Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 12:58:57.571 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58244 10 6452 1 2025-11-26 12:59:57.970 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:34610 10 6452 1 2025-11-26 13:00:58.351 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55800 10 6452 1 2025-11-26 13:01:58.751 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37238 10 6452 1 2025-11-26 12:58:06.535 00:05:01.625 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 12:59:06.537 00:05:01.618 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 13:02:59.156 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60452 10 6452 1 2025-11-26 13:03:12.483 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:03:12.701 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:03:12.647 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 13:03:12.775 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 13:03:12.783 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 13:03:59.564 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46596 10 6452 1 2025-11-26 13:04:59.972 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44170 10 6452 1 2025-11-26 13:06:00.379 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35626 10 6452 1 2025-11-26 13:07:00.740 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56078 10 6452 1 2025-11-26 13:04:06.536 00:05:01.623 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 13:08:12.745 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 13:08:12.758 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 13:08:12.689 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:08:12.857 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:08:01.142 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:51994 10 6452 1 2025-11-26 13:08:12.940 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 13:05:06.539 00:05:01.617 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 13:09:01.504 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41112 10 6452 1 2025-11-26 13:10:01.912 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32802 10 6452 1 2025-11-26 13:11:02.312 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49140 10 6452 1 2025-11-26 13:12:02.715 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:52140 10 6452 1 2025-11-26 13:13:12.919 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 13:13:12.838 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 13:13:12.835 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 13:13:12.740 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:13:12.836 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:13:03.110 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48506 10 6452 1 2025-11-26 13:10:06.539 00:05:01.623 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 13:14:03.514 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53426 10 6452 1 2025-11-26 13:11:06.542 00:05:01.618 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 13:15:03.875 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33972 10 6452 1 2025-11-26 13:16:04.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40740 10 6452 1 2025-11-26 13:17:04.680 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42442 10 6452 1 2025-11-26 13:18:12.830 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 13:18:12.909 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 13:18:12.760 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 13:18:12.865 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:18:12.747 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:18:05.112 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36974 10 6452 1 2025-11-26 13:19:05.512 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38952 10 6452 1 2025-11-26 13:16:06.539 00:05:01.623 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 13:20:05.876 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50356 10 6452 1 2025-11-26 13:17:06.541 00:05:01.619 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 13:21:06.283 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45604 10 6452 1 2025-11-26 13:22:06.684 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46230 10 6452 1 2025-11-26 13:23:12.982 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 13:23:12.897 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 13:23:12.891 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 13:23:13.094 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:23:12.898 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:23:07.105 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43482 10 6452 1 2025-11-26 13:24:07.510 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59646 10 6452 1 2025-11-26 13:25:07.912 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46588 10 6452 1 2025-11-26 13:22:06.539 00:05:01.623 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 13:26:08.326 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44554 10 6452 1 2025-11-26 13:23:06.546 00:05:01.616 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 13:27:08.740 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51344 10 6452 1 2025-11-26 13:28:13.380 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 13:28:13.218 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 13:28:13.221 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 13:28:12.963 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:28:13.296 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:28:09.147 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47832 10 6452 1 2025-11-26 13:29:09.552 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36814 10 6452 1 2025-11-26 13:30:09.958 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43620 10 6452 1 2025-11-26 13:31:10.361 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42120 10 6452 1 2025-11-26 13:28:06.544 00:05:01.621 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 13:32:10.775 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53214 10 6452 1 2025-11-26 13:29:06.545 00:05:01.616 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 13:33:13.357 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 13:33:13.352 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 13:33:12.988 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 13:33:12.985 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:33:13.276 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:33:11.141 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44394 10 6452 1 2025-11-26 13:34:11.542 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:34414 11 6504 1 2025-11-26 13:35:12.005 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54650 10 6452 1 2025-11-26 13:36:12.407 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44260 10 6452 1 2025-11-26 13:37:12.815 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57390 10 6452 1 2025-11-26 13:34:06.545 00:05:01.621 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 13:38:13.437 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 13:38:13.430 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 13:38:13.505 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 13:38:13.350 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:38:13.355 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:38:13.221 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55864 10 6452 1 2025-11-26 13:35:06.547 00:05:01.616 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 13:39:13.623 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45774 10 6452 1 2025-11-26 13:40:14.028 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36688 10 6452 1 2025-11-26 13:41:14.435 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43298 10 6452 1 2025-11-26 13:42:14.835 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:46988 10 6452 1 2025-11-26 13:43:13.420 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 13:43:13.260 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 13:43:13.424 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 13:43:13.218 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:43:13.336 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:43:15.262 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43300 10 6452 1 2025-11-26 13:40:06.545 00:05:01.623 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 13:44:15.657 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58714 10 6452 1 2025-11-26 13:41:06.547 00:05:01.617 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 13:45:16.061 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37392 10 6452 1 2025-11-26 13:46:16.458 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52890 10 6452 1 2025-11-26 13:47:16.861 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42810 10 6452 1 2025-11-26 13:48:13.513 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 13:48:13.593 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 13:48:13.374 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:48:13.560 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:48:13.643 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 13:48:17.272 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42336 10 6452 1 2025-11-26 13:49:17.670 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45104 10 6452 1 2025-11-26 13:46:06.547 00:05:01.621 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 13:50:18.107 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38014 10 6452 1 2025-11-26 13:47:06.551 00:05:01.615 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 13:51:18.512 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36204 10 6452 1 2025-11-26 13:52:18.915 00:00:10.701 TCP 1.101.0.1:3000 -> 23.104.0.1:33470 10 6452 1 2025-11-26 13:53:13.825 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 13:53:13.746 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 13:53:13.680 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 13:53:13.766 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:53:13.742 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:53:19.657 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42202 10 6452 1 2025-11-26 13:54:20.065 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47466 10 6452 1 2025-11-26 13:55:20.475 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:43522 10 6452 1 2025-11-26 13:52:06.548 00:05:01.622 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 13:56:20.860 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49884 10 6452 1 2025-11-26 13:53:06.552 00:05:01.617 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 13:57:21.294 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44040 10 6452 1 2025-11-26 13:58:13.641 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 13:58:13.556 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 13:58:13.324 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:58:13.370 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 13:58:13.453 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 13:58:21.700 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55472 10 6452 1 Summary: total flows: 140, total bytes: 417052, total packets: 1021, avg bps: 920, avg pps: 0, avg bpp: 408 Time window: 2025-11-26 12:58:06 - 2025-11-26 13:58:32 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0048s User: 0.0012s Wall: 0.0025s flows/second: 55380.8 Runtime: 0.0025s