Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 04:59:37.429 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46264 10 6452 1 2025-11-26 05:00:37.829 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34276 10 6452 1 2025-11-26 05:01:38.236 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51030 10 6452 1 2025-11-26 04:58:06.395 00:05:01.513 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:02:38.645 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57374 10 6452 1 2025-11-26 05:03:02.897 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:03:02.891 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:03:02.573 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:03:02.836 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:03:02.921 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 04:59:06.398 00:05:01.507 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:03:39.057 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33308 12 6556 1 2025-11-26 05:04:39.455 00:00:10.636 TCP 1.101.0.1:3000 -> 23.104.0.1:60806 10 6452 1 2025-11-26 05:05:40.132 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36532 10 6452 1 2025-11-26 05:06:40.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38574 10 6452 1 2025-11-26 05:07:40.942 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58880 10 6452 1 2025-11-26 05:08:03.009 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:08:03.210 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:08:03.043 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:08:03.069 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:08:02.925 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:04:06.397 00:05:01.515 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:08:41.358 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35596 10 6452 1 2025-11-26 05:05:06.400 00:05:01.510 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:09:41.759 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47050 10 6452 1 2025-11-26 05:10:42.177 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:54286 10 6452 1 2025-11-26 05:11:42.602 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:48434 10 6452 1 2025-11-26 05:12:43.016 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:44778 10 6452 1 2025-11-26 05:13:02.953 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:13:03.138 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:13:02.997 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:13:03.344 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:13:03.426 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:13:43.433 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49426 10 6452 1 2025-11-26 05:10:06.400 00:05:01.516 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:14:43.837 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:51854 10 6452 1 2025-11-26 05:11:06.401 00:05:01.511 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:15:44.222 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47936 10 6452 1 2025-11-26 05:16:44.629 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59804 10 6452 1 2025-11-26 05:18:03.402 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:17:45.031 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50798 10 6452 1 2025-11-26 05:18:03.384 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:18:03.317 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:18:03.346 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:18:03.319 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:18:45.396 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33048 10 6452 1 2025-11-26 05:19:45.804 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:51158 10 6452 1 2025-11-26 05:16:06.401 00:05:01.516 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:20:46.185 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44706 10 6452 1 2025-11-26 05:17:06.402 00:05:01.512 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:21:46.551 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:54262 10 6452 1 2025-11-26 05:22:46.909 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56996 10 6452 1 2025-11-26 05:23:03.277 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:23:03.343 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:23:03.055 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:23:03.238 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:23:03.195 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:23:47.322 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53118 10 6452 1 2025-11-26 05:24:47.726 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52428 10 6452 1 2025-11-26 05:25:48.137 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56018 10 6452 1 2025-11-26 05:22:06.403 00:05:01.516 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:26:48.538 00:00:10.579 TCP 1.101.0.1:3000 -> 23.104.0.1:40664 10 6452 1 2025-11-26 05:23:06.408 00:05:01.509 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:27:49.154 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46448 10 6452 1 2025-11-26 05:28:03.418 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:28:03.157 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:28:03.108 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:28:03.309 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:28:03.391 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:28:49.566 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58012 10 6452 1 2025-11-26 05:29:49.928 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:58888 10 6452 1 2025-11-26 05:30:50.344 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39718 10 6452 1 2025-11-26 05:31:50.702 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53688 10 6452 1 2025-11-26 05:28:06.403 00:05:01.518 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:33:03.635 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:32:51.098 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36884 10 6452 1 2025-11-26 05:33:03.741 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:33:03.660 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:33:03.687 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:33:03.770 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:29:06.406 00:05:01.513 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:33:51.501 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55130 10 6452 1 2025-11-26 05:34:51.901 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53166 10 6452 1 2025-11-26 05:35:52.305 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53410 10 6452 1 2025-11-26 05:36:52.708 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42808 10 6452 1 2025-11-26 05:38:03.391 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:38:03.572 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:38:03.511 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:38:03.238 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:38:03.308 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:37:53.112 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36766 10 6452 1 2025-11-26 05:34:06.404 00:05:01.517 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:38:53.518 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55734 10 6452 1 2025-11-26 05:35:06.407 00:05:01.511 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:39:53.881 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51048 10 6452 1 2025-11-26 05:40:54.283 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55188 10 6452 1 2025-11-26 05:41:54.688 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:55134 10 6452 1 2025-11-26 05:43:03.627 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:43:03.818 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:43:03.649 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:43:03.727 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:43:03.545 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:42:55.097 00:00:10.703 TCP 1.101.0.1:3000 -> 23.104.0.1:53710 10 6452 1 2025-11-26 05:43:55.845 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:36218 10 6452 1 2025-11-26 05:40:06.405 00:05:01.518 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:41:06.408 00:05:01.513 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:44:56.275 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44604 10 6452 1 2025-11-26 05:45:56.682 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51694 10 6452 1 2025-11-26 05:46:57.114 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:51162 10 6452 1 2025-11-26 05:48:04.177 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:48:04.187 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:48:04.246 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:48:04.060 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:48:04.094 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:47:57.510 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:41078 10 6452 1 2025-11-26 05:48:57.880 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:33112 10 6452 1 2025-11-26 05:46:06.405 00:05:01.519 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:49:58.314 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56702 10 6452 1 2025-11-26 05:47:06.409 00:05:01.513 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:50:58.716 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:49798 10 6452 1 2025-11-26 05:51:59.145 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40606 10 6452 1 2025-11-26 05:53:04.085 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:53:04.070 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:53:03.940 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:53:03.998 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:53:04.003 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:52:59.505 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:39574 10 6452 1 2025-11-26 05:53:59.882 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57364 10 6452 1 2025-11-26 05:55:00.286 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40988 10 6452 1 2025-11-26 05:52:06.409 00:05:01.516 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:56:00.684 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41188 10 6452 1 2025-11-26 05:53:06.412 00:05:01.511 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:57:01.052 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60798 10 6452 1 2025-11-26 05:58:03.844 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:58:04.100 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:58:03.922 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:58:03.967 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:58:04.050 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:58:01.451 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46316 10 6452 1 Summary: total flows: 139, total bytes: 410652, total packets: 1012, avg bps: 911, avg pps: 0, avg bpp: 405 Time window: 2025-11-26 04:58:06 - 2025-11-26 05:58:11 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0046s User: 0.0009s Wall: 0.0015s flows/second: 90839.6 Runtime: 0.0015s