Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 09:59:15.870 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45264 10 6452 1 2025-11-30 10:00:04.503 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 10:00:04.426 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 10:00:04.262 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:00:04.420 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:00:04.358 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 10:00:16.272 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41200 10 6452 1 2025-11-30 10:01:16.637 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53192 10 6452 1 2025-11-30 09:58:08.612 00:05:02.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 09:58:08.612 00:05:02.073 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 10:02:17.040 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58022 10 6452 1 2025-11-30 10:03:17.404 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60358 10 6452 1 2025-11-30 10:04:17.809 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55858 10 6452 1 2025-11-30 10:05:04.688 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 10:05:04.412 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:05:04.687 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:05:04.563 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 10:05:04.770 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 10:05:18.213 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35738 10 6452 1 2025-11-30 10:06:18.616 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59194 10 6452 1 2025-11-30 10:07:19.024 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35054 10 6452 1 2025-11-30 10:04:08.615 00:05:02.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 10:04:08.611 00:05:02.073 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 10:08:19.431 00:00:11.025 TCP 1.101.0.1:3000 -> 23.104.0.1:55764 10 6452 1 2025-11-30 10:09:20.492 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35336 10 6452 1 2025-11-30 10:10:04.550 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 10:10:04.496 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:10:04.468 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:10:04.642 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 10:10:04.765 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 10:10:20.856 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:38944 10 6452 1 2025-11-30 10:11:21.278 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42526 10 6452 1 2025-11-30 10:12:21.683 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53834 10 6452 1 2025-11-30 10:13:22.055 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46020 10 6452 1 2025-11-30 10:10:08.614 00:05:02.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 10:10:08.617 00:05:02.069 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 10:14:22.460 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36124 12 6556 1 2025-11-30 10:15:04.669 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:15:04.840 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 10:15:04.754 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 10:15:04.695 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:15:04.751 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 10:15:22.864 00:00:10.766 TCP 1.101.0.1:3000 -> 23.104.0.1:54158 10 6452 1 2025-11-30 10:16:23.668 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48022 10 6452 1 2025-11-30 10:17:24.099 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:59500 12 10369 1 2025-11-30 10:18:24.575 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33570 10 6452 1 2025-11-30 10:19:24.982 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32872 10 6452 1 2025-11-30 10:20:04.838 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 10:20:04.755 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:20:04.650 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 10:20:05.060 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 10:20:04.906 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:16:08.615 00:05:02.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 10:16:08.618 00:05:02.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 10:20:25.394 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42966 10 6452 1 2025-11-30 10:21:25.796 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45426 10 6452 1 2025-11-30 10:22:26.206 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50934 10 6452 1 2025-11-30 10:23:26.619 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33052 10 6452 1 2025-11-30 10:24:27.028 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46160 10 6452 1 2025-11-30 10:25:04.920 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 10:25:04.795 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:25:04.977 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:25:05.057 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 10:25:05.059 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 10:25:27.447 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50850 10 6452 1 2025-11-30 10:22:08.619 00:05:02.073 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 10:22:08.621 00:05:02.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 10:26:27.850 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:47682 10 6452 1 2025-11-30 10:27:28.275 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39240 10 6452 1 2025-11-30 10:28:28.684 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50270 10 6452 1 2025-11-30 10:29:29.053 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58328 10 6452 1 2025-11-30 10:30:05.284 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 10:30:05.090 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 10:30:04.930 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:30:05.200 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:30:05.099 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 10:30:29.458 00:00:10.483 TCP 1.101.0.1:3000 -> 23.104.0.1:53094 10 6452 1 2025-11-30 10:31:29.978 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50366 10 6452 1 2025-11-30 10:28:08.623 00:05:02.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 10:28:08.618 00:05:02.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 10:32:30.382 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:54082 12 10375 1 2025-11-30 10:33:30.867 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47644 10 6452 1 2025-11-30 10:34:31.235 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60798 10 6452 1 2025-11-30 10:35:04.972 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 10:35:04.972 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:35:05.115 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:35:04.952 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 10:35:05.199 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 10:35:31.597 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47236 10 6452 1 2025-11-30 10:36:32.006 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47088 10 6452 1 2025-11-30 10:37:32.416 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47530 10 6452 1 2025-11-30 10:34:08.625 00:05:02.075 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 10:34:08.623 00:05:02.081 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 10:38:32.777 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:41754 10 6452 1 2025-11-30 10:39:33.149 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39488 10 6452 1 2025-11-30 10:40:05.502 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 10:40:05.258 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 10:40:05.041 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:40:05.418 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:40:05.427 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 10:40:33.560 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57066 10 6452 1 2025-11-30 10:41:33.922 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:36776 10 6452 1 2025-11-30 10:42:34.310 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:57072 10 6452 1 2025-11-30 10:43:34.676 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51460 10 6452 1 2025-11-30 10:40:08.626 00:05:02.076 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 10:40:08.623 00:05:02.081 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 10:44:35.104 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44186 10 6452 1 2025-11-30 10:45:05.376 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 10:45:05.334 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:45:05.529 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:45:05.451 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 10:45:05.612 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 10:45:35.511 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41238 10 6452 1 2025-11-30 10:46:35.918 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37790 10 6452 1 2025-11-30 10:47:36.322 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54418 10 6452 1 2025-11-30 10:48:36.723 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37012 10 6452 1 2025-11-30 10:49:37.113 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:36132 10 6452 1 2025-11-30 10:50:05.417 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 10:50:05.795 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:50:05.706 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:50:05.798 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 10:50:05.789 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 10:46:08.625 00:05:02.081 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 10:46:08.627 00:05:02.076 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 10:50:37.554 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42510 11 6504 1 2025-11-30 10:51:37.965 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38874 10 6452 1 2025-11-30 10:52:38.384 00:00:10.431 TCP 1.101.0.1:3000 -> 23.104.0.1:57282 11 6504 1 2025-11-30 10:53:38.858 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:48572 10 6452 1 2025-11-30 10:54:39.268 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35074 10 6452 1 2025-11-30 10:55:05.692 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 10:55:05.787 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:55:05.570 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 10:55:05.692 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 10:55:05.653 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 10:55:39.630 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43512 10 6452 1 2025-11-30 10:52:08.628 00:05:02.079 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 10:52:08.626 00:05:02.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 10:56:40.032 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33462 10 6452 1 2025-11-30 10:57:40.427 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36244 10 6452 1 Summary: total flows: 139, total bytes: 418596, total packets: 1018, avg bps: 934, avg pps: 0, avg bpp: 411 Time window: 2025-11-30 09:58:08 - 2025-11-30 10:57:50 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0040s User: 0.0010s Wall: 0.0023s flows/second: 59961.8 Runtime: 0.0023s