Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 19:58:57.653 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:36976 10 6452 1 2025-11-29 19:59:47.538 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 19:59:47.567 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 19:59:47.766 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:59:47.455 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 19:59:47.455 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 19:59:58.013 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50298 10 6452 1 2025-11-29 20:00:58.375 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:34548 10 6452 1 2025-11-29 20:01:58.733 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42748 10 6452 1 2025-11-29 19:58:08.290 00:05:02.080 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 19:58:08.287 00:05:02.085 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 20:02:59.137 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:57350 10 6452 1 2025-11-29 20:03:59.532 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52294 10 6452 1 2025-11-29 20:04:47.781 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 20:04:47.696 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 20:04:47.626 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:04:47.698 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:04:47.523 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 20:04:59.891 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:41870 12 6556 1 2025-11-29 20:06:00.364 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:56378 10 6452 1 2025-11-29 20:07:00.763 00:00:10.452 TCP 1.101.0.1:3000 -> 23.104.0.1:58634 12 10375 1 2025-11-29 20:04:08.291 00:05:02.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 20:08:01.255 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60004 10 6452 1 2025-11-29 20:04:08.288 00:05:02.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 20:09:01.695 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56116 10 6452 1 2025-11-29 20:09:47.915 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 20:09:47.631 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:09:47.755 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:09:47.759 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 20:09:47.838 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 20:10:02.107 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60696 10 6452 1 2025-11-29 20:11:02.527 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57662 10 6452 1 2025-11-29 20:12:02.899 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:60628 12 10375 1 2025-11-29 20:13:03.376 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35706 10 6452 1 2025-11-29 20:10:08.290 00:05:02.085 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 20:14:03.755 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:38924 10 6452 1 2025-11-29 20:10:08.292 00:05:02.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 20:14:48.798 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 20:14:48.631 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 20:14:48.659 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:14:48.715 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:14:48.692 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 20:15:04.178 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42506 10 6452 1 2025-11-29 20:16:04.584 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51404 10 6452 1 2025-11-29 20:17:04.992 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:34864 10 6452 1 2025-11-29 20:18:05.362 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60540 10 6452 1 2025-11-29 20:19:05.764 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57476 10 6452 1 2025-11-29 20:19:47.948 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 20:19:48.078 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:19:48.176 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:19:48.081 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 20:19:48.258 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 20:16:08.295 00:05:02.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 20:16:08.293 00:05:02.085 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 20:20:06.178 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42570 10 6452 1 2025-11-29 20:21:06.584 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46534 10 6452 1 2025-11-29 20:22:06.987 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:41126 10 6452 1 2025-11-29 20:23:07.360 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60824 10 6452 1 2025-11-29 20:24:07.768 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:54660 10 6452 1 2025-11-29 20:24:47.972 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 20:24:47.842 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:24:47.984 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:24:48.078 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 20:24:48.067 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 20:25:08.139 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58896 10 6452 1 2025-11-29 20:22:08.295 00:05:02.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 20:22:08.297 00:05:02.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 20:26:08.543 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37272 10 6452 1 2025-11-29 20:27:08.906 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37600 10 6452 1 2025-11-29 20:28:09.313 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58308 10 6452 1 2025-11-29 20:29:09.716 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:33080 10 6452 1 2025-11-29 20:29:48.290 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 20:29:48.164 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 20:29:48.175 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:29:48.208 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:29:48.219 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 20:30:10.137 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50740 10 6452 1 2025-11-29 20:31:10.543 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36294 10 6452 1 2025-11-29 20:28:08.295 00:05:02.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 20:28:08.299 00:05:02.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 20:32:10.908 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:41468 12 10375 1 2025-11-29 20:33:11.385 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50796 10 6452 1 2025-11-29 20:34:11.786 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36248 10 6452 1 2025-11-29 20:34:48.341 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 20:34:48.085 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:34:48.412 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:34:48.331 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 20:34:48.496 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 20:35:12.194 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56270 10 6452 1 2025-11-29 20:36:12.601 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37274 10 6452 1 2025-11-29 20:37:13.006 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:35878 10 6452 1 2025-11-29 20:34:08.305 00:05:02.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 20:34:08.303 00:05:02.082 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 20:38:13.430 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:44998 10 6452 1 2025-11-29 20:39:13.802 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:38446 10 6452 1 2025-11-29 20:39:48.458 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 20:39:48.290 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:39:48.531 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:39:48.526 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 20:39:48.614 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 20:40:14.187 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:38000 10 6452 1 2025-11-29 20:41:14.551 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54576 10 6452 1 2025-11-29 20:42:14.956 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42884 10 6452 1 2025-11-29 20:43:15.317 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60874 10 6452 1 2025-11-29 20:40:08.307 00:05:02.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 20:40:08.304 00:05:02.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 20:44:15.718 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:36030 10 6452 1 2025-11-29 20:44:48.745 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 20:44:48.768 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:44:48.684 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:44:48.686 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 20:44:48.768 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 20:45:16.143 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52652 10 6452 1 2025-11-29 20:46:16.505 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57404 10 6452 1 2025-11-29 20:47:16.913 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60386 10 6452 1 2025-11-29 20:48:17.320 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46076 10 6452 1 2025-11-29 20:49:17.683 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54590 10 6452 1 2025-11-29 20:49:48.523 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 20:49:48.215 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:49:48.453 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:49:48.453 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 20:49:48.536 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 20:46:08.309 00:05:02.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 20:46:08.306 00:05:02.082 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 20:50:18.114 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56438 10 6452 1 2025-11-29 20:51:18.513 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:42022 10 6452 1 2025-11-29 20:52:18.945 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41534 10 6452 1 2025-11-29 20:53:19.360 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55460 10 6452 1 2025-11-29 20:54:19.757 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:41126 10 6452 1 2025-11-29 20:54:48.655 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 20:54:48.768 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:54:48.776 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:54:48.557 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 20:54:48.860 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 20:55:20.190 00:00:11.348 TCP 1.101.0.1:3000 -> 23.104.0.1:51080 10 6452 1 2025-11-29 20:52:08.307 00:05:02.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 20:52:08.310 00:05:02.079 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 20:56:21.577 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34518 10 6452 1 2025-11-29 20:57:21.943 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:42136 10 6452 1 2025-11-29 20:58:22.320 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44064 10 6452 1 Summary: total flows: 140, total bytes: 428873, total packets: 1028, avg bps: 946, avg pps: 0, avg bpp: 417 Time window: 2025-11-29 19:58:08 - 2025-11-29 20:58:32 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0020s User: 0.0031s Wall: 0.0018s flows/second: 75846.4 Runtime: 0.0019s