Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 03:59:16.467 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42590 10 6452 1 2025-11-23 04:00:16.869 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54010 10 6452 1 2025-11-23 04:01:17.234 00:00:10.967 TCP 1.101.0.1:3000 -> 23.104.0.1:52170 10 6452 1 2025-11-23 04:01:34.911 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 04:01:34.641 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:01:35.060 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:01:34.789 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 04:01:35.143 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 04:02:18.238 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51834 10 6452 1 2025-11-23 03:59:04.846 00:05:00.720 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 03:59:04.845 00:05:00.725 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 04:03:18.638 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:51164 10 6452 1 2025-11-23 04:04:19.004 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:46428 10 6452 1 2025-11-23 04:05:19.364 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34968 10 6452 1 2025-11-23 04:06:19.762 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34210 10 6452 1 2025-11-23 04:06:35.092 00:00:00.039 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 04:06:35.002 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 04:06:34.939 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:06:35.011 00:00:00.038 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:06:35.123 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 04:07:20.172 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56378 10 6452 1 2025-11-23 04:08:20.580 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47308 10 6452 1 2025-11-23 04:05:04.850 00:05:00.742 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 04:05:04.854 00:05:00.737 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 04:09:20.988 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:42026 10 6452 1 2025-11-23 04:10:21.366 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57984 10 6452 1 2025-11-23 04:11:35.361 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 04:11:35.059 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:11:21.771 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:60612 10 6452 1 2025-11-23 04:11:35.259 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:11:35.311 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 04:11:35.343 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 04:12:22.143 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40042 10 6452 1 2025-11-23 04:13:22.552 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47106 10 6452 1 2025-11-23 04:14:22.956 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36788 10 6452 1 2025-11-23 04:11:04.854 00:05:00.737 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 04:11:04.853 00:05:00.742 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 04:15:23.368 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56450 10 6452 1 2025-11-23 04:16:35.630 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 04:16:35.505 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:16:35.541 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:16:35.394 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 04:16:23.776 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57674 10 6452 1 2025-11-23 04:16:35.623 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 04:17:24.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45494 10 6452 1 2025-11-23 04:18:24.588 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57886 10 6452 1 2025-11-23 04:19:24.993 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42066 10 6452 1 2025-11-23 04:20:25.399 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37002 10 6452 1 2025-11-23 04:17:04.853 00:05:00.744 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 04:17:04.855 00:05:00.739 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 04:21:35.399 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 04:21:35.157 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:21:35.254 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:21:35.465 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 04:21:35.336 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 04:21:25.765 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47164 10 6452 1 2025-11-23 04:22:26.179 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38934 10 6452 1 2025-11-23 04:23:26.585 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43244 10 6452 1 2025-11-23 04:24:26.988 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46572 10 6452 1 2025-11-23 04:25:27.355 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52950 10 6452 1 2025-11-23 04:26:35.465 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 04:26:35.489 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 04:26:35.488 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:26:35.385 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:26:35.380 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 04:26:27.757 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35308 10 6452 1 2025-11-23 04:23:04.856 00:05:00.740 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 04:23:04.855 00:05:00.746 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 04:27:28.159 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47274 10 6452 1 2025-11-23 04:28:28.560 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42290 10 6452 1 2025-11-23 04:29:28.925 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:50330 10 6452 1 2025-11-23 04:30:29.358 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:40948 10 6452 1 2025-11-23 04:31:35.703 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 04:31:35.516 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:31:35.578 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:31:35.745 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 04:31:35.660 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 04:31:29.842 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:45020 10 6452 1 2025-11-23 04:32:30.233 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55818 10 6452 1 2025-11-23 04:29:04.860 00:05:00.740 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 04:29:04.857 00:05:00.745 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 04:33:30.643 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58038 10 6452 1 2025-11-23 04:34:31.055 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37826 10 6452 1 2025-11-23 04:35:31.462 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34736 10 6452 1 2025-11-23 04:36:35.742 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:36:36.169 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 04:36:36.094 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 04:36:36.085 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:36:36.131 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 04:36:31.861 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:38290 10 6452 1 2025-11-23 04:37:32.277 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47248 10 6452 1 2025-11-23 04:38:32.687 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50914 10 6452 1 2025-11-23 04:35:04.864 00:05:00.738 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 04:35:04.861 00:05:00.742 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 04:39:33.109 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44150 10 6452 1 2025-11-23 04:40:33.512 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38082 10 6452 1 2025-11-23 04:41:35.451 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:41:35.894 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:41:35.898 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 04:41:35.665 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 04:41:35.977 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 04:41:33.913 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32780 10 6452 1 2025-11-23 04:42:34.321 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55936 10 6452 1 2025-11-23 04:43:34.724 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37092 10 6452 1 2025-11-23 04:44:35.137 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47654 10 6452 1 2025-11-23 04:41:04.869 00:05:00.742 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 04:41:04.866 00:05:00.748 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 04:45:35.560 00:00:10.696 TCP 1.101.0.1:3000 -> 23.104.0.1:52942 10 6452 1 2025-11-23 04:46:35.780 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 04:46:35.826 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:46:35.696 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:46:35.865 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 04:46:35.987 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 04:46:36.293 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59428 10 6452 1 2025-11-23 04:47:36.700 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38562 10 6452 1 2025-11-23 04:48:37.066 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57734 10 6452 1 2025-11-23 04:49:37.469 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39238 10 6452 1 2025-11-23 04:50:37.834 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:48688 10 6452 1 2025-11-23 04:47:04.866 00:05:00.748 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 04:47:04.869 00:05:00.743 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 04:51:35.858 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 04:51:35.989 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:51:36.075 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:51:36.004 00:00:00.047 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 04:51:36.159 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 04:51:38.265 00:00:14.603 TCP 1.101.0.1:3000 -> 23.104.0.1:39248 10 6452 1 2025-11-23 04:52:42.910 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51788 10 6452 1 2025-11-23 04:53:43.329 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38046 10 6452 1 2025-11-23 04:54:43.743 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43272 10 6452 1 2025-11-23 04:55:44.150 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60264 10 6452 1 2025-11-23 04:56:36.213 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 04:56:36.492 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 04:56:36.146 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:56:36.555 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 04:56:36.637 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 04:56:44.509 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38734 10 6452 1 2025-11-23 04:53:04.871 00:05:00.741 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 04:53:04.869 00:05:00.746 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 04:57:44.914 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37074 10 6452 1 Summary: total flows: 139, total bytes: 410548, total packets: 1010, avg bps: 927, avg pps: 0, avg bpp: 406 Time window: 2025-11-23 03:59:04 - 2025-11-23 04:58:05 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0020s User: 0.0030s Wall: 0.0020s flows/second: 68140.3 Runtime: 0.0021s