Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 18:59:21.899 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45918 10 6452 1 2025-11-30 19:00:16.071 00:00:00.039 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 19:00:15.927 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 19:00:15.730 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 19:00:15.656 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:00:15.988 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:00:22.306 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42046 10 6452 1 2025-11-30 19:01:22.711 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49928 10 6452 1 2025-11-30 18:58:08.773 00:05:02.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 19:02:23.118 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:56046 12 10375 1 2025-11-30 18:58:10.882 00:05:57.898 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 19:03:23.597 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49828 10 6452 1 2025-11-30 19:04:24.001 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57494 10 6452 1 2025-11-30 19:05:15.492 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 19:05:15.465 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 19:05:15.408 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 19:05:15.041 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:05:15.408 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:05:24.402 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49500 10 6452 1 2025-11-30 19:06:24.809 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34214 10 6452 1 2025-11-30 19:07:25.243 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36346 10 6452 1 2025-11-30 19:04:08.776 00:05:02.110 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 19:08:25.647 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:60756 10 6452 1 2025-11-30 19:04:10.884 00:05:57.896 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 19:09:26.087 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:59994 10 6452 1 2025-11-30 19:10:15.588 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 19:10:15.440 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 19:10:15.602 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 19:10:15.390 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:10:15.506 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:10:26.462 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46536 10 6452 1 2025-11-30 19:11:26.863 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52954 10 6452 1 2025-11-30 19:12:27.276 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60500 10 6452 1 2025-11-30 19:13:27.643 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57308 10 6452 1 2025-11-30 19:10:08.777 00:05:02.119 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 19:14:28.053 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37100 10 6452 1 2025-11-30 19:10:10.884 00:05:57.897 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 19:15:15.713 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 19:15:15.562 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 19:15:15.685 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 19:15:15.588 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:15:15.631 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:15:28.461 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54758 10 6452 1 2025-11-30 19:16:28.865 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56188 10 6452 1 2025-11-30 19:17:29.274 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54662 10 6452 1 2025-11-30 19:18:29.679 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36508 10 6452 1 2025-11-30 19:19:30.111 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55514 10 6452 1 2025-11-30 19:16:08.780 00:05:02.120 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 19:20:15.857 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 19:20:15.932 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 19:20:15.795 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:20:15.933 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:20:16.017 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 19:20:30.475 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33104 12 6556 1 2025-11-30 19:16:10.893 00:05:57.889 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 19:21:30.877 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50368 10 6452 1 2025-11-30 19:22:31.280 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34424 10 6452 1 2025-11-30 19:23:31.643 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39684 10 6452 1 2025-11-30 19:24:32.075 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33378 10 6452 1 2025-11-30 19:25:15.939 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 19:25:16.102 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 19:25:15.915 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 19:25:15.711 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:25:15.858 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:25:32.481 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34936 10 6452 1 2025-11-30 19:22:08.780 00:05:02.121 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 19:26:32.881 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35780 10 6452 1 2025-11-30 19:22:10.897 00:05:57.887 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 19:27:33.281 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56960 10 6452 1 2025-11-30 19:28:33.686 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32994 10 6452 1 2025-11-30 19:29:34.106 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44258 10 6452 1 2025-11-30 19:30:16.141 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 19:30:15.711 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 19:30:15.891 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 19:30:16.002 00:00:00.037 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:30:16.057 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:30:34.509 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33004 10 6452 1 2025-11-30 19:31:34.916 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:51010 10 6452 1 2025-11-30 19:28:08.781 00:05:02.122 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 19:32:35.278 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46034 10 6452 1 2025-11-30 19:28:10.898 00:05:57.886 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 19:33:35.680 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40894 10 6452 1 2025-11-30 19:34:36.099 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58786 10 6452 1 2025-11-30 19:35:15.948 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 19:35:15.775 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 19:35:15.859 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 19:35:15.614 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:35:15.866 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:35:36.469 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37076 10 6452 1 2025-11-30 19:36:36.877 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54644 10 6452 1 2025-11-30 19:37:37.289 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:44486 12 10369 1 2025-11-30 19:34:08.781 00:05:02.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 19:38:37.727 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53532 10 6452 1 2025-11-30 19:34:10.902 00:05:57.886 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 19:39:38.143 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37948 10 6452 1 2025-11-30 19:40:16.322 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 19:40:16.277 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 19:40:16.089 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:40:16.277 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:40:16.360 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 19:40:38.555 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38098 10 6452 1 2025-11-30 19:41:38.963 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45154 10 6452 1 2025-11-30 19:42:39.373 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55376 10 6452 1 2025-11-30 19:43:39.736 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47034 10 6452 1 2025-11-30 19:40:08.785 00:05:02.122 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 19:44:40.109 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39318 10 6452 1 2025-11-30 19:40:10.903 00:05:57.885 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 19:45:16.539 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 19:45:16.315 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 19:45:16.406 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:45:16.313 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:45:16.397 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 19:45:40.519 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42542 10 6452 1 2025-11-30 19:46:40.929 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:46630 10 6452 1 2025-11-30 19:47:41.322 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51410 10 6452 1 2025-11-30 19:48:41.717 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:55080 10 6452 1 2025-11-30 19:49:42.158 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41246 10 6452 1 2025-11-30 19:46:08.785 00:05:02.126 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 19:50:16.174 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 19:50:16.081 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 19:50:16.395 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:50:16.365 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:50:16.448 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 19:50:42.568 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36454 10 6452 1 2025-11-30 19:46:10.905 00:05:57.883 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 19:51:42.963 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47648 10 6452 1 2025-11-30 19:52:43.364 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43968 10 6452 1 2025-11-30 19:53:43.765 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37446 10 6452 1 2025-11-30 19:54:44.182 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56386 10 6452 1 2025-11-30 19:55:16.130 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 19:55:16.134 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 19:55:16.348 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:55:16.393 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 19:55:16.475 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 19:55:44.594 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57476 10 6452 1 2025-11-30 19:52:08.787 00:05:02.128 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 19:56:45.004 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55536 10 6452 1 2025-11-30 19:52:10.910 00:05:57.880 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 19:57:45.408 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48882 10 6452 1 Summary: total flows: 139, total bytes: 418492, total packets: 1016, avg bps: 929, avg pps: 0, avg bpp: 411 Time window: 2025-11-30 18:58:08 - 2025-11-30 19:58:08 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0035s User: 0.0026s Wall: 0.0022s flows/second: 64024.6 Runtime: 0.0022s