Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 05:59:09.789 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36534 10 6452 1 2025-11-23 06:00:10.154 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39272 10 6452 1 2025-11-23 06:01:10.564 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50246 10 6452 1 2025-11-23 06:01:37.568 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 06:01:37.572 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:01:37.629 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:01:37.378 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 06:01:37.712 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 06:02:10.961 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47498 10 6452 1 2025-11-23 05:59:04.892 00:05:00.761 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 05:59:04.890 00:05:00.766 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 06:03:11.368 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50866 10 6452 1 2025-11-23 06:04:11.766 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34140 10 6452 1 2025-11-23 06:05:12.183 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50936 10 6452 1 2025-11-23 06:06:12.589 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:60900 10 6452 1 2025-11-23 06:06:37.730 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 06:06:37.646 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 06:06:37.532 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:06:37.647 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:06:37.583 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 06:07:13.084 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36828 10 6452 1 2025-11-23 06:08:13.501 00:00:11.025 TCP 1.101.0.1:3000 -> 23.104.0.1:46894 10 6452 1 2025-11-23 06:05:04.893 00:05:00.762 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 06:05:04.891 00:05:00.767 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 06:09:14.590 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37292 10 6452 1 2025-11-23 06:10:14.995 00:00:10.989 TCP 1.101.0.1:3000 -> 23.104.0.1:38398 10 6452 1 2025-11-23 06:11:16.038 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43632 10 6452 1 2025-11-23 06:11:37.564 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 06:11:37.569 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:11:37.716 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:11:37.726 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 06:11:37.799 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 06:12:16.446 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41850 10 6452 1 2025-11-23 06:13:16.852 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46352 10 6452 1 2025-11-23 06:14:17.272 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60256 10 6452 1 2025-11-23 06:11:04.898 00:05:00.758 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 06:11:04.896 00:05:00.763 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 06:15:17.676 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49076 10 6452 1 2025-11-23 06:16:18.109 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60062 10 6452 1 2025-11-23 06:16:37.612 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 06:16:37.816 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:16:37.848 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:16:37.617 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 06:16:37.930 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 06:17:18.518 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36342 10 6452 1 2025-11-23 06:18:18.929 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57828 10 6452 1 2025-11-23 06:19:19.347 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34786 10 6452 1 2025-11-23 06:20:19.749 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52284 10 6452 1 2025-11-23 06:17:04.899 00:05:00.757 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 06:17:04.897 00:05:00.763 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 06:21:20.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34224 10 6452 1 2025-11-23 06:21:38.150 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 06:21:37.973 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 06:21:37.918 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:21:38.069 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:21:37.973 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 06:22:20.516 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51906 10 6452 1 2025-11-23 06:23:20.923 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49158 10 6452 1 2025-11-23 06:24:21.331 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41868 10 6452 1 2025-11-23 06:25:21.734 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35860 10 6452 1 2025-11-23 06:26:38.054 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 06:26:22.153 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56702 10 6452 1 2025-11-23 06:26:37.913 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 06:26:37.683 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:26:37.971 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:26:37.909 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 06:23:04.900 00:05:00.771 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 06:23:04.902 00:05:00.765 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 06:27:22.555 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42712 10 6452 1 2025-11-23 06:28:22.962 00:00:11.459 TCP 1.101.0.1:3000 -> 23.104.0.1:36036 10 6452 1 2025-11-23 06:29:24.457 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32928 10 6452 1 2025-11-23 06:30:24.860 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:41918 10 6452 1 2025-11-23 06:31:25.233 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45134 10 6452 1 2025-11-23 06:31:38.475 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 06:31:38.277 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 06:31:37.899 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:31:38.392 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:31:38.275 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 06:32:25.597 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56054 10 6452 1 2025-11-23 06:29:04.901 00:05:00.766 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 06:29:04.898 00:05:00.772 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 06:33:25.958 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33212 10 6452 1 2025-11-23 06:34:26.368 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57900 10 6452 1 2025-11-23 06:35:26.767 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:33772 12 10369 1 2025-11-23 06:36:38.266 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 06:36:27.212 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47356 10 6452 1 2025-11-23 06:36:37.781 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:36:37.951 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:36:38.175 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 06:36:38.033 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 06:37:27.615 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32936 10 6452 1 2025-11-23 06:38:28.018 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:51966 10 6452 1 2025-11-23 06:35:04.900 00:05:00.773 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 06:35:04.903 00:05:00.768 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 06:39:28.417 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:60682 10 6452 1 2025-11-23 06:40:28.842 00:00:10.462 TCP 1.101.0.1:3000 -> 23.104.0.1:36000 12 10375 1 2025-11-23 06:41:38.224 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 06:41:38.006 00:00:00.041 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:41:38.375 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:41:38.227 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 06:41:29.343 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:43364 10 6452 1 2025-11-23 06:41:38.456 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 06:42:29.700 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55800 10 6452 1 2025-11-23 06:43:30.108 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33764 10 6452 1 2025-11-23 06:44:30.511 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58662 10 6452 1 2025-11-23 06:41:04.903 00:05:00.770 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 06:41:04.901 00:05:00.774 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 06:45:30.918 00:00:17.567 TCP 1.101.0.1:3000 -> 23.104.0.1:39822 10 6452 1 2025-11-23 06:46:38.484 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 06:46:38.392 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 06:46:38.304 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:46:38.402 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:46:38.304 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 06:46:38.537 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53886 10 6452 1 2025-11-23 06:47:38.941 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48750 10 6452 1 2025-11-23 06:48:39.355 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38460 10 6452 1 2025-11-23 06:49:39.759 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43038 10 6452 1 2025-11-23 06:50:40.170 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57968 10 6452 1 2025-11-23 06:47:04.908 00:05:00.768 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 06:47:04.913 00:05:00.763 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 06:51:38.449 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 06:51:38.412 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:51:38.302 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:51:38.387 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 06:51:38.384 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 06:51:40.570 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36054 10 6452 1 2025-11-23 06:52:40.981 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42790 10 6452 1 2025-11-23 06:53:41.392 00:00:10.957 TCP 1.101.0.1:3000 -> 23.104.0.1:33282 10 6452 1 2025-11-23 06:54:42.389 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:42232 10 6452 1 2025-11-23 06:55:42.748 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55812 10 6452 1 2025-11-23 06:56:38.800 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 06:56:38.305 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:56:38.844 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 06:56:38.656 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 06:56:38.927 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 06:56:43.147 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35706 10 6452 1 2025-11-23 06:53:04.914 00:05:00.763 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 06:53:04.912 00:05:00.767 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 06:57:43.510 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50700 11 6492 1 Summary: total flows: 139, total bytes: 418428, total packets: 1015, avg bps: 945, avg pps: 0, avg bpp: 412 Time window: 2025-11-23 05:59:04 - 2025-11-23 06:58:05 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0054s User: 0.0011s Wall: 0.0018s flows/second: 76330.0 Runtime: 0.0018s