Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 05:59:00.149 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40794 10 6452 1 2025-11-17 05:56:01.951 00:05:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 05:56:01.953 00:05:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 06:00:00.549 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48236 10 6452 1 2025-11-17 06:01:00.950 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36656 10 6452 1 2025-11-17 06:02:01.357 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48848 10 6452 1 2025-11-17 06:03:01.717 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:38748 10 6452 1 2025-11-17 06:03:42.842 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 06:03:42.600 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:03:42.377 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:03:42.786 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 06:03:42.459 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 06:04:02.141 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50210 10 6452 1 2025-11-17 06:05:02.548 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53142 10 6452 1 2025-11-17 06:02:01.956 00:05:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 06:02:01.954 00:05:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 06:06:02.947 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44342 10 6452 1 2025-11-17 06:07:03.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44902 10 6452 1 2025-11-17 06:08:03.760 00:00:10.876 TCP 1.101.0.1:3000 -> 23.104.0.1:50282 10 6452 1 2025-11-17 06:08:42.705 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 06:08:42.501 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:08:42.557 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:08:42.433 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 06:08:42.640 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 06:09:04.673 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54532 11 6492 1 2025-11-17 06:10:05.102 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36204 10 6452 1 2025-11-17 06:11:05.510 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58600 10 6452 1 2025-11-17 06:08:01.955 00:05:00.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 06:08:01.960 00:05:00.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 06:12:05.914 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44972 10 6452 1 2025-11-17 06:13:06.324 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54002 10 6452 1 2025-11-17 06:13:43.339 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 06:13:43.221 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 06:13:43.114 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:13:43.257 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:13:42.880 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 06:14:06.729 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37212 10 6452 1 2025-11-17 06:15:07.140 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50316 10 6452 1 2025-11-17 06:16:07.542 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:42210 10 6452 1 2025-11-17 06:17:07.898 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55078 10 6452 1 2025-11-17 06:14:01.956 00:05:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 06:14:01.959 00:05:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 06:18:08.308 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53144 10 6452 1 2025-11-17 06:18:42.940 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 06:18:42.857 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 06:18:42.611 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:18:42.858 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:18:42.712 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 06:19:08.729 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39382 10 6452 1 2025-11-17 06:20:09.137 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47228 10 6452 1 2025-11-17 06:21:09.545 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35320 10 6452 1 2025-11-17 06:22:09.948 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:59018 12 10369 1 2025-11-17 06:23:10.430 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58962 10 6452 1 2025-11-17 06:23:43.090 00:00:00.045 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 06:23:43.006 00:00:00.037 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 06:23:42.875 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:23:43.007 00:00:00.044 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:23:43.035 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 06:20:01.961 00:05:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 06:20:01.958 00:05:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 06:24:10.808 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45240 10 6452 1 2025-11-17 06:25:11.183 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55338 10 6452 1 2025-11-17 06:26:11.591 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51300 10 6452 1 2025-11-17 06:27:11.993 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37004 10 6452 1 2025-11-17 06:28:12.359 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32814 10 6452 1 2025-11-17 06:28:43.054 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 06:28:42.900 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 06:28:42.846 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:28:42.970 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:28:43.041 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 06:29:12.723 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48268 10 6452 1 2025-11-17 06:26:01.959 00:05:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 06:26:01.961 00:05:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 06:30:13.159 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44388 10 6452 1 2025-11-17 06:31:13.562 00:00:11.033 TCP 1.101.0.1:3000 -> 23.104.0.1:49664 10 6452 1 2025-11-17 06:32:14.634 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57778 10 6452 1 2025-11-17 06:33:15.031 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45464 10 6452 1 2025-11-17 06:33:43.304 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 06:33:43.066 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 06:33:42.865 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:33:43.222 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:33:43.073 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 06:34:15.437 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39506 10 6452 1 2025-11-17 06:35:15.837 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:47784 10 6452 1 2025-11-17 06:32:01.960 00:05:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 06:32:01.962 00:05:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 06:36:16.262 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44916 10 6452 1 2025-11-17 06:37:16.665 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:55584 10 6452 1 2025-11-17 06:38:17.154 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:59520 10 6452 1 2025-11-17 06:38:43.237 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 06:38:43.342 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 06:38:43.304 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:38:43.155 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:38:43.207 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 06:39:17.593 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37238 10 6452 1 2025-11-17 06:40:17.965 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37010 10 6452 1 2025-11-17 06:41:18.377 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53928 10 6452 1 2025-11-17 06:38:01.962 00:05:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 06:38:01.960 00:05:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 06:42:18.781 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56604 10 6452 1 2025-11-17 06:43:19.193 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33624 10 6452 1 2025-11-17 06:43:43.132 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 06:43:43.076 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:43:43.304 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:43:43.235 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 06:43:43.386 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 06:44:19.605 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53028 10 6452 1 2025-11-17 06:45:20.008 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36548 10 6452 1 2025-11-17 06:46:20.404 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35730 10 6452 1 2025-11-17 06:47:20.807 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:48548 10 6452 1 2025-11-17 06:44:01.961 00:05:00.148 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 06:44:01.963 00:05:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 06:48:21.181 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48140 10 6452 1 2025-11-17 06:48:43.338 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 06:48:43.455 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 06:48:43.532 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:48:43.256 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:48:43.410 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 06:49:21.581 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52926 10 6452 1 2025-11-17 06:50:21.983 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50114 10 6452 1 2025-11-17 06:51:22.397 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56022 10 6452 1 2025-11-17 06:52:22.797 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:33292 10 6452 1 2025-11-17 06:53:23.183 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35192 11 6504 1 2025-11-17 06:53:43.631 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 06:53:43.339 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:53:43.508 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:53:43.504 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 06:53:43.590 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 06:50:01.964 00:05:00.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-17 06:50:01.962 00:05:00.149 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-17 06:54:23.599 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40268 10 6452 1 2025-11-17 06:55:24.004 00:00:17.344 TCP 1.101.0.1:3000 -> 23.104.0.1:56192 10 6452 1 2025-11-17 06:56:31.388 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49086 10 6452 1 2025-11-17 06:57:31.789 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44144 10 6452 1 2025-11-17 06:58:43.877 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 06:58:43.669 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 06:58:43.842 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:58:43.795 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 06:58:43.868 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 06:58:32.196 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33028 10 6452 1 Summary: total flows: 140, total bytes: 421009, total packets: 1024, avg bps: 895, avg pps: 0, avg bpp: 411 Time window: 2025-11-17 05:56:01 - 2025-11-17 06:58:43 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0053s User: 0.0009s Wall: 0.0020s flows/second: 69196.6 Runtime: 0.0020s