Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 08:59:00.653 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42754 10 6452 1 2025-11-24 09:00:01.063 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:33026 10 6452 1 2025-11-24 09:01:01.424 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:37352 12 10375 1 2025-11-24 09:02:10.151 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 09:02:10.164 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:02:10.311 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:02:10.362 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 08:58:05.484 00:05:00.990 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 08:58:05.481 00:05:00.995 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 09:02:10.393 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:02:01.899 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:59056 12 6556 1 2025-11-24 09:03:02.327 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49652 10 6452 1 2025-11-24 09:04:02.732 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47858 10 6452 1 2025-11-24 09:05:03.135 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39320 10 6452 1 2025-11-24 09:06:03.537 00:00:10.502 TCP 1.101.0.1:3000 -> 23.104.0.1:41998 10 6452 1 2025-11-24 09:07:10.124 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 09:07:09.718 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:07:09.879 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:07:10.119 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 09:07:09.963 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:07:04.109 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:44794 10 6452 1 2025-11-24 09:04:05.486 00:05:00.990 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 09:04:05.483 00:05:00.995 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 09:08:04.464 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55548 10 6452 1 2025-11-24 09:09:04.831 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44278 10 6452 1 2025-11-24 09:10:05.246 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50304 10 6452 1 2025-11-24 09:11:05.605 00:00:10.794 TCP 1.101.0.1:3000 -> 23.104.0.1:56680 10 6452 1 2025-11-24 09:12:10.265 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:12:10.066 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 09:12:09.754 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:12:10.183 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:12:10.063 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 09:12:06.437 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37014 10 6452 1 2025-11-24 09:13:06.842 00:00:31.263 TCP 1.101.0.1:3000 -> 23.104.0.1:60386 10 6452 1 2025-11-24 09:10:05.486 00:05:00.993 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 09:10:05.489 00:05:00.988 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 09:14:28.179 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45606 10 6452 1 2025-11-24 09:15:28.581 00:00:10.760 TCP 1.101.0.1:3000 -> 23.104.0.1:38822 10 6452 1 2025-11-24 09:16:29.374 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41912 10 6452 1 2025-11-24 09:17:10.403 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:17:10.471 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 09:17:10.271 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:17:10.321 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:17:10.406 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 09:17:29.779 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48948 10 6452 1 2025-11-24 09:18:30.187 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:37084 10 6452 1 2025-11-24 09:19:30.550 00:00:10.939 TCP 1.101.0.1:3000 -> 23.104.0.1:34916 10 6452 1 2025-11-24 09:16:05.492 00:05:00.985 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 09:16:05.489 00:05:00.990 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 09:20:31.529 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:51976 10 6452 1 2025-11-24 09:21:31.889 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41488 12 6556 1 2025-11-24 09:22:10.361 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 09:22:10.222 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:22:10.407 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:22:10.418 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 09:22:10.490 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:22:32.301 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41154 10 6452 1 2025-11-24 09:23:32.702 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44024 10 6452 1 2025-11-24 09:24:33.113 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60716 10 6452 1 2025-11-24 09:25:33.516 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49688 10 6452 1 2025-11-24 09:22:05.490 00:05:00.990 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 09:22:05.494 00:05:00.985 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 09:26:33.932 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:42522 10 6452 1 2025-11-24 09:27:10.454 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 09:27:10.418 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:27:10.275 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:27:10.382 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 09:27:10.356 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:27:34.361 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39922 10 6452 1 2025-11-24 09:28:34.766 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:52578 10 6452 1 2025-11-24 09:29:35.140 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45614 10 6452 1 2025-11-24 09:30:35.539 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:36310 10 6452 1 2025-11-24 09:31:35.895 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:45670 14 10479 1 2025-11-24 09:32:10.493 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 09:32:10.368 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:32:10.560 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:32:10.496 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 09:28:05.498 00:05:00.981 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 09:28:05.496 00:05:00.986 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 09:32:10.643 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:32:36.383 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42644 10 6452 1 2025-11-24 09:33:36.747 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46248 10 6452 1 2025-11-24 09:34:37.147 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34278 10 6452 1 2025-11-24 09:35:37.561 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50426 10 6452 1 2025-11-24 09:36:37.968 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49104 10 6452 1 2025-11-24 09:37:10.727 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:37:10.671 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:37:10.644 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:37:10.463 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 09:37:10.642 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 09:37:38.372 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43544 10 6452 1 2025-11-24 09:34:05.497 00:05:00.988 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 09:34:05.499 00:05:00.983 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 09:38:38.774 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36994 10 6452 1 2025-11-24 09:39:39.183 00:00:10.877 TCP 1.101.0.1:3000 -> 23.104.0.1:34632 10 6452 1 2025-11-24 09:40:40.115 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37912 10 6452 1 2025-11-24 09:41:40.534 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60238 10 6452 1 2025-11-24 09:42:10.903 00:00:00.034 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:42:10.903 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 09:42:10.986 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:42:11.536 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 09:42:11.383 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:42:40.945 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53478 10 6452 1 2025-11-24 09:43:41.367 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58606 10 6452 1 2025-11-24 09:40:05.501 00:05:00.987 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 09:40:05.499 00:05:00.991 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 09:44:41.777 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:34490 10 6452 1 2025-11-24 09:45:42.151 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37210 10 6452 1 2025-11-24 09:46:42.555 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54554 10 6452 1 2025-11-24 09:47:10.857 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:47:10.669 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 09:47:10.628 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:47:10.774 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:47:10.658 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 09:47:42.916 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47014 10 6452 1 2025-11-24 09:48:43.319 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35448 10 6452 1 2025-11-24 09:49:43.728 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48358 10 6452 1 2025-11-24 09:46:05.503 00:05:00.990 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 09:46:05.505 00:05:00.985 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 09:50:44.134 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45920 10 6452 1 2025-11-24 09:51:44.542 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44608 10 6452 1 2025-11-24 09:52:10.959 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:52:10.873 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 09:52:10.895 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:52:10.876 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:52:10.874 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 09:52:44.941 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47722 10 6452 1 2025-11-24 09:53:45.365 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50392 10 6452 1 2025-11-24 09:54:45.767 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:40090 10 6452 1 2025-11-24 09:55:46.201 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57486 10 6452 1 2025-11-24 09:52:05.507 00:05:00.985 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 09:52:05.505 00:05:00.990 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 09:56:46.561 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37886 10 6452 1 2025-11-24 09:57:10.856 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:57:10.862 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 09:57:10.945 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 09:57:11.108 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 09:57:11.106 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 09:57:46.961 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54338 10 6452 1 Summary: total flows: 139, total bytes: 418706, total packets: 1020, avg bps: 932, avg pps: 0, avg bpp: 410 Time window: 2025-11-24 08:58:05 - 2025-11-24 09:57:57 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0020s User: 0.0030s Wall: 0.0018s flows/second: 77869.4 Runtime: 0.0018s