Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 00:58:45.312 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:56050 10 6452 1 2025-11-23 00:59:45.712 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50154 10 6452 1 2025-11-23 01:00:46.118 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51240 10 6452 1 2025-11-23 01:01:31.344 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 01:01:31.393 00:00:00.051 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:01:31.551 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:01:31.269 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 01:01:31.635 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 01:01:46.521 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34774 10 6452 1 2025-11-23 01:02:46.930 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:49596 10 6452 1 2025-11-23 00:59:04.798 00:05:00.645 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 00:59:04.797 00:05:00.650 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 01:03:47.354 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45994 10 6452 1 2025-11-23 01:04:47.771 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:59716 10 6452 1 2025-11-23 01:05:48.193 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46912 10 6452 1 2025-11-23 01:06:31.529 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:06:31.672 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:06:31.671 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 01:06:31.671 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 01:06:31.754 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 01:06:48.593 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44122 10 6452 1 2025-11-23 01:07:49.000 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52218 10 6452 1 2025-11-23 01:08:49.402 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33940 10 6452 1 2025-11-23 01:05:04.799 00:05:00.659 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 01:05:04.800 00:05:00.648 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 01:09:49.806 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56630 10 6452 1 2025-11-23 01:10:50.207 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39478 10 6452 1 2025-11-23 01:11:31.687 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 01:11:31.674 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 01:11:31.646 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:11:31.604 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:11:31.679 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 01:11:50.570 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56600 10 6452 1 2025-11-23 01:12:50.997 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37134 10 6452 1 2025-11-23 01:13:51.409 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:38752 10 6452 1 2025-11-23 01:11:04.801 00:05:00.648 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 01:14:51.780 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56286 10 6452 1 2025-11-23 01:11:04.800 00:05:00.653 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 01:15:52.184 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35938 12 6556 1 2025-11-23 01:16:31.832 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 01:16:31.748 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 01:16:31.754 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:16:31.750 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:16:31.727 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 01:16:52.590 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:50594 10 6452 1 2025-11-23 01:17:52.970 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44540 10 6452 1 2025-11-23 01:18:53.388 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45282 10 6452 1 2025-11-23 01:19:53.795 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:57616 10 6452 1 2025-11-23 01:20:54.210 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49668 10 6452 1 2025-11-23 01:17:04.802 00:05:00.656 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 01:17:04.804 00:05:00.652 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 01:21:32.502 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 01:21:32.213 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 01:21:32.291 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:21:32.418 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:21:32.393 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 01:21:54.620 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59160 10 6452 1 2025-11-23 01:22:55.019 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52426 10 6452 1 2025-11-23 01:23:55.417 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58596 10 6452 1 2025-11-23 01:24:55.822 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42248 10 6452 1 2025-11-23 01:25:56.227 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34240 10 6452 1 2025-11-23 01:26:31.961 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 01:26:31.794 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 01:26:31.970 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:26:31.878 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:26:31.878 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 01:23:04.806 00:05:00.652 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 01:23:04.803 00:05:00.657 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 01:26:56.624 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43022 10 6452 1 2025-11-23 01:27:57.034 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41408 10 6452 1 2025-11-23 01:28:57.433 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37222 10 6452 1 2025-11-23 01:29:57.837 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:49940 10 6452 1 2025-11-23 01:30:58.265 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40776 10 6452 1 2025-11-23 01:31:31.876 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 01:31:31.564 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:31:31.878 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:31:32.085 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 01:31:31.961 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 01:31:58.628 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34400 10 6452 1 2025-11-23 01:29:04.806 00:05:00.652 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 01:32:59.035 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55514 10 6452 1 2025-11-23 01:29:04.803 00:05:00.658 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 01:33:59.444 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57146 10 6452 1 2025-11-23 01:34:59.855 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53502 10 6452 1 2025-11-23 01:36:00.263 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57238 10 6452 1 2025-11-23 01:36:31.966 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 01:36:32.091 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:36:32.421 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:36:32.306 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 01:36:32.505 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 01:37:00.661 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54830 10 6452 1 2025-11-23 01:38:01.101 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:37886 11 6504 1 2025-11-23 01:35:04.805 00:05:00.661 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 01:35:04.806 00:05:00.656 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 01:39:01.565 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50768 10 6452 1 2025-11-23 01:40:01.972 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:40256 10 6452 1 2025-11-23 01:41:02.393 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46258 10 6452 1 2025-11-23 01:41:32.161 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 01:41:32.111 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:41:31.957 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:41:32.096 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 01:41:32.039 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 01:42:02.809 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33376 10 6452 1 2025-11-23 01:43:03.214 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:57670 10 6452 1 2025-11-23 01:44:03.594 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36658 10 6452 1 2025-11-23 01:41:04.810 00:05:00.670 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 01:41:04.806 00:05:00.675 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 01:45:04.001 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51306 10 6452 1 2025-11-23 01:46:04.415 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53702 10 6452 1 2025-11-23 01:46:32.223 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 01:46:32.295 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 01:46:32.229 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:46:32.141 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:46:32.233 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 01:47:04.825 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59594 10 6452 1 2025-11-23 01:48:05.234 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35850 10 6452 1 2025-11-23 01:49:05.643 00:00:10.873 TCP 1.101.0.1:3000 -> 23.104.0.1:41252 10 6452 1 2025-11-23 01:50:06.558 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48048 10 6452 1 2025-11-23 01:47:04.808 00:05:00.676 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 01:47:04.811 00:05:00.671 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 01:51:06.965 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43548 10 6452 1 2025-11-23 01:51:32.712 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 01:51:32.479 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:51:32.473 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:51:32.658 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 01:51:32.556 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 01:52:07.367 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:59314 10 6452 1 2025-11-23 01:53:07.726 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44158 10 6452 1 2025-11-23 01:54:08.110 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49812 10 6452 1 2025-11-23 01:55:08.473 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56800 10 6452 1 2025-11-23 01:56:08.872 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55944 10 6452 1 2025-11-23 01:56:32.843 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 01:56:32.570 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 01:56:32.577 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:56:32.761 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 01:56:32.434 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 01:53:04.811 00:05:00.674 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 01:53:04.809 00:05:00.678 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 01:57:09.280 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49470 10 6452 1 2025-11-23 01:58:09.647 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49352 10 6452 1 Summary: total flows: 140, total bytes: 417156, total packets: 1023, avg bps: 933, avg pps: 0, avg bpp: 407 Time window: 2025-11-23 00:58:45 - 2025-11-23 01:58:20 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0017s User: 0.0034s Wall: 0.0027s flows/second: 52654.5 Runtime: 0.0027s