Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 22:59:00.506 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:59706 10 6452 1 2025-11-25 23:00:00.863 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35536 10 6452 1 2025-11-25 23:01:01.281 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56630 10 6452 1 2025-11-25 22:58:06.296 00:05:01.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 22:58:06.293 00:05:01.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 23:02:01.683 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57374 10 6452 1 2025-11-25 23:02:55.722 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 23:02:55.757 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:02:55.417 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:02:55.562 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 23:02:55.499 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 23:03:02.112 00:00:10.966 TCP 1.101.0.1:3000 -> 23.104.0.1:54308 10 6452 1 2025-11-25 23:04:03.116 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35262 10 6452 1 2025-11-25 23:05:03.524 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41920 10 6452 1 2025-11-25 23:06:03.929 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:60460 10 6452 1 2025-11-25 23:07:04.356 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56464 10 6452 1 2025-11-25 23:07:55.804 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 23:07:55.762 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:07:55.811 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:07:55.722 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 23:07:55.895 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 23:04:06.299 00:05:01.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 23:04:06.297 00:05:01.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 23:08:04.729 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42920 10 6452 1 2025-11-25 23:09:05.141 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:38506 10 6452 1 2025-11-25 23:10:05.509 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49744 10 6452 1 2025-11-25 23:11:05.912 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33310 10 6452 1 2025-11-25 23:12:06.317 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34988 10 6452 1 2025-11-25 23:12:55.930 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 23:12:55.737 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 23:12:55.780 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:12:55.847 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:12:55.989 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 23:13:06.723 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48570 10 6452 1 2025-11-25 23:10:06.298 00:05:01.427 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 23:10:06.296 00:05:01.432 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 23:14:07.108 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43134 10 6452 1 2025-11-25 23:15:07.526 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53262 10 6452 1 2025-11-25 23:16:07.928 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34998 10 6452 1 2025-11-25 23:17:08.355 00:00:10.623 TCP 1.101.0.1:3000 -> 23.104.0.1:38050 10 6452 1 2025-11-25 23:17:55.976 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:17:55.897 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 23:17:56.077 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 23:17:55.981 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:17:56.062 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 23:18:09.026 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33194 10 6452 1 2025-11-25 23:19:09.429 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:50266 10 6452 1 2025-11-25 23:16:06.299 00:05:01.443 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 23:16:06.296 00:05:01.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 23:20:09.853 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:40146 10 6452 1 2025-11-25 23:21:10.274 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50686 10 6452 1 2025-11-25 23:22:10.677 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:58046 10 6452 1 2025-11-25 23:22:56.216 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 23:22:56.059 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 23:22:56.145 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:22:56.134 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:22:56.193 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 23:23:11.105 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40736 10 6452 1 2025-11-25 23:24:11.466 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33942 10 6452 1 2025-11-25 23:25:11.876 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47322 10 6452 1 2025-11-25 23:22:06.300 00:05:01.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 23:22:06.298 00:05:01.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 23:26:12.276 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57934 10 6452 1 2025-11-25 23:27:12.678 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:41996 10 6452 1 2025-11-25 23:27:55.930 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:27:56.066 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 23:27:56.107 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 23:27:55.984 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:27:56.195 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 23:28:13.067 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59258 10 6452 1 2025-11-25 23:29:13.467 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47464 10 6452 1 2025-11-25 23:30:13.833 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:38192 10 6452 1 2025-11-25 23:31:14.254 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52878 10 6452 1 2025-11-25 23:28:06.299 00:05:01.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 23:28:06.302 00:05:01.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 23:32:14.663 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40250 10 6452 1 2025-11-25 23:32:56.244 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 23:32:56.250 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 23:32:56.069 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:32:56.161 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:32:56.425 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 23:33:15.089 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53484 10 6452 1 2025-11-25 23:34:15.491 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48730 10 6452 1 2025-11-25 23:35:15.892 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46080 10 6452 1 2025-11-25 23:36:16.303 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39432 10 6452 1 2025-11-25 23:37:16.702 00:00:10.628 TCP 1.101.0.1:3000 -> 23.104.0.1:46092 10 6452 1 2025-11-25 23:37:56.225 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 23:37:56.417 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:37:56.441 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:37:56.453 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 23:37:56.525 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 23:34:06.300 00:05:01.462 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 23:34:06.303 00:05:01.456 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 23:38:17.381 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59274 10 6452 1 2025-11-25 23:39:17.810 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:42442 10 6452 1 2025-11-25 23:40:18.191 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41046 10 6452 1 2025-11-25 23:41:18.589 00:00:13.409 TCP 1.101.0.1:3000 -> 23.104.0.1:54810 12 6556 1 2025-11-25 23:42:22.109 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57288 10 6452 1 2025-11-25 23:42:57.125 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 23:42:56.985 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:42:57.232 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:42:57.214 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 23:42:57.316 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 23:43:22.472 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34106 10 6452 1 2025-11-25 23:40:06.303 00:05:01.474 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 23:40:06.306 00:05:01.469 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 23:44:22.871 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37952 10 6452 1 2025-11-25 23:45:23.277 00:00:14.142 TCP 1.101.0.1:3000 -> 23.104.0.1:45348 10 6452 1 2025-11-25 23:46:27.454 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34984 10 6452 1 2025-11-25 23:47:27.854 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:36444 10 6452 1 2025-11-25 23:47:56.637 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 23:47:56.434 00:00:00.016 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:47:56.720 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:47:56.575 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 23:47:56.803 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 23:48:28.234 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38268 10 6452 1 2025-11-25 23:49:28.642 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51046 10 6452 1 2025-11-25 23:46:06.305 00:05:01.471 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 23:46:06.303 00:05:01.477 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 23:50:29.067 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48318 10 6452 1 2025-11-25 23:51:29.467 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:33360 12 10375 1 2025-11-25 23:52:29.939 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37328 10 6452 1 2025-11-25 23:52:56.575 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 23:52:56.626 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:52:56.710 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:52:56.585 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 23:52:56.793 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 23:53:30.360 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:39838 10 6452 1 2025-11-25 23:54:30.755 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:40814 10 6452 1 2025-11-25 23:55:31.190 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54212 10 6452 1 2025-11-25 23:52:06.305 00:05:01.474 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-25 23:52:06.305 00:05:01.479 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-25 23:56:31.599 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:51344 12 10369 1 2025-11-25 23:57:32.117 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34100 10 6452 1 2025-11-25 23:57:57.043 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-25 23:57:57.065 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-25 23:57:56.511 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:57:56.960 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-25 23:57:56.966 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-25 23:58:32.479 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53214 10 6452 1 Summary: total flows: 140, total bytes: 424944, total packets: 1026, avg bps: 934, avg pps: 0, avg bpp: 414 Time window: 2025-11-25 22:58:06 - 2025-11-25 23:58:42 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0044s User: 0.0011s Wall: 0.0023s flows/second: 60238.3 Runtime: 0.0023s