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:17:59.463 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:17:59.672 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:18:31.289 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45996 10 6452 1 2025-11-26 02:19:31.696 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45632 10 6452 1 2025-11-26 02:16:06.339 00:05:01.506 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:20:32.105 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58294 10 6452 1 2025-11-26 02:17:06.342 00:05:01.502 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:21:32.511 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43930 10 6452 1 2025-11-26 02:22:32.884 00:00:10.890 TCP 1.101.0.1:3000 -> 23.104.0.1:44324 12 6556 1 2025-11-26 02:22:59.684 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:22:59.877 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:22:59.392 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:22:59.682 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:22:59.764 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:23:33.810 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39162 10 6452 1 2025-11-26 02:24:34.209 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56684 10 6452 1 2025-11-26 02:25:34.572 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48902 10 6452 1 2025-11-26 02:22:06.341 00:05:01.508 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:26:34.935 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:41848 10 6452 1 2025-11-26 02:23:06.345 00:05:01.502 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:27:35.363 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56772 10 6452 1 2025-11-26 02:27:59.822 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:27:59.511 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:27:59.940 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:27:59.986 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:28:00.024 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:28:35.730 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39204 10 6452 1 2025-11-26 02:29:36.138 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54818 11 6492 1 2025-11-26 02:30:36.536 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40632 11 6504 1 2025-11-26 02:31:36.957 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42810 10 6452 1 2025-11-26 02:28:06.346 00:05:01.505 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:32:37.326 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58816 10 6452 1 2025-11-26 02:32:59.885 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:32:59.825 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:33:00.003 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:33:00.082 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:33:00.166 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:29:06.349 00:05:01.499 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:33:37.727 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47002 10 6452 1 2025-11-26 02:34:38.138 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52024 10 6452 1 2025-11-26 02:35:38.546 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51782 10 6452 1 2025-11-26 02:36:38.947 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42154 10 6452 1 2025-11-26 02:37:39.366 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49704 10 6452 1 2025-11-26 02:38:00.416 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:38:00.276 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:38:00.087 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:38:00.173 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:38:00.333 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:34:06.347 00:05:01.506 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:38:39.767 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36908 10 6452 1 2025-11-26 02:35:06.349 00:05:01.507 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:39:40.174 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35210 10 6452 1 2025-11-26 02:40:40.579 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49942 10 6452 1 2025-11-26 02:41:40.985 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:37184 12 10375 1 2025-11-26 02:42:41.464 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52034 10 6452 1 2025-11-26 02:42:59.945 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:42:59.856 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:42:59.945 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:43:00.115 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:43:00.028 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:43:41.872 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:34108 10 6452 1 2025-11-26 02:40:06.348 00:05:01.508 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:44:42.240 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48478 10 6452 1 2025-11-26 02:41:06.350 00:05:01.502 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:45:42.648 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42058 10 6452 1 2025-11-26 02:46:43.016 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48824 10 6452 1 2025-11-26 02:47:43.421 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33598 10 6452 1 2025-11-26 02:48:00.311 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:48:00.116 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:48:00.147 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:47:59.988 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:48:00.071 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:48:43.827 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40140 10 6452 1 2025-11-26 02:49:44.231 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44318 10 6452 1 2025-11-26 02:46:06.350 00:05:01.513 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:50:44.639 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42322 10 6452 1 2025-11-26 02:47:06.353 00:05:01.508 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:51:45.061 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46608 10 6452 1 2025-11-26 02:52:45.469 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60960 10 6452 1 2025-11-26 02:53:00.225 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:53:00.389 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:53:00.325 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:53:00.225 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:53:00.307 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:53:45.833 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53434 10 6452 1 2025-11-26 02:54:46.258 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:51990 10 6452 1 2025-11-26 02:55:46.682 00:00:11.093 TCP 1.101.0.1:3000 -> 23.104.0.1:41910 10 6452 1 2025-11-26 02:52:06.352 00:05:01.512 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:56:47.819 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33470 10 6452 1 2025-11-26 02:53:06.355 00:05:01.507 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:57:48.188 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40740 10 6452 1 2025-11-26 02:58:00.546 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:58:00.463 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:58:00.540 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:58:00.334 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:58:00.463 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 139, total bytes: 414875, total packets: 1020, avg bps: 921, avg pps: 0, avg bpp: 406 Time window: 2025-11-26 01:58:06 - 2025-11-26 02:58:07 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0031s User: 0.0031s Wall: 0.0017s flows/second: 82978.7 Runtime: 0.0017s