Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 19:58:51.463 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38892 10 6452 1 2025-11-26 19:59:51.864 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54374 10 6452 1 2025-11-26 20:00:52.275 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52664 10 6452 1 2025-11-26 20:01:52.679 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59354 10 6452 1 2025-11-26 19:58:06.649 00:05:01.726 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:02:53.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55450 10 6452 1 2025-11-26 19:59:06.651 00:05:01.721 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:03:21.544 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:03:21.468 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:03:21.359 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:03:20.988 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:03:21.461 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:03:53.512 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40694 10 6452 1 2025-11-26 20:04:53.927 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:51662 10 6452 1 2025-11-26 20:05:54.351 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:49492 10 6452 1 2025-11-26 20:06:54.767 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:58900 10 6452 1 2025-11-26 20:04:06.650 00:05:01.726 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:07:55.141 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40494 10 6452 1 2025-11-26 20:08:21.287 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:08:21.059 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:08:21.205 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:08:21.100 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:08:21.204 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:08:55.511 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55798 10 6452 1 2025-11-26 20:05:06.653 00:05:01.721 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:09:55.912 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52708 10 6452 1 2025-11-26 20:10:56.278 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56348 10 6452 1 2025-11-26 20:11:56.642 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42204 10 6452 1 2025-11-26 20:12:57.002 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41552 10 6452 1 2025-11-26 20:13:21.263 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:13:21.259 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:13:21.262 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:13:21.013 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:13:21.179 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:13:57.403 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42528 10 6452 1 2025-11-26 20:10:06.651 00:05:01.739 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:11:06.655 00:05:01.735 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:14:57.808 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:54684 10 6452 1 2025-11-26 20:15:58.218 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57288 10 6452 1 2025-11-26 20:16:58.620 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34808 10 6452 1 2025-11-26 20:17:58.988 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52352 10 6452 1 2025-11-26 20:18:21.282 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:18:21.359 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:18:21.331 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:18:21.363 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:18:21.445 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:18:59.389 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33186 10 6452 1 2025-11-26 20:16:06.652 00:05:01.740 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:19:59.784 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56190 10 6452 1 2025-11-26 20:17:06.656 00:05:01.734 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:21:00.185 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50476 10 6452 1 2025-11-26 20:22:00.591 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58860 10 6452 1 2025-11-26 20:23:00.992 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50176 10 6452 1 2025-11-26 20:23:21.398 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:23:21.405 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:23:21.440 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:23:21.485 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:23:21.567 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:24:01.396 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59652 10 6452 1 2025-11-26 20:25:01.804 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49644 10 6452 1 2025-11-26 20:22:06.655 00:05:01.740 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:26:02.213 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47258 10 6452 1 2025-11-26 20:23:06.658 00:05:01.735 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:27:02.618 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:43948 11 6504 1 2025-11-26 20:28:03.099 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54902 10 6452 1 2025-11-26 20:28:21.486 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:28:21.589 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:28:21.644 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:28:21.306 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:28:21.404 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:29:03.505 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38070 10 6452 1 2025-11-26 20:30:03.906 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40184 10 6452 1 2025-11-26 20:31:04.311 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46344 10 6452 1 2025-11-26 20:28:06.656 00:05:01.743 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:32:04.717 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44126 10 6452 1 2025-11-26 20:29:06.659 00:05:01.738 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:33:21.996 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:33:05.125 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:32772 10 6452 1 2025-11-26 20:33:21.983 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:33:21.984 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:33:21.385 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:33:21.914 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:34:05.535 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58080 10 6452 1 2025-11-26 20:35:05.897 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41438 10 6452 1 2025-11-26 20:36:06.308 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57436 10 6452 1 2025-11-26 20:37:06.712 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50118 10 6452 1 2025-11-26 20:34:06.659 00:05:01.742 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:38:07.115 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51022 10 6452 1 2025-11-26 20:38:21.746 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:38:21.669 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:38:21.796 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:38:21.669 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:38:21.752 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:35:06.661 00:05:01.738 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:39:07.532 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33244 10 6452 1 2025-11-26 20:40:07.941 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43930 10 6452 1 2025-11-26 20:41:08.358 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46080 10 6452 1 2025-11-26 20:42:08.724 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36292 10 6452 1 2025-11-26 20:43:09.136 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54476 10 6452 1 2025-11-26 20:43:21.874 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:43:21.821 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:43:21.758 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:43:21.870 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:43:21.954 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:40:06.660 00:05:01.743 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:44:09.544 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36328 10 6452 1 2025-11-26 20:41:06.663 00:05:01.737 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:45:09.915 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56620 10 6452 1 2025-11-26 20:46:10.317 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46926 10 6452 1 2025-11-26 20:47:10.689 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38374 10 6452 1 2025-11-26 20:48:21.979 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:48:21.805 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:48:21.908 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:48:21.775 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:48:21.897 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:48:11.106 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33016 10 6452 1 2025-11-26 20:49:11.508 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43754 10 6452 1 2025-11-26 20:46:06.661 00:05:01.743 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:50:11.872 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46670 10 6452 1 2025-11-26 20:47:06.666 00:05:01.736 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:51:12.279 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58856 10 6452 1 2025-11-26 20:52:12.683 00:00:10.638 TCP 1.101.0.1:3000 -> 23.104.0.1:39244 10 6452 1 2025-11-26 20:53:22.358 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:53:22.145 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:53:22.220 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:53:22.059 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:53:22.276 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:53:13.360 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60876 10 6452 1 2025-11-26 20:54:13.764 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41880 10 6452 1 2025-11-26 20:55:14.176 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:56182 11 6504 1 2025-11-26 20:52:06.665 00:05:01.741 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:56:14.631 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42230 10 6452 1 2025-11-26 20:53:06.669 00:05:01.735 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:57:15.033 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59916 10 6452 1 2025-11-26 20:58:22.177 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:58:22.096 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:58:22.074 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:58:21.950 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:58:22.094 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:58:15.452 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57220 10 6452 1 Summary: total flows: 140, total bytes: 417104, total packets: 1022, avg bps: 921, avg pps: 0, avg bpp: 408 Time window: 2025-11-26 19:58:06 - 2025-11-26 20:58:25 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0042s User: 0.0021s Wall: 0.0023s flows/second: 62085.3 Runtime: 0.0023s