Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 05:59:26.793 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47500 10 6452 1 2025-11-24 06:00:27.153 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41162 10 6452 1 2025-11-24 06:01:27.554 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36680 10 6452 1 2025-11-24 05:58:05.421 00:05:00.959 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:02:06.598 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:02:06.518 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:02:06.386 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:02:06.514 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:02:06.516 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 05:58:05.423 00:05:00.954 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:02:27.958 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54728 10 6452 1 2025-11-24 06:03:28.365 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43392 10 6452 1 2025-11-24 06:04:28.730 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34788 10 6452 1 2025-11-24 06:05:29.141 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41722 10 6452 1 2025-11-24 06:06:29.538 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48212 10 6452 1 2025-11-24 06:07:06.220 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:07:06.354 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:07:06.303 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:07:06.137 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:07:06.370 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:07:29.938 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:57404 10 6452 1 2025-11-24 06:04:05.423 00:05:00.957 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:04:05.426 00:05:00.952 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:08:30.317 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48164 10 6452 1 2025-11-24 06:09:30.725 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55484 10 6452 1 2025-11-24 06:10:31.141 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45940 10 6452 1 2025-11-24 06:11:31.544 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40662 10 6452 1 2025-11-24 06:12:06.443 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:12:06.474 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:12:06.550 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:12:06.265 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:12:06.633 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:12:31.940 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37686 10 6452 1 2025-11-24 06:13:32.359 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39348 10 6452 1 2025-11-24 06:10:05.429 00:05:00.955 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:10:05.432 00:05:00.949 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:14:32.769 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60532 10 6452 1 2025-11-24 06:15:33.137 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38040 10 6452 1 2025-11-24 06:16:33.495 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47402 10 6452 1 2025-11-24 06:17:06.752 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:17:06.725 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:17:06.223 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:17:06.670 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:17:06.723 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:17:33.899 00:00:11.134 TCP 1.101.0.1:3000 -> 23.104.0.1:49374 12 6556 1 2025-11-24 06:18:35.092 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38652 10 6452 1 2025-11-24 06:19:35.453 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59530 10 6452 1 2025-11-24 06:16:05.432 00:05:00.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:16:05.430 00:05:00.956 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:20:35.855 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:51728 10 6452 1 2025-11-24 06:21:36.279 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49060 10 6452 1 2025-11-24 06:22:06.799 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:22:06.497 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:22:06.873 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:22:06.730 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:22:06.955 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:22:36.693 00:00:10.609 TCP 1.101.0.1:3000 -> 23.104.0.1:58178 10 6452 1 2025-11-24 06:23:37.342 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57934 10 6452 1 2025-11-24 06:24:37.705 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45242 10 6452 1 2025-11-24 06:25:38.103 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:48856 10 6452 1 2025-11-24 06:22:05.431 00:05:00.956 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:22:05.433 00:05:00.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:26:38.570 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60382 10 6452 1 2025-11-24 06:27:06.990 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:27:06.739 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:27:06.854 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:27:06.908 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:27:06.922 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:27:38.971 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33464 10 6452 1 2025-11-24 06:28:39.375 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45822 10 6452 1 2025-11-24 06:29:39.778 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48462 10 6452 1 2025-11-24 06:30:40.183 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53986 10 6452 1 2025-11-24 06:31:40.588 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55820 10 6452 1 2025-11-24 06:32:06.893 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:32:06.886 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:32:06.822 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:32:06.949 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:28:05.433 00:05:00.953 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:28:05.432 00:05:00.959 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:32:06.906 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:32:40.988 00:00:23.543 TCP 1.101.0.1:3000 -> 23.104.0.1:36580 10 6452 1 2025-11-24 06:33:54.576 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57834 10 6452 1 2025-11-24 06:34:54.980 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41930 10 6452 1 2025-11-24 06:35:55.383 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58192 10 6452 1 2025-11-24 06:37:07.138 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:37:07.106 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:37:06.897 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:36:55.789 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46952 10 6452 1 2025-11-24 06:37:07.055 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:37:07.064 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:37:56.148 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41916 10 6452 1 2025-11-24 06:34:05.436 00:05:00.952 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:34:05.432 00:05:00.958 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:38:56.551 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48446 10 6452 1 2025-11-24 06:39:56.921 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48868 10 6452 1 2025-11-24 06:40:57.326 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55538 10 6452 1 2025-11-24 06:42:07.088 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:42:07.188 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:42:07.192 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:42:07.273 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:41:57.725 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57306 10 6452 1 2025-11-24 06:42:07.274 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:42:58.135 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47860 10 6452 1 2025-11-24 06:40:05.436 00:05:00.957 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:43:58.537 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50498 10 6452 1 2025-11-24 06:40:05.440 00:05:00.952 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:44:58.945 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57606 10 6452 1 2025-11-24 06:45:59.364 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45972 10 6452 1 2025-11-24 06:47:07.331 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:47:07.241 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:47:07.192 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:47:07.248 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:47:07.291 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:46:59.761 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55532 10 6452 1 2025-11-24 06:48:00.176 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36734 10 6452 1 2025-11-24 06:49:00.581 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58356 10 6452 1 2025-11-24 06:46:05.439 00:05:00.960 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:46:05.438 00:05:00.965 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:50:00.985 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40532 10 6452 1 2025-11-24 06:51:01.387 00:00:16.351 TCP 1.101.0.1:3000 -> 23.104.0.1:35374 12 10375 1 2025-11-24 06:52:07.354 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:52:07.350 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:52:07.291 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:52:07.271 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:52:07.348 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:52:07.784 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35698 10 6452 1 2025-11-24 06:53:08.189 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36540 10 6452 1 2025-11-24 06:54:08.600 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56830 10 6452 1 2025-11-24 06:55:09.003 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56340 10 6452 1 2025-11-24 06:52:05.442 00:05:00.959 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 06:52:05.439 00:05:00.964 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 06:56:09.415 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35692 10 6452 1 2025-11-24 06:57:07.398 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 06:57:07.315 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 06:57:07.318 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:57:07.314 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 06:57:07.315 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 06:57:09.826 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57310 10 6452 1 2025-11-24 06:58:10.229 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35800 10 6452 1 Summary: total flows: 139, total bytes: 414575, total packets: 1014, avg bps: 917, avg pps: 0, avg bpp: 408 Time window: 2025-11-24 05:58:05 - 2025-11-24 06:58:20 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0050s User: 0.0008s Wall: 0.0017s flows/second: 80072.6 Runtime: 0.0018s