Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 04:58:54.466 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50054 10 6452 1 2025-11-30 04:59:58.435 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 04:59:58.434 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 04:59:58.444 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:59:58.353 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 04:59:58.516 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 04:59:54.868 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40168 10 6452 1 2025-11-30 05:00:55.279 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42818 10 6452 1 2025-11-30 05:01:55.681 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47166 10 6452 1 2025-11-30 04:58:08.498 00:05:02.084 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 04:58:08.496 00:05:02.090 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 05:02:56.110 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42850 10 6452 1 2025-11-30 05:03:56.481 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41112 10 6452 1 2025-11-30 05:04:58.651 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 05:04:58.422 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:04:58.499 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:04:58.563 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 05:04:58.584 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 05:04:56.881 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40002 10 6452 1 2025-11-30 05:05:57.283 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33186 10 6452 1 2025-11-30 05:06:57.651 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42324 10 6452 1 2025-11-30 05:07:58.071 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58546 10 6452 1 2025-11-30 05:04:08.496 00:05:02.091 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 05:04:08.499 00:05:02.086 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 05:08:58.475 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50614 10 6452 1 2025-11-30 05:09:58.918 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 05:09:58.745 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 05:09:58.811 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:09:58.836 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:09:58.654 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 05:09:58.878 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49132 10 6452 1 2025-11-30 05:10:59.237 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57836 10 6452 1 2025-11-30 05:11:59.603 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58328 10 6452 1 2025-11-30 05:12:59.985 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59890 10 6452 1 2025-11-30 05:10:08.497 00:05:02.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 05:14:00.393 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53096 10 6452 1 2025-11-30 05:10:08.500 00:05:02.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 05:14:59.084 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 05:14:58.778 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:14:59.225 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:14:59.082 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 05:14:59.307 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 05:15:00.807 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42592 10 6452 1 2025-11-30 05:16:01.215 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38024 10 6452 1 2025-11-30 05:17:01.624 00:00:10.459 TCP 1.101.0.1:3000 -> 23.104.0.1:53976 12 10369 1 2025-11-30 05:18:02.117 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60448 10 6452 1 2025-11-30 05:19:02.525 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56262 10 6452 1 2025-11-30 05:19:58.919 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 05:19:58.671 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:19:58.864 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:19:58.920 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 05:19:58.947 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 05:16:08.502 00:05:02.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 05:20:02.941 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33608 10 6452 1 2025-11-30 05:16:08.499 00:05:02.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 05:21:03.362 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50814 10 6452 1 2025-11-30 05:22:03.760 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:57088 10 6452 1 2025-11-30 05:23:04.185 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39160 10 6452 1 2025-11-30 05:24:04.596 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58362 10 6452 1 2025-11-30 05:24:58.830 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 05:24:58.770 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:24:58.923 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:24:58.834 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 05:24:59.007 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 05:25:05.000 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38568 10 6452 1 2025-11-30 05:22:08.502 00:05:02.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 05:22:08.501 00:05:02.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 05:26:05.405 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56260 10 6452 1 2025-11-30 05:27:05.811 00:00:10.468 TCP 1.101.0.1:3000 -> 23.104.0.1:35660 10 6452 1 2025-11-30 05:28:06.313 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50094 10 6452 1 2025-11-30 05:29:06.713 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41230 10 6452 1 2025-11-30 05:29:59.265 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 05:29:59.213 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:29:59.300 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:29:59.060 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 05:29:59.384 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 05:30:07.114 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32998 10 6452 1 2025-11-30 05:31:07.519 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47834 10 6452 1 2025-11-30 05:28:08.503 00:05:02.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 05:28:08.501 00:05:02.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 05:32:07.877 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37744 10 6452 1 2025-11-30 05:33:08.282 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48180 10 6452 1 2025-11-30 05:34:08.643 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43360 10 6452 1 2025-11-30 05:34:59.147 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 05:34:59.237 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 05:34:59.092 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:34:59.066 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:34:59.060 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 05:35:09.049 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56756 10 6452 1 2025-11-30 05:36:09.453 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41504 10 6452 1 2025-11-30 05:37:09.854 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:37616 10 6452 1 2025-11-30 05:34:08.503 00:05:02.095 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 05:34:08.506 00:05:02.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 05:38:10.274 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:43028 10 6452 1 2025-11-30 05:39:10.644 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55878 10 6452 1 2025-11-30 05:39:59.317 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 05:39:59.349 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 05:39:59.012 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:39:59.234 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:39:59.299 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 05:40:11.055 00:00:11.263 TCP 1.101.0.1:3000 -> 23.104.0.1:38606 10 6452 1 2025-11-30 05:41:12.356 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59338 10 6452 1 2025-11-30 05:42:12.753 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:55992 10 6452 1 2025-11-30 05:43:13.179 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52690 10 6452 1 2025-11-30 05:40:08.506 00:05:02.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 05:40:08.504 00:05:02.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 05:44:13.574 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34822 10 6452 1 2025-11-30 05:44:59.344 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 05:44:59.265 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:44:59.441 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:44:59.342 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 05:44:59.524 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 05:45:13.975 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43554 10 6452 1 2025-11-30 05:46:14.387 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37008 10 6452 1 2025-11-30 05:47:14.790 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44328 10 6452 1 2025-11-30 05:48:15.188 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48724 10 6452 1 2025-11-30 05:49:15.588 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56148 10 6452 1 2025-11-30 05:49:59.340 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 05:49:59.448 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 05:49:59.365 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:49:59.257 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:49:59.396 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 05:46:08.507 00:05:02.092 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 05:46:08.505 00:05:02.097 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 05:50:15.993 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47838 10 6452 1 2025-11-30 05:51:16.394 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45026 10 6452 1 2025-11-30 05:52:16.793 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41120 10 6452 1 2025-11-30 05:53:17.204 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38654 10 6452 1 2025-11-30 05:54:17.571 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59538 10 6452 1 2025-11-30 05:54:59.382 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 05:54:59.435 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:54:59.556 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:54:59.494 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 05:54:59.638 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 05:55:17.976 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59856 10 6452 1 2025-11-30 05:52:08.508 00:05:02.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 05:52:08.506 00:05:02.098 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 05:56:18.387 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:52160 10 6452 1 2025-11-30 05:57:18.744 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45400 10 6452 1 2025-11-30 05:58:19.150 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47974 10 6452 1 Summary: total flows: 140, total bytes: 420917, total packets: 1022, avg bps: 929, avg pps: 0, avg bpp: 411 Time window: 2025-11-30 04:58:08 - 2025-11-30 05:58:29 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0042s User: 0.0021s Wall: 0.0021s flows/second: 67147.2 Runtime: 0.0021s