Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 18:59:32.823 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53746 10 6452 1 2025-11-29 18:59:46.527 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 18:59:46.338 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 18:59:46.378 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 18:59:46.452 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 18:59:46.461 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 19:00:33.232 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50080 10 6452 1 2025-11-29 19:01:33.639 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:50944 10 6452 1 2025-11-29 18:58:08.275 00:05:02.072 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 18:58:08.274 00:05:02.076 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 19:02:34.002 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36708 10 6452 1 2025-11-29 19:03:34.407 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60256 10 6452 1 2025-11-29 19:04:34.770 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51396 10 6452 1 2025-11-29 19:04:46.629 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 19:04:46.508 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 19:04:46.242 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:04:46.548 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:04:46.603 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 19:05:35.181 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59242 10 6452 1 2025-11-29 19:06:35.589 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35992 10 6452 1 2025-11-29 19:07:35.996 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59982 10 6452 1 2025-11-29 19:04:08.278 00:05:02.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 19:04:08.276 00:05:02.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 19:08:36.401 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59410 10 6452 1 2025-11-29 19:09:46.484 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 19:09:46.540 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:09:46.479 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:09:46.268 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 19:09:36.803 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:47596 10 6452 1 2025-11-29 19:09:46.563 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 19:10:37.181 00:00:10.707 TCP 1.101.0.1:3000 -> 23.104.0.1:40448 10 6452 1 2025-11-29 19:11:37.928 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:40934 10 6452 1 2025-11-29 19:12:38.352 00:00:10.580 TCP 1.101.0.1:3000 -> 23.104.0.1:48322 10 6452 1 2025-11-29 19:13:38.972 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49452 10 6452 1 2025-11-29 19:10:08.278 00:05:02.071 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 19:10:08.276 00:05:02.076 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 19:14:46.665 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 19:14:46.717 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 19:14:39.341 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52580 10 6452 1 2025-11-29 19:14:46.672 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:14:46.582 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:14:46.658 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 19:15:39.713 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:43114 10 6452 1 2025-11-29 19:16:40.144 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42126 10 6452 1 2025-11-29 19:17:40.555 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49272 10 6452 1 2025-11-29 19:18:40.976 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:41562 10 6452 1 2025-11-29 19:19:47.281 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 19:19:46.983 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 19:19:46.697 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:19:47.199 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:19:47.199 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 19:19:41.396 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39566 10 6452 1 2025-11-29 19:16:08.277 00:05:02.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 19:16:08.278 00:05:02.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 19:20:41.809 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51624 10 6452 1 2025-11-29 19:21:42.213 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42986 10 6452 1 2025-11-29 19:22:42.617 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:40698 10 6452 1 2025-11-29 19:23:43.031 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59602 10 6452 1 2025-11-29 19:24:46.855 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 19:24:46.725 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:24:46.673 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:24:46.857 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 19:24:46.756 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 19:24:43.441 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:38996 10 6452 1 2025-11-29 19:25:43.795 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43584 10 6452 1 2025-11-29 19:22:08.281 00:05:02.075 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 19:22:08.279 00:05:02.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 19:26:44.206 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57696 10 6452 1 2025-11-29 19:27:44.611 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54552 10 6452 1 2025-11-29 19:28:45.020 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60416 10 6452 1 2025-11-29 19:29:46.983 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 19:29:47.099 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:29:47.231 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:29:47.097 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 19:29:47.312 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 19:29:45.423 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44554 10 6452 1 2025-11-29 19:30:45.827 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60486 10 6452 1 2025-11-29 19:31:46.230 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40576 10 6452 1 2025-11-29 19:28:08.278 00:05:02.082 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 19:28:08.282 00:05:02.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 19:32:46.631 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57674 10 6452 1 2025-11-29 19:33:47.036 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44106 10 6452 1 2025-11-29 19:34:47.197 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 19:34:46.978 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:34:47.196 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:34:47.128 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 19:34:47.279 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 19:34:47.443 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:32954 10 6452 1 2025-11-29 19:35:47.803 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45146 10 6452 1 2025-11-29 19:36:48.216 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51114 10 6452 1 2025-11-29 19:37:48.578 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41470 10 6452 1 2025-11-29 19:34:08.282 00:05:02.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 19:34:08.282 00:05:02.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 19:38:48.992 00:00:10.492 TCP 1.101.0.1:3000 -> 23.104.0.1:49196 10 6452 1 2025-11-29 19:39:48.360 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 19:39:48.222 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 19:39:48.167 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:39:48.278 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:39:48.370 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 19:39:49.524 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57720 10 6452 1 2025-11-29 19:40:49.928 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:42618 10 6452 1 2025-11-29 19:41:50.360 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45086 10 6452 1 2025-11-29 19:42:50.794 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47714 12 6556 1 2025-11-29 19:43:51.222 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:49508 10 6452 1 2025-11-29 19:40:08.284 00:05:02.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 19:40:08.287 00:05:02.083 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 19:44:47.347 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 19:44:47.339 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 19:44:47.357 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:44:47.263 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:44:47.337 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 19:44:51.580 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33006 10 6452 1 2025-11-29 19:45:51.993 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40838 10 6452 1 2025-11-29 19:46:52.393 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47782 10 6452 1 2025-11-29 19:47:52.801 00:00:10.467 TCP 1.101.0.1:3000 -> 23.104.0.1:43594 10 6452 1 2025-11-29 19:48:53.335 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37010 10 6452 1 2025-11-29 19:49:47.390 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 19:49:47.060 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:49:47.320 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:49:47.478 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 19:49:47.402 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 19:49:53.743 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47812 10 6452 1 2025-11-29 19:46:08.287 00:05:02.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 19:46:08.284 00:05:02.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 19:50:54.142 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:33652 10 6452 1 2025-11-29 19:51:54.571 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39846 10 6452 1 2025-11-29 19:52:54.971 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56008 10 6452 1 2025-11-29 19:53:55.378 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:57398 10 6452 1 2025-11-29 19:54:47.718 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 19:54:47.797 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 19:54:47.305 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:54:47.635 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:54:47.637 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 19:54:55.732 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:35164 10 6452 1 2025-11-29 19:55:56.144 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59800 10 6452 1 2025-11-29 19:52:08.290 00:05:02.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 19:52:08.286 00:05:02.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 19:56:56.546 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:57564 10 6452 1 2025-11-29 19:57:56.907 00:00:10.698 TCP 1.101.0.1:3000 -> 23.104.0.1:47946 10 6452 1 Summary: total flows: 139, total bytes: 410652, total packets: 1012, avg bps: 912, avg pps: 0, avg bpp: 405 Time window: 2025-11-29 18:58:08 - 2025-11-29 19:58:07 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0044s User: 0.0009s Wall: 0.0019s flows/second: 73352.8 Runtime: 0.0019s