Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 22:59:20.013 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58814 10 6452 1 2025-11-29 22:59:51.339 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 22:59:51.256 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 22:59:51.033 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 22:59:51.027 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 22:59:51.079 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:00:20.419 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35794 10 6452 1 2025-11-29 23:01:20.825 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47916 10 6452 1 2025-11-29 22:58:08.385 00:05:02.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:02:21.227 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45874 10 6452 1 2025-11-29 22:58:10.437 00:05:57.952 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:03:21.638 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59936 10 6452 1 2025-11-29 23:04:22.038 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35978 10 6452 1 2025-11-29 23:04:51.528 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:04:51.445 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:04:51.522 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:04:51.453 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:04:51.447 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:05:22.443 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51014 10 6452 1 2025-11-29 23:06:22.842 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:39084 12 6556 1 2025-11-29 23:07:23.269 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55504 10 6452 1 2025-11-29 23:04:08.387 00:05:02.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:08:23.684 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54334 10 6452 1 2025-11-29 23:04:10.439 00:05:57.952 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:09:24.115 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:40440 10 6452 1 2025-11-29 23:09:51.349 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:09:51.499 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:09:51.500 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:09:51.347 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:09:51.432 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:10:24.562 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45968 10 6452 1 2025-11-29 23:11:24.965 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44098 10 6452 1 2025-11-29 23:12:25.384 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57450 10 6452 1 2025-11-29 23:13:25.794 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57994 10 6452 1 2025-11-29 23:10:08.389 00:05:02.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:14:26.200 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55518 10 6452 1 2025-11-29 23:14:51.572 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:14:51.571 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:14:51.351 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:14:51.670 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:14:51.754 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:10:10.441 00:05:57.953 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:15:26.602 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58214 10 6452 1 2025-11-29 23:16:27.003 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45048 10 6452 1 2025-11-29 23:17:27.369 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35288 10 6452 1 2025-11-29 23:18:27.740 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58882 10 6452 1 2025-11-29 23:19:28.109 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59096 10 6452 1 2025-11-29 23:19:51.439 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:19:51.436 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:19:51.490 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:19:51.609 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:19:51.692 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:16:08.391 00:05:02.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:20:28.515 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34662 10 6452 1 2025-11-29 23:16:10.445 00:05:57.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:21:28.925 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56002 10 6452 1 2025-11-29 23:22:29.325 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45096 10 6452 1 2025-11-29 23:23:29.737 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41058 10 6452 1 2025-11-29 23:24:30.144 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37992 10 6452 1 2025-11-29 23:24:51.779 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:24:51.772 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:24:51.649 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:24:51.776 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:24:51.859 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:25:30.554 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53174 10 6452 1 2025-11-29 23:22:08.393 00:05:02.058 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:26:30.960 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39646 10 6452 1 2025-11-29 23:22:10.447 00:05:57.949 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:27:31.369 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56232 10 6452 1 2025-11-29 23:28:31.737 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34632 10 6452 1 2025-11-29 23:29:32.147 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48362 10 6452 1 2025-11-29 23:29:51.995 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:29:51.767 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:29:51.758 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:29:51.819 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:29:51.901 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:30:32.545 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48006 10 6452 1 2025-11-29 23:31:32.953 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38548 10 6452 1 2025-11-29 23:28:08.394 00:05:02.065 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:32:33.364 00:00:10.789 TCP 1.101.0.1:3000 -> 23.104.0.1:57240 10 6452 1 2025-11-29 23:28:10.448 00:05:57.949 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:33:34.194 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56788 10 6452 1 2025-11-29 23:34:34.555 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40758 10 6452 1 2025-11-29 23:34:52.023 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:34:51.993 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:34:51.941 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:34:51.555 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:34:51.940 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:35:34.956 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50770 10 6452 1 2025-11-29 23:36:35.364 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:32856 10 6452 1 2025-11-29 23:37:35.784 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44154 10 6452 1 2025-11-29 23:34:08.396 00:05:02.065 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:38:36.216 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40606 10 6452 1 2025-11-29 23:34:10.457 00:05:57.943 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:39:36.619 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40404 10 6452 1 2025-11-29 23:39:52.075 00:00:00.050 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:39:52.000 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:39:51.983 00:00:00.059 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:39:52.172 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:39:51.990 00:00:00.050 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:40:37.033 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57560 10 6452 1 2025-11-29 23:41:37.437 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36118 10 6452 1 2025-11-29 23:42:37.848 00:00:10.459 TCP 1.101.0.1:3000 -> 23.104.0.1:42510 12 10369 1 2025-11-29 23:43:38.344 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48200 10 6452 1 2025-11-29 23:40:08.397 00:05:02.069 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:44:38.757 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:34946 10 6452 1 2025-11-29 23:44:52.085 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:44:51.971 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:44:51.885 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:44:52.150 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:44:52.232 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:40:10.459 00:05:57.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:45:39.182 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57996 10 6452 1 2025-11-29 23:46:39.594 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33674 10 6452 1 2025-11-29 23:47:40.000 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41294 10 6452 1 2025-11-29 23:48:40.408 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:52052 10 6452 1 2025-11-29 23:49:52.180 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:49:52.281 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:49:52.097 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:49:52.197 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:49:52.097 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:49:40.803 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:38140 10 6452 1 2025-11-29 23:46:08.408 00:05:02.063 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:50:41.183 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36202 10 6452 1 2025-11-29 23:46:10.464 00:05:57.949 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:51:41.593 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33742 10 6452 1 2025-11-29 23:52:41.997 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60672 10 6452 1 2025-11-29 23:53:42.398 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41474 10 6452 1 2025-11-29 23:54:52.304 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:54:52.306 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:54:52.279 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:54:52.411 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:54:42.804 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:39394 10 6452 1 2025-11-29 23:54:52.494 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:55:43.192 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40616 10 6452 1 2025-11-29 23:52:08.410 00:05:02.061 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:56:43.596 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56168 10 6452 1 2025-11-29 23:52:10.468 00:05:57.946 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:57:44.002 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53954 10 6452 1 Summary: total flows: 139, total bytes: 414569, total packets: 1014, avg bps: 921, avg pps: 0, avg bpp: 408 Time window: 2025-11-29 22:58:08 - 2025-11-29 23:58:08 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0021s User: 0.0021s Wall: 0.0016s flows/second: 89213.2 Runtime: 0.0016s