Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 22:59:20.014 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58814 10 6452 1 2025-11-29 22:59:51.339 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 22:59:51.033 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 22:59:51.080 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 22:59:51.257 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 22:59:51.028 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:00:20.418 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35794 10 6452 1 2025-11-29 23:01:20.825 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47916 10 6452 1 2025-11-29 22:58:08.388 00:05:02.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 22:58:08.385 00:05:02.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:02:21.226 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45874 10 6452 1 2025-11-29 23:03:21.639 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59936 10 6452 1 2025-11-29 23:04:22.039 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35978 10 6452 1 2025-11-29 23:04:51.527 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:04:51.522 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:04:51.448 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:04:51.446 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:04:51.454 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:05:22.444 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51014 10 6452 1 2025-11-29 23:06:22.842 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:39084 12 6556 1 2025-11-29 23:07:23.268 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55504 10 6452 1 2025-11-29 23:04:08.389 00:05:02.050 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:04:08.387 00:05:02.055 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:08:23.684 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54334 10 6452 1 2025-11-29 23:09:24.115 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:40440 10 6452 1 2025-11-29 23:09:51.501 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:09:51.347 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:09:51.500 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:09:51.350 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:09:51.430 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:10:24.560 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45968 10 6452 1 2025-11-29 23:11:24.964 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44098 10 6452 1 2025-11-29 23:12:25.384 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57450 10 6452 1 2025-11-29 23:13:25.792 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57994 10 6452 1 2025-11-29 23:10:08.391 00:05:02.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:10:08.388 00:05:02.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:14:26.199 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55518 10 6452 1 2025-11-29 23:14:51.573 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:14:51.351 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:14:51.670 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:14:51.572 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:14:51.752 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:15:26.602 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58214 10 6452 1 2025-11-29 23:16:27.003 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45048 10 6452 1 2025-11-29 23:17:27.369 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35288 10 6452 1 2025-11-29 23:18:27.741 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58882 10 6452 1 2025-11-29 23:19:28.109 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59096 10 6452 1 2025-11-29 23:19:51.691 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:19:51.609 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:19:51.436 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:19:51.440 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:19:51.491 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:16:08.394 00:05:02.053 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:16:08.390 00:05:02.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:20:28.514 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34662 10 6452 1 2025-11-29 23:21:28.925 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56002 10 6452 1 2025-11-29 23:22:29.325 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45096 10 6452 1 2025-11-29 23:23:29.736 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41058 10 6452 1 2025-11-29 23:24:30.145 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37992 10 6452 1 2025-11-29 23:24:51.860 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:24:51.779 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:24:51.649 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:24:51.776 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:24:51.772 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:25:30.554 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53174 10 6452 1 2025-11-29 23:22:08.393 00:05:02.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:22:08.396 00:05:02.054 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:26:30.960 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39646 10 6452 1 2025-11-29 23:27:31.368 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56232 10 6452 1 2025-11-29 23:28:31.737 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34632 10 6452 1 2025-11-29 23:29:32.146 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48362 10 6452 1 2025-11-29 23:29:51.901 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:29:51.996 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:29:51.759 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:29:51.820 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:29:51.768 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:30:32.544 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48006 10 6452 1 2025-11-29 23:31:32.953 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38548 10 6452 1 2025-11-29 23:28:08.396 00:05:02.060 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:28:08.393 00:05:02.065 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:32:33.365 00:00:10.789 TCP 1.101.0.1:3000 -> 23.104.0.1:57240 10 6452 1 2025-11-29 23:33:34.194 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56788 10 6452 1 2025-11-29 23:34:34.555 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40758 10 6452 1 2025-11-29 23:34:51.993 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:34:51.554 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:34:51.940 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:34:51.941 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:34:52.024 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:35:34.955 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50770 10 6452 1 2025-11-29 23:36:35.364 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:32856 10 6452 1 2025-11-29 23:37:35.784 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44154 10 6452 1 2025-11-29 23:34:08.395 00:05:02.065 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:34:08.398 00:05:02.060 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:38:36.215 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40606 10 6452 1 2025-11-29 23:39:36.619 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40404 10 6452 1 2025-11-29 23:39:52.000 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:39:52.172 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:39:51.990 00:00:00.050 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:39:51.983 00:00:00.059 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:39:52.074 00:00:00.050 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:40:37.032 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57560 10 6452 1 2025-11-29 23:41:37.437 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36118 10 6452 1 2025-11-29 23:42:37.846 00:00:10.459 TCP 1.101.0.1:3000 -> 23.104.0.1:42510 12 10369 1 2025-11-29 23:43:38.345 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48200 10 6452 1 2025-11-29 23:40:08.398 00:05:02.068 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:40:08.401 00:05:02.064 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:44:38.758 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:34946 10 6452 1 2025-11-29 23:44:52.233 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:44:52.085 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:44:51.884 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:44:52.149 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:44:51.971 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:45:39.182 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57996 10 6452 1 2025-11-29 23:46:39.595 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33674 10 6452 1 2025-11-29 23:47:40.001 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41294 10 6452 1 2025-11-29 23:48:40.407 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:52052 10 6452 1 2025-11-29 23:49:52.281 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:49:52.197 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:49:52.097 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:49:52.097 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:49:40.802 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:38140 10 6452 1 2025-11-29 23:49:52.178 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:46:08.407 00:05:02.063 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:46:08.410 00:05:02.058 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:50:41.184 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36202 10 6452 1 2025-11-29 23:51:41.593 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33742 10 6452 1 2025-11-29 23:52:41.996 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60672 10 6452 1 2025-11-29 23:53:42.398 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41474 10 6452 1 2025-11-29 23:54:42.804 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:39394 10 6452 1 2025-11-29 23:54:52.303 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-29 23:54:52.279 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:54:52.411 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-29 23:54:52.306 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-29 23:54:52.494 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-29 23:55:43.192 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40616 10 6452 1 2025-11-29 23:52:08.410 00:05:02.062 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-29 23:52:08.412 00:05:02.056 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-29 23:56:43.595 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56168 10 6452 1 2025-11-29 23:57:44.002 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53954 10 6452 1 Summary: total flows: 139, total bytes: 414569, total packets: 1014, avg bps: 924, avg pps: 0, avg bpp: 408 Time window: 2025-11-29 22:58:08 - 2025-11-29 23:57:54 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0045s User: 0.0009s Wall: 0.0027s flows/second: 50692.0 Runtime: 0.0028s