Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 02:59:07.815 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 02:59:07.682 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 02:59:07.629 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 02:59:07.732 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 02:59:07.678 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 02:59:14.871 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:37018 10 6452 1 2025-11-18 03:00:15.242 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33236 10 6452 1 2025-11-18 02:56:02.374 00:06:00.115 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 03:01:15.649 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:33972 11 6504 1 2025-11-18 03:02:16.109 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52272 10 6452 1 2025-11-18 02:58:02.372 00:06:00.121 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 03:03:16.515 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60916 10 6452 1 2025-11-18 03:04:08.118 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 03:04:07.997 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 03:04:07.947 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:04:08.212 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:04:08.294 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 03:04:16.917 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37368 10 6452 1 2025-11-18 03:05:17.321 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40120 10 6452 1 2025-11-18 03:06:17.724 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42052 10 6452 1 2025-11-18 03:07:18.131 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42178 10 6452 1 2025-11-18 03:03:02.375 00:06:00.116 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 03:08:18.493 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49158 10 6452 1 2025-11-18 03:09:07.915 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 03:09:07.678 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 03:09:07.816 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:09:07.785 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:09:07.867 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 03:09:18.904 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:50150 10 6452 1 2025-11-18 03:05:02.374 00:06:00.120 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 03:10:19.340 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57632 10 6452 1 2025-11-18 03:11:19.741 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:60732 10 6452 1 2025-11-18 03:12:20.111 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:57784 12 10375 1 2025-11-18 03:13:20.587 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53310 10 6452 1 2025-11-18 03:14:08.146 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 03:14:08.066 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 03:14:07.924 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 03:14:07.983 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:14:08.064 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:14:20.991 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50444 10 6452 1 2025-11-18 03:10:02.378 00:06:00.114 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 03:15:21.395 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44212 10 6452 1 2025-11-18 03:16:21.755 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45574 10 6452 1 2025-11-18 03:12:02.377 00:06:00.120 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 03:17:22.155 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52696 10 6452 1 2025-11-18 03:18:22.555 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60514 10 6452 1 2025-11-18 03:19:07.987 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 03:19:08.057 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 03:19:07.994 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:19:08.051 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:19:08.134 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 03:19:22.963 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49578 10 6452 1 2025-11-18 03:20:23.378 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46154 10 6452 1 2025-11-18 03:21:23.739 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47060 10 6452 1 2025-11-18 03:17:02.379 00:06:00.115 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 03:22:24.138 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:52702 12 10369 1 2025-11-18 03:23:24.613 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:40800 10 6452 1 2025-11-18 03:24:07.897 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 03:24:08.112 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 03:24:08.072 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:24:08.102 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:19:02.377 00:06:00.119 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 03:24:08.184 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 03:24:24.970 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:52662 10 6452 1 2025-11-18 03:25:25.338 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54686 10 6452 1 2025-11-18 03:26:25.739 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41246 10 6452 1 2025-11-18 03:27:26.152 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:38380 12 10375 1 2025-11-18 03:28:26.632 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55648 10 6452 1 2025-11-18 03:24:02.382 00:06:00.114 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 03:29:08.354 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 03:29:08.272 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:29:08.221 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 03:29:08.276 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 03:29:08.074 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:29:27.051 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53246 10 6452 1 2025-11-18 03:30:27.454 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53946 10 6452 1 2025-11-18 03:26:02.380 00:06:00.123 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 03:31:27.865 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:41522 10 6452 1 2025-11-18 03:32:28.283 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:59696 12 10369 1 2025-11-18 03:33:28.759 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:38300 10 6452 1 2025-11-18 03:34:08.453 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 03:34:08.374 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 03:34:08.574 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 03:34:08.537 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:34:08.371 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:34:29.128 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57710 10 6452 1 2025-11-18 03:35:29.535 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59464 10 6452 1 2025-11-18 03:31:02.385 00:06:00.116 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 03:36:29.937 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:52410 10 6452 1 2025-11-18 03:37:30.418 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58076 10 6452 1 2025-11-18 03:33:02.383 00:06:00.121 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 03:38:30.828 00:00:10.589 TCP 1.101.0.1:3000 -> 23.104.0.1:42994 10 6452 1 2025-11-18 03:39:08.510 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 03:39:08.431 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 03:39:08.429 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 03:39:08.402 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:39:08.429 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:39:31.457 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42036 10 6452 1 2025-11-18 03:40:31.820 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40722 10 6452 1 2025-11-18 03:41:32.222 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:33338 12 10578 1 2025-11-18 03:42:32.709 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54746 10 6661 1 2025-11-18 03:38:02.388 00:06:00.116 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 03:43:33.113 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48202 10 6661 1 2025-11-18 03:44:08.606 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 03:44:08.592 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 03:44:08.474 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:44:08.520 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:44:08.601 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 03:44:33.512 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58666 10 6661 1 2025-11-18 03:40:02.385 00:06:00.121 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 03:45:33.915 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:44728 10 6661 1 2025-11-18 03:46:34.291 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34016 10 6661 1 2025-11-18 03:47:34.700 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52370 10 6661 1 2025-11-18 03:48:35.065 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52644 10 6661 1 2025-11-18 03:49:08.670 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 03:49:08.653 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 03:49:08.583 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 03:49:08.665 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:49:08.587 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:49:35.468 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44098 10 6661 1 2025-11-18 03:45:02.389 00:06:00.115 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 03:50:35.873 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54484 10 6661 1 2025-11-18 03:51:36.279 00:00:14.802 TCP 1.101.0.1:3000 -> 23.104.0.1:34022 10 6661 1 2025-11-18 03:47:02.389 00:06:00.119 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 03:52:41.127 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:41198 12 10793 1 2025-11-18 03:53:41.605 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57528 10 6870 1 2025-11-18 03:54:08.612 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:54:08.609 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 03:54:08.791 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 03:54:08.655 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 03:54:08.696 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 03:54:42.009 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35630 10 6870 1 2025-11-18 03:55:42.405 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:32910 10 6870 1 2025-11-18 03:56:42.778 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:53044 11 6922 1 2025-11-18 03:52:02.392 00:06:00.115 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 03:57:43.241 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45624 10 6870 1 Summary: total flows: 136, total bytes: 438856, total packets: 1022, avg bps: 943, avg pps: 0, avg bpp: 429 Time window: 2025-11-18 02:56:02 - 2025-11-18 03:58:02 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0037s User: 0.0019s Wall: 0.0025s flows/second: 54975.5 Runtime: 0.0025s