Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 16:59:32.534 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39854 10 6452 1 2025-11-30 17:00:13.075 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 17:00:13.000 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:00:13.091 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:00:12.993 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:00:13.091 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:00:32.900 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37754 10 6452 1 2025-11-30 17:01:33.314 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59910 10 6452 1 2025-11-30 16:58:08.738 00:05:02.111 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 16:58:08.741 00:05:02.106 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 17:02:33.714 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:50218 10 6452 1 2025-11-30 17:03:34.131 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43984 10 6452 1 2025-11-30 17:04:34.536 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57538 10 6452 1 2025-11-30 17:05:13.067 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:05:12.985 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:05:12.957 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:05:13.059 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:05:13.039 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 17:05:34.939 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:48384 12 6556 1 2025-11-30 17:06:35.367 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40010 10 6452 1 2025-11-30 17:07:35.771 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45110 10 6452 1 2025-11-30 17:04:08.744 00:05:02.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 17:04:08.743 00:05:02.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 17:08:36.186 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:32784 10 6452 1 2025-11-30 17:09:36.547 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46026 10 6452 1 2025-11-30 17:10:13.335 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 17:10:13.149 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:10:12.916 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:10:13.252 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:10:12.922 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:10:36.954 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43882 10 6452 1 2025-11-30 17:11:37.366 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46450 10 6452 1 2025-11-30 17:12:37.771 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:45138 12 10375 1 2025-11-30 17:13:38.262 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44188 10 6452 1 2025-11-30 17:10:08.744 00:05:02.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 17:10:08.742 00:05:02.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 17:14:38.626 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55024 10 6452 1 2025-11-30 17:15:13.272 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:15:13.374 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:15:13.281 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:15:13.379 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:15:13.462 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 17:15:39.035 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49408 10 6452 1 2025-11-30 17:16:39.440 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56634 10 6452 1 2025-11-30 17:17:39.847 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:37698 10 6452 1 2025-11-30 17:18:40.277 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:39016 10 6452 1 2025-11-30 17:19:40.635 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50112 10 6452 1 2025-11-30 17:20:13.217 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:20:12.978 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:20:13.434 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:20:13.387 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:16:08.748 00:05:02.101 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 17:16:08.745 00:05:02.107 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 17:20:13.517 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 17:20:41.040 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45112 10 6452 1 2025-11-30 17:21:41.404 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60464 10 6452 1 2025-11-30 17:22:41.806 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39870 10 6452 1 2025-11-30 17:23:42.216 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35572 10 6452 1 2025-11-30 17:24:42.621 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43192 10 6452 1 2025-11-30 17:25:13.467 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:25:13.070 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:25:13.346 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:25:13.400 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:25:13.429 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 17:25:43.025 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60510 10 6452 1 2025-11-30 17:22:08.745 00:05:02.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 17:22:08.748 00:05:02.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 17:26:43.429 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42320 10 6452 1 2025-11-30 17:27:43.833 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:49996 10 6452 1 2025-11-30 17:28:44.222 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48334 10 6452 1 2025-11-30 17:29:44.630 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48440 10 6452 1 2025-11-30 17:30:13.448 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:30:13.481 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:30:13.570 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:30:13.340 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:30:13.653 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 17:30:45.033 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39522 10 6452 1 2025-11-30 17:31:45.472 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40026 10 6452 1 2025-11-30 17:28:08.750 00:05:02.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 17:28:08.747 00:05:02.110 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 17:32:45.836 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43662 10 6452 1 2025-11-30 17:33:46.241 00:00:10.992 TCP 1.101.0.1:3000 -> 23.104.0.1:53426 10 6452 1 2025-11-30 17:34:47.272 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59626 10 6452 1 2025-11-30 17:35:13.841 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 17:35:13.759 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:35:13.499 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:35:13.758 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:35:13.854 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:35:47.676 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55846 10 6452 1 2025-11-30 17:36:48.114 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55514 10 6452 1 2025-11-30 17:37:48.518 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46632 10 6452 1 2025-11-30 17:34:08.751 00:05:02.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 17:34:08.749 00:05:02.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 17:38:48.884 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60522 10 6452 1 2025-11-30 17:39:49.299 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47520 10 6452 1 2025-11-30 17:40:13.787 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:40:13.611 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:40:13.682 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:40:13.688 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:40:13.765 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 17:40:49.721 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52238 10 6452 1 2025-11-30 17:41:50.148 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53500 10 6452 1 2025-11-30 17:42:50.561 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:39928 12 10375 1 2025-11-30 17:43:51.062 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55288 10 6452 1 2025-11-30 17:40:08.757 00:05:02.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 17:40:08.755 00:05:02.104 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 17:44:51.470 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47972 10 6452 1 2025-11-30 17:45:13.832 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:45:13.511 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:45:13.842 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:45:13.684 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:45:13.924 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 17:45:51.873 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41416 10 6452 1 2025-11-30 17:46:52.280 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55456 10 6452 1 2025-11-30 17:47:52.686 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58432 10 6452 1 2025-11-30 17:48:53.047 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56526 10 6452 1 2025-11-30 17:49:53.458 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45066 10 6452 1 2025-11-30 17:46:08.758 00:05:02.099 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 17:50:13.816 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:50:13.663 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:50:13.890 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:50:13.796 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:46:08.755 00:05:02.105 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 17:50:13.973 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 17:50:53.819 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53872 10 6452 1 2025-11-30 17:51:54.226 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49624 10 6452 1 2025-11-30 17:52:54.632 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58862 10 6452 1 2025-11-30 17:53:55.034 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:43318 10 6452 1 2025-11-30 17:54:55.395 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49892 10 6452 1 2025-11-30 17:55:14.013 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 17:55:13.989 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 17:55:13.937 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:55:13.929 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 17:55:13.987 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 17:55:55.793 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33158 10 6452 1 2025-11-30 17:52:08.758 00:05:02.101 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 17:52:08.757 00:05:02.106 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 17:56:56.196 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:33076 10 6452 1 2025-11-30 17:57:56.557 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56568 12 6556 1 Summary: total flows: 139, total bytes: 418602, total packets: 1018, avg bps: 930, avg pps: 0, avg bpp: 411 Time window: 2025-11-30 16:58:08 - 2025-11-30 17:58:06 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0048s User: 0.0010s Wall: 0.0017s flows/second: 81528.2 Runtime: 0.0017s