Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 19:59:11.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33342 10 6452 1 2025-11-27 20:00:11.516 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56818 10 6452 1 2025-11-27 20:01:11.924 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:48978 10 6452 1 2025-11-27 19:58:07.181 00:05:01.938 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 19:58:07.180 00:05:01.943 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 20:02:12.359 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45806 10 6452 1 2025-11-27 20:03:12.762 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46184 10 6452 1 2025-11-27 20:03:49.902 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 20:03:49.794 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 20:03:49.830 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:03:49.820 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:03:49.899 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 20:04:13.130 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37060 10 6452 1 2025-11-27 20:05:13.491 00:00:10.697 TCP 1.101.0.1:3000 -> 23.104.0.1:58948 10 6452 1 2025-11-27 20:06:14.229 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60914 10 6452 1 2025-11-27 20:07:14.592 00:00:11.481 TCP 1.101.0.1:3000 -> 23.104.0.1:49896 10 6452 1 2025-11-27 20:04:07.183 00:05:01.938 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 20:04:07.181 00:05:01.943 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 20:08:16.114 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59354 10 6452 1 2025-11-27 20:08:50.032 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 20:08:49.951 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 20:08:50.065 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:08:49.950 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:08:50.162 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 20:09:16.518 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52790 10 6452 1 2025-11-27 20:10:16.913 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37076 10 6452 1 2025-11-27 20:11:17.321 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:34134 12 10375 1 2025-11-27 20:12:17.798 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38204 10 6452 1 2025-11-27 20:13:18.204 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50390 10 6452 1 2025-11-27 20:13:50.234 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 20:13:49.945 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 20:13:50.114 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:13:50.152 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:13:50.059 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 20:10:07.183 00:05:01.945 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 20:10:07.186 00:05:01.940 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 20:14:18.607 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48616 10 6452 1 2025-11-27 20:15:19.011 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50200 10 6452 1 2025-11-27 20:16:19.411 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40580 10 6452 1 2025-11-27 20:17:19.820 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60854 10 6452 1 2025-11-27 20:18:20.227 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53144 10 6452 1 2025-11-27 20:18:50.125 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 20:18:49.921 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:18:50.128 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:18:50.136 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 20:18:50.212 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 20:19:20.638 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58896 10 6452 1 2025-11-27 20:16:07.187 00:05:01.940 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 20:16:07.185 00:05:01.945 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 20:20:21.070 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54866 10 6452 1 2025-11-27 20:21:21.433 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47080 10 6452 1 2025-11-27 20:22:21.844 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:49586 10 6452 1 2025-11-27 20:23:22.277 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45224 10 6452 1 2025-11-27 20:23:50.323 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 20:23:50.378 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 20:23:50.240 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:23:50.241 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:23:50.239 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 20:24:22.637 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35674 10 6452 1 2025-11-27 20:25:23.057 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:33250 10 6452 1 2025-11-27 20:22:07.185 00:05:01.948 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 20:22:07.188 00:05:01.943 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 20:26:23.474 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53652 10 6452 1 2025-11-27 20:27:23.877 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33960 10 6452 1 2025-11-27 20:28:24.286 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:54784 10 6452 1 2025-11-27 20:28:50.394 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 20:28:50.467 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 20:28:50.157 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:28:50.310 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:28:50.310 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 20:29:24.654 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58154 10 6452 1 2025-11-27 20:30:25.069 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33920 10 6452 1 2025-11-27 20:31:25.434 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59738 10 6452 1 2025-11-27 20:28:07.191 00:05:01.957 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 20:28:07.189 00:05:01.962 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 20:32:25.835 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:39684 10 6452 1 2025-11-27 20:33:26.261 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54046 10 6452 1 2025-11-27 20:33:50.729 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 20:33:50.578 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 20:33:50.547 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:33:50.646 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:33:50.515 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 20:34:26.666 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60836 10 6452 1 2025-11-27 20:35:27.092 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34924 10 6452 1 2025-11-27 20:36:27.491 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:52640 12 10369 1 2025-11-27 20:37:27.930 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:44266 10 6452 1 2025-11-27 20:34:07.197 00:05:01.956 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 20:34:07.199 00:05:01.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 20:38:28.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43662 10 6452 1 2025-11-27 20:38:50.854 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 20:38:50.695 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 20:38:50.718 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:38:50.771 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:38:50.706 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 20:39:28.760 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41750 10 6452 1 2025-11-27 20:40:29.176 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52140 10 6452 1 2025-11-27 20:41:29.578 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:46714 12 10375 1 2025-11-27 20:42:30.015 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41460 10 6452 1 2025-11-27 20:43:30.413 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:42268 10 6452 1 2025-11-27 20:43:50.790 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 20:43:50.614 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 20:43:50.730 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:43:50.706 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:43:50.769 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 20:40:07.197 00:05:01.957 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 20:40:07.200 00:05:01.952 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 20:44:30.763 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:52544 10 6452 1 2025-11-27 20:45:31.137 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55852 10 6452 1 2025-11-27 20:46:31.538 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37460 10 6452 1 2025-11-27 20:47:31.942 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:51060 10 6452 1 2025-11-27 20:48:32.373 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54192 10 6452 1 2025-11-27 20:48:50.892 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 20:48:50.658 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:48:50.921 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:48:50.781 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 20:48:51.004 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 20:49:32.800 00:00:10.624 TCP 1.101.0.1:3000 -> 23.104.0.1:46156 10 6452 1 2025-11-27 20:46:07.197 00:05:01.961 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 20:46:07.200 00:05:01.956 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 20:50:33.466 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53478 10 6452 1 2025-11-27 20:51:33.865 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:48700 12 10375 1 2025-11-27 20:52:34.345 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53594 10 6452 1 2025-11-27 20:53:34.708 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44042 10 6452 1 2025-11-27 20:53:50.842 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 20:53:50.605 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:53:50.766 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:53:50.840 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 20:53:50.848 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 20:54:35.114 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37586 10 6452 1 2025-11-27 20:55:35.477 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:37398 10 6452 1 2025-11-27 20:52:07.202 00:05:01.955 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 20:52:07.200 00:05:01.959 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 20:56:35.831 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:60842 10 6452 1 2025-11-27 20:57:36.262 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47168 10 6452 1 Summary: total flows: 134, total bytes: 424974, total packets: 1003, avg bps: 949, avg pps: 0, avg bpp: 423 Time window: 2025-11-27 19:58:07 - 2025-11-27 20:57:46 Total flows processed: 134, passed: 134, Blocks skipped: 0, Bytes read: 14000 Sys: 0.0021s User: 0.0032s Wall: 0.0021s flows/second: 65080.7 Runtime: 0.0021s