Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 15:59:05.170 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53864 10 6452 1 2025-11-29 15:59:42.806 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 15:59:42.549 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 15:59:42.707 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 15:59:42.652 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 15:59:42.723 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:00:05.587 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57658 10 6452 1 2025-11-29 16:01:06.001 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34760 10 6452 1 2025-11-29 15:58:08.167 00:05:02.104 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 16:02:06.406 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:49170 10 6452 1 2025-11-29 15:58:10.268 00:05:57.906 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 16:03:06.763 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:59530 10 6452 1 2025-11-29 16:04:07.181 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39438 10 6452 1 2025-11-29 16:04:42.775 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 16:04:42.996 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 16:04:42.828 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 16:04:42.632 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:04:42.692 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:05:07.547 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50716 10 6452 1 2025-11-29 16:06:07.960 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60276 10 6452 1 2025-11-29 16:07:08.334 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49710 10 6452 1 2025-11-29 16:04:08.171 00:05:02.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 16:08:08.743 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54402 10 6452 1 2025-11-29 16:04:10.270 00:05:57.905 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 16:09:09.156 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32802 10 6452 1 2025-11-29 16:09:43.062 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 16:09:43.139 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 16:09:42.989 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:09:43.068 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:09:43.152 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 16:10:09.565 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34430 10 6452 1 2025-11-29 16:11:09.967 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37706 10 6452 1 2025-11-29 16:12:10.371 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45240 10 6452 1 2025-11-29 16:13:10.777 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53420 10 6452 1 2025-11-29 16:10:08.172 00:05:02.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 16:14:11.186 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:53412 10 6452 1 2025-11-29 16:14:43.064 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 16:14:42.980 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 16:14:43.178 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 16:14:43.012 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:14:42.980 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:10:10.270 00:05:57.905 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 16:15:11.610 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52248 10 6452 1 2025-11-29 16:16:12.019 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46974 10 6452 1 2025-11-29 16:17:12.419 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49796 10 6452 1 2025-11-29 16:18:12.822 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52070 10 6452 1 2025-11-29 16:19:13.228 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60244 10 6452 1 2025-11-29 16:19:43.196 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 16:19:43.198 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 16:19:43.080 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:19:43.280 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:19:43.362 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 16:16:08.172 00:05:02.103 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 16:20:13.633 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53808 10 6452 1 2025-11-29 16:16:10.272 00:05:57.907 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 16:21:14.038 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59178 10 6452 1 2025-11-29 16:22:14.443 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52924 10 6452 1 2025-11-29 16:23:14.802 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:43940 10 6452 1 2025-11-29 16:24:15.175 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51172 10 6452 1 2025-11-29 16:24:43.334 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 16:24:43.253 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:24:43.083 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 16:24:43.188 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 16:24:43.199 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:25:15.538 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33468 10 6452 1 2025-11-29 16:22:08.176 00:05:02.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 16:26:15.903 00:00:10.864 TCP 1.101.0.1:3000 -> 23.104.0.1:57532 10 6452 1 2025-11-29 16:22:10.273 00:05:57.907 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 16:27:16.808 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49072 10 6452 1 2025-11-29 16:28:17.217 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39066 10 6452 1 2025-11-29 16:29:17.622 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59652 10 6452 1 2025-11-29 16:29:43.736 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 16:29:43.739 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 16:29:43.794 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:29:43.290 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:29:43.373 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 16:30:18.030 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59130 10 6452 1 2025-11-29 16:31:18.432 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50626 10 6452 1 2025-11-29 16:28:08.177 00:05:02.105 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 16:32:18.840 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:45592 10 6452 1 2025-11-29 16:28:10.275 00:05:57.907 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 16:33:19.278 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40638 10 6452 1 2025-11-29 16:34:19.678 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37140 10 6452 1 2025-11-29 16:34:43.659 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 16:34:43.606 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 16:34:43.372 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:34:43.604 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:34:43.686 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 16:35:20.112 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45916 10 6452 1 2025-11-29 16:36:20.515 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53992 10 6452 1 2025-11-29 16:37:20.928 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:49614 10 6452 1 2025-11-29 16:34:08.179 00:05:02.107 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 16:38:21.312 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53550 10 6452 1 2025-11-29 16:34:10.280 00:05:57.904 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 16:39:21.722 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:52642 10 6452 1 2025-11-29 16:39:43.587 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 16:39:43.655 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 16:39:43.384 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:39:43.551 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:39:43.633 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 16:40:22.142 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58988 10 6452 1 2025-11-29 16:41:22.550 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53270 10 6452 1 2025-11-29 16:42:22.961 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:40586 10 6452 1 2025-11-29 16:43:23.381 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58776 10 6452 1 2025-11-29 16:40:08.181 00:05:02.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 16:44:23.744 00:00:10.740 TCP 1.101.0.1:3000 -> 23.104.0.1:56362 10 6452 1 2025-11-29 16:44:43.726 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 16:44:43.725 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 16:44:43.603 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:44:43.600 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:44:43.683 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 16:40:10.284 00:05:57.901 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 16:45:24.526 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55326 10 6452 1 2025-11-29 16:46:24.930 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:45664 13 6608 1 2025-11-29 16:47:25.365 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58614 10 6452 1 2025-11-29 16:48:25.763 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:42088 10 6452 1 2025-11-29 16:49:26.187 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35906 10 6452 1 2025-11-29 16:49:43.887 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 16:49:43.740 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 16:49:43.806 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 16:49:43.677 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:49:43.805 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:46:08.183 00:05:02.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 16:50:26.588 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42058 10 6452 1 2025-11-29 16:46:10.292 00:05:57.898 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 16:51:26.996 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57158 10 6452 1 2025-11-29 16:52:27.400 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54484 10 6452 1 2025-11-29 16:53:27.804 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34098 10 6452 1 2025-11-29 16:54:28.216 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:60710 10 6452 1 2025-11-29 16:54:43.850 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 16:54:44.081 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 16:54:43.868 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:54:44.083 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 16:54:44.166 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 16:55:28.583 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54224 10 6452 1 2025-11-29 16:52:08.188 00:05:02.108 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 16:56:28.989 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55636 10 6452 1 2025-11-29 16:52:10.293 00:05:57.899 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 16:57:29.394 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57522 10 6452 1 2025-11-29 16:58:29.794 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51994 10 6452 1 Summary: total flows: 140, total bytes: 417156, total packets: 1023, avg bps: 918, avg pps: 0, avg bpp: 407 Time window: 2025-11-29 15:58:08 - 2025-11-29 16:58:40 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0050s User: 0.0017s Wall: 0.0022s flows/second: 62836.0 Runtime: 0.0022s