Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 04:59:37.431 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46264 10 6452 1 2025-11-26 05:00:37.830 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34276 10 6452 1 2025-11-26 05:01:38.237 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51030 10 6452 1 2025-11-26 04:58:06.398 00:05:01.508 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 04:58:06.396 00:05:01.512 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:02:38.645 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57374 10 6452 1 2025-11-26 05:03:02.837 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:03:02.892 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:03:02.898 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:03:02.574 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:03:02.919 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:03:39.057 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33308 12 6556 1 2025-11-26 05:04:39.456 00:00:10.636 TCP 1.101.0.1:3000 -> 23.104.0.1:60806 10 6452 1 2025-11-26 05:05:40.131 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36532 10 6452 1 2025-11-26 05:06:40.536 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38574 10 6452 1 2025-11-26 05:07:40.943 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58880 10 6452 1 2025-11-26 05:08:03.009 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:08:03.211 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:08:03.069 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:08:02.925 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:08:03.043 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:04:06.400 00:05:01.510 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:04:06.399 00:05:01.515 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:08:41.357 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35596 10 6452 1 2025-11-26 05:09:41.758 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47050 10 6452 1 2025-11-26 05:10:42.177 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:54286 10 6452 1 2025-11-26 05:11:42.603 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:48434 10 6452 1 2025-11-26 05:12:43.017 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:44778 10 6452 1 2025-11-26 05:13:03.425 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:13:02.952 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:13:02.995 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:13:03.343 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:13:03.137 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:13:43.433 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49426 10 6452 1 2025-11-26 05:10:06.401 00:05:01.511 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:10:06.398 00:05:01.517 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:14:43.837 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:51854 10 6452 1 2025-11-26 05:15:44.223 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47936 10 6452 1 2025-11-26 05:16:44.630 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59804 10 6452 1 2025-11-26 05:17:45.031 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50798 10 6452 1 2025-11-26 05:18:03.384 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:18:03.347 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:18:03.319 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:18:03.317 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:18:03.402 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:18:45.396 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33048 10 6452 1 2025-11-26 05:19:45.805 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:51158 10 6452 1 2025-11-26 05:16:06.402 00:05:01.512 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:16:06.400 00:05:01.517 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:20:46.185 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44706 10 6452 1 2025-11-26 05:21:46.550 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:54262 10 6452 1 2025-11-26 05:22:46.909 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56996 10 6452 1 2025-11-26 05:23:03.239 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:23:03.195 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:23:03.056 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:23:03.344 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:23:03.278 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:23:47.322 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53118 10 6452 1 2025-11-26 05:24:47.727 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52428 10 6452 1 2025-11-26 05:25:48.137 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56018 10 6452 1 2025-11-26 05:22:06.405 00:05:01.511 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:22:06.402 00:05:01.516 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:26:48.540 00:00:10.578 TCP 1.101.0.1:3000 -> 23.104.0.1:40664 10 6452 1 2025-11-26 05:27:49.154 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46448 10 6452 1 2025-11-26 05:28:03.418 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:28:03.108 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:28:03.309 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:28:03.157 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:28:03.392 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:28:49.566 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58012 10 6452 1 2025-11-26 05:29:49.929 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:58888 10 6452 1 2025-11-26 05:30:50.344 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:39718 10 6452 1 2025-11-26 05:31:50.702 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:53688 10 6452 1 2025-11-26 05:28:06.405 00:05:01.513 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:28:06.403 00:05:01.517 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:33:03.770 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:33:03.635 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:33:03.660 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:33:03.687 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:33:03.741 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:32:51.099 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36884 10 6452 1 2025-11-26 05:33:51.501 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55130 10 6452 1 2025-11-26 05:34:51.900 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53166 10 6452 1 2025-11-26 05:35:52.305 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53410 10 6452 1 2025-11-26 05:36:52.709 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42808 10 6452 1 2025-11-26 05:38:03.392 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:38:03.573 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:38:03.239 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:37:53.113 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36766 10 6452 1 2025-11-26 05:38:03.309 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:38:03.512 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:34:06.406 00:05:01.513 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:34:06.405 00:05:01.517 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:38:53.518 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55734 10 6452 1 2025-11-26 05:39:53.880 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51048 10 6452 1 2025-11-26 05:40:54.283 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55188 10 6452 1 2025-11-26 05:41:54.686 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:55134 10 6452 1 2025-11-26 05:43:03.817 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:43:03.726 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:42:55.098 00:00:10.703 TCP 1.101.0.1:3000 -> 23.104.0.1:53710 10 6452 1 2025-11-26 05:43:03.544 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:43:03.648 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:43:03.627 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:43:55.845 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:36218 10 6452 1 2025-11-26 05:40:06.406 00:05:01.514 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:40:06.405 00:05:01.519 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:44:56.275 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44604 10 6452 1 2025-11-26 05:45:56.682 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51694 10 6452 1 2025-11-26 05:46:57.114 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51162 10 6452 1 2025-11-26 05:48:04.186 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:48:04.059 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:48:04.093 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:48:04.246 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:48:04.177 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:47:57.510 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:41078 10 6452 1 2025-11-26 05:48:57.879 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:33112 10 6452 1 2025-11-26 05:46:06.405 00:05:01.519 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:46:06.410 00:05:01.513 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:49:58.315 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56702 10 6452 1 2025-11-26 05:50:58.717 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:49798 10 6452 1 2025-11-26 05:51:59.145 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40606 10 6452 1 2025-11-26 05:53:04.084 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:53:04.070 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:53:03.998 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:53:04.003 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:53:03.940 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:52:59.505 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:39574 10 6452 1 2025-11-26 05:53:59.882 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57364 10 6452 1 2025-11-26 05:55:00.287 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40988 10 6452 1 2025-11-26 05:52:06.409 00:05:01.516 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 05:52:06.412 00:05:01.511 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 05:56:00.684 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41188 10 6452 1 2025-11-26 05:57:01.052 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60798 10 6452 1 2025-11-26 05:58:04.049 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 05:58:03.844 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 05:58:03.922 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:58:03.967 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 05:58:04.100 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 05:58:01.453 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46316 10 6452 1 Summary: total flows: 139, total bytes: 410652, total packets: 1012, avg bps: 911, avg pps: 0, avg bpp: 405 Time window: 2025-11-26 04:58:06 - 2025-11-26 05:58:11 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0036s User: 0.0018s Wall: 0.0023s flows/second: 61369.3 Runtime: 0.0023s