Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 12:58:41.557 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42516 10 6452 1 2025-11-24 12:59:41.964 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35418 10 6452 1 2025-11-24 13:00:42.364 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59148 10 6452 1 2025-11-24 13:01:42.731 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33770 11 6492 1 2025-11-24 12:58:05.564 00:05:01.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 12:58:05.566 00:05:01.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 13:02:14.787 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 13:02:14.780 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:02:14.800 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:02:14.704 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:02:14.689 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:02:43.142 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37980 10 6452 1 2025-11-24 13:03:43.547 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48374 10 6452 1 2025-11-24 13:04:43.957 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59970 10 6452 1 2025-11-24 13:05:44.362 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58808 10 6452 1 2025-11-24 13:06:44.740 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33178 10 6452 1 2025-11-24 13:07:14.991 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 13:07:14.809 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:07:14.486 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:07:14.909 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:07:14.812 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:07:45.147 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53032 10 6452 1 2025-11-24 13:04:05.572 00:05:00.999 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 13:04:05.574 00:05:00.994 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 13:08:45.513 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40518 10 6452 1 2025-11-24 13:09:45.913 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38214 10 6452 1 2025-11-24 13:10:46.280 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45108 10 6452 1 2025-11-24 13:11:46.639 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55054 10 6452 1 2025-11-24 13:12:15.010 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:12:14.542 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:12:14.936 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:12:15.023 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:12:15.020 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 13:12:47.005 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33866 10 6452 1 2025-11-24 13:13:47.409 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45304 10 6452 1 2025-11-24 13:10:05.575 00:05:00.995 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 13:10:05.572 00:05:01.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 13:14:47.814 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53032 10 6452 1 2025-11-24 13:15:48.221 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:58196 10 6452 1 2025-11-24 13:16:48.652 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52476 10 6452 1 2025-11-24 13:17:15.216 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 13:17:15.134 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:17:15.083 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:17:15.165 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:17:14.909 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:17:49.064 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56690 10 6452 1 2025-11-24 13:18:49.470 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:57206 10 6452 1 2025-11-24 13:19:49.910 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50120 10 6452 1 2025-11-24 13:16:05.577 00:05:00.995 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 13:16:05.575 00:05:01.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 13:20:50.318 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53956 10 6452 1 2025-11-24 13:21:50.717 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:38154 10 6452 1 2025-11-24 13:22:15.005 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:22:14.848 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:22:15.124 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:22:15.195 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:22:15.207 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 13:22:51.109 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42418 10 6452 1 2025-11-24 13:23:51.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42822 10 6452 1 2025-11-24 13:24:51.933 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48308 10 6452 1 2025-11-24 13:25:52.349 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39692 10 6452 1 2025-11-24 13:22:05.580 00:05:00.995 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 13:22:05.576 00:05:01.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 13:26:52.759 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37092 10 6452 1 2025-11-24 13:27:15.116 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:27:15.184 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:27:15.428 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:27:15.113 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:27:15.511 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 13:27:53.152 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55198 10 6452 1 2025-11-24 13:28:53.562 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37722 10 6452 1 2025-11-24 13:29:53.966 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34014 10 6452 1 2025-11-24 13:30:54.370 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48610 10 6452 1 2025-11-24 13:31:54.773 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53988 10 6452 1 2025-11-24 13:28:05.580 00:05:00.994 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 13:32:15.405 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:32:15.189 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:32:15.403 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:32:15.458 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:28:05.578 00:05:00.999 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 13:32:15.486 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 13:32:55.195 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51974 10 6452 1 2025-11-24 13:33:55.624 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53668 10 6452 1 2025-11-24 13:34:56.031 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49386 10 6452 1 2025-11-24 13:35:56.435 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35528 10 6452 1 2025-11-24 13:36:56.802 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:40078 10 6452 1 2025-11-24 13:37:15.596 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 13:37:15.496 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:37:15.578 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:37:15.515 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:37:15.505 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:34:05.581 00:05:00.997 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 13:34:05.579 00:05:01.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 13:37:57.174 00:00:19.703 TCP 1.101.0.1:3000 -> 23.104.0.1:33736 10 6452 1 2025-11-24 13:39:06.939 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:35462 10 6452 1 2025-11-24 13:40:07.366 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41078 10 6452 1 2025-11-24 13:41:07.726 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35748 10 6452 1 2025-11-24 13:42:15.821 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:42:15.623 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:42:15.902 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:42:15.722 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:42:15.986 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 13:42:08.142 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56474 10 6452 1 2025-11-24 13:43:08.546 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39364 10 6452 1 2025-11-24 13:40:05.582 00:05:01.016 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 13:40:05.582 00:05:01.020 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 13:44:08.914 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:44002 10 6452 1 2025-11-24 13:45:09.325 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55840 10 6452 1 2025-11-24 13:46:09.727 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36480 10 6452 1 2025-11-24 13:47:15.707 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 13:47:15.636 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:47:15.579 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:47:15.625 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:47:15.630 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:47:10.115 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:49854 10 6452 1 2025-11-24 13:48:10.557 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45446 10 6452 1 2025-11-24 13:49:10.959 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:39446 10 6452 1 2025-11-24 13:46:05.585 00:05:01.015 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 13:46:05.583 00:05:01.019 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 13:50:11.323 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37460 10 6452 1 2025-11-24 13:51:11.729 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39520 10 6452 1 2025-11-24 13:52:15.684 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 13:52:15.782 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:52:15.696 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:52:15.600 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:52:15.766 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:52:12.105 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40848 10 6452 1 2025-11-24 13:53:12.510 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:53924 10 6452 1 2025-11-24 13:54:12.880 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53202 10 6452 1 2025-11-24 13:55:13.299 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:46350 10 6452 1 2025-11-24 13:52:05.590 00:05:01.023 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-24 13:52:05.592 00:05:01.019 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-24 13:56:13.672 00:00:10.815 TCP 1.101.0.1:3000 -> 23.104.0.1:41192 10 6452 1 2025-11-24 13:57:15.781 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:57:16.274 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-24 13:57:16.159 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-24 13:57:16.191 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-24 13:57:16.157 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-24 13:57:14.526 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53196 10 6452 1 2025-11-24 13:58:14.894 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:48128 10 6452 1 Summary: total flows: 140, total bytes: 417040, total packets: 1021, avg bps: 921, avg pps: 0, avg bpp: 408 Time window: 2025-11-24 12:58:05 - 2025-11-24 13:58:25 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0036s User: 0.0027s Wall: 0.0019s flows/second: 73026.1 Runtime: 0.0019s