Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 16:59:14.273 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47782 10 6452 1 2025-11-23 17:00:14.681 00:00:10.481 TCP 1.101.0.1:3000 -> 23.104.0.1:38600 10 6452 1 2025-11-23 17:01:15.203 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:39432 12 10375 1 2025-11-23 17:01:50.774 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:01:50.737 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:01:50.590 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:01:50.691 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:01:50.737 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 16:58:05.132 00:05:00.913 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 16:58:05.129 00:05:00.918 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:02:15.646 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44280 10 6452 1 2025-11-23 17:03:16.057 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55876 10 6452 1 2025-11-23 17:04:16.462 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42162 10 6452 1 2025-11-23 17:05:16.862 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46926 10 6452 1 2025-11-23 17:06:17.278 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35448 10 6452 1 2025-11-23 17:06:50.713 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:06:50.527 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:06:50.661 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:06:50.630 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:06:50.835 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:07:17.642 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45208 10 6452 1 2025-11-23 17:04:05.129 00:05:00.919 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:04:05.133 00:05:00.913 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:08:18.049 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44752 10 6452 1 2025-11-23 17:09:18.457 00:00:11.316 TCP 1.101.0.1:3000 -> 23.104.0.1:49784 10 6452 1 2025-11-23 17:10:19.817 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47628 10 6452 1 2025-11-23 17:11:20.217 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57612 10 6452 1 2025-11-23 17:11:50.933 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:11:50.992 00:00:00.041 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:11:50.989 00:00:00.051 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:11:50.984 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:11:51.072 00:00:00.051 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:12:20.620 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58648 10 6452 1 2025-11-23 17:13:21.022 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:52976 10 6452 1 2025-11-23 17:10:05.136 00:05:00.912 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:10:05.135 00:05:00.917 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:14:21.447 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41296 10 6452 1 2025-11-23 17:15:21.857 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33640 10 6452 1 2025-11-23 17:16:22.277 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39672 10 6452 1 2025-11-23 17:16:50.932 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:16:50.851 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:16:50.849 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:16:50.961 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:16:51.047 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:17:22.698 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57890 10 6452 1 2025-11-23 17:18:23.112 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35040 10 6452 1 2025-11-23 17:19:23.509 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47434 10 6452 1 2025-11-23 17:16:05.138 00:05:00.913 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:16:05.135 00:05:00.918 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:20:23.915 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39316 10 6452 1 2025-11-23 17:21:24.322 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33204 10 6452 1 2025-11-23 17:21:50.990 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:21:51.013 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:21:51.078 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:21:50.978 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:21:51.162 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:22:24.729 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47370 10 6452 1 2025-11-23 17:23:25.110 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53246 10 6452 1 2025-11-23 17:24:25.516 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36246 10 6452 1 2025-11-23 17:25:25.884 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39556 10 6452 1 2025-11-23 17:22:05.141 00:05:00.911 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:22:05.139 00:05:00.916 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:26:26.283 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51474 10 6452 1 2025-11-23 17:26:51.285 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:26:51.195 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:26:51.064 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:26:51.204 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:26:51.248 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:27:26.690 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60726 10 6452 1 2025-11-23 17:28:27.109 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33596 10 6452 1 2025-11-23 17:29:27.518 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37268 10 6452 1 2025-11-23 17:30:27.919 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43840 10 6452 1 2025-11-23 17:31:28.322 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46926 10 6452 1 2025-11-23 17:31:51.573 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:31:51.492 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:31:51.447 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:31:51.441 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:31:51.314 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:28:05.154 00:05:00.900 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:28:05.150 00:05:00.905 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:32:28.719 00:00:10.682 TCP 1.101.0.1:3000 -> 23.104.0.1:59130 10 6452 1 2025-11-23 17:33:29.443 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34896 10 6452 1 2025-11-23 17:34:29.804 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52084 10 6452 1 2025-11-23 17:35:30.211 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:55786 11 6504 1 2025-11-23 17:36:30.671 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60636 10 6452 1 2025-11-23 17:36:51.462 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:36:51.540 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:36:51.306 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:36:51.379 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:36:51.272 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:37:31.104 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54880 10 6452 1 2025-11-23 17:34:05.154 00:05:00.900 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:34:05.151 00:05:00.905 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:38:31.510 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50418 10 6452 1 2025-11-23 17:39:31.915 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48866 10 6452 1 2025-11-23 17:40:32.316 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37916 10 6452 1 2025-11-23 17:41:32.719 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:55188 10 6452 1 2025-11-23 17:41:51.430 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:41:51.363 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:41:51.429 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:41:51.482 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:41:51.511 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:42:33.148 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57626 10 6452 1 2025-11-23 17:43:33.549 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:33748 10 6452 1 2025-11-23 17:40:05.156 00:05:00.903 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:40:05.153 00:05:00.909 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:44:33.942 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:49826 10 6452 1 2025-11-23 17:45:34.362 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35904 10 6452 1 2025-11-23 17:46:51.361 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:46:51.591 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:46:51.453 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:46:51.622 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:46:34.766 00:00:20.819 TCP 1.101.0.1:3000 -> 23.104.0.1:43200 10 6452 1 2025-11-23 17:46:51.534 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:47:45.646 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43676 10 6452 1 2025-11-23 17:48:46.058 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59276 10 6452 1 2025-11-23 17:49:46.459 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53038 10 6452 1 2025-11-23 17:46:05.156 00:05:00.912 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:46:05.154 00:05:00.918 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:50:46.857 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57622 10 6452 1 2025-11-23 17:51:51.735 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:51:51.717 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:51:51.607 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:51:51.653 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:51:51.649 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:51:47.287 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35768 10 6452 1 2025-11-23 17:52:47.686 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41632 10 6452 1 2025-11-23 17:53:48.063 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57968 10 6452 1 2025-11-23 17:54:48.470 00:00:16.317 TCP 1.101.0.1:3000 -> 23.104.0.1:56488 10 6452 1 2025-11-23 17:55:54.825 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:42154 10 6452 1 2025-11-23 17:52:05.158 00:05:00.911 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-23 17:52:05.157 00:05:00.915 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-23 17:56:51.814 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-23 17:56:51.583 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:56:51.817 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-23 17:56:51.820 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-23 17:56:51.900 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-23 17:56:55.269 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34352 10 6452 1 2025-11-23 17:57:55.676 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57162 10 6452 1 Summary: total flows: 139, total bytes: 414523, total packets: 1013, avg bps: 920, avg pps: 0, avg bpp: 409 Time window: 2025-11-23 16:58:05 - 2025-11-23 17:58:06 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0038s User: 0.0019s Wall: 0.0017s flows/second: 82194.9 Runtime: 0.0017s