Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 06:59:26.801 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42150 10 6452 1 2025-11-26 07:00:27.210 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41542 10 6452 1 2025-11-26 07:01:27.573 00:00:11.009 TCP 1.101.0.1:3000 -> 23.104.0.1:54700 14 14298 1 2025-11-26 06:58:06.428 00:05:01.522 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 06:58:06.426 00:05:01.526 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 07:02:28.624 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37618 10 6452 1 2025-11-26 07:03:05.614 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 07:03:05.512 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 07:03:05.454 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:03:05.530 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:03:05.233 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 07:03:29.031 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44354 10 6452 1 2025-11-26 07:04:29.438 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41246 10 6452 1 2025-11-26 07:05:29.838 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:33172 10 6452 1 2025-11-26 07:06:30.266 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51346 10 6452 1 2025-11-26 07:07:30.667 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57044 10 6452 1 2025-11-26 07:08:05.470 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 07:08:05.534 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 07:08:05.429 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:08:05.387 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:08:05.386 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 07:04:06.429 00:05:01.525 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 07:04:06.432 00:05:01.520 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 07:08:31.097 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55604 10 6452 1 2025-11-26 07:09:31.502 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55278 10 6452 1 2025-11-26 07:10:31.867 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43718 10 6452 1 2025-11-26 07:11:32.272 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:45428 12 10375 1 2025-11-26 07:12:32.743 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37662 10 6452 1 2025-11-26 07:13:05.621 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 07:13:05.540 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 07:13:05.739 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:13:05.539 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:13:05.729 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 07:13:33.149 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39582 10 6452 1 2025-11-26 07:10:06.431 00:05:01.523 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 07:10:06.428 00:05:01.528 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 07:14:33.553 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48312 10 6452 1 2025-11-26 07:15:33.957 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57580 10 6452 1 2025-11-26 07:16:34.374 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36102 10 6452 1 2025-11-26 07:17:34.785 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37366 10 6452 1 2025-11-26 07:18:05.857 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 07:18:05.775 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:18:05.809 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 07:18:05.725 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 07:18:05.730 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:18:35.147 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44178 10 6452 1 2025-11-26 07:19:35.551 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34584 10 6452 1 2025-11-26 07:16:06.433 00:05:01.522 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 07:16:06.430 00:05:01.527 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 07:20:35.952 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53462 10 6452 1 2025-11-26 07:21:36.316 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54786 10 6452 1 2025-11-26 07:22:36.680 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36990 10 6452 1 2025-11-26 07:23:05.774 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 07:23:05.641 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:23:05.864 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:23:05.637 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 07:23:05.947 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 07:23:37.111 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58952 10 6452 1 2025-11-26 07:24:37.516 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:50554 10 6452 1 2025-11-26 07:25:37.981 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37848 10 6452 1 2025-11-26 07:22:06.431 00:05:01.531 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 07:22:06.435 00:05:01.525 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 07:26:38.389 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:53492 12 10584 1 2025-11-26 07:27:38.823 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55238 10 6661 1 2025-11-26 07:28:05.805 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 07:28:05.537 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:28:05.770 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:28:05.903 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 07:28:05.852 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 07:28:39.221 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54100 10 6661 1 2025-11-26 07:29:39.622 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53470 10 6661 1 2025-11-26 07:30:40.027 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49352 10 6661 1 2025-11-26 07:31:40.431 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53784 10 6661 1 2025-11-26 07:28:06.437 00:05:01.524 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 07:28:06.434 00:05:01.529 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 07:32:40.838 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:51086 10 6661 1 2025-11-26 07:33:05.940 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 07:33:05.758 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 07:33:06.095 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:33:06.228 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:33:06.177 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 07:33:41.268 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41920 10 6661 1 2025-11-26 07:34:41.667 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57452 10 6661 1 2025-11-26 07:35:42.098 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53784 10 6661 1 2025-11-26 07:36:42.460 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34522 10 6661 1 2025-11-26 07:37:42.863 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39638 10 6661 1 2025-11-26 07:38:05.867 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:38:05.764 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 07:38:06.068 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:34:06.438 00:05:01.525 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 07:38:06.212 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 07:34:06.436 00:05:01.529 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 07:38:06.150 00:00:00.029 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 07:38:43.275 00:00:10.643 TCP 1.101.0.1:3000 -> 23.104.0.1:50842 10 6661 1 2025-11-26 07:39:43.966 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42184 10 6661 1 2025-11-26 07:40:44.331 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33450 10 6661 1 2025-11-26 07:41:44.736 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35652 10 6661 1 2025-11-26 07:42:45.109 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41552 10 6661 1 2025-11-26 07:43:06.130 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 07:43:06.048 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:43:06.111 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 07:43:06.008 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 07:43:06.034 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:43:45.475 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38520 10 6661 1 2025-11-26 07:40:06.440 00:05:01.524 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 07:40:06.438 00:05:01.528 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 07:44:45.884 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48896 10 6661 1 2025-11-26 07:45:46.286 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58970 10 6661 1 2025-11-26 07:46:46.652 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48980 10 6661 1 2025-11-26 07:47:47.068 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36542 10 6661 1 2025-11-26 07:48:06.385 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 07:48:06.185 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 07:48:06.288 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:48:06.301 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:48:06.305 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 07:48:47.469 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38938 10 6661 1 2025-11-26 07:49:47.862 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43276 10 6661 1 2025-11-26 07:46:06.439 00:05:01.528 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 07:46:06.442 00:05:01.523 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 07:50:48.231 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33948 10 6661 1 2025-11-26 07:51:48.633 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56278 10 6661 1 2025-11-26 07:52:49.036 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37134 10 6661 1 2025-11-26 07:53:06.255 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 07:53:06.334 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 07:53:06.285 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:53:06.174 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:53:06.337 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 07:53:49.435 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56532 10 6661 1 2025-11-26 07:54:49.846 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:43634 10 6661 1 2025-11-26 07:55:50.268 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37528 10 6661 1 2025-11-26 07:52:06.443 00:05:01.533 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 07:52:06.440 00:05:01.539 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 07:56:50.673 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:46226 12 10793 1 2025-11-26 07:57:51.149 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53170 10 6870 1 2025-11-26 07:58:06.643 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 07:58:06.379 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 07:58:06.455 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:58:06.561 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 07:58:06.459 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 Summary: total flows: 139, total bytes: 437269, total packets: 1020, avg bps: 971, avg pps: 0, avg bpp: 428 Time window: 2025-11-26 06:58:06 - 2025-11-26 07:58:06 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0045s User: 0.0009s Wall: 0.0024s flows/second: 57152.1 Runtime: 0.0024s