Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 07:59:19.379 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46344 12 6556 1 2025-11-30 08:00:02.276 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 08:00:01.988 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 08:00:01.932 00:00:00.020 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 08:00:01.949 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:00:02.193 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:00:19.788 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60040 10 6452 1 2025-11-30 08:01:20.193 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38314 10 6452 1 2025-11-30 07:58:08.559 00:05:02.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 08:02:20.596 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47298 10 6452 1 2025-11-30 07:58:10.638 00:05:57.926 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 08:03:21.002 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:59530 10 6452 1 2025-11-30 08:04:21.359 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52850 10 6452 1 2025-11-30 08:05:02.116 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 08:05:02.231 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 08:05:02.084 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:05:02.052 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:05:02.136 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 08:05:21.764 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:43786 10 6452 1 2025-11-30 08:06:22.180 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34992 10 6452 1 2025-11-30 08:07:22.579 00:00:11.144 TCP 1.101.0.1:3000 -> 23.104.0.1:54460 10 6452 1 2025-11-30 08:04:08.561 00:05:02.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 08:08:23.760 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:56690 10 6452 1 2025-11-30 08:04:10.643 00:05:57.921 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 08:09:24.184 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56270 10 6452 1 2025-11-30 08:10:02.527 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 08:10:02.473 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 08:10:02.301 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:10:02.476 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:10:02.559 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 08:10:24.587 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56130 10 6452 1 2025-11-30 08:11:24.990 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37786 10 6452 1 2025-11-30 08:12:25.402 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46490 10 6452 1 2025-11-30 08:13:25.804 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57266 10 6452 1 2025-11-30 08:10:08.562 00:05:02.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 08:14:26.222 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40058 10 6452 1 2025-11-30 08:15:02.481 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 08:15:02.399 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:15:02.204 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 08:15:02.380 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 08:15:02.446 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:10:10.646 00:05:57.921 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 08:15:26.625 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50142 10 6452 1 2025-11-30 08:16:27.028 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60768 10 6452 1 2025-11-30 08:17:27.432 00:00:10.713 TCP 1.101.0.1:3000 -> 23.104.0.1:57376 12 6556 1 2025-11-30 08:18:28.184 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41724 10 6452 1 2025-11-30 08:19:28.585 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58550 10 6452 1 2025-11-30 08:20:02.523 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 08:20:02.359 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 08:20:02.432 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 08:20:02.310 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:20:02.440 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:16:08.563 00:05:02.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 08:20:28.988 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36534 10 6452 1 2025-11-30 08:16:10.652 00:05:57.917 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 08:21:29.397 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47228 10 6452 1 2025-11-30 08:22:29.799 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58914 10 6452 1 2025-11-30 08:23:30.202 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34102 10 6452 1 2025-11-30 08:24:30.566 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:36372 10 6452 1 2025-11-30 08:25:02.685 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 08:25:02.532 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:25:02.812 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:25:02.766 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 08:25:02.894 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 08:25:30.988 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53320 10 6452 1 2025-11-30 08:22:08.567 00:05:02.090 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 08:26:31.409 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:56858 10 6452 1 2025-11-30 08:22:10.654 00:05:57.918 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 08:27:31.795 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54226 10 6452 1 2025-11-30 08:28:32.204 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60320 10 6452 1 2025-11-30 08:29:32.609 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35190 10 6452 1 2025-11-30 08:30:02.565 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 08:30:02.728 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 08:30:02.563 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:30:02.777 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:30:02.860 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 08:30:33.017 00:00:14.568 TCP 1.101.0.1:3000 -> 23.104.0.1:33082 10 6452 1 2025-11-30 08:31:37.663 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36682 10 6452 1 2025-11-30 08:28:08.569 00:05:02.089 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 08:32:38.038 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:41528 10 6452 1 2025-11-30 08:28:10.656 00:05:57.921 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 08:33:38.453 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34636 10 6452 1 2025-11-30 08:34:38.817 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53730 10 6452 1 2025-11-30 08:35:02.754 00:00:00.016 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 08:35:02.672 00:00:00.016 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 08:35:02.751 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 08:35:02.699 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:35:02.672 00:00:00.016 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:35:39.224 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34256 10 6452 1 2025-11-30 08:36:39.586 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:45400 10 6452 1 2025-11-30 08:37:39.948 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46134 10 6452 1 2025-11-30 08:34:08.573 00:05:02.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 08:38:40.355 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34836 10 6452 1 2025-11-30 08:34:10.656 00:05:57.922 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 08:39:40.721 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37148 10 6452 1 2025-11-30 08:40:03.026 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 08:40:02.820 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 08:40:02.754 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 08:40:02.835 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:40:02.944 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:40:41.113 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51266 10 6452 1 2025-11-30 08:41:41.519 00:00:10.969 TCP 1.101.0.1:3000 -> 23.104.0.1:34742 10 6452 1 2025-11-30 08:42:42.519 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33836 10 6452 1 2025-11-30 08:43:42.926 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:48220 10 6452 1 2025-11-30 08:40:08.575 00:05:02.085 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 08:44:43.355 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35122 10 6452 1 2025-11-30 08:45:02.733 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 08:45:02.942 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 08:45:03.063 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:45:03.135 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:45:03.217 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 08:40:10.657 00:05:57.922 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 08:45:43.722 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59410 10 6452 1 2025-11-30 08:46:44.133 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50586 10 6452 1 2025-11-30 08:47:44.541 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41124 10 6452 1 2025-11-30 08:48:44.956 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34054 10 6452 1 2025-11-30 08:49:45.322 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48684 10 6452 1 2025-11-30 08:50:03.077 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 08:50:02.844 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 08:50:02.943 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:50:03.125 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:50:03.208 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 08:46:08.577 00:05:02.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 08:50:45.689 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60078 10 6452 1 2025-11-30 08:46:10.657 00:05:57.924 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 08:51:46.121 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47844 10 6452 1 2025-11-30 08:52:46.531 00:00:10.754 TCP 1.101.0.1:3000 -> 23.104.0.1:40898 12 6556 1 2025-11-30 08:53:47.320 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:48768 10 6452 1 2025-11-30 08:55:03.187 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 08:54:47.684 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50166 10 6452 1 2025-11-30 08:55:03.112 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 08:55:03.228 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 08:55:03.032 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:55:03.103 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 08:55:48.111 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59858 10 6452 1 2025-11-30 08:52:08.579 00:05:02.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 08:56:48.507 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38672 10 6452 1 2025-11-30 08:52:10.661 00:05:57.922 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 08:57:48.920 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:54646 10 6452 1 Summary: total flows: 139, total bytes: 410860, total packets: 1016, avg bps: 913, avg pps: 0, avg bpp: 404 Time window: 2025-11-30 07:58:08 - 2025-11-30 08:58:08 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0041s User: 0.0024s Wall: 0.0023s flows/second: 59399.7 Runtime: 0.0024s