Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 17:54:02.660 00:06:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 17:59:26.380 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 17:59:26.292 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:59:26.383 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 17:59:26.296 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 17:59:26.467 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 17:59:21.130 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33936 10 6452 1 2025-11-18 18:00:21.537 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53562 10 6452 1 2025-11-18 18:01:21.946 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46368 10 6452 1 2025-11-18 18:02:22.367 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38124 10 6452 1 2025-11-18 18:03:22.775 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58236 10 6452 1 2025-11-18 17:59:02.662 00:06:00.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 18:04:25.777 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 18:04:26.166 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 18:04:25.873 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:04:26.042 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:04:26.126 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 18:04:23.194 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58592 10 6452 1 2025-11-18 18:05:23.601 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:51376 10 6452 1 2025-11-18 18:01:02.660 00:06:00.149 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 18:06:23.996 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37920 10 6452 1 2025-11-18 18:07:24.364 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44924 10 6452 1 2025-11-18 18:08:24.773 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:42266 10 6452 1 2025-11-18 18:09:25.914 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 18:09:25.837 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 18:09:25.863 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:09:25.963 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:09:26.046 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 18:09:25.190 00:00:11.353 TCP 1.101.0.1:3000 -> 23.104.0.1:49690 10 6452 1 2025-11-18 18:10:26.584 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58612 10 6452 1 2025-11-18 18:06:02.665 00:06:00.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 18:11:26.986 00:00:10.531 TCP 1.101.0.1:3000 -> 23.104.0.1:59590 10 6452 1 2025-11-18 18:12:27.555 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:59188 12 10375 1 2025-11-18 18:08:02.662 00:06:00.148 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 18:13:28.036 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56974 10 6452 1 2025-11-18 18:14:26.512 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 18:14:26.355 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 18:14:25.730 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:14:26.440 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:14:26.522 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 18:14:28.450 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33138 10 6452 1 2025-11-18 18:15:28.852 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:41078 10 6452 1 2025-11-18 18:16:29.279 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38140 10 6452 1 2025-11-18 18:17:29.699 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53428 10 6452 1 2025-11-18 18:13:02.668 00:06:00.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 18:18:30.116 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55518 10 6452 1 2025-11-18 18:19:26.166 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 18:19:25.912 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:19:26.163 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:19:26.164 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 18:19:26.246 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 18:19:30.518 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57922 10 6452 1 2025-11-18 18:15:02.666 00:06:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 18:20:30.879 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35168 10 6452 1 2025-11-18 18:21:31.278 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60458 10 6452 1 2025-11-18 18:22:31.680 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59758 10 6452 1 2025-11-18 18:23:32.113 00:00:10.566 TCP 1.101.0.1:3000 -> 23.104.0.1:37860 10 6452 1 2025-11-18 18:24:26.215 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 18:24:26.086 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 18:24:26.064 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:24:26.147 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:24:26.230 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 18:24:32.716 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49586 10 6452 1 2025-11-18 18:20:02.669 00:06:00.144 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 18:25:33.124 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55374 10 6452 1 2025-11-18 18:26:33.524 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56958 10 6452 1 2025-11-18 18:22:02.667 00:06:00.149 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 18:27:33.924 00:00:10.529 TCP 1.101.0.1:3000 -> 23.104.0.1:50258 14 14286 1 2025-11-18 18:28:34.492 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:51104 10 6452 1 2025-11-18 18:29:26.484 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 18:29:26.507 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 18:29:26.693 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 18:29:26.626 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:29:26.401 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:29:34.889 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:35244 12 6556 1 2025-11-18 18:30:35.315 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45722 10 6452 1 2025-11-18 18:31:35.726 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57514 11 6492 1 2025-11-18 18:27:02.675 00:06:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 18:32:36.129 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60968 10 6452 1 2025-11-18 18:33:36.533 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:47848 10 6452 1 2025-11-18 18:29:02.671 00:06:00.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 18:34:26.429 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 18:34:26.478 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 18:34:26.266 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:34:26.248 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:34:26.331 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 18:34:36.946 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38310 10 6452 1 2025-11-18 18:35:37.354 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41180 11 6492 1 2025-11-18 18:36:37.750 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55270 10 6452 1 2025-11-18 18:37:38.117 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44264 10 6452 1 2025-11-18 18:38:38.525 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:55148 10 6452 1 2025-11-18 18:34:02.676 00:06:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 18:39:26.538 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 18:39:26.522 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 18:39:26.452 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 18:39:26.542 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:39:26.454 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:39:38.903 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51254 10 6452 1 2025-11-18 18:40:39.321 00:00:17.637 TCP 1.101.0.1:3000 -> 23.104.0.1:42790 12 6556 1 2025-11-18 18:36:02.674 00:06:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 18:41:47.006 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35564 10 6452 1 2025-11-18 18:42:47.408 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38424 10 6452 1 2025-11-18 18:43:47.810 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49774 10 6452 1 2025-11-18 18:44:26.712 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 18:44:26.634 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 18:44:26.633 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 18:44:26.655 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:44:26.629 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:44:48.221 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34474 10 6452 1 2025-11-18 18:45:48.585 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34968 10 6452 1 2025-11-18 18:41:02.678 00:06:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 18:46:48.949 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:41872 11 6504 1 2025-11-18 18:47:49.409 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:42698 12 10375 1 2025-11-18 18:43:02.675 00:06:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 18:48:49.900 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:40126 10 6452 1 2025-11-18 18:49:26.635 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 18:49:26.694 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 18:49:26.575 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:49:26.636 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:49:26.719 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 18:49:50.352 00:00:11.820 TCP 1.101.0.1:3000 -> 23.104.0.1:60614 10 6452 1 2025-11-18 18:50:52.227 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41646 10 6452 1 2025-11-18 18:51:52.632 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48840 10 6452 1 2025-11-18 18:48:02.681 00:06:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 18:52:53.049 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35014 10 6452 1 2025-11-18 18:53:53.411 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33330 10 6452 1 2025-11-18 18:54:26.734 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 18:54:26.734 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 18:54:26.827 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:54:26.734 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 18:54:26.816 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 18:50:02.679 00:06:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 18:54:53.813 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:40912 10 6452 1 2025-11-18 18:55:54.185 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36274 10 6452 1 2025-11-18 18:56:54.597 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:48692 10 6452 1 2025-11-18 18:57:54.993 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:36670 12 10375 1 Summary: total flows: 136, total bytes: 430368, total packets: 1025, avg bps: 895, avg pps: 0, avg bpp: 419 Time window: 2025-11-18 17:54:02 - 2025-11-18 18:58:05 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0041s User: 0.0020s Wall: 0.0022s flows/second: 61178.2 Runtime: 0.0022s