Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 20:58:36.624 00:00:10.425 TCP 1.101.0.1:3000 -> 23.104.0.1:53086 10 6452 1 2025-11-27 20:58:50.841 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:58:50.918 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 20:58:50.983 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 20:58:50.987 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 20:58:51.071 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 20:59:37.108 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53390 10 6452 1 2025-11-27 21:00:37.512 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51416 10 6452 1 2025-11-27 21:01:37.915 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60254 10 6452 1 2025-11-27 20:58:07.208 00:05:01.949 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 20:58:07.206 00:05:01.954 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 21:02:38.320 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60256 10 6452 1 2025-11-27 21:03:50.885 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:03:38.723 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37838 10 6452 1 2025-11-27 21:03:50.964 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:03:50.875 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 21:03:51.049 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 21:03:51.188 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 21:04:39.105 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58906 10 6452 1 2025-11-27 21:05:39.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45990 10 6452 1 2025-11-27 21:06:39.921 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46640 10 6452 1 2025-11-27 21:07:40.313 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33206 10 6452 1 2025-11-27 21:04:07.207 00:05:01.956 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 21:04:07.209 00:05:01.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 21:08:51.163 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 21:08:51.116 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:08:51.281 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:08:51.163 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 21:08:40.720 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44826 10 6452 1 2025-11-27 21:08:51.365 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 21:09:41.137 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58978 10 6452 1 2025-11-27 21:10:41.545 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44286 10 6452 1 2025-11-27 21:11:41.960 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42490 10 6452 1 2025-11-27 21:12:42.362 00:00:11.102 TCP 1.101.0.1:3000 -> 23.104.0.1:55916 10 6452 1 2025-11-27 21:13:51.404 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 21:13:51.330 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 21:13:51.166 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:13:51.322 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:13:51.331 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 21:13:43.497 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52404 10 6452 1 2025-11-27 21:10:07.216 00:05:01.949 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 21:10:07.219 00:05:01.943 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 21:14:43.897 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59366 10 6452 1 2025-11-27 21:15:44.312 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34240 10 6452 1 2025-11-27 21:16:44.685 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:36590 12 10584 1 2025-11-27 21:17:45.140 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:33042 10 6661 1 2025-11-27 21:18:51.542 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 21:18:51.463 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 21:18:45.501 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41402 10 6661 1 2025-11-27 21:18:51.423 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:18:51.460 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:18:51.411 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 21:19:45.907 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34896 12 6765 1 2025-11-27 21:16:07.219 00:05:01.946 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 21:16:07.221 00:05:01.942 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 21:20:46.314 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45582 10 6661 1 2025-11-27 21:21:46.719 00:00:10.460 TCP 1.101.0.1:3000 -> 23.104.0.1:41410 12 10793 1 2025-11-27 21:22:47.211 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33144 10 6870 1 2025-11-27 21:23:51.464 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 21:23:51.439 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 21:23:51.128 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:23:51.382 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:23:51.437 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 21:23:47.616 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40638 10 6870 1 2025-11-27 21:24:47.981 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57566 10 6870 1 2025-11-27 21:25:48.388 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58750 10 6870 1 2025-11-27 21:22:07.220 00:05:01.948 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 21:22:07.222 00:05:01.944 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 21:26:48.794 00:00:10.937 TCP 1.101.0.1:3000 -> 23.104.0.1:39992 10 6870 1 2025-11-27 21:27:49.765 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52462 10 6870 1 2025-11-27 21:28:51.665 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 21:28:51.664 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 21:28:51.335 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:28:51.583 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:28:51.516 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 21:28:50.173 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35572 10 6870 1 2025-11-27 21:29:50.581 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49128 10 6870 1 2025-11-27 21:30:50.950 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40026 10 6870 1 2025-11-27 21:31:51.362 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51504 10 6870 1 2025-11-27 21:28:07.222 00:05:01.961 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 21:28:07.225 00:05:01.956 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 21:32:51.727 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55130 10 6870 1 2025-11-27 21:33:52.660 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 21:33:52.578 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 21:33:52.519 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:33:52.578 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:33:52.506 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 21:33:52.145 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60684 10 6870 1 2025-11-27 21:34:52.550 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:44658 10 6870 1 2025-11-27 21:35:52.914 00:00:11.109 TCP 1.101.0.1:3000 -> 23.104.0.1:43878 10 6870 1 2025-11-27 21:36:54.075 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:43584 10 6870 1 2025-11-27 21:37:54.442 00:00:10.480 TCP 1.101.0.1:3000 -> 23.104.0.1:53784 10 6870 1 2025-11-27 21:34:07.226 00:05:01.954 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 21:34:07.224 00:05:01.960 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 21:38:51.841 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 21:38:51.822 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 21:38:51.780 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:38:51.759 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:38:51.862 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 21:38:54.965 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:55912 10 6870 1 2025-11-27 21:39:55.373 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44610 10 6870 1 2025-11-27 21:40:55.772 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58484 10 6870 1 2025-11-27 21:41:56.141 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42694 10 6870 1 2025-11-27 21:42:56.544 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56988 10 6870 1 2025-11-27 21:43:51.960 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 21:43:51.923 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 21:43:51.848 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:43:51.877 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:43:51.943 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 21:40:07.224 00:05:01.960 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 21:43:56.954 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44864 10 6870 1 2025-11-27 21:40:07.228 00:05:01.955 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 21:44:57.319 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45584 10 6870 1 2025-11-27 21:45:57.725 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42252 10 6870 1 2025-11-27 21:46:58.133 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38380 10 6870 1 2025-11-27 21:47:58.496 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40088 10 6870 1 2025-11-27 21:48:51.796 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 21:48:51.989 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:48:52.128 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:48:51.979 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 21:48:52.211 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 21:48:58.903 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41812 10 6870 1 2025-11-27 21:46:07.234 00:05:01.955 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 21:49:59.304 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56780 10 6870 1 2025-11-27 21:46:07.237 00:05:01.950 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 21:50:59.702 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59196 10 6870 1 2025-11-27 21:52:00.097 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:42566 10 6870 1 2025-11-27 21:53:00.459 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37660 10 6870 1 2025-11-27 21:53:52.393 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 21:53:52.394 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 21:53:52.253 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:53:52.309 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:53:52.355 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 21:54:00.859 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56278 10 6870 1 2025-11-27 21:55:01.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32810 10 6870 1 2025-11-27 21:52:07.237 00:05:01.954 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 21:52:07.240 00:05:01.949 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 21:56:01.680 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33892 10 6870 1 2025-11-27 21:57:02.113 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40650 10 6870 1 2025-11-27 21:58:02.519 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59062 10 6870 1 Summary: total flows: 140, total bytes: 441461, total packets: 1026, avg bps: 979, avg pps: 0, avg bpp: 430 Time window: 2025-11-27 20:58:07 - 2025-11-27 21:58:12 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0031s User: 0.0023s Wall: 0.0013s flows/second: 103782.7 Runtime: 0.0014s