Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 07:59:35.625 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47184 10 6452 1 2025-11-24 08:00:35.987 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53986 10 6452 1 2025-11-24 08:01:36.392 00:00:10.314 TCP 1.101.0.1:3000 -> 23.104.0.1:54340 10 6452 1 2025-11-24 07:58:05.457 00:05:00.985 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:02:08.845 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:02:08.763 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:02:08.739 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:02:08.762 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:02:08.881 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 07:58:05.460 00:05:00.979 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:02:36.746 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49988 10 6452 1 2025-11-24 08:03:37.150 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40456 10 6452 1 2025-11-24 08:04:37.551 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43022 10 6452 1 2025-11-24 08:05:37.965 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38614 10 6452 1 2025-11-24 08:06:38.325 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51696 10 6452 1 2025-11-24 08:07:08.790 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:07:08.730 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:07:08.789 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:07:08.726 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:07:08.872 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:07:38.690 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55194 10 6452 1 2025-11-24 08:04:05.460 00:05:00.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:04:05.457 00:05:00.984 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:08:39.112 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:60530 10 6452 1 2025-11-24 08:09:39.503 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:40206 10 6452 1 2025-11-24 08:10:39.871 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37400 10 6452 1 2025-11-24 08:11:40.278 00:00:10.682 TCP 1.101.0.1:3000 -> 23.104.0.1:54552 10 6452 1 2025-11-24 08:12:08.816 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:12:08.851 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:12:08.709 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:12:08.734 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:12:09.052 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:12:40.997 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47380 10 6452 1 2025-11-24 08:13:41.401 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59448 10 6452 1 2025-11-24 08:10:05.461 00:05:00.980 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:10:05.458 00:05:00.985 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:14:41.807 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43382 10 6452 1 2025-11-24 08:15:42.209 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41890 10 6452 1 2025-11-24 08:16:42.609 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45542 10 6452 1 2025-11-24 08:17:08.768 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:17:08.829 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:17:08.853 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:17:08.861 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:17:08.936 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:17:43.011 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:53242 10 6452 1 2025-11-24 08:18:43.366 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46684 10 6452 1 2025-11-24 08:19:43.726 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43784 10 6452 1 2025-11-24 08:16:05.465 00:05:00.977 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:16:05.463 00:05:00.982 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:20:44.137 00:00:11.395 TCP 1.101.0.1:3000 -> 23.104.0.1:33208 12 10369 1 2025-11-24 08:21:45.571 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57232 10 6452 1 2025-11-24 08:22:09.000 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:22:09.111 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:22:09.150 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:22:09.102 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:22:09.235 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:22:45.972 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55372 10 6452 1 2025-11-24 08:23:46.385 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38978 10 6452 1 2025-11-24 08:24:46.793 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39742 10 6452 1 2025-11-24 08:25:47.203 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49312 10 6452 1 2025-11-24 08:22:05.464 00:05:00.983 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:22:05.466 00:05:00.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:26:47.603 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51662 10 6452 1 2025-11-24 08:27:09.538 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:27:09.331 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:27:09.394 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:27:09.196 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:27:09.477 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:27:48.005 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42030 10 6452 1 2025-11-24 08:28:48.363 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50664 10 6452 1 2025-11-24 08:29:48.732 00:00:10.426 TCP 1.101.0.1:3000 -> 23.104.0.1:55474 10 6452 1 2025-11-24 08:30:49.197 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49996 10 6452 1 2025-11-24 08:31:49.604 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60620 10 6452 1 2025-11-24 08:28:05.469 00:05:00.997 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:32:09.623 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:32:09.353 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:32:09.390 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:32:09.540 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:32:09.543 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:28:05.472 00:05:00.981 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:32:50.006 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:50522 10 6452 1 2025-11-24 08:33:50.406 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48790 10 6452 1 2025-11-24 08:34:50.812 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58374 10 6452 1 2025-11-24 08:35:51.181 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60378 10 6452 1 2025-11-24 08:36:51.579 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44038 10 6452 1 2025-11-24 08:37:09.429 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:37:09.466 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:37:09.264 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:37:09.348 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:37:09.345 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:37:51.942 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53886 10 6452 1 2025-11-24 08:34:05.473 00:05:00.983 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:34:05.470 00:05:00.988 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:38:52.346 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38638 10 6452 1 2025-11-24 08:39:52.747 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51200 10 6452 1 2025-11-24 08:40:53.150 00:00:10.798 TCP 1.101.0.1:3000 -> 23.104.0.1:44886 10 6452 1 2025-11-24 08:41:53.985 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42448 10 6452 1 2025-11-24 08:42:09.806 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:42:09.744 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:42:10.003 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:42:09.950 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:42:10.084 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:42:54.400 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:60658 10 6452 1 2025-11-24 08:43:54.775 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48038 10 6452 1 2025-11-24 08:40:05.476 00:05:00.983 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:40:05.479 00:05:00.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:44:55.183 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42562 10 6452 1 2025-11-24 08:45:55.585 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54882 10 6452 1 2025-11-24 08:47:09.857 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:47:09.622 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:47:09.679 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:46:55.994 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38852 10 6452 1 2025-11-24 08:47:09.774 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:47:09.343 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:47:56.395 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57632 10 6452 1 2025-11-24 08:48:56.761 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50220 10 6452 1 2025-11-24 08:46:05.478 00:05:00.994 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:49:57.171 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37400 10 6452 1 2025-11-24 08:46:05.479 00:05:00.990 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:50:57.528 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55256 10 6452 1 2025-11-24 08:52:09.649 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:52:09.756 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:52:09.765 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:51:57.931 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42784 10 6452 1 2025-11-24 08:52:09.835 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:52:09.838 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:52:58.345 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59466 10 6452 1 2025-11-24 08:53:58.705 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39128 10 6452 1 2025-11-24 08:54:59.111 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47432 10 6452 1 2025-11-24 08:52:05.483 00:05:00.989 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:55:59.475 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34310 10 6452 1 2025-11-24 08:52:05.481 00:05:00.993 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 08:56:59.900 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:35156 10 6452 1 2025-11-24 08:57:09.636 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 08:57:09.845 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:57:09.618 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 08:57:09.789 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:57:09.702 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 08:58:00.278 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52134 10 6452 1 Summary: total flows: 139, total bytes: 414465, total packets: 1012, avg bps: 919, avg pps: 0, avg bpp: 409 Time window: 2025-11-24 07:58:05 - 2025-11-24 08:58:10 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0046s User: 0.0018s Wall: 0.0018s flows/second: 75873.0 Runtime: 0.0018s