Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 00:58:54.589 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38160 10 6452 1 2025-11-27 00:59:54.953 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58358 10 6452 1 2025-11-27 01:00:55.370 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47632 10 6452 1 2025-11-27 00:58:06.737 00:05:01.780 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 01:01:55.774 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:43066 10 6452 1 2025-11-27 00:58:06.740 00:05:01.774 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 01:02:56.189 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51236 10 6452 1 2025-11-27 01:03:26.946 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 01:03:26.825 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:03:27.062 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:03:26.886 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 01:03:27.144 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 01:03:56.591 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50240 10 6452 1 2025-11-27 01:04:56.993 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49696 10 6452 1 2025-11-27 01:05:57.358 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58138 10 6452 1 2025-11-27 01:06:57.763 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:33612 10 6452 1 2025-11-27 01:04:06.737 00:05:01.783 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 01:07:58.180 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:41486 10 6452 1 2025-11-27 01:04:06.740 00:05:01.778 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 01:08:27.129 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 01:08:26.850 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:08:27.035 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:08:27.216 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 01:08:27.118 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 01:08:58.539 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52304 10 6452 1 2025-11-27 01:09:58.934 00:00:10.933 TCP 1.101.0.1:3000 -> 23.104.0.1:45278 10 6452 1 2025-11-27 01:10:59.903 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38714 10 6452 1 2025-11-27 01:12:00.306 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55630 10 6452 1 2025-11-27 01:13:00.712 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59916 10 6452 1 2025-11-27 01:13:27.304 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 01:13:27.163 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 01:13:26.908 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:13:27.220 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:13:27.167 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 01:10:06.740 00:05:01.783 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 01:10:06.738 00:05:01.788 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 01:14:01.115 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35274 10 6452 1 2025-11-27 01:15:01.478 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60118 10 6452 1 2025-11-27 01:16:01.884 00:00:10.484 TCP 1.101.0.1:3000 -> 23.104.0.1:46800 10 6452 1 2025-11-27 01:17:02.402 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:36360 12 10375 1 2025-11-27 01:18:02.877 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46254 10 6452 1 2025-11-27 01:18:27.441 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 01:18:27.151 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 01:18:27.181 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:18:27.359 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:18:27.361 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 01:19:03.282 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34116 10 6452 1 2025-11-27 01:16:06.740 00:05:01.788 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 01:16:06.742 00:05:01.783 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 01:20:03.653 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59414 10 6452 1 2025-11-27 01:21:04.079 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46456 10 6452 1 2025-11-27 01:22:04.497 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44404 10 6452 1 2025-11-27 01:23:04.905 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44734 10 6452 1 2025-11-27 01:23:27.336 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:23:27.351 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 01:23:27.347 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 01:23:27.260 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:23:27.420 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 01:24:05.313 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33424 10 6452 1 2025-11-27 01:25:05.712 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50382 10 6452 1 2025-11-27 01:22:06.742 00:05:01.794 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 01:22:06.745 00:05:01.789 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 01:26:06.103 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51912 10 6452 1 2025-11-27 01:27:06.505 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46466 10 6452 1 2025-11-27 01:28:06.867 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36312 10 6452 1 2025-11-27 01:28:27.551 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 01:28:27.622 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 01:28:27.193 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:28:27.469 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:28:27.551 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 01:29:07.280 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38260 10 6452 1 2025-11-27 01:30:07.686 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58600 10 6452 1 2025-11-27 01:31:08.114 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55856 10 6452 1 2025-11-27 01:28:06.742 00:05:01.795 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 01:28:06.746 00:05:01.789 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 01:32:08.473 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42984 10 6452 1 2025-11-27 01:33:08.878 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49000 10 6452 1 2025-11-27 01:33:27.514 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 01:33:27.551 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:33:27.317 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:33:27.417 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 01:33:27.400 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 01:34:09.242 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47950 10 6452 1 2025-11-27 01:35:09.641 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42814 10 6452 1 2025-11-27 01:36:10.010 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44498 10 6452 1 2025-11-27 01:37:10.376 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38030 10 6452 1 2025-11-27 01:34:06.744 00:05:01.794 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 01:34:06.748 00:05:01.788 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 01:38:10.779 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33342 10 6452 1 2025-11-27 01:38:27.396 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:38:27.788 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:38:27.909 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 01:38:28.121 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 01:38:27.877 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 01:39:11.182 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:51692 10 6452 1 2025-11-27 01:40:11.543 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36370 10 6452 1 2025-11-27 01:41:11.947 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:41994 10 6452 1 2025-11-27 01:42:12.321 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40814 10 6452 1 2025-11-27 01:43:12.720 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49346 10 6452 1 2025-11-27 01:43:27.760 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 01:43:27.801 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:43:27.758 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:43:27.757 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 01:43:27.840 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 01:40:06.745 00:05:01.794 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 01:40:06.749 00:05:01.788 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 01:44:13.120 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60364 10 6452 1 2025-11-27 01:45:13.513 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40960 10 6452 1 2025-11-27 01:46:13.916 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:33502 12 10375 1 2025-11-27 01:47:14.354 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37142 10 6452 1 2025-11-27 01:48:28.916 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 01:48:14.757 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43992 10 6452 1 2025-11-27 01:48:28.748 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 01:48:28.636 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:48:28.834 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:48:28.748 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 01:49:15.173 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46964 10 6452 1 2025-11-27 01:46:06.756 00:05:01.785 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 01:46:06.760 00:05:01.780 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 01:50:15.541 00:00:18.149 TCP 1.101.0.1:3000 -> 23.104.0.1:53108 10 6452 1 2025-11-27 01:51:23.740 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:57202 12 10375 1 2025-11-27 01:52:24.222 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59530 10 6452 1 2025-11-27 01:53:28.262 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 01:53:28.236 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 01:53:28.133 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:53:28.179 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:53:27.966 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 01:53:24.587 00:00:10.429 TCP 1.101.0.1:3000 -> 23.104.0.1:33242 10 6452 1 2025-11-27 01:54:25.062 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57794 10 6452 1 2025-11-27 01:55:25.468 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34892 10 6452 1 2025-11-27 01:52:06.756 00:05:01.789 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 01:52:06.759 00:05:01.783 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 01:56:25.867 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47854 10 6452 1 2025-11-27 01:57:26.281 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51828 10 6452 1 2025-11-27 01:58:28.214 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 01:58:28.096 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 01:58:27.891 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:58:28.132 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 01:58:28.139 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 01:58:26.645 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50428 10 6452 1 Summary: total flows: 140, total bytes: 428769, total packets: 1026, avg bps: 944, avg pps: 0, avg bpp: 417 Time window: 2025-11-27 00:58:06 - 2025-11-27 01:58:37 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0030s User: 0.0010s Wall: 0.0014s flows/second: 101962.6 Runtime: 0.0014s