Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 00:59:08.680 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45386 10 6452 1 2025-11-30 00:59:53.731 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 00:59:53.583 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 00:59:53.581 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 00:59:53.729 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 00:59:53.665 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:00:09.109 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50238 10 6452 1 2025-11-30 01:01:09.514 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60216 10 6452 1 2025-11-30 00:58:08.430 00:05:02.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 00:58:08.433 00:05:02.053 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:02:09.876 00:00:10.648 TCP 1.101.0.1:3000 -> 23.104.0.1:42484 12 10375 1 2025-11-30 01:03:10.558 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34248 10 6452 1 2025-11-30 01:04:10.922 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:53224 10 6452 1 2025-11-30 01:04:53.497 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:04:53.564 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:04:53.579 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:04:53.655 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:04:53.662 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:05:11.296 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38864 10 6452 1 2025-11-30 01:06:11.705 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51938 10 6452 1 2025-11-30 01:07:12.114 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35762 10 6452 1 2025-11-30 01:04:08.433 00:05:02.054 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:04:08.430 00:05:02.060 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:08:12.527 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47900 10 6452 1 2025-11-30 01:09:12.935 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:38976 10 6452 1 2025-11-30 01:09:53.759 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:09:53.680 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:09:53.837 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:09:53.836 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:09:53.919 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:10:13.355 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50160 10 6452 1 2025-11-30 01:11:13.756 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:35668 10 6452 1 2025-11-30 01:12:14.178 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32980 10 6452 1 2025-11-30 01:13:14.581 00:00:10.502 TCP 1.101.0.1:3000 -> 23.104.0.1:58096 10 6452 1 2025-11-30 01:10:08.438 00:05:02.054 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:10:08.435 00:05:02.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:14:15.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39746 10 6452 1 2025-11-30 01:14:54.294 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:14:54.033 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:14:53.993 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:14:54.213 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:14:54.172 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:15:15.516 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46620 10 6452 1 2025-11-30 01:16:15.922 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33180 10 6452 1 2025-11-30 01:17:16.334 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49342 10 6452 1 2025-11-30 01:18:16.733 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57134 10 6452 1 2025-11-30 01:19:17.162 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35212 10 6452 1 2025-11-30 01:19:54.236 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:19:54.120 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:19:53.929 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:19:54.153 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:19:54.156 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:16:08.440 00:05:02.052 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:16:08.438 00:05:02.058 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:20:17.567 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56196 10 6452 1 2025-11-30 01:21:17.969 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54626 10 6452 1 2025-11-30 01:22:18.376 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48106 10 6452 1 2025-11-30 01:23:18.776 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52842 10 6452 1 2025-11-30 01:24:19.180 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54014 10 6452 1 2025-11-30 01:24:53.910 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:24:54.053 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:24:53.897 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:24:54.125 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:24:53.980 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:25:19.575 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57324 10 6452 1 2025-11-30 01:22:08.442 00:05:02.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:22:08.440 00:05:02.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:26:19.980 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33684 10 6452 1 2025-11-30 01:27:20.390 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45272 11 6492 1 2025-11-30 01:28:20.796 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59342 10 6452 1 2025-11-30 01:29:21.192 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38022 10 6452 1 2025-11-30 01:29:54.168 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:29:53.893 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:29:54.117 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:29:54.222 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:29:54.200 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:30:21.592 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49504 10 6452 1 2025-11-30 01:31:21.954 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38882 10 6452 1 2025-11-30 01:28:08.444 00:05:02.054 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:28:08.443 00:05:02.058 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:32:22.323 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54478 10 6452 1 2025-11-30 01:33:22.728 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40784 10 6452 1 2025-11-30 01:34:23.113 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49786 10 6452 1 2025-11-30 01:34:54.372 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:34:54.205 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:34:54.214 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:34:54.290 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:34:54.211 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:35:23.518 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57968 10 6452 1 2025-11-30 01:36:23.926 00:00:10.351 TCP 1.101.0.1:3000 -> 23.104.0.1:40636 10 6452 1 2025-11-30 01:37:24.324 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44848 10 6452 1 2025-11-30 01:34:08.446 00:05:02.053 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:34:08.444 00:05:02.058 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:38:24.731 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59984 10 6452 1 2025-11-30 01:39:25.144 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36116 10 6452 1 2025-11-30 01:39:54.489 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:39:54.408 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:39:54.043 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:39:54.407 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:39:54.310 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:40:25.548 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42638 10 6452 1 2025-11-30 01:41:25.958 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33218 10 6452 1 2025-11-30 01:42:26.361 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41268 10 6452 1 2025-11-30 01:43:26.764 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44238 12 6556 1 2025-11-30 01:40:08.446 00:05:02.058 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:40:08.448 00:05:02.053 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:44:27.174 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52774 10 6452 1 2025-11-30 01:44:54.376 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:44:54.362 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:44:54.472 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:44:54.558 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:44:54.554 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:45:27.538 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52632 10 6452 1 2025-11-30 01:46:27.956 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46454 10 6452 1 2025-11-30 01:47:28.375 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58572 10 6452 1 2025-11-30 01:48:28.780 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43078 10 6452 1 2025-11-30 01:49:29.142 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:56598 10 6452 1 2025-11-30 01:49:54.847 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:49:54.709 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:49:54.860 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:49:54.856 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:49:54.943 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:46:08.451 00:05:02.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:46:08.448 00:05:02.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:50:29.515 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53598 10 6452 1 2025-11-30 01:51:29.926 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:42080 10 6452 1 2025-11-30 01:52:30.353 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:40350 12 10375 1 2025-11-30 01:53:30.829 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49586 10 6452 1 2025-11-30 01:54:31.197 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42076 10 6452 1 2025-11-30 01:54:54.637 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 01:54:54.669 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:54:54.555 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 01:54:54.637 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 01:54:54.638 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 01:55:31.564 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40978 10 6452 1 2025-11-30 01:52:08.449 00:05:02.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 01:52:08.450 00:05:02.055 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 01:56:31.973 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:40910 10 6452 1 2025-11-30 01:57:32.402 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43648 10 6452 1 2025-11-30 01:58:32.766 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33518 10 6452 1 Summary: total flows: 140, total bytes: 424990, total packets: 1027, avg bps: 935, avg pps: 0, avg bpp: 413 Time window: 2025-11-30 00:58:08 - 2025-11-30 01:58:43 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0065s User: 0.0000s Wall: 0.0019s flows/second: 72727.6 Runtime: 0.0019s