Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 21:59:21.212 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 21:59:20.889 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 21:59:20.787 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 21:59:21.008 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 21:59:21.131 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 21:59:37.553 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59922 10 6452 1 2025-11-28 22:00:37.963 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38468 10 6452 1 2025-11-28 22:01:38.371 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54706 10 6452 1 2025-11-28 21:58:07.762 00:05:02.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 22:02:38.768 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:47658 10 6452 1 2025-11-28 21:59:07.763 00:05:02.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 22:03:39.186 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:54602 10 6452 1 2025-11-28 22:04:21.075 00:00:00.045 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 22:04:21.262 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 22:04:21.263 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 22:04:21.080 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:04:20.993 00:00:00.045 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:04:39.569 00:00:11.478 TCP 1.101.0.1:3000 -> 23.104.0.1:42436 10 6452 1 2025-11-28 22:05:41.116 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:39730 10 6452 1 2025-11-28 22:06:41.481 00:00:19.552 TCP 1.101.0.1:3000 -> 23.104.0.1:35154 10 6452 1 2025-11-28 22:07:51.109 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51372 10 6452 1 2025-11-28 22:04:07.762 00:05:02.106 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 22:08:51.478 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39368 10 6452 1 2025-11-28 22:05:07.765 00:05:02.100 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 22:09:21.254 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 22:09:21.094 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 22:09:21.337 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 22:09:21.008 00:00:00.046 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:09:21.172 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:09:51.885 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38036 10 6452 1 2025-11-28 22:10:52.297 00:00:10.846 TCP 1.101.0.1:3000 -> 23.104.0.1:36406 10 6452 1 2025-11-28 22:11:53.183 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:36688 12 10375 1 2025-11-28 22:12:53.663 00:00:11.798 TCP 1.101.0.1:3000 -> 23.104.0.1:45508 10 6452 1 2025-11-28 22:13:55.502 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38346 10 6452 1 2025-11-28 22:10:07.765 00:05:02.106 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 22:14:21.504 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 22:14:21.485 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 22:14:21.524 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 22:14:21.145 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:14:21.422 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:14:55.902 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36576 12 6556 1 2025-11-28 22:11:07.767 00:05:02.102 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 22:15:56.318 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46454 12 6556 1 2025-11-28 22:16:56.720 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40204 10 6452 1 2025-11-28 22:17:57.134 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38860 10 6452 1 2025-11-28 22:18:57.541 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36046 10 6452 1 2025-11-28 22:19:21.579 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 22:19:21.338 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 22:19:21.556 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 22:19:21.511 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:19:21.497 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:19:57.942 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38596 10 6452 1 2025-11-28 22:16:07.764 00:05:02.107 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 22:20:58.366 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49164 10 6452 1 2025-11-28 22:17:07.769 00:05:02.102 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 22:21:58.767 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:40934 10 6452 1 2025-11-28 22:22:59.207 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38528 10 6452 1 2025-11-28 22:23:59.611 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38308 10 6452 1 2025-11-28 22:24:21.863 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 22:24:21.826 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 22:24:21.820 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 22:24:21.551 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:24:21.780 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:25:00.013 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36716 10 6452 1 2025-11-28 22:22:07.768 00:05:02.105 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 22:26:00.424 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41228 10 6452 1 2025-11-28 22:27:00.826 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52864 10 6452 1 2025-11-28 22:23:07.770 00:05:02.101 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 22:28:01.235 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58694 10 6452 1 2025-11-28 22:29:01.645 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40720 10 6452 1 2025-11-28 22:29:21.803 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 22:29:21.757 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 22:29:21.587 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 22:29:21.631 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:29:21.721 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:30:02.060 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:40716 10 6452 1 2025-11-28 22:31:02.421 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47230 10 6452 1 2025-11-28 22:32:02.825 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48810 10 6452 1 2025-11-28 22:28:07.769 00:05:02.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 22:33:03.186 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46644 10 6452 1 2025-11-28 22:29:07.772 00:05:02.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 22:34:03.589 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:35376 10 6452 1 2025-11-28 22:34:21.981 00:00:00.028 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 22:34:21.901 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 22:34:21.764 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:34:21.900 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:34:21.725 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 22:35:04.031 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58920 10 6452 1 2025-11-28 22:36:04.439 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53256 10 6452 1 2025-11-28 22:37:04.844 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:60698 10 6452 1 2025-11-28 22:34:07.771 00:05:02.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 22:38:05.276 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35120 10 6452 1 2025-11-28 22:35:07.773 00:05:02.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 22:39:21.898 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 22:39:05.686 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41996 10 6452 1 2025-11-28 22:39:21.895 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 22:39:21.820 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 22:39:21.634 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:39:21.816 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:40:06.115 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:39006 10 6452 1 2025-11-28 22:41:06.508 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50122 10 6452 1 2025-11-28 22:42:06.924 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50388 10 6452 1 2025-11-28 22:43:07.339 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:33882 10 6452 1 2025-11-28 22:40:07.773 00:05:02.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 22:44:07.714 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58098 10 6452 1 2025-11-28 22:44:22.091 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 22:44:22.053 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 22:44:21.870 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:44:22.166 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:44:22.249 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 22:41:07.776 00:05:02.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 22:45:08.105 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59224 10 6452 1 2025-11-28 22:46:08.511 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48078 10 6452 1 2025-11-28 22:47:08.915 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55086 10 6452 1 2025-11-28 22:48:09.283 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36734 10 6452 1 2025-11-28 22:49:22.245 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 22:49:22.166 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 22:49:22.255 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 22:49:22.182 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:49:22.163 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:49:09.693 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34798 10 6452 1 2025-11-28 22:46:07.774 00:05:02.116 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 22:50:10.067 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35906 10 6452 1 2025-11-28 22:47:07.775 00:05:02.112 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 22:51:10.434 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47968 10 6452 1 2025-11-28 22:52:10.803 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:47374 10 6452 1 2025-11-28 22:53:11.180 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50966 10 6452 1 2025-11-28 22:54:22.475 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 22:54:22.130 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 22:54:11.594 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52332 10 6452 1 2025-11-28 22:54:22.219 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 22:54:22.118 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:54:22.392 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:55:11.998 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57668 10 6452 1 2025-11-28 22:52:07.774 00:05:02.119 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 22:56:12.399 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39842 10 6452 1 2025-11-28 22:53:07.777 00:05:02.114 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 22:57:12.773 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53688 10 6452 1 2025-11-28 22:58:13.180 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55530 10 6452 1 Summary: total flows: 139, total bytes: 414679, total packets: 1016, avg bps: 917, avg pps: 0, avg bpp: 408 Time window: 2025-11-28 21:58:07 - 2025-11-28 22:58:23 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0019s User: 0.0028s Wall: 0.0017s flows/second: 82252.9 Runtime: 0.0017s