Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 05:59:19.561 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38064 10 6452 1 2025-11-30 05:59:59.918 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 05:59:59.963 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 05:59:59.675 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:59:59.964 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:00:00.048 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:00:19.961 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57242 10 6452 1 2025-11-30 06:01:20.364 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57540 10 6452 1 2025-11-30 05:58:08.509 00:05:02.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:02:20.766 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:48484 12 10369 1 2025-11-30 05:58:10.600 00:05:57.912 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:03:21.213 00:00:10.987 TCP 1.101.0.1:3000 -> 23.104.0.1:44638 10 6452 1 2025-11-30 06:04:22.235 00:00:12.304 TCP 1.101.0.1:3000 -> 23.104.0.1:46916 10 6452 1 2025-11-30 06:04:59.928 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:04:59.746 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:04:59.585 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:04:59.716 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:04:59.845 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:05:24.579 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55780 10 6452 1 2025-11-30 06:06:24.947 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56506 10 6452 1 2025-11-30 06:07:25.363 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58084 10 6452 1 2025-11-30 06:04:08.510 00:05:02.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:08:25.767 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38850 10 6452 1 2025-11-30 06:04:10.603 00:05:57.912 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:09:26.179 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35852 10 6452 1 2025-11-30 06:09:59.705 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:09:59.793 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:09:59.585 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:09:59.789 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:09:59.877 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:10:26.580 00:00:10.789 TCP 1.101.0.1:3000 -> 23.104.0.1:39456 10 6452 1 2025-11-30 06:11:27.409 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43406 10 6452 1 2025-11-30 06:12:27.811 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55632 10 6452 1 2025-11-30 06:13:28.213 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:41900 10 6452 1 2025-11-30 06:10:08.511 00:05:02.097 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:14:28.579 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59164 10 6452 1 2025-11-30 06:14:59.771 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:14:59.709 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:15:00.066 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:14:59.983 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:14:59.983 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:10:10.604 00:05:57.912 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:15:28.979 00:00:10.730 TCP 1.101.0.1:3000 -> 23.104.0.1:59638 10 6452 1 2025-11-30 06:16:29.749 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:35396 10 6452 1 2025-11-30 06:17:30.185 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39456 10 6452 1 2025-11-30 06:18:30.596 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38314 10 6452 1 2025-11-30 06:19:31.000 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:56262 10 6452 1 2025-11-30 06:19:59.976 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:20:00.351 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:20:00.452 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:20:00.273 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:20:00.268 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:16:08.514 00:05:02.095 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:20:31.404 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34656 10 6452 1 2025-11-30 06:16:10.606 00:05:57.913 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:21:31.819 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:56320 10 6452 1 2025-11-30 06:22:32.262 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:41314 10 6452 1 2025-11-30 06:23:32.687 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38056 10 6452 1 2025-11-30 06:24:33.111 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:41182 10 6452 1 2025-11-30 06:25:00.086 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:25:00.306 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:25:00.362 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:25:00.225 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:25:00.003 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:25:33.464 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33870 10 6452 1 2025-11-30 06:22:08.517 00:05:02.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:26:33.867 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48364 10 6452 1 2025-11-30 06:22:10.607 00:05:57.914 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:27:34.271 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34084 10 6452 1 2025-11-30 06:28:34.676 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37934 10 6452 1 2025-11-30 06:29:35.107 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52462 10 6452 1 2025-11-30 06:30:00.313 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:30:00.183 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:29:59.994 00:00:00.048 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:30:00.388 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:30:00.472 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:30:35.509 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42828 10 6452 1 2025-11-30 06:31:35.910 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48358 10 6452 1 2025-11-30 06:28:08.518 00:05:02.095 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:32:36.317 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40870 10 6452 1 2025-11-30 06:28:10.608 00:05:57.914 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:33:36.719 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:55498 10 6452 1 2025-11-30 06:34:37.140 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51230 10 6452 1 2025-11-30 06:35:00.415 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:35:00.280 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:35:00.224 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:35:00.282 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:35:00.364 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:35:37.541 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50398 10 6452 1 2025-11-30 06:36:37.948 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:48986 10 6452 1 2025-11-30 06:37:38.327 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35958 10 6452 1 2025-11-30 06:34:08.519 00:05:02.095 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:38:38.728 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42104 10 6452 1 2025-11-30 06:34:10.611 00:05:57.915 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:39:39.146 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38672 10 6452 1 2025-11-30 06:40:00.484 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:40:00.420 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:40:00.554 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:40:00.712 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:40:00.637 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:40:39.552 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52596 10 6452 1 2025-11-30 06:41:39.949 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43980 10 6452 1 2025-11-30 06:42:40.358 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54530 10 6452 1 2025-11-30 06:43:40.765 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37178 10 6452 1 2025-11-30 06:40:08.525 00:05:02.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:44:41.183 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52718 10 6452 1 2025-11-30 06:45:00.777 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:45:00.536 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:45:00.544 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:45:00.422 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:45:00.694 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:40:10.612 00:05:57.926 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:45:41.544 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59990 10 6452 1 2025-11-30 06:46:41.958 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58428 10 6452 1 2025-11-30 06:47:42.315 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46654 10 6452 1 2025-11-30 06:48:42.723 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58822 10 6452 1 2025-11-30 06:49:43.129 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:44970 10 6452 1 2025-11-30 06:50:00.762 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:50:00.683 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:50:00.543 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:50:00.386 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:50:00.678 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:46:08.535 00:05:02.082 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:50:43.491 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:33074 10 6452 1 2025-11-30 06:46:10.614 00:05:57.925 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:51:43.879 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45150 10 6452 1 2025-11-30 06:52:44.246 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53058 10 6452 1 2025-11-30 06:53:44.649 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35798 10 6452 1 2025-11-30 06:55:00.889 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:54:45.068 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:59386 10 6452 1 2025-11-30 06:55:00.667 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:55:00.743 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:55:00.584 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:55:00.808 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:55:45.486 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56706 10 6452 1 2025-11-30 06:52:08.536 00:05:02.082 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:56:45.848 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:58580 10 6452 1 2025-11-30 06:52:10.615 00:05:57.925 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:57:46.274 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48796 10 6452 1 Summary: total flows: 139, total bytes: 414465, total packets: 1012, avg bps: 921, avg pps: 0, avg bpp: 409 Time window: 2025-11-30 05:58:08 - 2025-11-30 06:58:08 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0044s User: 0.0018s Wall: 0.0021s flows/second: 64836.3 Runtime: 0.0022s