Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 01:59:23.778 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:32832 10 6452 1 2025-11-26 02:00:24.140 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52102 10 6452 1 2025-11-26 02:01:24.512 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47410 10 6452 1 2025-11-26 01:58:06.336 00:05:01.494 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 01:58:06.335 00:05:01.499 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:02:24.869 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40734 10 6452 1 2025-11-26 02:02:59.226 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:02:59.149 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:02:59.266 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:02:59.145 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:02:59.237 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:03:25.274 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43350 10 6452 1 2025-11-26 02:04:25.681 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53212 10 6452 1 2025-11-26 02:05:26.102 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33840 12 6556 1 2025-11-26 02:06:26.511 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35588 10 6452 1 2025-11-26 02:07:26.925 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:42960 10 6452 1 2025-11-26 02:07:59.450 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:07:59.266 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:07:59.054 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:07:59.367 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:07:59.451 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:04:06.338 00:05:01.493 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:04:06.336 00:05:01.499 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:08:27.344 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46082 10 6452 1 2025-11-26 02:09:27.744 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35820 10 6452 1 2025-11-26 02:10:28.154 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41976 10 6452 1 2025-11-26 02:11:28.560 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58570 10 6452 1 2025-11-26 02:12:28.960 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58180 10 6452 1 2025-11-26 02:12:59.699 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:12:59.425 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:12:59.581 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:12:59.458 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:12:59.664 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:13:29.365 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39988 10 6452 1 2025-11-26 02:10:06.336 00:05:01.502 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:10:06.339 00:05:01.497 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:14:29.728 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57372 10 6452 1 2025-11-26 02:15:30.146 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39316 12 6556 1 2025-11-26 02:16:30.552 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55254 10 6452 1 2025-11-26 02:17:30.911 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45300 10 6452 1 2025-11-26 02:17:59.627 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:17:59.463 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:17:59.672 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:17:59.453 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:17:59.754 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:18:31.289 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45996 10 6452 1 2025-11-26 02:19:31.697 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45632 10 6452 1 2025-11-26 02:16:06.340 00:05:01.506 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:16:06.341 00:05:01.501 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:20:32.105 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58294 10 6452 1 2025-11-26 02:21:32.511 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43930 10 6452 1 2025-11-26 02:22:32.884 00:00:10.890 TCP 1.101.0.1:3000 -> 23.104.0.1:44324 12 6556 1 2025-11-26 02:22:59.765 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:22:59.684 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:22:59.392 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:22:59.682 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:22:59.877 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:23:33.810 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39162 10 6452 1 2025-11-26 02:24:34.209 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56684 10 6452 1 2025-11-26 02:25:34.572 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48902 10 6452 1 2025-11-26 02:22:06.344 00:05:01.503 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:22:06.343 00:05:01.508 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:26:34.935 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:41848 10 6452 1 2025-11-26 02:27:35.363 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56772 10 6452 1 2025-11-26 02:27:59.987 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:27:59.512 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:27:59.941 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:27:59.823 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:28:00.024 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:28:35.730 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39204 10 6452 1 2025-11-26 02:29:36.137 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54818 11 6492 1 2025-11-26 02:30:36.535 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40632 11 6504 1 2025-11-26 02:31:36.957 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:42810 10 6452 1 2025-11-26 02:28:06.348 00:05:01.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:28:06.345 00:05:01.505 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:32:37.325 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58816 10 6452 1 2025-11-26 02:33:00.166 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:32:59.885 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:32:59.825 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:33:00.083 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:33:00.004 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:33:37.727 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47002 10 6452 1 2025-11-26 02:34:38.140 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52024 10 6452 1 2025-11-26 02:35:38.546 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51782 10 6452 1 2025-11-26 02:36:38.948 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42154 10 6452 1 2025-11-26 02:37:39.366 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49704 10 6452 1 2025-11-26 02:38:00.415 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:38:00.275 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:38:00.172 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:38:00.332 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:38:00.086 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:34:06.346 00:05:01.506 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:34:06.350 00:05:01.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:38:39.767 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36908 10 6452 1 2025-11-26 02:39:40.174 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35210 10 6452 1 2025-11-26 02:40:40.580 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49942 10 6452 1 2025-11-26 02:41:40.986 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:37184 12 10375 1 2025-11-26 02:42:41.463 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52034 10 6452 1 2025-11-26 02:42:59.945 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:43:00.115 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:42:59.944 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:42:59.856 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:43:00.028 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:43:41.873 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34108 10 6452 1 2025-11-26 02:40:06.350 00:05:01.503 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:40:06.347 00:05:01.508 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:44:42.241 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48478 10 6452 1 2025-11-26 02:45:42.647 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42058 10 6452 1 2025-11-26 02:46:43.017 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48824 10 6452 1 2025-11-26 02:47:43.421 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33598 10 6452 1 2025-11-26 02:48:00.071 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:48:00.311 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:48:00.146 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:47:59.987 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:48:00.116 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:48:43.826 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40140 10 6452 1 2025-11-26 02:49:44.231 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44318 10 6452 1 2025-11-26 02:46:06.353 00:05:01.508 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:46:06.352 00:05:01.513 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:50:44.640 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42322 10 6452 1 2025-11-26 02:51:45.061 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46608 10 6452 1 2025-11-26 02:52:45.468 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60960 10 6452 1 2025-11-26 02:53:00.306 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:53:00.224 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:53:00.324 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:53:00.224 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:53:00.388 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 02:53:45.833 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53434 10 6452 1 2025-11-26 02:54:46.257 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:51990 10 6452 1 2025-11-26 02:55:46.682 00:00:11.092 TCP 1.101.0.1:3000 -> 23.104.0.1:41910 10 6452 1 2025-11-26 02:52:06.355 00:05:01.507 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 02:52:06.353 00:05:01.512 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 02:56:47.819 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33470 10 6452 1 2025-11-26 02:58:00.546 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 02:58:00.462 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 02:58:00.334 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:58:00.462 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 02:57:48.187 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40740 10 6452 1 2025-11-26 02:58:00.540 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 Summary: total flows: 139, total bytes: 414875, total packets: 1020, avg bps: 923, avg pps: 0, avg bpp: 406 Time window: 2025-11-26 01:58:06 - 2025-11-26 02:58:00 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0051s User: 0.0009s Wall: 0.0016s flows/second: 88374.8 Runtime: 0.0016s