Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 20:59:11.202 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47088 10 6452 1 2025-11-30 21:00:17.786 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 21:00:17.626 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:00:17.767 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:00:17.704 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:00:17.532 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:00:11.606 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55358 10 6452 1 2025-11-30 21:01:11.969 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:50822 10 6452 1 2025-11-30 20:58:08.813 00:05:02.126 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 20:58:08.811 00:05:02.131 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 21:02:12.342 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:50280 12 6556 1 2025-11-30 21:03:12.760 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35752 10 6452 1 2025-11-30 21:04:13.176 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46172 10 6452 1 2025-11-30 21:05:18.299 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 21:05:17.912 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:05:17.868 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:05:18.218 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:05:18.210 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:05:13.574 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42308 10 6452 1 2025-11-30 21:06:13.939 00:00:10.407 TCP 1.101.0.1:3000 -> 23.104.0.1:50452 10 6452 1 2025-11-30 21:07:14.387 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37716 10 6452 1 2025-11-30 21:04:08.815 00:05:02.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 21:04:08.813 00:05:02.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 21:08:14.751 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50578 10 6452 1 2025-11-30 21:09:15.155 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41756 10 6452 1 2025-11-30 21:10:18.052 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 21:10:18.059 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:10:17.836 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:10:17.970 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:10:18.122 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:10:15.556 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50932 10 6452 1 2025-11-30 21:11:15.961 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45888 10 6452 1 2025-11-30 21:12:16.325 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57822 10 6452 1 2025-11-30 21:13:16.728 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39818 10 6452 1 2025-11-30 21:10:08.813 00:05:02.137 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 21:10:08.815 00:05:02.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 21:14:17.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60072 10 6452 1 2025-11-30 21:15:17.921 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:15:18.068 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:15:18.097 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:15:17.783 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:15:18.181 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 21:15:17.516 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58626 10 6452 1 2025-11-30 21:16:17.872 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:32894 10 6452 1 2025-11-30 21:17:18.282 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35452 10 6452 1 2025-11-30 21:18:18.693 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52022 10 6452 1 2025-11-30 21:19:19.105 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45668 10 6452 1 2025-11-30 21:16:08.817 00:05:02.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 21:16:08.815 00:05:02.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 21:20:18.271 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 21:20:18.182 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:20:17.951 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:20:18.187 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:20:18.130 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:20:19.521 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39980 10 6452 1 2025-11-30 21:21:19.883 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:48036 10 6452 1 2025-11-30 21:22:20.323 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43552 10 6452 1 2025-11-30 21:23:20.730 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45332 10 6452 1 2025-11-30 21:24:21.134 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60240 10 6452 1 2025-11-30 21:25:18.078 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 21:25:18.184 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:25:18.015 00:00:00.031 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:25:17.995 00:00:00.045 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:25:17.990 00:00:00.051 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:25:21.538 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54000 10 6452 1 2025-11-30 21:22:08.821 00:05:02.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 21:22:08.823 00:05:02.130 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 21:26:21.941 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:60878 10 6452 1 2025-11-30 21:27:22.312 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39566 10 6452 1 2025-11-30 21:28:22.713 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42476 10 6452 1 2025-11-30 21:29:23.116 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55024 10 6452 1 2025-11-30 21:30:18.311 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:30:18.263 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:30:18.240 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:30:18.254 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:30:18.345 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 21:30:23.485 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:39038 10 6452 1 2025-11-30 21:31:23.975 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46782 10 6452 1 2025-11-30 21:28:08.823 00:05:02.132 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 21:28:08.826 00:05:02.127 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 21:32:24.383 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50186 10 6452 1 2025-11-30 21:33:24.790 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:47068 10 6452 1 2025-11-30 21:34:25.151 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38188 10 6452 1 2025-11-30 21:35:18.573 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 21:35:18.410 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:35:18.405 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:35:18.491 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:35:18.401 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:35:25.516 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45326 10 6452 1 2025-11-30 21:36:25.889 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:49990 10 6452 1 2025-11-30 21:37:26.313 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48630 10 6452 1 2025-11-30 21:34:08.827 00:05:02.127 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 21:34:08.825 00:05:02.132 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 21:38:26.720 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37168 10 6452 1 2025-11-30 21:39:27.137 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38128 10 6452 1 2025-11-30 21:40:18.610 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 21:40:18.586 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:40:18.608 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:40:18.527 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:40:18.452 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:40:27.549 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54458 10 6452 1 2025-11-30 21:41:27.950 00:00:11.541 TCP 1.101.0.1:3000 -> 23.104.0.1:54354 10 6452 1 2025-11-30 21:42:29.530 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53552 10 6452 1 2025-11-30 21:43:29.942 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:48900 10 6452 1 2025-11-30 21:40:08.831 00:05:02.126 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 21:40:08.826 00:05:02.131 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 21:44:30.363 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55990 10 6452 1 2025-11-30 21:45:18.881 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 21:45:18.671 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:45:18.627 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:45:18.799 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:45:18.799 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:45:30.725 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59740 10 6452 1 2025-11-30 21:46:31.138 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33256 10 6452 1 2025-11-30 21:47:31.541 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59078 10 6452 1 2025-11-30 21:48:31.939 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:40280 10 6452 1 2025-11-30 21:49:32.364 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36496 10 6452 1 2025-11-30 21:46:08.831 00:05:02.125 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 21:50:18.517 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:50:18.707 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:50:18.525 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:50:18.841 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:46:08.828 00:05:02.130 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 21:50:18.607 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 21:50:32.772 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40352 10 6452 1 2025-11-30 21:51:33.195 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:51396 10 6452 1 2025-11-30 21:52:33.571 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44954 10 6452 1 2025-11-30 21:53:33.976 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:42176 10 6452 1 2025-11-30 21:54:34.393 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43484 10 6452 1 2025-11-30 21:55:18.825 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 21:55:18.615 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:55:18.908 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 21:55:18.683 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 21:55:18.990 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 21:55:34.806 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34840 10 6452 1 2025-11-30 21:52:08.833 00:05:02.125 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 21:52:08.830 00:05:02.130 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 21:56:35.216 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38816 10 6452 1 2025-11-30 21:57:35.583 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54810 10 6452 1 2025-11-30 21:58:36.019 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:35086 10 6452 1 Summary: total flows: 140, total bytes: 417104, total packets: 1022, avg bps: 917, avg pps: 0, avg bpp: 408 Time window: 2025-11-30 20:58:08 - 2025-11-30 21:58:46 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0042s User: 0.0011s Wall: 0.0019s flows/second: 75186.0 Runtime: 0.0019s