Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 20:59:22.731 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53444 10 6452 1 2025-11-29 20:59:48.897 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 20:59:48.838 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:59:48.971 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 20:59:48.905 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 20:59:49.054 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 21:00:23.140 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53136 10 6452 1 2025-11-29 21:01:23.543 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33668 10 6452 1 2025-11-29 20:58:08.313 00:05:02.078 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 20:58:08.310 00:05:02.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 21:02:23.945 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47990 10 6452 1 2025-11-29 21:03:24.362 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41164 10 6452 1 2025-11-29 21:04:24.759 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40546 10 6452 1 2025-11-29 21:04:48.827 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 21:04:48.748 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 21:04:48.587 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:04:48.744 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:04:48.747 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 21:05:25.130 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34878 10 6452 1 2025-11-29 21:06:25.542 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48930 10 6452 1 2025-11-29 21:07:25.903 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58936 10 6452 1 2025-11-29 21:04:08.311 00:05:02.085 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 21:04:08.314 00:05:02.080 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 21:08:26.268 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56776 10 6452 1 2025-11-29 21:09:26.674 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45956 10 6452 1 2025-11-29 21:09:49.101 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 21:09:48.878 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:09:48.819 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:09:48.898 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 21:09:48.902 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 21:10:27.096 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34436 10 6452 1 2025-11-29 21:11:27.507 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51752 10 6452 1 2025-11-29 21:12:27.920 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47978 10 6452 1 2025-11-29 21:13:28.324 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57990 10 6452 1 2025-11-29 21:10:08.318 00:05:02.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 21:10:08.316 00:05:02.082 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 21:14:28.736 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44616 10 6452 1 2025-11-29 21:14:49.097 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 21:14:48.914 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:14:49.175 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:14:49.186 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 21:14:49.257 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 21:15:29.144 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55946 10 6452 1 2025-11-29 21:16:29.545 00:00:16.088 TCP 1.101.0.1:3000 -> 23.104.0.1:41912 10 6452 1 2025-11-29 21:17:35.683 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38880 10 6452 1 2025-11-29 21:18:36.111 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37912 10 6452 1 2025-11-29 21:19:49.202 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 21:19:48.885 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:19:49.003 00:00:00.049 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:19:49.190 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 21:19:36.515 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:37396 10 6452 1 2025-11-29 21:19:49.084 00:00:00.049 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 21:16:08.317 00:05:02.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 21:16:08.321 00:05:02.079 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 21:20:36.889 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:43714 10 6452 1 2025-11-29 21:21:37.309 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34142 10 6452 1 2025-11-29 21:22:37.715 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:52082 10 6452 1 2025-11-29 21:23:38.141 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60782 10 6452 1 2025-11-29 21:24:49.329 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 21:24:49.376 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:24:49.250 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:24:49.420 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 21:24:38.547 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33306 10 6452 1 2025-11-29 21:24:49.333 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 21:25:38.943 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:52316 10 6452 1 2025-11-29 21:22:08.323 00:05:02.078 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 21:22:08.321 00:05:02.083 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 21:26:39.323 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60448 10 6452 1 2025-11-29 21:27:39.727 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60904 10 6452 1 2025-11-29 21:28:40.136 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57196 10 6452 1 2025-11-29 21:29:40.542 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56080 10 6452 1 2025-11-29 21:29:49.444 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 21:29:49.507 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:29:49.369 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:29:49.603 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 21:29:49.453 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 21:30:40.944 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:35670 10 6452 1 2025-11-29 21:31:41.318 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:43162 10 6452 1 2025-11-29 21:28:08.325 00:05:02.079 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 21:28:08.322 00:05:02.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 21:32:41.714 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52112 10 6452 1 2025-11-29 21:33:42.119 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53774 10 6452 1 2025-11-29 21:34:50.699 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 21:34:50.810 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:34:50.810 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:34:50.493 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 21:34:50.893 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 21:34:42.522 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37612 10 6452 1 2025-11-29 21:35:42.930 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:50756 10 6452 1 2025-11-29 21:36:43.317 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56592 10 6452 1 2025-11-29 21:37:43.724 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:49754 10 6452 1 2025-11-29 21:34:08.339 00:05:02.070 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 21:34:08.341 00:05:02.066 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 21:38:44.146 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56576 10 6452 1 2025-11-29 21:39:49.658 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 21:39:49.356 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:39:49.643 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:39:49.331 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 21:39:49.727 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 21:39:44.553 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35330 10 6452 1 2025-11-29 21:40:44.955 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54252 10 6452 1 2025-11-29 21:41:45.354 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59524 10 6452 1 2025-11-29 21:42:45.767 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:53588 10 6452 1 2025-11-29 21:43:46.135 00:00:10.568 TCP 1.101.0.1:3000 -> 23.104.0.1:38568 10 6452 1 2025-11-29 21:40:08.330 00:05:02.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 21:40:08.328 00:05:02.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 21:44:49.676 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 21:44:49.493 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:44:49.594 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:44:49.633 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 21:44:49.629 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 21:44:46.744 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50384 10 6452 1 2025-11-29 21:45:47.146 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50926 10 6452 1 2025-11-29 21:46:47.552 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57352 10 6452 1 2025-11-29 21:47:47.972 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38168 10 6452 1 2025-11-29 21:48:48.386 00:00:10.990 TCP 1.101.0.1:3000 -> 23.104.0.1:47182 10 6452 1 2025-11-29 21:49:49.796 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 21:49:49.847 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 21:49:49.798 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:49:49.713 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:49:49.788 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 21:49:49.414 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42610 10 6452 1 2025-11-29 21:46:08.329 00:05:02.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 21:46:08.331 00:05:02.082 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 21:50:49.814 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47996 10 6452 1 2025-11-29 21:51:50.214 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37570 10 6452 1 2025-11-29 21:52:50.575 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44542 10 6452 1 2025-11-29 21:53:50.975 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39090 10 6452 1 2025-11-29 21:54:49.892 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 21:54:49.678 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:54:49.800 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 21:54:49.807 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 21:54:49.883 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 21:54:51.392 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39118 10 6452 1 2025-11-29 21:55:51.797 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37088 10 6452 1 2025-11-29 21:52:08.330 00:05:02.082 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 21:52:08.328 00:05:02.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 21:56:52.199 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47402 10 6452 1 2025-11-29 21:57:52.601 00:00:10.806 TCP 1.101.0.1:3000 -> 23.104.0.1:36690 10 6452 1 Summary: total flows: 139, total bytes: 410548, total packets: 1010, avg bps: 913, avg pps: 0, avg bpp: 406 Time window: 2025-11-29 20:58:08 - 2025-11-29 21:58:03 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0026s User: 0.0017s Wall: 0.0018s flows/second: 76883.6 Runtime: 0.0018s