Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 23:58:54.661 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 23:58:54.579 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:58:54.515 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 23:58:54.516 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 23:58:54.235 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:58:54.419 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60426 10 6452 1 2025-11-27 23:59:54.823 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56758 10 6452 1 2025-11-28 00:00:55.226 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35048 10 6452 1 2025-11-28 00:01:55.633 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45150 10 6452 1 2025-11-27 23:58:07.282 00:05:01.956 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 00:02:56.034 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52250 10 6452 1 2025-11-27 23:59:07.287 00:05:01.962 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 00:03:54.839 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 00:03:54.754 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 00:03:54.715 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 00:03:54.597 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:03:54.755 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:03:56.434 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48882 10 6452 1 2025-11-28 00:04:56.834 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:55672 10 6452 1 2025-11-28 00:05:57.192 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44306 10 6452 1 2025-11-28 00:06:57.597 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:32938 11 6504 1 2025-11-28 00:04:07.282 00:05:01.972 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 00:07:58.069 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:57098 10 6452 1 2025-11-28 00:08:54.870 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:08:54.868 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:08:54.960 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 00:08:55.068 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 00:08:55.063 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 00:05:07.286 00:05:01.967 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 00:08:58.496 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45656 10 6452 1 2025-11-28 00:09:58.900 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57504 10 6452 1 2025-11-28 00:10:59.315 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43324 10 6452 1 2025-11-28 00:11:59.716 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56516 10 6452 1 2025-11-28 00:13:00.120 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57066 10 6452 1 2025-11-28 00:13:54.661 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 00:13:54.841 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 00:13:54.681 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 00:13:54.877 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:13:54.578 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:10:07.284 00:05:01.971 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 00:14:00.524 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45434 10 6452 1 2025-11-28 00:11:07.286 00:05:01.967 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 00:15:00.930 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:51576 10 6452 1 2025-11-28 00:16:01.366 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45984 10 6452 1 2025-11-28 00:17:01.776 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45526 10 6452 1 2025-11-28 00:18:02.137 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41526 10 6452 1 2025-11-28 00:18:55.573 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 00:18:55.492 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 00:18:55.346 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 00:18:55.162 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:18:55.491 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:19:02.558 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56468 10 6452 1 2025-11-28 00:16:07.286 00:05:01.973 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 00:20:02.956 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46692 10 6452 1 2025-11-28 00:17:07.287 00:05:01.969 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 00:21:03.323 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40184 10 6452 1 2025-11-28 00:22:03.728 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44628 10 6452 1 2025-11-28 00:23:04.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51708 10 6452 1 2025-11-28 00:23:54.865 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:23:55.168 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 00:23:55.090 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 00:23:55.093 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 00:23:55.086 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:24:04.511 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49042 10 6452 1 2025-11-28 00:25:04.915 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56752 10 6452 1 2025-11-28 00:22:07.287 00:05:01.973 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 00:26:05.279 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34006 10 6452 1 2025-11-28 00:23:07.288 00:05:01.968 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 00:27:05.680 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45376 10 6452 1 2025-11-28 00:28:06.112 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57934 10 6452 1 2025-11-28 00:28:55.087 00:00:00.056 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 00:28:55.160 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 00:28:55.162 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 00:28:55.191 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:28:55.002 00:00:00.057 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:29:06.516 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:47806 10 6452 1 2025-11-28 00:30:06.880 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49682 12 6556 1 2025-11-28 00:31:07.286 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49916 10 6452 1 2025-11-28 00:28:07.289 00:05:01.972 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 00:32:07.686 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39034 10 6452 1 2025-11-28 00:29:07.292 00:05:01.967 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 00:33:08.103 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46998 10 6452 1 2025-11-28 00:33:55.291 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 00:33:55.210 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:33:55.653 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 00:33:55.233 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 00:33:55.189 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:34:08.507 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35858 10 6452 1 2025-11-28 00:35:08.912 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48458 12 6556 1 2025-11-28 00:36:09.320 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46008 10 6452 1 2025-11-28 00:37:09.722 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52864 10 6452 1 2025-11-28 00:34:07.289 00:05:01.979 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 00:38:10.126 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37826 10 6452 1 2025-11-28 00:38:55.389 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 00:38:55.462 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 00:38:55.364 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 00:38:55.467 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:38:55.307 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:35:07.292 00:05:01.974 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 00:39:10.530 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35452 10 6452 1 2025-11-28 00:40:10.894 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:58436 10 6452 1 2025-11-28 00:41:11.262 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58958 10 6452 1 2025-11-28 00:42:11.663 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50432 10 6452 1 2025-11-28 00:43:12.035 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47830 10 6452 1 2025-11-28 00:43:55.405 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 00:43:55.495 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:43:55.519 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:43:55.523 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 00:43:55.602 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 00:40:07.291 00:05:01.981 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 00:44:12.436 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36534 10 6452 1 2025-11-28 00:41:07.294 00:05:01.976 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 00:45:12.845 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:43934 10 6452 1 2025-11-28 00:46:13.267 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43718 10 6452 1 2025-11-28 00:47:13.698 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37192 10 6452 1 2025-11-28 00:48:14.109 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34196 10 6452 1 2025-11-28 00:48:55.632 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 00:48:55.517 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 00:48:55.372 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:48:55.647 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:48:55.730 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 00:49:14.514 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:58026 10 6452 1 2025-11-28 00:46:07.293 00:05:01.983 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 00:50:14.904 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:54644 10 6452 1 2025-11-28 00:47:07.298 00:05:01.974 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 00:51:15.269 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46732 10 6452 1 2025-11-28 00:52:15.677 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44064 10 6452 1 2025-11-28 00:53:16.038 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52462 10 6452 1 2025-11-28 00:53:55.529 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 00:53:55.617 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 00:53:55.615 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:53:55.765 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:53:55.848 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 00:54:16.438 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58558 10 6452 1 2025-11-28 00:55:16.843 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:57982 10 6452 1 2025-11-28 00:52:07.297 00:05:01.983 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 00:56:17.274 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53914 10 6452 1 2025-11-28 00:53:07.297 00:05:01.979 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 00:57:17.678 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60114 10 6452 1 2025-11-28 00:58:18.100 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:51098 10 6452 1 Summary: total flows: 140, total bytes: 417260, total packets: 1025, avg bps: 921, avg pps: 0, avg bpp: 407 Time window: 2025-11-27 23:58:07 - 2025-11-28 00:58:28 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0033s User: 0.0025s Wall: 0.0014s flows/second: 100496.8 Runtime: 0.0014s