Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 04:59:10.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58862 10 6452 1 2025-11-29 04:59:29.479 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 04:59:29.527 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 04:59:29.477 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 04:59:29.412 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 04:59:29.396 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:00:10.526 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51794 10 6452 1 2025-11-29 05:01:10.930 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:36002 10 6452 1 2025-11-29 04:58:07.917 00:05:02.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:02:11.358 00:00:11.085 TCP 1.101.0.1:3000 -> 23.104.0.1:57606 10 6452 1 2025-11-29 04:59:07.921 00:05:02.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:03:12.483 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55736 10 6452 1 2025-11-29 05:04:12.887 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:46652 10 6452 1 2025-11-29 05:04:29.667 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:04:29.707 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:04:29.646 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:04:29.635 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:04:29.585 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:05:13.267 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43278 10 6452 1 2025-11-29 05:06:13.671 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54012 10 6452 1 2025-11-29 05:07:14.105 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36166 10 6452 1 2025-11-29 05:04:07.921 00:05:02.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:08:14.510 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59088 10 6452 1 2025-11-29 05:05:07.923 00:05:02.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:09:29.674 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:09:29.682 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:09:29.808 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:09:29.515 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:09:29.592 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:09:14.908 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49880 10 6452 1 2025-11-29 05:10:15.315 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53082 10 6452 1 2025-11-29 05:11:15.718 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49248 10 6452 1 2025-11-29 05:12:16.121 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:34736 12 10369 1 2025-11-29 05:13:16.598 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42936 10 6452 1 2025-11-29 05:10:07.920 00:05:02.148 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:14:17.009 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55414 10 6452 1 2025-11-29 05:14:29.792 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:14:30.269 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:14:30.086 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:14:30.189 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:14:30.186 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:11:07.923 00:05:02.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:15:17.412 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60396 10 6452 1 2025-11-29 05:16:17.815 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45844 10 6452 1 2025-11-29 05:17:18.218 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59068 10 6452 1 2025-11-29 05:18:18.623 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46556 10 6452 1 2025-11-29 05:19:29.971 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:19:29.819 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:19:29.947 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:19:29.768 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:19:19.027 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45730 10 6452 1 2025-11-29 05:19:29.889 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:16:07.921 00:05:02.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:20:19.426 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40956 10 6452 1 2025-11-29 05:17:07.924 00:05:02.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:21:19.832 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52042 10 6452 1 2025-11-29 05:22:20.231 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54938 10 6452 1 2025-11-29 05:23:20.644 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:53450 10 6452 1 2025-11-29 05:24:29.922 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:24:29.914 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:24:29.840 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:24:30.095 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:24:21.075 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53280 10 6452 1 2025-11-29 05:24:30.101 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:25:21.483 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49046 10 6452 1 2025-11-29 05:22:07.922 00:05:02.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:26:21.886 00:00:11.177 TCP 1.101.0.1:3000 -> 23.104.0.1:42020 10 6452 1 2025-11-29 05:23:07.925 00:05:02.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:27:23.108 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48840 10 6452 1 2025-11-29 05:28:23.478 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:33238 10 6452 1 2025-11-29 05:29:29.922 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:29:30.048 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:29:30.153 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:29:23.896 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53840 12 6556 1 2025-11-29 05:29:30.048 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:29:30.131 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:30:24.309 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37826 10 6452 1 2025-11-29 05:31:24.706 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39240 10 6452 1 2025-11-29 05:28:07.924 00:05:02.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:32:25.103 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51676 10 6452 1 2025-11-29 05:29:07.928 00:05:02.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:33:25.511 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41286 10 6452 1 2025-11-29 05:34:30.241 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:34:30.237 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:34:30.161 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:34:30.197 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:34:30.159 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:34:25.913 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47438 10 6452 1 2025-11-29 05:35:26.314 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35646 10 6452 1 2025-11-29 05:36:26.722 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51982 10 6452 1 2025-11-29 05:37:27.105 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33864 10 6452 1 2025-11-29 05:34:07.926 00:05:02.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:38:27.502 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:37118 10 6452 1 2025-11-29 05:35:07.929 00:05:02.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:39:30.506 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:39:30.459 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:39:30.424 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:39:30.101 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:39:30.425 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:39:27.861 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51848 10 6452 1 2025-11-29 05:40:28.272 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34670 10 6452 1 2025-11-29 05:41:28.685 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38618 10 6452 1 2025-11-29 05:42:29.102 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57184 10 6452 1 2025-11-29 05:43:29.501 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36122 10 6452 1 2025-11-29 05:40:07.928 00:05:02.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:44:30.443 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:44:30.307 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:44:30.252 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:44:30.311 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:44:30.395 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:44:29.904 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54098 10 6452 1 2025-11-29 05:41:07.932 00:05:02.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:45:30.307 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52348 10 6452 1 2025-11-29 05:46:30.708 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57290 10 6452 1 2025-11-29 05:47:31.121 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50138 10 6452 1 2025-11-29 05:48:31.527 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38360 10 6452 1 2025-11-29 05:49:30.849 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:49:30.767 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:49:30.767 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:49:30.293 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:49:30.767 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:49:31.930 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:57908 10 6452 1 2025-11-29 05:46:07.931 00:05:02.154 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:50:32.358 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51132 10 6452 1 2025-11-29 05:47:07.934 00:05:02.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:51:32.765 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56686 10 6452 1 2025-11-29 05:52:33.190 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57300 10 6452 1 2025-11-29 05:53:33.593 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38706 10 6452 1 2025-11-29 05:54:30.846 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:54:30.766 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:54:30.825 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:54:30.715 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:54:30.765 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:54:33.996 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46968 10 6452 1 2025-11-29 05:55:34.374 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48174 10 6452 1 2025-11-29 05:52:07.930 00:05:02.155 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:56:34.782 00:00:10.886 TCP 1.101.0.1:3000 -> 23.104.0.1:45216 10 6452 1 2025-11-29 05:53:07.933 00:05:02.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:57:35.706 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34754 10 6452 1 2025-11-29 05:58:36.116 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53654 10 6452 1 Summary: total flows: 140, total bytes: 421021, total packets: 1024, avg bps: 925, avg pps: 0, avg bpp: 411 Time window: 2025-11-29 04:58:07 - 2025-11-29 05:58:46 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0046s User: 0.0019s Wall: 0.0028s flows/second: 50853.3 Runtime: 0.0028s