Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 09:58:52.918 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59626 10 6452 1 2025-11-27 09:59:53.284 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36474 10 6452 1 2025-11-27 10:00:53.693 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:57586 10 6452 1 2025-11-27 10:01:54.105 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37876 10 6452 1 2025-11-27 09:58:06.942 00:05:01.820 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 09:58:06.941 00:05:01.825 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 10:02:54.521 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35218 10 6452 1 2025-11-27 10:03:37.880 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 10:03:37.907 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 10:03:37.655 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:03:37.797 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:03:37.860 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 10:03:54.931 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53928 10 6452 1 2025-11-27 10:04:55.343 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43788 10 6452 1 2025-11-27 10:05:55.747 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54690 10 6452 1 2025-11-27 10:06:56.147 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55740 10 6452 1 2025-11-27 10:04:06.943 00:05:01.827 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 10:07:56.554 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:36046 10 6452 1 2025-11-27 10:04:06.945 00:05:01.822 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 10:08:38.287 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 10:08:38.356 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:08:38.274 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:08:38.500 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 10:08:38.356 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 10:08:56.913 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39878 10 6452 1 2025-11-27 10:09:57.317 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37888 10 6452 1 2025-11-27 10:10:57.719 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42150 10 6452 1 2025-11-27 10:11:58.109 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38404 10 6452 1 2025-11-27 10:12:58.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48704 10 6452 1 2025-11-27 10:13:38.153 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 10:13:37.969 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 10:13:37.972 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:13:38.071 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:13:38.073 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 10:13:58.920 00:00:10.822 TCP 1.101.0.1:3000 -> 23.104.0.1:34212 10 6452 1 2025-11-27 10:10:06.945 00:05:01.825 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 10:10:06.943 00:05:01.830 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 10:14:59.808 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34002 10 6452 1 2025-11-27 10:16:00.210 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:57986 10 6452 1 2025-11-27 10:17:00.613 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:33920 10 6452 1 2025-11-27 10:18:00.982 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:59096 10 6452 1 2025-11-27 10:18:38.525 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 10:18:38.610 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 10:18:38.395 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:18:38.443 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:18:38.512 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 10:19:01.359 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:47912 10 6452 1 2025-11-27 10:16:06.947 00:05:01.826 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 10:16:06.944 00:05:01.830 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 10:20:01.758 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:34200 10 6452 1 2025-11-27 10:21:02.185 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42240 10 6452 1 2025-11-27 10:22:02.588 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:43852 12 10369 1 2025-11-27 10:23:03.105 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56078 10 6452 1 2025-11-27 10:23:38.155 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 10:23:37.991 00:00:00.053 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:23:38.149 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:23:38.154 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 10:23:38.231 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 10:24:03.507 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33718 10 6452 1 2025-11-27 10:25:03.917 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58532 10 6452 1 2025-11-27 10:22:06.947 00:05:01.830 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 10:22:06.951 00:05:01.825 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 10:26:04.316 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45374 10 6452 1 2025-11-27 10:27:04.719 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53984 10 6452 1 2025-11-27 10:28:05.142 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35998 10 6452 1 2025-11-27 10:28:38.465 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 10:28:38.420 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:28:38.348 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:28:38.419 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 10:28:38.430 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 10:29:05.548 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54740 10 6452 1 2025-11-27 10:30:05.955 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51984 10 6452 1 2025-11-27 10:31:06.362 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38028 10 6452 1 2025-11-27 10:28:06.953 00:05:01.825 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 10:28:06.950 00:05:01.829 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 10:32:06.728 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49642 10 6452 1 2025-11-27 10:33:07.137 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33118 10 6452 1 2025-11-27 10:33:38.625 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 10:33:38.542 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 10:33:38.420 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:33:38.542 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:33:38.542 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 10:34:07.540 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52134 10 6452 1 2025-11-27 10:35:07.902 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38642 10 6452 1 2025-11-27 10:36:08.310 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50798 10 6452 1 2025-11-27 10:37:08.719 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38008 10 6452 1 2025-11-27 10:34:06.955 00:05:01.823 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 10:34:06.953 00:05:01.828 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 10:38:09.118 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50684 10 6452 1 2025-11-27 10:38:38.646 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 10:38:38.523 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 10:38:38.356 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:38:38.565 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:38:38.500 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 10:39:09.524 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45302 10 6452 1 2025-11-27 10:40:09.924 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:35328 10 6452 1 2025-11-27 10:41:10.358 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46366 10 6452 1 2025-11-27 10:42:10.762 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:38602 10 6452 1 2025-11-27 10:43:11.189 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50982 10 6452 1 2025-11-27 10:43:38.700 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 10:43:38.612 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 10:43:38.563 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:43:38.618 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:43:38.809 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 10:40:06.957 00:05:01.823 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 10:40:06.954 00:05:01.828 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 10:44:11.551 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41558 10 6452 1 2025-11-27 10:45:11.955 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52670 10 6452 1 2025-11-27 10:46:12.324 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36406 10 6452 1 2025-11-27 10:47:12.691 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49452 10 6452 1 2025-11-27 10:48:13.107 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51358 10 6452 1 2025-11-27 10:48:38.793 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 10:48:38.636 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 10:48:38.574 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:48:38.711 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:48:38.707 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 10:49:13.471 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36560 10 6452 1 2025-11-27 10:46:06.956 00:05:01.824 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 10:46:06.955 00:05:01.829 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 10:50:13.834 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33930 10 6452 1 2025-11-27 10:51:14.247 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48132 10 6452 1 2025-11-27 10:52:14.609 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56698 10 6452 1 2025-11-27 10:53:15.021 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37292 10 6452 1 2025-11-27 10:53:39.284 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 10:53:39.192 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 10:53:38.659 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:53:39.202 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:53:38.910 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 10:54:15.436 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56710 10 6452 1 2025-11-27 10:55:15.833 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:54446 10 6452 1 2025-11-27 10:52:06.957 00:05:01.826 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 10:52:06.955 00:05:01.831 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 10:56:16.250 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60118 10 6452 1 2025-11-27 10:57:16.654 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39216 10 6452 1 2025-11-27 10:58:17.068 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60958 10 6452 1 2025-11-27 10:58:39.092 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 10:58:38.908 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:58:38.848 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 10:58:38.746 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 10:58:38.931 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 140, total bytes: 420917, total packets: 1022, avg bps: 927, avg pps: 0, avg bpp: 411 Time window: 2025-11-27 09:58:06 - 2025-11-27 10:58:39 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0036s User: 0.0018s Wall: 0.0020s flows/second: 71279.7 Runtime: 0.0020s