Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 05:59:30.814 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 05:59:30.787 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 05:59:30.734 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:59:30.732 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 05:59:30.745 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 05:59:36.492 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:37962 10 6452 1 2025-11-29 06:00:36.912 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36274 10 6452 1 2025-11-29 06:01:37.317 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53134 10 6452 1 2025-11-29 05:58:07.932 00:05:02.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 05:58:07.936 00:05:02.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 06:02:37.718 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44094 10 6452 1 2025-11-29 06:03:38.120 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45916 10 6452 1 2025-11-29 06:04:30.955 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 06:04:30.758 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:04:30.920 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:04:30.751 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 06:04:31.003 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 06:04:38.529 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50662 10 6452 1 2025-11-29 06:05:38.937 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:36032 10 6452 1 2025-11-29 06:06:39.363 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42508 10 6452 1 2025-11-29 06:07:39.728 00:00:10.870 TCP 1.101.0.1:3000 -> 23.104.0.1:48294 10 6452 1 2025-11-29 06:04:07.934 00:05:02.156 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 06:04:07.937 00:05:02.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 06:08:40.636 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39176 10 6452 1 2025-11-29 06:09:30.862 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 06:09:30.866 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:09:30.867 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:09:30.801 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 06:09:30.950 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 06:09:41.039 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42880 10 6452 1 2025-11-29 06:10:41.443 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41158 10 6452 1 2025-11-29 06:11:41.847 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:36746 10 6452 1 2025-11-29 06:12:42.278 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56112 10 6452 1 2025-11-29 06:13:42.681 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57332 10 6452 1 2025-11-29 06:10:07.939 00:05:02.150 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 06:10:07.936 00:05:02.155 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 06:14:31.050 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 06:14:30.749 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:14:30.967 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:14:31.539 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 06:14:31.324 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 06:14:43.112 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58792 10 6452 1 2025-11-29 06:15:43.512 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49752 10 6452 1 2025-11-29 06:16:43.910 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60346 12 6556 1 2025-11-29 06:17:44.321 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58124 10 6452 1 2025-11-29 06:18:44.725 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:45582 10 6452 1 2025-11-29 06:19:31.158 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 06:19:31.079 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 06:19:31.094 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:19:31.076 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:19:31.155 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 06:19:45.146 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:60462 11 6504 1 2025-11-29 06:16:07.945 00:05:02.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 06:16:07.948 00:05:02.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 06:20:45.603 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53124 10 6452 1 2025-11-29 06:21:46.012 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55080 10 6452 1 2025-11-29 06:22:46.375 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53882 10 6452 1 2025-11-29 06:23:46.774 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55930 10 6452 1 2025-11-29 06:24:31.281 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 06:24:30.995 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 06:24:31.125 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:24:31.198 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:24:31.294 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 06:24:47.179 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:49212 11 6504 1 2025-11-29 06:25:47.606 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48788 10 6452 1 2025-11-29 06:22:07.949 00:05:02.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 06:22:07.948 00:05:02.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 06:26:48.009 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:56032 10 6452 1 2025-11-29 06:27:48.367 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57520 10 6452 1 2025-11-29 06:28:48.768 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:36830 10 6452 1 2025-11-29 06:29:31.294 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 06:29:31.510 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 06:29:31.269 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:29:31.214 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:29:31.324 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 06:29:49.142 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35422 10 6452 1 2025-11-29 06:30:49.558 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37656 10 6452 1 2025-11-29 06:31:49.968 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42380 10 6452 1 2025-11-29 06:28:07.947 00:05:02.149 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 06:28:07.950 00:05:02.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 06:32:50.372 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48584 10 6452 1 2025-11-29 06:33:50.775 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36452 10 6452 1 2025-11-29 06:34:31.600 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 06:34:31.516 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 06:34:31.416 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:34:31.518 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:34:31.402 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 06:34:51.190 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53710 10 6452 1 2025-11-29 06:35:51.596 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32926 10 6452 1 2025-11-29 06:36:52.003 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48130 10 6452 1 2025-11-29 06:37:52.406 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59994 10 6452 1 2025-11-29 06:34:07.953 00:05:02.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 06:34:07.949 00:05:02.149 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 06:38:52.809 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:54630 10 6452 1 2025-11-29 06:39:31.554 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 06:39:31.386 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 06:39:31.414 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:39:31.471 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:39:31.543 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 06:39:53.179 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:44524 10 6452 1 2025-11-29 06:40:53.579 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43390 10 6452 1 2025-11-29 06:41:53.980 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37902 10 6452 1 2025-11-29 06:42:54.348 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42330 10 6452 1 2025-11-29 06:43:54.752 00:00:10.687 TCP 1.101.0.1:3000 -> 23.104.0.1:39022 10 6452 1 2025-11-29 06:40:07.950 00:05:02.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 06:40:07.953 00:05:02.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 06:44:31.418 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 06:44:31.574 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:44:31.613 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:44:31.505 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 06:44:31.697 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 06:44:55.476 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:40850 10 6452 1 2025-11-29 06:45:55.871 00:00:10.907 TCP 1.101.0.1:3000 -> 23.104.0.1:53900 10 6452 1 2025-11-29 06:46:56.816 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:36456 10 6452 1 2025-11-29 06:47:57.188 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52156 10 6452 1 2025-11-29 06:48:57.588 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60504 10 6452 1 2025-11-29 06:49:31.544 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 06:49:31.660 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:49:31.540 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:49:31.414 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 06:49:31.622 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 06:46:07.952 00:05:02.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 06:46:07.954 00:05:02.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 06:49:57.952 00:00:10.996 TCP 1.101.0.1:3000 -> 23.104.0.1:56062 10 6452 1 2025-11-29 06:50:58.988 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46468 10 6452 1 2025-11-29 06:51:59.391 00:00:10.654 TCP 1.101.0.1:3000 -> 23.104.0.1:36914 10 6452 1 2025-11-29 06:53:00.099 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:52036 10 6452 1 2025-11-29 06:54:00.461 00:00:10.743 TCP 1.101.0.1:3000 -> 23.104.0.1:54168 10 6452 1 2025-11-29 06:54:31.818 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 06:54:31.825 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 06:54:31.455 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:54:31.735 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 06:54:31.944 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 06:55:01.239 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51102 10 6452 1 2025-11-29 06:52:07.955 00:05:02.148 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 06:52:07.958 00:05:02.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 06:56:01.649 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:48066 10 6452 1 2025-11-29 06:57:02.037 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36988 10 6452 1 2025-11-29 06:58:02.444 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51348 10 6452 1 Summary: total flows: 139, total bytes: 410756, total packets: 1014, avg bps: 911, avg pps: 0, avg bpp: 405 Time window: 2025-11-29 05:58:07 - 2025-11-29 06:58:12 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0044s User: 0.0033s Wall: 0.0101s flows/second: 13717.8 Runtime: 0.0102s