Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 17:58:56.911 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 17:58:56.874 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 17:58:56.630 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 17:58:56.626 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 17:58:56.713 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 17:59:17.456 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:43402 10 6452 1 2025-11-17 17:55:02.186 00:06:00.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 18:00:17.854 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:51738 10 6452 1 2025-11-17 18:01:18.282 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55596 10 6452 1 2025-11-17 17:57:02.190 00:06:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 18:02:18.686 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55992 10 6452 1 2025-11-17 18:03:19.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51254 10 6452 1 2025-11-17 18:03:57.244 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 18:03:57.159 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 18:03:57.225 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:03:57.161 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:03:57.107 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 18:04:19.509 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54710 10 6452 1 2025-11-17 18:05:19.905 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52818 10 6452 1 2025-11-17 18:06:20.319 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53894 10 6452 1 2025-11-17 18:02:02.188 00:06:00.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 18:07:20.681 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42484 10 6452 1 2025-11-17 18:08:21.105 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60542 10 6452 1 2025-11-17 18:08:56.903 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 18:08:56.948 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:08:56.920 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:08:56.913 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 18:08:57.005 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 18:04:02.192 00:06:00.167 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 18:09:21.468 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46162 10 6452 1 2025-11-17 18:10:21.828 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:35388 10 6452 1 2025-11-17 18:11:22.266 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44888 10 6452 1 2025-11-17 18:12:22.667 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43570 10 6452 1 2025-11-17 18:13:23.031 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36548 10 6452 1 2025-11-17 18:13:56.722 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 18:13:56.583 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:13:56.720 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:13:56.722 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 18:13:56.805 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 18:09:02.191 00:06:00.172 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 18:14:23.438 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54026 10 6452 1 2025-11-17 18:15:23.841 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60798 10 6452 1 2025-11-17 18:11:02.194 00:06:00.167 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 18:16:24.258 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43200 10 6452 1 2025-11-17 18:17:24.664 00:00:11.397 TCP 1.101.0.1:3000 -> 23.104.0.1:42940 10 6452 1 2025-11-17 18:18:26.112 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34014 10 6452 1 2025-11-17 18:18:57.114 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 18:18:57.233 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:18:57.216 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:18:57.211 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 18:18:57.299 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 18:19:26.477 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54150 10 6452 1 2025-11-17 18:20:26.880 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:42656 10 6452 1 2025-11-17 18:16:02.192 00:06:00.171 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 18:21:27.241 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43096 10 6452 1 2025-11-17 18:22:27.652 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40030 10 6452 1 2025-11-17 18:18:02.196 00:06:00.166 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 18:23:28.062 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58542 10 6452 1 2025-11-17 18:23:57.612 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 18:23:57.473 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 18:23:57.260 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:23:57.529 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:23:57.524 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 18:24:28.477 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58966 10 6452 1 2025-11-17 18:25:28.842 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:49608 10 6452 1 2025-11-17 18:26:29.226 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58296 10 6452 1 2025-11-17 18:27:29.643 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47484 10 6452 1 2025-11-17 18:23:02.194 00:06:00.175 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 18:28:30.053 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51666 10 6452 1 2025-11-17 18:28:57.249 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 18:28:57.167 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 18:28:57.538 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:28:57.167 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:28:57.167 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 18:29:30.458 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47660 10 6452 1 2025-11-17 18:25:02.197 00:06:00.171 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 18:30:30.859 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54626 10 6452 1 2025-11-17 18:31:31.277 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36876 10 6452 1 2025-11-17 18:32:31.681 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:49948 10 6452 1 2025-11-17 18:33:32.054 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41812 10 6452 1 2025-11-17 18:33:57.564 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 18:33:57.490 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 18:33:57.696 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:33:57.480 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:33:57.489 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 18:34:32.458 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59896 10 6452 1 2025-11-17 18:30:02.194 00:06:00.177 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 18:35:32.865 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44226 10 6452 1 2025-11-17 18:36:33.274 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:50536 10 6452 1 2025-11-17 18:32:02.198 00:06:00.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 18:37:33.689 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46822 10 6452 1 2025-11-17 18:38:34.112 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38080 10 6452 1 2025-11-17 18:38:57.803 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 18:38:57.559 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 18:38:57.648 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:38:57.720 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:38:57.556 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 18:39:34.514 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57022 10 6452 1 2025-11-17 18:40:34.924 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38790 10 6452 1 2025-11-17 18:41:35.330 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53658 10 6452 1 2025-11-17 18:37:02.196 00:06:00.178 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 18:42:35.696 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44118 10 6452 1 2025-11-17 18:43:36.115 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53222 10 6452 1 2025-11-17 18:43:57.906 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 18:43:57.596 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 18:43:57.554 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:43:57.822 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:43:57.587 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 18:39:02.198 00:06:00.175 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 18:44:36.518 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51612 10 6452 1 2025-11-17 18:45:36.877 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54984 10 6452 1 2025-11-17 18:46:37.281 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52832 10 6452 1 2025-11-17 18:47:37.684 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34542 10 6452 1 2025-11-17 18:48:38.111 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52376 10 6452 1 2025-11-17 18:48:58.011 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 18:48:57.928 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 18:48:57.794 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:48:57.929 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:48:57.876 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 18:44:02.197 00:06:00.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 18:49:38.517 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42524 10 6452 1 2025-11-17 18:50:38.922 00:00:10.576 TCP 1.101.0.1:3000 -> 23.104.0.1:57380 10 6452 1 2025-11-17 18:46:02.199 00:06:00.176 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-17 18:51:39.536 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47912 12 6556 1 2025-11-17 18:52:39.945 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38784 10 6452 1 2025-11-17 18:53:40.356 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55258 10 6452 1 2025-11-17 18:53:57.599 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-17 18:53:57.605 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:53:57.696 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-17 18:53:57.808 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-17 18:53:57.780 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-17 18:54:40.758 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36474 10 6452 1 2025-11-17 18:55:41.172 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:48790 10 6452 1 2025-11-17 18:51:02.202 00:06:00.179 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-17 18:56:41.543 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52992 10 6452 1 2025-11-17 18:57:41.948 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:52836 10 6452 1 2025-11-17 18:53:02.203 00:06:00.173 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 137, total bytes: 411390, total packets: 1024, avg bps: 857, avg pps: 0, avg bpp: 401 Time window: 2025-11-17 17:55:02 - 2025-11-17 18:59:02 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0049s User: 0.0000s Wall: 0.0014s flows/second: 96884.1 Runtime: 0.0014s