Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 21:59:36.447 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46824 10 6452 1 2025-11-30 22:00:18.809 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:00:18.974 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:00:18.881 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:00:18.725 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:00:18.858 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:00:36.852 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:57380 10 6452 1 2025-11-30 22:01:37.277 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54134 10 6452 1 2025-11-30 21:58:08.831 00:05:02.133 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 21:58:08.833 00:05:02.128 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:02:37.682 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:60946 12 10369 1 2025-11-30 22:03:38.120 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42172 10 6452 1 2025-11-30 22:04:38.520 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57976 10 6452 1 2025-11-30 22:05:19.238 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:05:19.387 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:05:19.183 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:05:19.154 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:05:19.442 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:05:38.926 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:37068 10 6452 1 2025-11-30 22:06:39.358 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35532 10 6452 1 2025-11-30 22:07:39.760 00:00:10.467 TCP 1.101.0.1:3000 -> 23.104.0.1:55258 12 10375 1 2025-11-30 22:04:08.833 00:05:02.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:04:08.836 00:05:02.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:08:40.272 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37514 10 6452 1 2025-11-30 22:09:40.686 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44770 10 6452 1 2025-11-30 22:10:19.330 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:10:19.173 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:10:19.013 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:10:19.249 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:10:19.282 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:10:41.112 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55348 10 6452 1 2025-11-30 22:11:41.516 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34906 10 6452 1 2025-11-30 22:12:41.923 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:41856 10 6452 1 2025-11-30 22:13:42.347 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44110 10 6452 1 2025-11-30 22:10:08.834 00:05:02.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:10:08.836 00:05:02.130 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:14:42.755 00:00:10.734 TCP 1.101.0.1:3000 -> 23.104.0.1:57856 10 6452 1 2025-11-30 22:15:18.977 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:15:19.112 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:15:19.288 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:15:18.895 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:15:19.214 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:15:43.524 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44324 10 6452 1 2025-11-30 22:16:43.931 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:56488 10 6452 1 2025-11-30 22:17:44.361 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39690 10 6452 1 2025-11-30 22:18:44.769 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41188 10 6452 1 2025-11-30 22:19:45.175 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44506 10 6452 1 2025-11-30 22:16:08.834 00:05:02.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:16:08.838 00:05:02.130 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:20:19.279 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:20:19.295 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:20:19.233 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:20:19.196 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:20:19.294 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:20:45.575 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50836 10 6452 1 2025-11-30 22:21:45.987 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35022 10 6452 1 2025-11-30 22:22:46.390 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44454 10 6452 1 2025-11-30 22:23:46.800 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:48740 10 6452 1 2025-11-30 22:24:47.193 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44818 10 6452 1 2025-11-30 22:25:19.476 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:25:19.003 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:25:19.370 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:25:19.506 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:25:19.453 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:25:47.596 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39598 10 6452 1 2025-11-30 22:22:08.838 00:05:02.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:22:08.840 00:05:02.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:26:47.997 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36238 10 6452 1 2025-11-30 22:27:48.401 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46424 10 6452 1 2025-11-30 22:28:48.762 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:50406 10 6452 1 2025-11-30 22:29:49.189 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:42074 10 6452 1 2025-11-30 22:30:19.631 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:30:19.430 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:30:19.261 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:30:19.549 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:30:19.562 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:30:49.564 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48480 10 6452 1 2025-11-30 22:31:49.959 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:37518 10 6452 1 2025-11-30 22:28:08.839 00:05:02.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:28:08.841 00:05:02.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:32:50.320 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58562 10 6452 1 2025-11-30 22:33:50.718 00:00:10.494 TCP 1.101.0.1:3000 -> 23.104.0.1:36284 10 6452 1 2025-11-30 22:34:51.248 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41326 10 6452 1 2025-11-30 22:35:19.676 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:35:19.657 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:35:19.668 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:35:19.592 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:35:19.493 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:35:51.645 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50170 10 6452 1 2025-11-30 22:36:52.010 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46632 10 6452 1 2025-11-30 22:37:52.413 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:60326 12 10375 1 2025-11-30 22:34:08.839 00:05:02.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:34:08.842 00:05:02.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:38:52.891 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:44586 10 6452 1 2025-11-30 22:39:53.308 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42382 10 6452 1 2025-11-30 22:40:19.737 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:40:19.905 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:40:19.701 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:40:19.654 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:40:19.779 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:40:53.716 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42130 10 6452 1 2025-11-30 22:41:54.131 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40408 10 6452 1 2025-11-30 22:42:54.540 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:47432 12 10369 1 2025-11-30 22:43:55.027 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45192 10 6452 1 2025-11-30 22:40:08.843 00:05:02.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:40:08.840 00:05:02.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:44:55.433 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59392 10 6452 1 2025-11-30 22:45:19.861 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:45:19.764 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:45:19.784 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:45:19.780 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:45:19.682 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:45:55.838 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:54978 10 6452 1 2025-11-30 22:46:56.228 00:00:11.074 TCP 1.101.0.1:3000 -> 23.104.0.1:53770 10 6452 1 2025-11-30 22:47:57.344 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:47974 12 10375 1 2025-11-30 22:48:57.822 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33982 10 6452 1 2025-11-30 22:46:08.846 00:05:02.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:49:58.230 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57770 10 6452 1 2025-11-30 22:46:08.848 00:05:02.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:50:20.165 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:50:19.936 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:50:19.541 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:50:20.081 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:50:20.083 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:50:58.646 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40670 10 6452 1 2025-11-30 22:51:59.010 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:47278 10 6452 1 2025-11-30 22:52:59.364 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55866 10 6452 1 2025-11-30 22:53:59.771 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42348 10 6452 1 2025-11-30 22:55:00.188 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43444 10 6452 1 2025-11-30 22:55:20.089 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-30 22:55:20.193 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-30 22:55:20.051 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:55:20.009 00:00:00.041 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-30 22:55:20.122 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-30 22:56:00.587 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38960 10 6452 1 2025-11-30 22:52:08.846 00:05:02.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-30 22:52:08.849 00:05:02.135 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-30 22:57:00.952 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:39990 10 6452 1 2025-11-30 22:58:01.319 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51308 10 6452 1 Summary: total flows: 139, total bytes: 430151, total packets: 1020, avg bps: 955, avg pps: 0, avg bpp: 421 Time window: 2025-11-30 21:58:08 - 2025-11-30 22:58:11 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0015s User: 0.0036s Wall: 0.0034s flows/second: 40534.5 Runtime: 0.0035s