Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 05:59:19.559 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38064 10 6452 1 2025-11-30 05:59:59.918 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 05:59:59.675 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:59:59.965 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 05:59:59.963 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:00:00.047 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:00:19.962 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57242 10 6452 1 2025-11-30 06:01:20.364 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57540 10 6452 1 2025-11-30 05:58:08.510 00:05:02.091 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 05:58:08.508 00:05:02.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:02:20.767 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:48484 12 10369 1 2025-11-30 06:03:21.213 00:00:10.986 TCP 1.101.0.1:3000 -> 23.104.0.1:44638 10 6452 1 2025-11-30 06:04:22.236 00:00:12.304 TCP 1.101.0.1:3000 -> 23.104.0.1:46916 10 6452 1 2025-11-30 06:04:59.929 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:04:59.746 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:04:59.716 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:04:59.845 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:04:59.585 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:05:24.578 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55780 10 6452 1 2025-11-30 06:06:24.946 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56506 10 6452 1 2025-11-30 06:07:25.362 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58084 10 6452 1 2025-11-30 06:04:08.511 00:05:02.092 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:04:08.510 00:05:02.097 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:08:25.768 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:38850 10 6452 1 2025-11-30 06:09:26.180 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35852 10 6452 1 2025-11-30 06:09:59.705 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:09:59.584 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:09:59.788 00:00:00.038 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:09:59.793 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:09:59.876 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:10:26.580 00:00:10.790 TCP 1.101.0.1:3000 -> 23.104.0.1:39456 10 6452 1 2025-11-30 06:11:27.409 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43406 10 6452 1 2025-11-30 06:12:27.812 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55632 10 6452 1 2025-11-30 06:13:28.214 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41900 10 6452 1 2025-11-30 06:10:08.512 00:05:02.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:10:08.515 00:05:02.091 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:14:28.579 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59164 10 6452 1 2025-11-30 06:14:59.770 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:14:59.708 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:14:59.983 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:14:59.983 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:15:00.067 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:15:28.979 00:00:10.730 TCP 1.101.0.1:3000 -> 23.104.0.1:59638 10 6452 1 2025-11-30 06:16:29.748 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:35396 10 6452 1 2025-11-30 06:17:30.184 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39456 10 6452 1 2025-11-30 06:18:30.597 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38314 10 6452 1 2025-11-30 06:19:31.001 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:56262 10 6452 1 2025-11-30 06:20:00.351 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:20:00.452 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:20:00.273 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:20:00.268 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:19:59.976 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:16:08.514 00:05:02.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:16:08.516 00:05:02.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:20:31.403 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34656 10 6452 1 2025-11-30 06:21:31.819 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:56320 10 6452 1 2025-11-30 06:22:32.261 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:41314 10 6452 1 2025-11-30 06:23:32.687 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38056 10 6452 1 2025-11-30 06:24:33.112 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:41182 10 6452 1 2025-11-30 06:25:00.306 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:25:00.225 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:25:00.003 00:00:00.043 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:25:00.362 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:25:00.086 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:25:33.464 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33870 10 6452 1 2025-11-30 06:22:08.520 00:05:02.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:22:08.517 00:05:02.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:26:33.866 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48364 10 6452 1 2025-11-30 06:27:34.272 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34084 10 6452 1 2025-11-30 06:28:34.677 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37934 10 6452 1 2025-11-30 06:29:35.107 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52462 10 6452 1 2025-11-30 06:30:00.313 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:29:59.994 00:00:00.048 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:30:00.389 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:30:00.184 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:30:00.471 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:30:35.509 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42828 10 6452 1 2025-11-30 06:31:35.910 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48358 10 6452 1 2025-11-30 06:28:08.519 00:05:02.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:28:08.522 00:05:02.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:32:36.315 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40870 10 6452 1 2025-11-30 06:33:36.718 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:55498 10 6452 1 2025-11-30 06:34:37.140 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51230 10 6452 1 2025-11-30 06:35:00.414 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:35:00.223 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:35:00.281 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:35:00.280 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:35:00.364 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:35:37.541 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50398 10 6452 1 2025-11-30 06:36:37.948 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:48986 10 6452 1 2025-11-30 06:37:38.328 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35958 10 6452 1 2025-11-30 06:34:08.521 00:05:02.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:34:08.519 00:05:02.095 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:38:38.729 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42104 10 6452 1 2025-11-30 06:39:39.147 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38672 10 6452 1 2025-11-30 06:40:00.637 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:40:00.714 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:40:00.421 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:40:00.556 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:40:00.486 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:40:39.553 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52596 10 6452 1 2025-11-30 06:41:39.949 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43980 10 6452 1 2025-11-30 06:42:40.358 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54530 10 6452 1 2025-11-30 06:43:40.764 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37178 10 6452 1 2025-11-30 06:40:08.526 00:05:02.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:40:08.523 00:05:02.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:44:41.182 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52718 10 6452 1 2025-11-30 06:45:00.537 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:45:00.423 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:45:00.695 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:45:00.545 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:45:00.777 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:45:41.544 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59990 10 6452 1 2025-11-30 06:46:41.958 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58428 10 6452 1 2025-11-30 06:47:42.316 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46654 10 6452 1 2025-11-30 06:48:42.723 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58822 10 6452 1 2025-11-30 06:49:43.130 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:44970 10 6452 1 2025-11-30 06:50:00.683 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:50:00.386 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:50:00.678 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:50:00.543 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:50:00.761 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:46:08.538 00:05:02.077 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:46:08.535 00:05:02.081 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:50:43.490 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:33074 10 6452 1 2025-11-30 06:51:43.879 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45150 10 6452 1 2025-11-30 06:52:44.248 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53058 10 6452 1 2025-11-30 06:53:44.650 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35798 10 6452 1 2025-11-30 06:54:45.066 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:59386 10 6452 1 2025-11-30 06:55:00.889 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 06:55:00.665 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 06:55:00.583 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:55:00.807 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 06:55:00.742 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 06:55:45.488 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56706 10 6452 1 2025-11-30 06:52:08.539 00:05:02.076 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 06:52:08.536 00:05:02.081 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 06:56:45.848 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:58580 10 6452 1 2025-11-30 06:57:46.273 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48796 10 6452 1 Summary: total flows: 139, total bytes: 414465, total packets: 1012, avg bps: 924, avg pps: 0, avg bpp: 409 Time window: 2025-11-30 05:58:08 - 2025-11-30 06:57:56 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0039s User: 0.0019s Wall: 0.0018s flows/second: 75421.5 Runtime: 0.0019s