Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 21:58:52.414 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 21:58:52.519 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 21:58:52.282 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:58:52.345 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:58:52.428 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 21:59:02.878 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51404 10 6870 1 2025-11-27 22:00:03.277 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39182 10 6870 1 2025-11-27 22:01:03.679 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45910 10 6870 1 2025-11-27 21:58:07.240 00:05:01.958 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:02:04.106 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33592 10 6870 1 2025-11-27 21:59:07.242 00:05:01.955 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:03:04.481 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42860 10 6870 1 2025-11-27 22:03:52.361 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:03:52.279 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:03:52.275 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:03:52.278 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:03:52.211 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:04:04.851 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:57710 10 6870 1 2025-11-27 22:05:05.234 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34344 10 6870 1 2025-11-27 22:06:05.641 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45722 10 6870 1 2025-11-27 22:07:06.027 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43818 10 6870 1 2025-11-27 22:04:07.241 00:05:01.962 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:08:06.428 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58704 10 6870 1 2025-11-27 22:08:52.448 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:08:52.301 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:08:52.258 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:08:52.401 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:08:52.484 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:05:07.245 00:05:01.957 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:09:06.835 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:56568 10 6870 1 2025-11-27 22:10:07.270 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40512 10 6870 1 2025-11-27 22:11:07.634 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:39240 10 6870 1 2025-11-27 22:12:08.094 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36902 10 6870 1 2025-11-27 22:13:08.501 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54216 10 6870 1 2025-11-27 22:13:52.366 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:13:52.525 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:13:52.528 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:13:52.117 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:13:52.284 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:10:07.241 00:05:01.962 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:14:08.906 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46674 10 6870 1 2025-11-27 22:11:07.245 00:05:01.957 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:15:09.272 00:00:10.760 TCP 1.101.0.1:3000 -> 23.104.0.1:51594 10 6870 1 2025-11-27 22:16:10.103 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48472 10 6870 1 2025-11-27 22:17:10.503 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36368 10 6870 1 2025-11-27 22:18:10.907 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46700 10 6870 1 2025-11-27 22:18:52.684 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:18:52.689 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:18:52.452 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:18:52.786 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:18:52.869 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:19:11.314 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59850 10 6870 1 2025-11-27 22:16:07.243 00:05:01.962 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:20:11.711 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37568 10 6870 1 2025-11-27 22:17:07.246 00:05:01.957 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:21:12.126 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34804 10 6870 1 2025-11-27 22:22:12.530 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33470 10 6870 1 2025-11-27 22:23:12.933 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:48074 10 6870 1 2025-11-27 22:23:52.799 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:23:52.659 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:23:52.753 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:23:52.386 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:23:52.717 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:24:13.361 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45660 10 6870 1 2025-11-27 22:25:13.761 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57510 10 6870 1 2025-11-27 22:22:07.250 00:05:01.958 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:26:14.167 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52098 11 6910 1 2025-11-27 22:23:07.249 00:05:01.956 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:27:14.569 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:53494 10 6870 1 2025-11-27 22:28:14.929 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47546 10 6870 1 2025-11-27 22:28:52.927 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:28:52.866 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:28:52.740 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:28:52.874 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:28:52.956 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:29:15.359 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54758 10 6870 1 2025-11-27 22:30:15.774 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:39822 10 6870 1 2025-11-27 22:31:16.144 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48308 10 6870 1 2025-11-27 22:28:07.248 00:05:01.964 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:32:16.549 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47100 10 6870 1 2025-11-27 22:29:07.251 00:05:01.959 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:33:16.947 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56332 10 6870 1 2025-11-27 22:33:53.746 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:33:53.719 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:33:53.662 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:33:53.501 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:33:53.664 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:34:17.911 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34760 10 6870 1 2025-11-27 22:35:18.313 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46438 10 6870 1 2025-11-27 22:36:18.683 00:00:10.454 TCP 1.101.0.1:3000 -> 23.104.0.1:54968 12 10369 1 2025-11-27 22:37:19.177 00:00:11.251 TCP 1.101.0.1:3000 -> 23.104.0.1:51018 10 6452 1 2025-11-27 22:34:07.249 00:05:01.965 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:38:20.465 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33526 10 6452 1 2025-11-27 22:38:53.132 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:38:52.954 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:38:53.048 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:38:52.974 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:38:53.051 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:35:07.252 00:05:01.961 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:39:20.867 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40518 10 6452 1 2025-11-27 22:40:21.283 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54116 10 6452 1 2025-11-27 22:41:21.708 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:59888 10 6452 1 2025-11-27 22:42:22.092 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47848 10 6452 1 2025-11-27 22:43:22.498 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57200 10 6452 1 2025-11-27 22:43:53.167 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:43:53.169 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:43:53.203 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:43:53.177 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:43:53.260 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:40:07.261 00:05:01.955 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:44:22.905 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37446 10 6452 1 2025-11-27 22:41:07.264 00:05:01.954 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:45:23.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50672 10 6452 1 2025-11-27 22:46:23.725 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48712 10 6452 1 2025-11-27 22:47:24.142 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:53494 10 6452 1 2025-11-27 22:48:24.500 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59634 10 6452 1 2025-11-27 22:48:53.241 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:48:53.185 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:48:52.993 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:48:53.290 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:48:53.372 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:49:24.866 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44590 10 6452 1 2025-11-27 22:46:07.262 00:05:01.955 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:50:25.280 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37286 10 6452 1 2025-11-27 22:47:07.264 00:05:01.950 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:51:25.639 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32950 10 6452 1 2025-11-27 22:52:26.036 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50902 10 6452 1 2025-11-27 22:53:26.432 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54636 10 6452 1 2025-11-27 22:53:53.259 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:53:53.324 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:53:53.189 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:53:53.330 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:53:53.412 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:54:26.838 00:00:11.161 TCP 1.101.0.1:3000 -> 23.104.0.1:39220 10 6452 1 2025-11-27 22:55:28.034 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42694 10 6452 1 2025-11-27 22:52:07.263 00:05:01.956 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:56:28.443 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50366 10 6452 1 2025-11-27 22:53:07.265 00:05:01.950 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:57:28.846 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:35426 10 6452 1 2025-11-27 22:58:29.275 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:49258 10 6452 1 Summary: total flows: 140, total bytes: 436423, total packets: 1023, avg bps: 961, avg pps: 0, avg bpp: 426 Time window: 2025-11-27 21:58:07 - 2025-11-27 22:58:39 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0026s User: 0.0035s Wall: 0.0018s flows/second: 76171.0 Runtime: 0.0019s