Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 03:59:18.530 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60206 10 6661 1 2025-11-27 04:00:18.931 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:49216 10 6661 1 2025-11-27 04:01:19.359 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:41840 10 6661 1 2025-11-27 03:58:06.822 00:05:01.781 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 03:58:06.824 00:05:01.776 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 04:02:19.726 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39406 10 6661 1 2025-11-27 04:03:30.544 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 04:03:30.651 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 04:03:30.623 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:03:30.463 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:03:30.544 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 04:03:20.109 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33504 10 6661 1 2025-11-27 04:04:20.509 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50758 10 6661 1 2025-11-27 04:05:20.919 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49034 10 6661 1 2025-11-27 04:06:21.319 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60378 10 6661 1 2025-11-27 04:07:21.688 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59528 10 6661 1 2025-11-27 04:04:06.825 00:05:01.777 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 04:04:06.822 00:05:01.782 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 04:08:30.866 00:00:00.015 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 04:08:30.725 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 04:08:30.690 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:08:30.776 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:08:30.771 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 04:08:22.104 00:00:10.654 TCP 1.101.0.1:3000 -> 23.104.0.1:44572 10 6661 1 2025-11-27 04:09:22.793 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53808 10 6661 1 2025-11-27 04:10:23.200 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59826 10 6661 1 2025-11-27 04:11:23.602 00:00:10.454 TCP 1.101.0.1:3000 -> 23.104.0.1:35194 13 10427 1 2025-11-27 04:12:24.112 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46744 10 6452 1 2025-11-27 04:13:31.317 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 04:13:31.578 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 04:13:31.140 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:13:31.234 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:13:31.244 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 04:13:24.478 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:60992 10 6452 1 2025-11-27 04:10:06.826 00:05:01.778 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 04:10:06.824 00:05:01.784 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 04:14:24.835 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:36258 10 6452 1 2025-11-27 04:15:25.264 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34044 10 6452 1 2025-11-27 04:16:25.667 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57576 10 6452 1 2025-11-27 04:17:26.098 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60556 10 6452 1 2025-11-27 04:18:30.963 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 04:18:30.921 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 04:18:30.794 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:18:30.881 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:18:30.840 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 04:18:26.498 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49546 10 6452 1 2025-11-27 04:19:26.907 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:57142 10 6452 1 2025-11-27 04:16:06.824 00:05:01.790 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 04:16:06.828 00:05:01.785 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 04:20:27.283 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34464 10 6452 1 2025-11-27 04:21:27.700 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:42172 10 6452 1 2025-11-27 04:22:28.098 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60522 10 6452 1 2025-11-27 04:23:31.602 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 04:23:31.185 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:23:31.438 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:23:31.600 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 04:23:31.520 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 04:23:28.502 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57160 10 6452 1 2025-11-27 04:24:28.917 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57344 10 6452 1 2025-11-27 04:25:29.325 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46346 10 6452 1 2025-11-27 04:22:06.829 00:05:01.785 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 04:22:06.825 00:05:01.790 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 04:26:29.741 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58812 10 6452 1 2025-11-27 04:27:30.147 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:59050 10 6452 1 2025-11-27 04:28:31.068 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 04:28:31.084 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 04:28:31.056 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:28:30.985 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:28:30.987 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 04:28:30.510 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35332 10 6452 1 2025-11-27 04:29:30.907 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53612 12 6556 1 2025-11-27 04:30:31.311 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54620 10 6452 1 2025-11-27 04:31:31.716 00:00:10.506 TCP 1.101.0.1:3000 -> 23.104.0.1:60026 14 10479 1 2025-11-27 04:28:06.836 00:05:01.778 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 04:28:06.833 00:05:01.783 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 04:32:32.260 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59708 10 6452 1 2025-11-27 04:33:31.211 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 04:33:31.120 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 04:33:31.154 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:33:31.128 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:33:31.120 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 04:33:32.663 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39416 10 6452 1 2025-11-27 04:34:33.098 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47600 10 6452 1 2025-11-27 04:35:33.500 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60930 10 6452 1 2025-11-27 04:36:33.903 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51456 10 6452 1 2025-11-27 04:37:34.313 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36108 10 6452 1 2025-11-27 04:34:06.840 00:05:01.775 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 04:34:06.837 00:05:01.780 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 04:38:31.270 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 04:38:31.108 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:38:31.336 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:38:31.377 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 04:38:31.418 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 04:38:34.714 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43636 10 6452 1 2025-11-27 04:39:35.103 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36432 10 6452 1 2025-11-27 04:40:35.510 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:54360 10 6452 1 2025-11-27 04:41:35.905 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:40120 12 10369 1 2025-11-27 04:42:36.389 00:00:10.962 TCP 1.101.0.1:3000 -> 23.104.0.1:51472 10 6452 1 2025-11-27 04:43:31.624 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 04:43:31.560 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:43:31.512 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:43:31.510 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 04:43:31.594 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 04:43:37.388 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50636 10 6452 1 2025-11-27 04:40:06.840 00:05:01.777 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 04:40:06.837 00:05:01.782 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 04:44:37.785 00:00:11.708 TCP 1.101.0.1:3000 -> 23.104.0.1:48286 10 6452 1 2025-11-27 04:45:39.535 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52154 10 6452 1 2025-11-27 04:46:39.934 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:52406 10 6452 1 2025-11-27 04:47:40.362 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38456 10 6452 1 2025-11-27 04:48:31.668 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 04:48:31.320 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:48:31.386 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:48:31.665 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 04:48:31.468 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 04:48:40.766 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:39506 10 6452 1 2025-11-27 04:49:41.139 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41224 10 6452 1 2025-11-27 04:46:06.842 00:05:01.778 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 04:46:06.841 00:05:01.784 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 04:50:41.543 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33034 10 6452 1 2025-11-27 04:51:41.945 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:43600 12 10369 1 2025-11-27 04:52:42.386 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52800 10 6452 1 2025-11-27 04:53:31.675 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 04:53:31.590 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 04:53:31.456 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:53:31.591 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:53:31.430 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 04:53:42.775 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55534 10 6452 1 2025-11-27 04:54:43.189 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40374 10 6452 1 2025-11-27 04:55:43.556 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46642 10 6452 1 2025-11-27 04:52:06.844 00:05:01.778 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 04:52:06.842 00:05:01.784 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 04:56:43.955 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:54894 12 10369 1 2025-11-27 04:57:44.447 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52498 10 6452 1 2025-11-27 04:58:31.817 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 04:58:31.533 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:58:31.904 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 04:58:31.812 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 04:58:31.987 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 139, total bytes: 432913, total packets: 1025, avg bps: 955, avg pps: 0, avg bpp: 422 Time window: 2025-11-27 03:58:06 - 2025-11-27 04:58:32 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0041s User: 0.0010s Wall: 0.0016s flows/second: 88200.9 Runtime: 0.0016s