Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 15:58:54.501 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 15:58:54.121 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 15:58:54.587 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 15:58:54.504 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 15:58:54.671 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 15:59:28.726 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55324 10 6452 1 2025-11-17 16:00:29.142 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60122 10 6452 1 2025-11-17 15:56:02.150 00:06:00.160 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 16:01:29.540 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49948 10 6452 1 2025-11-17 16:02:29.949 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34350 10 6452 1 2025-11-17 15:58:02.154 00:06:00.155 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 16:03:30.357 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44912 10 6452 1 2025-11-17 16:03:54.524 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 16:03:54.593 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 16:03:54.476 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:03:54.441 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:03:54.529 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 16:04:30.760 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:33472 10 6452 1 2025-11-17 16:05:31.131 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51798 10 6452 1 2025-11-17 16:06:31.543 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35386 10 6452 1 2025-11-17 16:07:31.952 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46082 10 6452 1 2025-11-17 16:03:02.151 00:06:00.163 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 16:08:32.373 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60166 10 6452 1 2025-11-17 16:08:54.702 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 16:08:54.661 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:08:54.700 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:08:54.698 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 16:08:54.783 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 16:09:32.780 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:35482 10 6452 1 2025-11-17 16:05:02.155 00:06:00.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 16:10:33.157 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35310 10 6452 1 2025-11-17 16:11:33.526 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58570 10 6452 1 2025-11-17 16:12:33.929 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:48008 10 6452 1 2025-11-17 16:13:34.340 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45590 10 6452 1 2025-11-17 16:13:54.781 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 16:13:54.880 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:13:54.695 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:13:54.775 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 16:13:54.776 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 16:14:34.746 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51770 10 6452 1 2025-11-17 16:10:02.154 00:06:00.162 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 16:15:35.156 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53544 10 6452 1 2025-11-17 16:16:35.563 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:49416 10 6452 1 2025-11-17 16:12:02.156 00:06:00.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 16:17:35.929 00:00:10.561 TCP 1.101.0.1:3000 -> 23.104.0.1:44618 10 6452 1 2025-11-17 16:18:36.524 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44368 10 6452 1 2025-11-17 16:18:55.495 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 16:18:55.220 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:18:55.483 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:18:55.371 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 16:18:55.565 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 16:19:36.928 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:59016 10 6452 1 2025-11-17 16:20:37.301 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58360 10 6452 1 2025-11-17 16:21:37.699 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39696 10 6452 1 2025-11-17 16:17:02.154 00:06:00.164 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 16:22:38.112 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54352 10 6452 1 2025-11-17 16:23:38.518 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37498 10 6452 1 2025-11-17 16:23:54.823 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 16:23:54.848 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 16:23:54.741 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:23:54.741 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:23:54.967 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 16:19:02.157 00:06:00.158 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 16:24:38.924 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42746 10 6452 1 2025-11-17 16:25:39.336 00:00:10.836 TCP 1.101.0.1:3000 -> 23.104.0.1:58094 10 6452 1 2025-11-17 16:26:40.205 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45374 10 6452 1 2025-11-17 16:27:40.610 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:40440 10 6452 1 2025-11-17 16:28:55.081 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 16:28:41.032 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54380 10 6452 1 2025-11-17 16:28:55.111 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:28:55.062 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:28:55.036 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 16:28:55.144 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 16:24:02.156 00:06:00.164 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 16:29:41.398 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40140 10 6452 1 2025-11-17 16:30:41.805 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57878 10 6452 1 2025-11-17 16:26:02.160 00:06:00.158 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 16:31:42.210 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40244 10 6452 1 2025-11-17 16:32:42.619 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55034 10 6452 1 2025-11-17 16:33:55.112 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 16:33:55.126 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:33:43.025 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59224 10 6452 1 2025-11-17 16:33:55.190 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:33:55.301 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 16:33:55.273 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 16:34:43.383 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48722 10 6452 1 2025-11-17 16:35:43.799 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:56822 10 6452 1 2025-11-17 16:31:02.159 00:06:00.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 16:36:44.153 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38352 10 6452 1 2025-11-17 16:37:44.563 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58624 10 6452 1 2025-11-17 16:33:02.162 00:06:00.160 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 16:38:55.253 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 16:38:44.970 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40250 10 6452 1 2025-11-17 16:38:55.320 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 16:38:55.171 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:38:55.172 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:38:55.268 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 16:39:45.382 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:44634 10 6452 1 2025-11-17 16:40:45.738 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58046 12 6556 1 2025-11-17 16:41:46.144 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33138 10 6452 1 2025-11-17 16:42:46.545 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42794 10 6452 1 2025-11-17 16:38:02.160 00:06:00.164 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 16:43:55.395 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 16:43:55.038 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 16:43:55.245 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:43:55.312 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:43:55.163 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 16:43:46.947 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59392 10 6452 1 2025-11-17 16:44:47.351 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42574 10 6452 1 2025-11-17 16:40:02.164 00:06:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 16:45:47.718 00:00:10.411 TCP 1.101.0.1:3000 -> 23.104.0.1:36372 10 6452 1 2025-11-17 16:46:48.170 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32870 10 6452 1 2025-11-17 16:47:48.582 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37264 10 6452 1 2025-11-17 16:48:55.500 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 16:48:55.400 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 16:48:55.492 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:48:55.417 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:48:55.420 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 16:48:48.980 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48592 10 6452 1 2025-11-17 16:49:49.388 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49284 10 6452 1 2025-11-17 16:45:02.161 00:06:00.172 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 16:50:49.750 00:00:10.916 TCP 1.101.0.1:3000 -> 23.104.0.1:43760 10 6452 1 2025-11-17 16:51:50.705 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60072 10 6452 1 2025-11-17 16:47:02.165 00:06:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 16:52:51.110 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42090 10 6452 1 2025-11-17 16:53:55.580 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 16:53:55.581 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 16:53:55.411 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:53:55.499 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 16:53:55.316 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 16:53:51.473 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58268 10 6452 1 2025-11-17 16:54:51.870 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55966 10 6452 1 2025-11-17 16:55:52.278 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47770 10 6452 1 2025-11-17 16:56:52.690 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40588 10 6452 1 2025-11-17 16:52:02.168 00:06:00.163 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 16:57:53.108 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45910 10 6452 1 Summary: total flows: 136, total bytes: 410529, total packets: 1010, avg bps: 882, avg pps: 0, avg bpp: 406 Time window: 2025-11-17 15:56:02 - 2025-11-17 16:58:03 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0041s User: 0.0021s Wall: 0.0018s flows/second: 74235.5 Runtime: 0.0019s