Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 03:59:28.042 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41992 10 6452 1 2025-11-30 03:59:57.381 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 03:59:57.532 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 03:59:57.302 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 03:59:57.206 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 03:59:57.300 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:00:28.453 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60618 10 6452 1 2025-11-30 04:01:28.859 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46904 10 6452 1 2025-11-30 03:58:08.481 00:05:02.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 04:02:29.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55236 10 6452 1 2025-11-30 03:58:10.565 00:05:57.922 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 04:03:29.677 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60516 10 6452 1 2025-11-30 04:04:30.107 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54380 10 6452 1 2025-11-30 04:04:57.341 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 04:04:57.423 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 04:04:56.910 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:04:57.344 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:04:57.426 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 04:05:30.535 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46028 10 6452 1 2025-11-30 04:06:30.932 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:47382 10 6452 1 2025-11-30 04:07:31.361 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46246 10 6452 1 2025-11-30 04:04:08.484 00:05:02.089 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 04:08:31.771 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:44468 10 6452 1 2025-11-30 04:04:10.566 00:05:57.923 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 04:09:32.147 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57728 10 6452 1 2025-11-30 04:09:57.526 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 04:09:57.275 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 04:09:57.274 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 04:09:57.264 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:09:57.443 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:10:32.554 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50408 10 6452 1 2025-11-30 04:11:32.911 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48216 10 6452 1 2025-11-30 04:12:33.320 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58076 10 6452 1 2025-11-30 04:13:33.720 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44404 11 6504 1 2025-11-30 04:10:08.487 00:05:02.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 04:14:34.145 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47126 10 6452 1 2025-11-30 04:14:57.689 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 04:14:57.492 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 04:14:57.385 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 04:14:57.571 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:14:57.606 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:10:10.572 00:05:57.917 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 04:15:34.551 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49386 10 6452 1 2025-11-30 04:16:34.953 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45560 10 6452 1 2025-11-30 04:17:35.358 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59028 10 6452 1 2025-11-30 04:18:35.723 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46752 10 6452 1 2025-11-30 04:19:36.116 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52984 10 6452 1 2025-11-30 04:19:57.612 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 04:19:57.797 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 04:19:57.618 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:19:57.728 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:19:57.811 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 04:16:08.487 00:05:02.090 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 04:20:36.483 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38066 10 6452 1 2025-11-30 04:16:10.571 00:05:57.920 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 04:21:36.896 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40452 10 6452 1 2025-11-30 04:22:37.308 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41332 10 6452 1 2025-11-30 04:23:37.672 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36666 10 6452 1 2025-11-30 04:24:38.099 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45908 10 6452 1 2025-11-30 04:24:57.861 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 04:24:57.855 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 04:24:58.183 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:24:58.054 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:24:58.137 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 04:25:38.500 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51358 10 6452 1 2025-11-30 04:22:08.488 00:05:02.091 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 04:26:38.901 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44024 10 6452 1 2025-11-30 04:22:10.574 00:05:57.917 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 04:27:39.310 00:00:11.355 TCP 1.101.0.1:3000 -> 23.104.0.1:37360 10 6452 1 2025-11-30 04:28:40.704 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54440 10 6452 1 2025-11-30 04:29:41.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51660 10 6452 1 2025-11-30 04:29:57.922 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 04:29:57.989 00:00:00.056 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 04:29:57.891 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:29:57.881 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:29:57.965 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 04:30:41.513 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35378 10 6452 1 2025-11-30 04:31:41.913 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45922 10 6452 1 2025-11-30 04:28:08.488 00:05:02.091 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 04:32:42.272 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:33998 12 10375 1 2025-11-30 04:28:10.576 00:05:57.918 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 04:33:42.766 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35306 10 6452 1 2025-11-30 04:34:43.179 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36922 10 6452 1 2025-11-30 04:34:58.335 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:34:58.301 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 04:34:57.933 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 04:34:57.856 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:34:58.417 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 04:35:43.545 00:00:11.012 TCP 1.101.0.1:3000 -> 23.104.0.1:37400 10 6452 1 2025-11-30 04:36:44.599 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60660 10 6452 1 2025-11-30 04:37:45.005 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59252 10 6452 1 2025-11-30 04:34:08.492 00:05:02.088 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 04:38:45.364 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49324 10 6452 1 2025-11-30 04:34:10.577 00:05:57.919 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 04:39:57.889 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 04:39:57.989 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 04:39:58.104 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:39:58.072 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:39:45.770 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47024 10 6452 1 2025-11-30 04:39:58.154 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 04:40:46.183 00:00:11.040 TCP 1.101.0.1:3000 -> 23.104.0.1:35172 10 6452 1 2025-11-30 04:41:47.258 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35310 10 6452 1 2025-11-30 04:42:47.669 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:55140 12 10369 1 2025-11-30 04:43:48.153 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51562 10 6452 1 2025-11-30 04:40:08.493 00:05:02.089 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 04:44:58.093 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 04:44:58.274 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 04:44:58.217 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 04:44:58.070 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:44:48.558 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37944 10 6452 1 2025-11-30 04:44:58.011 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:40:10.579 00:05:57.918 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 04:45:48.960 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36212 10 6452 1 2025-11-30 04:46:49.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60976 10 6452 1 2025-11-30 04:47:49.720 00:00:10.638 TCP 1.101.0.1:3000 -> 23.104.0.1:39316 12 10369 1 2025-11-30 04:48:50.398 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48038 10 6452 1 2025-11-30 04:49:58.470 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 04:49:58.466 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 04:49:58.240 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:49:58.389 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:49:58.557 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 04:49:50.811 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53228 10 6452 1 2025-11-30 04:46:08.494 00:05:02.089 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 04:50:51.221 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53576 10 6452 1 2025-11-30 04:46:10.581 00:05:57.917 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 04:51:51.640 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51486 10 6452 1 2025-11-30 04:52:52.054 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:60030 12 10375 1 2025-11-30 04:53:52.532 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49046 10 6452 1 2025-11-30 04:54:58.427 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 04:54:58.599 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 04:54:58.453 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 04:54:58.521 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:54:58.344 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:54:52.934 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:36516 10 6452 1 2025-11-30 04:55:53.311 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58758 10 6452 1 2025-11-30 04:52:08.495 00:05:02.090 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 04:56:53.679 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53716 10 6452 1 2025-11-30 04:52:10.587 00:05:57.912 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 04:57:54.060 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41942 10 6452 1 Summary: total flows: 139, total bytes: 426280, total packets: 1019, avg bps: 947, avg pps: 0, avg bpp: 418 Time window: 2025-11-30 03:58:08 - 2025-11-30 04:58:08 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0035s User: 0.0017s Wall: 0.0017s flows/second: 80570.5 Runtime: 0.0017s