Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 03:59:12.692 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46770 10 6452 1 2025-11-26 04:00:13.111 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54378 10 6452 1 2025-11-26 04:01:13.518 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53426 10 6452 1 2025-11-26 03:58:06.370 00:05:01.513 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 04:02:13.915 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40676 10 6452 1 2025-11-26 04:03:02.125 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 04:03:01.497 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 04:03:01.967 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 04:03:01.338 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:03:02.041 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 03:59:06.373 00:05:01.508 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 04:03:14.323 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56676 10 6452 1 2025-11-26 04:04:14.724 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46566 10 6452 1 2025-11-26 04:05:15.138 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:44698 10 6452 1 2025-11-26 04:06:15.498 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54868 10 6452 1 2025-11-26 04:07:15.902 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35928 10 6452 1 2025-11-26 04:08:01.745 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:08:01.693 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:08:01.707 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 04:08:01.777 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 04:08:01.775 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 04:04:06.372 00:05:01.512 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 04:08:16.323 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47450 10 6452 1 2025-11-26 04:05:06.374 00:05:01.508 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 04:09:16.723 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38860 10 6452 1 2025-11-26 04:10:17.138 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51708 10 6452 1 2025-11-26 04:11:17.546 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50442 10 6452 1 2025-11-26 04:12:17.950 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58526 10 6452 1 2025-11-26 04:13:02.018 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 04:13:01.704 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 04:13:01.814 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 04:13:01.654 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:13:01.934 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:13:18.371 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46712 12 6556 1 2025-11-26 04:10:06.372 00:05:01.514 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 04:14:18.776 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:46318 11 6504 1 2025-11-26 04:11:06.375 00:05:01.509 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 04:15:19.234 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:59368 11 6504 1 2025-11-26 04:16:19.691 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:59572 10 6452 1 2025-11-26 04:17:20.055 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51298 10 6452 1 2025-11-26 04:18:01.947 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 04:18:01.961 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 04:18:01.829 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:18:02.005 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:18:02.087 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 04:18:20.460 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59086 10 6452 1 2025-11-26 04:19:20.821 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43802 10 6452 1 2025-11-26 04:16:06.376 00:05:01.512 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 04:20:21.226 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44938 10 6452 1 2025-11-26 04:17:06.379 00:05:01.507 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 04:21:21.636 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:44654 12 10369 1 2025-11-26 04:22:22.101 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43884 10 6452 1 2025-11-26 04:23:02.109 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:23:02.166 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 04:23:01.904 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 04:23:01.956 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:23:02.192 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 04:23:22.509 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58026 10 6452 1 2025-11-26 04:24:22.883 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:37174 10 6452 1 2025-11-26 04:25:23.293 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:35454 10 6452 1 2025-11-26 04:22:06.377 00:05:01.514 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 04:26:23.667 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:52156 10 6452 1 2025-11-26 04:23:06.379 00:05:01.509 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 04:27:24.116 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40788 10 6452 1 2025-11-26 04:28:02.478 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 04:28:02.408 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 04:28:02.228 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:28:02.395 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:28:02.506 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 04:28:24.478 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:54124 10 6452 1 2025-11-26 04:29:24.873 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56628 10 6452 1 2025-11-26 04:30:25.277 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 10 6452 1 2025-11-26 04:31:25.675 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33638 10 6452 1 2025-11-26 04:28:06.383 00:05:01.509 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 04:32:26.108 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46848 10 6452 1 2025-11-26 04:33:02.188 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 04:33:02.279 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 04:33:01.962 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:33:02.431 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:33:02.515 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 04:29:06.386 00:05:01.505 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 04:33:26.474 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60754 10 6452 1 2025-11-26 04:34:26.875 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57510 10 6452 1 2025-11-26 04:35:27.281 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:42022 10 6452 1 2025-11-26 04:36:27.682 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46378 10 6452 1 2025-11-26 04:37:28.130 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44810 10 6452 1 2025-11-26 04:38:02.415 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 04:38:02.337 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 04:38:02.354 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 04:38:02.357 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:38:02.334 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:34:06.387 00:05:01.508 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 04:38:28.493 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33272 10 6452 1 2025-11-26 04:35:06.389 00:05:01.502 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 04:39:28.895 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55818 12 6556 1 2025-11-26 04:40:29.310 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47832 10 6452 1 2025-11-26 04:41:29.720 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52340 10 6452 1 2025-11-26 04:42:30.130 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57694 10 6452 1 2025-11-26 04:43:02.623 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 04:43:02.390 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 04:43:02.230 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:43:02.618 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:43:02.701 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 04:43:30.485 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51918 10 6452 1 2025-11-26 04:40:06.389 00:05:01.507 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 04:44:30.888 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54170 12 6556 1 2025-11-26 04:41:06.390 00:05:01.502 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 04:45:31.304 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45514 10 6452 1 2025-11-26 04:46:31.707 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45010 10 6452 1 2025-11-26 04:47:32.105 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52992 10 6452 1 2025-11-26 04:48:02.788 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 04:48:02.786 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 04:48:02.605 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:48:02.859 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:48:02.941 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 04:48:32.503 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59188 10 6452 1 2025-11-26 04:49:32.925 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49124 10 6452 1 2025-11-26 04:46:06.392 00:05:01.514 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 04:50:33.287 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47618 10 6452 1 2025-11-26 04:47:06.392 00:05:01.510 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 04:51:33.691 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52558 10 6452 1 2025-11-26 04:52:34.115 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58256 10 6452 1 2025-11-26 04:53:02.770 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 04:53:02.861 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 04:53:02.378 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:53:02.772 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:53:02.856 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 04:53:34.482 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47074 10 6452 1 2025-11-26 04:54:34.890 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56758 10 6452 1 2025-11-26 04:55:35.297 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36398 10 6452 1 2025-11-26 04:52:06.393 00:05:01.513 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 04:56:35.697 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51954 10 6452 1 2025-11-26 04:53:06.398 00:05:01.507 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 04:57:36.112 00:00:10.881 TCP 1.101.0.1:3000 -> 23.104.0.1:49074 10 6452 1 2025-11-26 04:58:02.797 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 04:58:02.734 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 04:58:02.596 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:58:02.803 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 04:58:02.886 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 04:58:37.032 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48224 10 6452 1 Summary: total flows: 140, total bytes: 421333, total packets: 1030, avg bps: 925, avg pps: 0, avg bpp: 409 Time window: 2025-11-26 03:58:06 - 2025-11-26 04:58:47 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0035s User: 0.0027s Wall: 0.0023s flows/second: 59778.3 Runtime: 0.0024s