Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 14:59:04.768 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42476 10 6452 1 2025-11-27 15:00:05.179 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48564 10 6452 1 2025-11-27 15:01:05.590 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42932 10 6452 1 2025-11-27 14:58:07.084 00:05:01.874 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 14:58:07.086 00:05:01.868 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 15:02:05.994 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35844 10 6452 1 2025-11-27 15:03:06.406 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38082 10 6452 1 2025-11-27 15:03:43.897 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 15:03:43.752 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 15:03:43.763 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:03:43.815 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:03:43.814 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 15:04:06.807 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59544 10 6452 1 2025-11-27 15:05:07.207 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53268 10 6452 1 2025-11-27 15:06:07.604 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:35652 10 6452 1 2025-11-27 15:07:07.968 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35426 10 6452 1 2025-11-27 15:04:07.094 00:05:01.866 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 15:04:07.098 00:05:01.861 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 15:08:08.378 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:38016 10 6452 1 2025-11-27 15:08:44.138 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 15:08:44.168 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:08:44.065 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:08:44.128 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 15:08:44.148 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 15:09:08.817 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38830 10 6452 1 2025-11-27 15:10:09.218 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45810 10 6452 1 2025-11-27 15:11:09.625 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45338 10 6452 1 2025-11-27 15:12:10.030 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51252 10 6452 1 2025-11-27 15:13:10.433 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58878 10 6452 1 2025-11-27 15:13:44.197 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 15:13:44.146 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:13:44.187 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:13:44.254 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 15:13:44.271 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 15:10:07.097 00:05:01.863 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 15:10:07.094 00:05:01.869 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 15:14:10.811 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55048 10 6452 1 2025-11-27 15:15:11.228 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58052 10 6452 1 2025-11-27 15:16:11.624 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40512 10 6452 1 2025-11-27 15:17:12.026 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34678 10 6452 1 2025-11-27 15:18:12.426 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37742 10 6452 1 2025-11-27 15:18:44.266 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 15:18:43.931 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:18:44.267 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:18:44.002 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 15:18:44.350 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 15:19:12.833 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56148 10 6452 1 2025-11-27 15:16:07.099 00:05:01.867 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 15:16:07.097 00:05:01.873 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 15:20:13.239 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60484 10 6452 1 2025-11-27 15:21:13.644 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42066 10 6452 1 2025-11-27 15:22:14.013 00:00:10.597 TCP 1.101.0.1:3000 -> 23.104.0.1:40264 10 6452 1 2025-11-27 15:23:14.646 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:55956 10 6452 1 2025-11-27 15:23:44.289 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 15:23:44.234 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:23:44.292 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:23:44.478 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 15:23:44.374 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 15:24:15.008 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35128 10 6452 1 2025-11-27 15:25:15.412 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38802 10 6452 1 2025-11-27 15:22:07.098 00:05:01.873 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 15:22:07.100 00:05:01.869 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 15:26:15.817 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34118 10 6452 1 2025-11-27 15:27:16.182 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52130 10 6452 1 2025-11-27 15:28:16.586 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38218 10 6452 1 2025-11-27 15:28:44.468 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 15:28:44.275 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 15:28:44.242 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:28:44.386 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:28:44.466 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 15:29:16.944 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57914 10 6452 1 2025-11-27 15:30:17.315 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33576 10 6452 1 2025-11-27 15:31:17.714 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55668 10 6452 1 2025-11-27 15:28:07.097 00:05:01.875 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 15:28:07.101 00:05:01.869 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 15:32:18.118 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56398 10 6452 1 2025-11-27 15:33:18.521 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:58402 10 6452 1 2025-11-27 15:33:44.524 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 15:33:44.628 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:33:44.695 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:33:44.599 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 15:33:44.778 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 15:34:18.939 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:55154 10 6452 1 2025-11-27 15:35:19.360 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54282 10 6452 1 2025-11-27 15:36:19.772 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54982 10 6452 1 2025-11-27 15:37:20.186 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51572 10 6452 1 2025-11-27 15:34:07.099 00:05:01.875 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 15:34:07.103 00:05:01.870 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 15:38:20.584 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37472 10 6452 1 2025-11-27 15:38:44.827 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 15:38:44.773 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:38:44.829 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:38:44.821 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 15:38:44.913 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 15:39:20.945 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:35540 10 6452 1 2025-11-27 15:40:21.324 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47378 10 6452 1 2025-11-27 15:41:21.686 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49094 10 6452 1 2025-11-27 15:42:22.112 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51630 10 6452 1 2025-11-27 15:43:22.515 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45300 10 6452 1 2025-11-27 15:43:44.682 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 15:43:44.752 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 15:43:44.468 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:43:44.600 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:43:44.670 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 15:40:07.101 00:05:01.877 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 15:40:07.103 00:05:01.872 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 15:44:22.927 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:59448 10 6452 1 2025-11-27 15:45:23.364 00:00:10.707 TCP 1.101.0.1:3000 -> 23.104.0.1:33098 10 6452 1 2025-11-27 15:46:24.110 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:48754 10 6452 1 2025-11-27 15:47:24.528 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51790 10 6452 1 2025-11-27 15:48:24.897 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51562 10 6452 1 2025-11-27 15:48:45.090 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 15:48:44.733 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 15:48:44.807 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:48:45.009 00:00:00.041 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:48:44.607 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 15:49:25.306 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42942 10 6452 1 2025-11-27 15:46:07.101 00:05:01.877 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 15:46:07.105 00:05:01.872 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 15:50:25.709 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43876 10 6452 1 2025-11-27 15:51:26.107 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:52122 12 10375 1 2025-11-27 15:52:26.582 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53018 10 6452 1 2025-11-27 15:53:26.990 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40530 10 6452 1 2025-11-27 15:53:44.694 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 15:53:44.807 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:53:44.776 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:53:44.960 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 15:53:44.858 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 15:54:27.350 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:59880 10 6452 1 2025-11-27 15:55:27.766 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:58168 10 6452 1 2025-11-27 15:52:07.102 00:05:01.881 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 15:52:07.105 00:05:01.875 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 15:56:28.177 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39788 10 6452 1 2025-11-27 15:57:28.579 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39142 10 6452 1 2025-11-27 15:58:28.986 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37950 10 6452 1 2025-11-27 15:58:45.150 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 15:58:44.933 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:58:45.195 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 15:58:45.152 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 15:58:45.278 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 Summary: total flows: 140, total bytes: 420923, total packets: 1022, avg bps: 925, avg pps: 0, avg bpp: 411 Time window: 2025-11-27 14:58:07 - 2025-11-27 15:58:45 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0028s User: 0.0019s Wall: 0.0019s flows/second: 74584.3 Runtime: 0.0019s