Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 04:59:10.110 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58862 10 6452 1 2025-11-29 04:59:29.480 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 04:59:29.527 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 04:59:29.413 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 04:59:29.397 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 04:59:29.477 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:00:10.526 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51794 10 6452 1 2025-11-29 05:01:10.931 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:36002 10 6452 1 2025-11-29 04:58:07.918 00:05:02.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 04:58:07.920 00:05:02.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:02:11.358 00:00:11.085 TCP 1.101.0.1:3000 -> 23.104.0.1:57606 10 6452 1 2025-11-29 05:03:12.483 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55736 10 6452 1 2025-11-29 05:04:29.667 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:04:12.887 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:46652 10 6452 1 2025-11-29 05:04:29.705 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:04:29.634 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:04:29.583 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:04:29.644 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:05:13.265 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43278 10 6452 1 2025-11-29 05:06:13.673 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54012 10 6452 1 2025-11-29 05:07:14.105 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36166 10 6452 1 2025-11-29 05:04:07.919 00:05:02.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:04:07.923 00:05:02.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:08:14.510 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59088 10 6452 1 2025-11-29 05:09:14.908 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49880 10 6452 1 2025-11-29 05:09:29.674 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:09:29.682 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:09:29.515 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:09:29.592 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:09:29.808 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:10:15.315 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53082 10 6452 1 2025-11-29 05:11:15.717 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49248 10 6452 1 2025-11-29 05:12:16.122 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:34736 12 10369 1 2025-11-29 05:13:16.599 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42936 10 6452 1 2025-11-29 05:10:07.923 00:05:02.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:10:07.920 00:05:02.148 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:14:30.269 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:14:30.087 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:14:29.792 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:14:17.010 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55414 10 6452 1 2025-11-29 05:14:30.187 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:14:30.190 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:15:17.411 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60396 10 6452 1 2025-11-29 05:16:17.815 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45844 10 6452 1 2025-11-29 05:17:18.219 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59068 10 6452 1 2025-11-29 05:18:18.625 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46556 10 6452 1 2025-11-29 05:19:29.819 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:19:29.768 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:19:29.889 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:19:29.947 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:19:19.028 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45730 10 6452 1 2025-11-29 05:19:29.971 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:16:07.924 00:05:02.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:16:07.922 00:05:02.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:20:19.426 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40956 10 6452 1 2025-11-29 05:21:19.832 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52042 10 6452 1 2025-11-29 05:22:20.231 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54938 10 6452 1 2025-11-29 05:23:20.643 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:53450 10 6452 1 2025-11-29 05:24:30.095 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:24:30.101 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:24:29.840 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:24:29.913 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:24:29.922 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:24:21.075 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53280 10 6452 1 2025-11-29 05:25:21.484 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49046 10 6452 1 2025-11-29 05:22:07.925 00:05:02.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:22:07.922 00:05:02.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:26:21.887 00:00:11.176 TCP 1.101.0.1:3000 -> 23.104.0.1:42020 10 6452 1 2025-11-29 05:27:23.109 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48840 10 6452 1 2025-11-29 05:28:23.477 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:33238 10 6452 1 2025-11-29 05:29:30.131 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:29:30.048 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:29:30.153 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:29:30.048 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:29:29.922 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:29:23.896 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53840 12 6556 1 2025-11-29 05:30:24.309 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37826 10 6452 1 2025-11-29 05:31:24.707 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39240 10 6452 1 2025-11-29 05:28:07.927 00:05:02.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:28:07.924 00:05:02.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:32:25.102 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51676 10 6452 1 2025-11-29 05:33:25.511 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41286 10 6452 1 2025-11-29 05:34:30.237 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:34:30.196 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:34:30.159 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:34:30.161 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:34:30.241 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:34:25.911 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47438 10 6452 1 2025-11-29 05:35:26.315 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35646 10 6452 1 2025-11-29 05:36:26.723 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51982 10 6452 1 2025-11-29 05:37:27.104 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33864 10 6452 1 2025-11-29 05:34:07.926 00:05:02.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:34:07.929 00:05:02.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:38:27.503 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:37118 10 6452 1 2025-11-29 05:39:30.506 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:39:30.458 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:39:30.099 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:39:30.423 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:39:30.423 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:39:27.861 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51848 10 6452 1 2025-11-29 05:40:28.272 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34670 10 6452 1 2025-11-29 05:41:28.685 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38618 10 6452 1 2025-11-29 05:42:29.102 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57184 10 6452 1 2025-11-29 05:43:29.501 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36122 10 6452 1 2025-11-29 05:40:07.927 00:05:02.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:40:07.931 00:05:02.151 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:44:30.394 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:44:30.442 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:44:30.252 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:44:30.311 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:44:30.306 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:44:29.904 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54098 10 6452 1 2025-11-29 05:45:30.307 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52348 10 6452 1 2025-11-29 05:46:30.709 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:57290 10 6452 1 2025-11-29 05:47:31.121 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50138 10 6452 1 2025-11-29 05:48:31.527 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38360 10 6452 1 2025-11-29 05:49:30.850 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:49:30.767 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:49:30.293 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:49:30.767 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:49:30.767 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:49:31.929 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:57908 10 6452 1 2025-11-29 05:46:07.932 00:05:02.149 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:46:07.930 00:05:02.155 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:50:32.356 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51132 10 6452 1 2025-11-29 05:51:32.764 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56686 10 6452 1 2025-11-29 05:52:33.188 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57300 10 6452 1 2025-11-29 05:53:33.593 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38706 10 6452 1 2025-11-29 05:54:30.846 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:54:30.765 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:54:30.713 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:54:30.763 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:54:30.823 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:54:33.995 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46968 10 6452 1 2025-11-29 05:55:34.373 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48174 10 6452 1 2025-11-29 05:52:07.933 00:05:02.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 05:52:07.930 00:05:02.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:56:34.782 00:00:10.886 TCP 1.101.0.1:3000 -> 23.104.0.1:45216 10 6452 1 2025-11-29 05:57:35.707 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34754 10 6452 1 2025-11-29 05:58:36.116 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53654 10 6452 1 Summary: total flows: 140, total bytes: 421021, total packets: 1024, avg bps: 925, avg pps: 0, avg bpp: 411 Time window: 2025-11-29 04:58:07 - 2025-11-29 05:58:46 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0057s User: 0.0008s Wall: 0.0024s flows/second: 58579.7 Runtime: 0.0024s