Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 21:59:36.445 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46824 10 6452 1 2025-11-30 22:00:18.975 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:00:18.859 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:00:18.882 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:00:18.726 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:00:18.807 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:00:36.852 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:57380 10 6452 1 2025-11-30 22:01:37.277 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54134 10 6452 1 2025-11-30 21:58:08.832 00:05:02.133 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:02:37.682 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:60946 12 10369 1 2025-11-30 21:58:10.958 00:05:57.877 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:03:38.120 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42172 10 6452 1 2025-11-30 22:04:38.519 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57976 10 6452 1 2025-11-30 22:05:19.237 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:05:19.389 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:05:19.444 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:05:19.185 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:05:19.156 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:05:38.927 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:37068 10 6452 1 2025-11-30 22:06:39.358 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35532 10 6452 1 2025-11-30 22:07:39.760 00:00:10.467 TCP 1.101.0.1:3000 -> 23.104.0.1:55258 12 10375 1 2025-11-30 22:04:08.833 00:05:02.133 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:08:40.271 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37514 10 6452 1 2025-11-30 22:04:10.963 00:05:57.874 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:09:40.686 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44770 10 6452 1 2025-11-30 22:10:19.331 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:10:19.173 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:10:19.282 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:10:19.013 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:10:19.249 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:10:41.112 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55348 10 6452 1 2025-11-30 22:11:41.515 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34906 10 6452 1 2025-11-30 22:12:41.923 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:41856 10 6452 1 2025-11-30 22:13:42.347 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44110 10 6452 1 2025-11-30 22:10:08.834 00:05:02.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:14:42.755 00:00:10.733 TCP 1.101.0.1:3000 -> 23.104.0.1:57856 10 6452 1 2025-11-30 22:10:10.965 00:05:57.872 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:15:18.978 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:15:19.113 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:15:19.215 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:15:19.289 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:15:18.895 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:15:43.525 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44324 10 6452 1 2025-11-30 22:16:43.929 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:56488 10 6452 1 2025-11-30 22:17:44.361 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39690 10 6452 1 2025-11-30 22:18:44.767 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41188 10 6452 1 2025-11-30 22:19:45.175 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44506 10 6452 1 2025-11-30 22:20:19.196 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:20:19.295 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:20:19.294 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:20:19.233 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:16:08.835 00:05:02.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:20:19.279 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:20:45.575 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50836 10 6452 1 2025-11-30 22:16:10.967 00:05:57.873 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:21:45.986 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35022 10 6452 1 2025-11-30 22:22:46.390 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44454 10 6452 1 2025-11-30 22:23:46.800 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:48740 10 6452 1 2025-11-30 22:24:47.192 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44818 10 6452 1 2025-11-30 22:25:19.453 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:25:19.478 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:25:19.507 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:25:19.004 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:25:19.372 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:25:47.597 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39598 10 6452 1 2025-11-30 22:22:08.837 00:05:02.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:26:47.998 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36238 10 6452 1 2025-11-30 22:22:10.967 00:05:57.873 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:27:48.401 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46424 10 6452 1 2025-11-30 22:28:48.762 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:50406 10 6452 1 2025-11-30 22:29:49.190 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:42074 10 6452 1 2025-11-30 22:30:19.631 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:30:19.260 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:30:19.561 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:30:19.429 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:30:19.548 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:30:49.563 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48480 10 6452 1 2025-11-30 22:31:49.958 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37518 10 6452 1 2025-11-30 22:28:08.838 00:05:02.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:32:50.320 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58562 10 6452 1 2025-11-30 22:28:10.974 00:05:57.868 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:33:50.719 00:00:10.494 TCP 1.101.0.1:3000 -> 23.104.0.1:36284 10 6452 1 2025-11-30 22:34:51.249 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41326 10 6452 1 2025-11-30 22:35:19.676 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:35:19.658 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:35:19.495 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:35:19.670 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:35:19.594 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:35:51.644 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50170 10 6452 1 2025-11-30 22:36:52.009 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46632 10 6452 1 2025-11-30 22:37:52.412 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:60326 12 10375 1 2025-11-30 22:34:08.838 00:05:02.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:38:52.890 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:44586 10 6452 1 2025-11-30 22:34:10.977 00:05:57.867 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:39:53.307 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42382 10 6452 1 2025-11-30 22:40:19.654 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:40:19.905 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:40:19.779 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:40:19.701 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:40:19.737 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:40:53.715 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42130 10 6452 1 2025-11-30 22:41:54.132 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40408 10 6452 1 2025-11-30 22:42:54.540 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:47432 12 10369 1 2025-11-30 22:43:55.026 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45192 10 6452 1 2025-11-30 22:40:08.840 00:05:02.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:40:10.980 00:05:57.868 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:44:55.433 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59392 10 6452 1 2025-11-30 22:45:19.762 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:45:19.680 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:45:19.782 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:45:19.778 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:45:19.863 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:45:55.838 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:54978 10 6452 1 2025-11-30 22:46:56.228 00:00:11.073 TCP 1.101.0.1:3000 -> 23.104.0.1:53770 10 6452 1 2025-11-30 22:47:57.344 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:47974 12 10375 1 2025-11-30 22:48:57.822 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33982 10 6452 1 2025-11-30 22:49:58.230 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57770 10 6452 1 2025-11-30 22:46:08.845 00:05:02.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:50:19.937 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:50:19.541 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:50:20.165 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:50:20.084 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:50:20.082 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:46:10.981 00:05:57.868 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:50:58.646 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40670 10 6452 1 2025-11-30 22:51:59.012 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:47278 10 6452 1 2025-11-30 22:52:59.364 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55866 10 6452 1 2025-11-30 22:53:59.770 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42348 10 6452 1 2025-11-30 22:55:00.188 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43444 10 6452 1 2025-11-30 22:55:20.089 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:55:20.192 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:55:20.121 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:55:20.050 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:55:20.008 00:00:00.041 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:56:00.587 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38960 10 6452 1 2025-11-30 22:52:08.846 00:05:02.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:52:10.982 00:05:57.868 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:57:00.950 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:39990 10 6452 1 2025-11-30 22:58:01.319 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51308 10 6452 1 Summary: total flows: 139, total bytes: 430151, total packets: 1020, avg bps: 955, avg pps: 0, avg bpp: 421 Time window: 2025-11-30 21:58:08 - 2025-11-30 22:58:11 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0020s User: 0.0030s Wall: 0.0021s flows/second: 66288.6 Runtime: 0.0021s