Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 18:58:45.559 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42130 10 6452 1 2025-11-27 18:59:45.962 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41256 10 6452 1 2025-11-27 19:00:46.368 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40332 10 6452 1 2025-11-27 19:01:46.769 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53348 10 6452 1 2025-11-27 18:58:07.165 00:05:01.933 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 18:58:07.162 00:05:01.939 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 19:02:47.183 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45242 10 6452 1 2025-11-27 19:03:48.825 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 19:03:48.798 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:03:48.682 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:03:48.742 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:03:48.803 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:03:47.584 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54682 10 6452 1 2025-11-27 19:04:47.988 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59742 10 6452 1 2025-11-27 19:05:48.397 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45782 10 6452 1 2025-11-27 19:06:48.804 00:00:10.780 TCP 1.101.0.1:3000 -> 23.104.0.1:34218 10 6452 1 2025-11-27 19:07:49.620 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53608 10 6452 1 2025-11-27 19:04:07.164 00:05:01.936 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 19:04:07.166 00:05:01.932 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 19:08:48.792 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:08:48.929 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:08:48.870 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:08:48.975 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:08:48.952 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 19:08:50.026 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48704 10 6452 1 2025-11-27 19:09:50.437 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45104 10 6452 1 2025-11-27 19:10:50.799 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38050 10 6452 1 2025-11-27 19:11:51.204 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38822 10 6452 1 2025-11-27 19:12:51.614 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45086 10 6452 1 2025-11-27 19:13:49.000 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 19:13:48.776 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:13:48.798 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:13:48.916 00:00:00.029 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:13:48.770 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:13:52.020 00:00:10.813 TCP 1.101.0.1:3000 -> 23.104.0.1:44466 10 6452 1 2025-11-27 19:10:07.165 00:05:01.937 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 19:10:07.168 00:05:01.932 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 19:14:52.873 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53964 10 6452 1 2025-11-27 19:15:53.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41748 10 6452 1 2025-11-27 19:16:53.681 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38326 10 6452 1 2025-11-27 19:17:54.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56586 10 6452 1 2025-11-27 19:18:49.234 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 19:18:48.832 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:18:49.117 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:18:49.150 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:18:48.733 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:18:54.513 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37628 10 6452 1 2025-11-27 19:19:54.911 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55500 10 6452 1 2025-11-27 19:16:07.169 00:05:01.931 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 19:16:07.166 00:05:01.937 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 19:20:55.313 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40916 10 6452 1 2025-11-27 19:21:55.721 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58988 10 6452 1 2025-11-27 19:22:56.127 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43152 10 6452 1 2025-11-27 19:23:49.180 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:23:49.013 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:23:49.004 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:23:49.245 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:23:49.085 00:00:00.041 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 19:23:56.535 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51856 10 6452 1 2025-11-27 19:24:56.937 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40118 10 6452 1 2025-11-27 19:22:07.170 00:05:01.934 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 19:25:57.360 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41330 10 6452 1 2025-11-27 19:22:07.172 00:05:01.929 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 19:26:57.773 00:00:10.809 TCP 1.101.0.1:3000 -> 23.104.0.1:54210 10 6452 1 2025-11-27 19:27:58.621 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45390 10 6452 1 2025-11-27 19:28:49.261 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 19:28:49.225 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:28:49.049 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:28:49.177 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:28:49.224 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:28:59.026 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57674 10 6452 1 2025-11-27 19:29:59.426 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34372 10 6452 1 2025-11-27 19:30:59.826 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38938 10 6452 1 2025-11-27 19:28:07.173 00:05:01.932 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 19:32:00.189 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:35270 12 10369 1 2025-11-27 19:28:07.175 00:05:01.928 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 19:33:00.665 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49138 10 6452 1 2025-11-27 19:33:49.366 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 19:33:49.688 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:33:49.123 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:33:49.285 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:33:49.593 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:34:01.081 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50184 10 6452 1 2025-11-27 19:35:01.488 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38774 10 6452 1 2025-11-27 19:36:01.893 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:56078 10 6452 1 2025-11-27 19:37:02.274 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55232 10 6452 1 2025-11-27 19:34:07.174 00:05:01.931 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 19:34:07.177 00:05:01.926 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 19:38:02.644 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54448 10 6452 1 2025-11-27 19:38:49.440 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 19:38:49.430 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:38:49.271 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:38:49.358 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:38:49.347 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:39:03.007 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:34318 10 6452 1 2025-11-27 19:40:03.375 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44380 10 6452 1 2025-11-27 19:41:03.783 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52684 10 6452 1 2025-11-27 19:42:04.150 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41970 10 6452 1 2025-11-27 19:43:04.552 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58624 10 6452 1 2025-11-27 19:43:49.576 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 19:43:49.544 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:43:49.359 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:43:49.493 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:43:49.407 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:40:07.179 00:05:01.934 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 19:40:07.176 00:05:01.939 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 19:44:04.956 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50548 10 6452 1 2025-11-27 19:45:05.366 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51898 10 6452 1 2025-11-27 19:46:05.792 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58462 12 6556 1 2025-11-27 19:47:06.196 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:46490 12 10375 1 2025-11-27 19:48:06.683 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55894 10 6452 1 2025-11-27 19:48:49.498 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:48:49.346 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:48:49.700 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:48:49.424 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:48:49.782 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 19:49:07.110 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52158 10 6452 1 2025-11-27 19:46:07.179 00:05:01.934 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 19:46:07.176 00:05:01.940 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 19:50:07.518 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35352 10 6452 1 2025-11-27 19:51:07.926 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:52072 10 6452 1 2025-11-27 19:52:08.354 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38622 10 6452 1 2025-11-27 19:53:08.765 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:38432 10 6452 1 2025-11-27 19:53:49.885 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:53:49.613 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:53:49.940 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:53:49.881 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 19:53:50.024 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 19:54:09.191 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47588 10 6452 1 2025-11-27 19:55:09.555 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37314 10 6452 1 2025-11-27 19:52:07.182 00:05:01.933 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 19:52:07.178 00:05:01.939 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 19:56:09.919 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39148 10 6452 1 2025-11-27 19:57:10.322 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:45820 10 6452 1 2025-11-27 19:58:10.723 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60362 10 6452 1 2025-11-27 19:58:50.243 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 19:58:50.068 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 19:58:49.911 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:58:50.161 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 19:58:49.936 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 Summary: total flows: 140, total bytes: 424944, total packets: 1026, avg bps: 933, avg pps: 0, avg bpp: 414 Time window: 2025-11-27 18:58:07 - 2025-11-27 19:58:50 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0044s User: 0.0011s Wall: 0.0012s flows/second: 115979.2 Runtime: 0.0012s