Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 19:58:51.462 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38892 10 6452 1 2025-11-26 19:59:51.864 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54374 10 6452 1 2025-11-26 20:00:52.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52664 10 6452 1 2025-11-26 19:58:06.649 00:05:01.726 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:01:52.680 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59354 10 6452 1 2025-11-26 19:58:06.652 00:05:01.720 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:02:53.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55450 10 6452 1 2025-11-26 20:03:21.468 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:03:20.988 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:03:21.461 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:03:21.359 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:03:21.544 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:03:53.511 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40694 10 6452 1 2025-11-26 20:04:53.928 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:51662 10 6452 1 2025-11-26 20:05:54.352 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:49492 10 6452 1 2025-11-26 20:06:54.768 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:58900 10 6452 1 2025-11-26 20:07:55.139 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:40494 10 6452 1 2025-11-26 20:04:06.651 00:05:01.726 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:04:06.653 00:05:01.721 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:08:21.287 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:08:21.060 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:08:21.101 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:08:21.205 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:08:21.206 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:08:55.513 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55798 10 6452 1 2025-11-26 20:09:55.912 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52708 10 6452 1 2025-11-26 20:10:56.277 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56348 10 6452 1 2025-11-26 20:11:56.643 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42204 10 6452 1 2025-11-26 20:12:57.003 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41552 10 6452 1 2025-11-26 20:13:21.260 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:13:21.014 00:00:00.041 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:13:21.180 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:13:21.262 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:13:21.264 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:13:57.404 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42528 10 6452 1 2025-11-26 20:10:06.654 00:05:01.735 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:10:06.651 00:05:01.740 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:14:57.807 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:54684 10 6452 1 2025-11-26 20:15:58.218 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57288 10 6452 1 2025-11-26 20:16:58.619 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34808 10 6452 1 2025-11-26 20:17:58.987 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52352 10 6452 1 2025-11-26 20:18:21.282 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:18:21.332 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:18:21.363 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:18:21.359 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:18:21.445 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:18:59.390 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:33186 10 6452 1 2025-11-26 20:16:06.654 00:05:01.739 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:19:59.784 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56190 10 6452 1 2025-11-26 20:16:06.656 00:05:01.734 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:21:00.185 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50476 10 6452 1 2025-11-26 20:22:00.590 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58860 10 6452 1 2025-11-26 20:23:00.992 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50176 10 6452 1 2025-11-26 20:23:21.566 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:23:21.484 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:23:21.404 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:23:21.398 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:23:21.439 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:24:01.396 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59652 10 6452 1 2025-11-26 20:25:01.804 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49644 10 6452 1 2025-11-26 20:22:06.655 00:05:01.740 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:22:06.657 00:05:01.735 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:26:02.212 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47258 10 6452 1 2025-11-26 20:27:02.617 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:43948 11 6504 1 2025-11-26 20:28:03.100 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54902 10 6452 1 2025-11-26 20:28:21.487 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:28:21.589 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:28:21.307 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:28:21.404 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:28:21.645 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:29:03.505 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38070 10 6452 1 2025-11-26 20:30:03.906 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40184 10 6452 1 2025-11-26 20:31:04.311 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46344 10 6452 1 2025-11-26 20:28:06.659 00:05:01.737 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:28:06.657 00:05:01.743 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:32:04.716 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44126 10 6452 1 2025-11-26 20:33:05.125 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:32772 10 6452 1 2025-11-26 20:33:21.982 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:33:21.385 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:33:21.913 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:33:21.983 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:33:21.996 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:34:05.535 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58080 10 6452 1 2025-11-26 20:35:05.897 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41438 10 6452 1 2025-11-26 20:36:06.307 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57436 10 6452 1 2025-11-26 20:37:06.712 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50118 10 6452 1 2025-11-26 20:34:06.659 00:05:01.742 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:34:06.662 00:05:01.738 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:38:07.115 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51022 10 6452 1 2025-11-26 20:38:21.751 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:38:21.747 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:38:21.797 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:38:21.670 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:38:21.670 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:39:07.532 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33244 10 6452 1 2025-11-26 20:40:07.941 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43930 10 6452 1 2025-11-26 20:41:08.357 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46080 10 6452 1 2025-11-26 20:42:08.725 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36292 10 6452 1 2025-11-26 20:43:09.137 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54476 10 6452 1 2025-11-26 20:43:21.873 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:43:21.757 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:43:21.870 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:43:21.820 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:43:21.953 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:40:06.662 00:05:01.738 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:40:06.661 00:05:01.742 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:44:09.545 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36328 10 6452 1 2025-11-26 20:45:09.915 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56620 10 6452 1 2025-11-26 20:46:10.317 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46926 10 6452 1 2025-11-26 20:47:10.689 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38374 10 6452 1 2025-11-26 20:48:11.105 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33016 10 6452 1 2025-11-26 20:48:21.803 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:48:21.774 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:48:21.896 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:48:21.907 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:48:21.978 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:49:11.508 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43754 10 6452 1 2025-11-26 20:46:06.664 00:05:01.737 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:46:06.662 00:05:01.743 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:50:11.873 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46670 10 6452 1 2025-11-26 20:51:12.279 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58856 10 6452 1 2025-11-26 20:52:12.683 00:00:10.638 TCP 1.101.0.1:3000 -> 23.104.0.1:39244 10 6452 1 2025-11-26 20:53:22.144 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:53:22.058 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:53:13.360 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60876 10 6452 1 2025-11-26 20:53:22.275 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:53:22.219 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:53:22.360 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-26 20:54:13.765 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41880 10 6452 1 2025-11-26 20:55:14.176 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:56182 11 6504 1 2025-11-26 20:52:06.664 00:05:01.741 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-26 20:52:06.669 00:05:01.735 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-26 20:56:14.630 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42230 10 6452 1 2025-11-26 20:57:15.034 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59916 10 6452 1 2025-11-26 20:58:22.096 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-26 20:58:21.950 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:58:15.452 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57220 10 6452 1 2025-11-26 20:58:22.094 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-26 20:58:22.074 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-26 20:58:22.177 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 140, total bytes: 417104, total packets: 1022, avg bps: 921, avg pps: 0, avg bpp: 408 Time window: 2025-11-26 19:58:06 - 2025-11-26 20:58:25 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0066s User: 0.0000s Wall: 0.0021s flows/second: 65121.7 Runtime: 0.0022s