Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 00:59:08.681 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45386 10 6452 1 2025-11-30 00:59:53.665 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 00:59:53.731 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 00:59:53.729 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 00:59:53.583 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 00:59:53.581 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:00:09.110 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50238 10 6452 1 2025-11-30 01:01:09.514 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60216 10 6452 1 2025-11-30 00:58:08.431 00:05:02.058 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:02:09.876 00:00:10.648 TCP 1.101.0.1:3000 -> 23.104.0.1:42484 12 10375 1 2025-11-30 00:58:10.484 00:05:57.949 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:03:10.559 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34248 10 6452 1 2025-11-30 01:04:10.922 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:53224 10 6452 1 2025-11-30 01:04:53.662 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:04:53.498 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:04:53.655 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:04:53.565 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:04:53.579 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:05:11.296 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38864 10 6452 1 2025-11-30 01:06:11.704 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51938 10 6452 1 2025-11-30 01:07:12.113 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35762 10 6452 1 2025-11-30 01:04:08.431 00:05:02.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:08:12.528 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47900 10 6452 1 2025-11-30 01:04:10.486 00:05:57.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:09:12.935 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:38976 10 6452 1 2025-11-30 01:09:53.758 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:09:53.835 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:09:53.679 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:09:53.837 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:09:53.920 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:10:13.355 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50160 10 6452 1 2025-11-30 01:11:13.756 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35668 10 6452 1 2025-11-30 01:12:14.177 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32980 10 6452 1 2025-11-30 01:13:14.580 00:00:10.502 TCP 1.101.0.1:3000 -> 23.104.0.1:58096 10 6452 1 2025-11-30 01:10:08.434 00:05:02.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:14:15.116 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39746 10 6452 1 2025-11-30 01:14:54.031 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:14:54.171 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:14:53.992 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:14:54.212 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:14:54.294 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:10:10.488 00:05:57.953 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:15:15.517 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46620 10 6452 1 2025-11-30 01:16:15.923 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33180 10 6452 1 2025-11-30 01:17:16.333 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49342 10 6452 1 2025-11-30 01:18:16.734 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57134 10 6452 1 2025-11-30 01:19:17.162 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35212 10 6452 1 2025-11-30 01:19:54.235 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:19:54.121 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:19:54.157 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:19:53.930 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:19:54.153 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:16:08.438 00:05:02.058 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:20:17.567 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56196 10 6452 1 2025-11-30 01:16:10.493 00:05:57.950 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:21:17.970 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54626 10 6452 1 2025-11-30 01:22:18.376 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48106 10 6452 1 2025-11-30 01:23:18.776 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52842 10 6452 1 2025-11-30 01:24:19.180 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54014 10 6452 1 2025-11-30 01:24:53.910 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:24:54.126 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:24:54.054 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:24:53.897 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:24:53.980 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:25:19.575 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57324 10 6452 1 2025-11-30 01:22:08.439 00:05:02.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:26:19.980 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33684 10 6452 1 2025-11-30 01:22:10.494 00:05:57.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:27:20.390 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45272 11 6492 1 2025-11-30 01:28:20.795 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59342 10 6452 1 2025-11-30 01:29:21.191 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38022 10 6452 1 2025-11-30 01:29:54.201 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:29:54.168 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:29:54.223 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:29:53.894 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:29:54.118 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:30:21.591 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49504 10 6452 1 2025-11-30 01:31:21.954 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38882 10 6452 1 2025-11-30 01:28:08.442 00:05:02.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:32:22.323 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54478 10 6452 1 2025-11-30 01:28:10.496 00:05:57.949 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:33:22.728 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40784 10 6452 1 2025-11-30 01:34:23.113 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49786 10 6452 1 2025-11-30 01:34:54.372 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:34:54.205 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:34:54.212 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:34:54.214 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:34:54.290 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:35:23.519 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57968 10 6452 1 2025-11-30 01:36:23.928 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:40636 10 6452 1 2025-11-30 01:37:24.324 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44848 10 6452 1 2025-11-30 01:34:08.443 00:05:02.058 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:38:24.731 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59984 10 6452 1 2025-11-30 01:34:10.498 00:05:57.950 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:39:25.145 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36116 10 6452 1 2025-11-30 01:39:54.490 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:39:54.407 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:39:54.309 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:39:54.042 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:39:54.406 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:40:25.550 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42638 10 6452 1 2025-11-30 01:41:25.960 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33218 10 6452 1 2025-11-30 01:42:26.362 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41268 10 6452 1 2025-11-30 01:43:26.763 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44238 12 6556 1 2025-11-30 01:40:08.445 00:05:02.058 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:44:27.175 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52774 10 6452 1 2025-11-30 01:44:54.376 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:44:54.558 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:44:54.362 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:44:54.472 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:44:54.555 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:40:10.500 00:05:57.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:45:27.540 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52632 10 6452 1 2025-11-30 01:46:27.954 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46454 10 6452 1 2025-11-30 01:47:28.376 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58572 10 6452 1 2025-11-30 01:48:28.779 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43078 10 6452 1 2025-11-30 01:49:29.143 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:56598 10 6452 1 2025-11-30 01:49:54.847 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:49:54.856 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:49:54.710 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:49:54.861 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:49:54.943 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:46:08.448 00:05:02.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:50:29.516 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53598 10 6452 1 2025-11-30 01:46:10.501 00:05:57.950 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:51:29.926 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:42080 10 6452 1 2025-11-30 01:52:30.353 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:40350 12 10375 1 2025-11-30 01:53:30.830 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:49586 10 6452 1 2025-11-30 01:54:31.196 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42076 10 6452 1 2025-11-30 01:54:54.639 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:54:54.638 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:54:54.670 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:54:54.556 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:54:54.639 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:55:31.565 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40978 10 6452 1 2025-11-30 01:52:08.448 00:05:02.060 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:56:31.973 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:40910 10 6452 1 2025-11-30 01:52:10.503 00:05:57.950 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:57:32.401 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43648 10 6452 1 2025-11-30 01:58:32.767 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33518 10 6452 1 Summary: total flows: 140, total bytes: 424990, total packets: 1027, avg bps: 935, avg pps: 0, avg bpp: 413 Time window: 2025-11-30 00:58:08 - 2025-11-30 01:58:43 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0047s User: 0.0009s Wall: 0.0015s flows/second: 91251.4 Runtime: 0.0015s