Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 13:59:40.756 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:37178 10 6452 1 2025-11-27 14:00:41.177 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33958 10 6452 1 2025-11-27 14:01:41.582 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42586 10 6452 1 2025-11-27 13:58:07.066 00:05:01.868 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 13:58:07.069 00:05:01.863 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 14:02:41.981 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56142 10 6452 1 2025-11-27 14:03:42.762 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 14:03:42.512 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:03:42.724 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:03:42.724 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 14:03:42.805 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 14:03:42.384 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58356 10 6452 1 2025-11-27 14:04:42.790 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33936 10 6452 1 2025-11-27 14:05:43.199 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33854 10 6452 1 2025-11-27 14:06:43.558 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33832 10 6452 1 2025-11-27 14:07:43.923 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36872 10 6452 1 2025-11-27 14:04:07.069 00:05:01.866 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 14:04:07.067 00:05:01.871 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 14:08:42.751 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 14:08:42.550 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:08:42.818 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:08:42.964 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 14:08:42.901 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 14:08:44.333 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56448 12 6556 1 2025-11-27 14:09:44.735 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40098 10 6452 1 2025-11-27 14:10:45.117 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55410 10 6452 1 2025-11-27 14:11:45.479 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33252 10 6452 1 2025-11-27 14:12:45.887 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:55144 10 6452 1 2025-11-27 14:13:42.990 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 14:13:42.837 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 14:13:42.645 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:13:42.905 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:13:42.985 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 14:13:46.324 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51832 10 6452 1 2025-11-27 14:10:07.069 00:05:01.877 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 14:10:07.072 00:05:01.865 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 14:14:46.717 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:55220 10 6452 1 2025-11-27 14:15:47.146 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57976 10 6452 1 2025-11-27 14:16:47.552 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:37720 10 6452 1 2025-11-27 14:17:48.010 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43108 10 6452 1 2025-11-27 14:18:43.082 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 14:18:42.821 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:18:43.080 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:18:42.956 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 14:18:43.163 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 14:18:48.415 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60982 10 6452 1 2025-11-27 14:19:48.777 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36908 10 6452 1 2025-11-27 14:16:07.071 00:05:01.868 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 14:16:07.074 00:05:01.864 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 14:20:49.184 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60786 10 6452 1 2025-11-27 14:21:49.544 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57062 10 6452 1 2025-11-27 14:22:49.953 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49498 10 6452 1 2025-11-27 14:23:42.985 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 14:23:42.982 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 14:23:43.102 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:23:42.904 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:23:42.907 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 14:23:50.360 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33938 10 6452 1 2025-11-27 14:24:50.768 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:41176 10 6452 1 2025-11-27 14:25:51.142 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56606 10 6452 1 2025-11-27 14:22:07.072 00:05:01.869 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 14:22:07.074 00:05:01.864 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 14:26:51.548 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53292 10 6452 1 2025-11-27 14:27:51.949 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48924 10 6452 1 2025-11-27 14:28:43.294 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 14:28:43.031 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 14:28:43.079 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:28:43.211 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:28:43.263 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 14:28:52.314 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56898 10 6452 1 2025-11-27 14:29:52.721 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39064 10 6452 1 2025-11-27 14:30:53.139 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40836 10 6452 1 2025-11-27 14:31:53.543 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40916 10 6452 1 2025-11-27 14:28:07.074 00:05:01.868 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 14:28:07.076 00:05:01.863 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 14:32:53.947 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48540 10 6452 1 2025-11-27 14:33:43.658 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 14:33:43.911 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 14:33:43.389 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:33:43.576 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:33:43.578 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 14:33:54.316 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41146 10 6452 1 2025-11-27 14:34:54.718 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48076 10 6452 1 2025-11-27 14:35:55.133 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40910 10 6452 1 2025-11-27 14:36:55.544 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:52756 12 10375 1 2025-11-27 14:37:56.020 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55504 10 6452 1 2025-11-27 14:34:07.079 00:05:01.861 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 14:34:07.076 00:05:01.867 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 14:38:43.468 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 14:38:43.444 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:38:43.472 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:38:43.470 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 14:38:43.555 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 14:38:56.423 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43332 10 6452 1 2025-11-27 14:39:56.783 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33618 10 6452 1 2025-11-27 14:40:57.198 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33402 10 6452 1 2025-11-27 14:41:57.562 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37548 10 6452 1 2025-11-27 14:42:57.968 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42146 10 6452 1 2025-11-27 14:43:43.410 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 14:43:43.354 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:43:43.327 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:43:43.473 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 14:43:43.409 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 14:40:07.081 00:05:01.864 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 14:43:58.384 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47278 10 6452 1 2025-11-27 14:40:07.083 00:05:01.859 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 14:44:58.798 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51520 10 6452 1 2025-11-27 14:45:59.205 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60644 10 6452 1 2025-11-27 14:46:59.610 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:34774 10 6452 1 2025-11-27 14:47:59.986 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52350 10 6452 1 2025-11-27 14:48:43.524 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 14:48:43.549 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:48:43.517 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:48:43.514 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 14:48:43.598 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 14:49:00.391 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40520 10 6452 1 2025-11-27 14:46:07.086 00:05:01.862 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 14:46:07.081 00:05:01.867 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 14:50:00.792 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46494 10 6452 1 2025-11-27 14:51:01.191 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60798 10 6452 1 2025-11-27 14:52:01.601 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51338 10 6452 1 2025-11-27 14:53:02.004 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55860 10 6452 1 2025-11-27 14:53:43.901 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 14:53:43.814 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 14:53:43.646 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:53:43.819 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:53:43.883 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 14:54:02.403 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36130 10 6452 1 2025-11-27 14:55:02.815 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46338 10 6452 1 2025-11-27 14:52:07.084 00:05:01.872 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 14:52:07.085 00:05:01.867 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 14:56:03.214 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55670 10 6452 1 2025-11-27 14:57:03.574 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33236 10 6452 1 2025-11-27 14:58:03.978 00:00:10.741 TCP 1.101.0.1:3000 -> 23.104.0.1:43526 10 6452 1 2025-11-27 14:58:43.906 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 14:58:43.771 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 14:58:43.703 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:58:43.822 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 14:58:43.768 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 Summary: total flows: 139, total bytes: 414575, total packets: 1014, avg bps: 911, avg pps: 0, avg bpp: 408 Time window: 2025-11-27 13:58:07 - 2025-11-27 14:58:43 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0026s User: 0.0026s Wall: 0.0022s flows/second: 62608.3 Runtime: 0.0022s