Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 05:59:12.115 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 05:59:12.261 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 05:59:12.141 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 05:59:11.991 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 05:59:12.225 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 05:59:35.204 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59626 10 6452 1 2025-11-18 06:00:35.569 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60850 10 6452 1 2025-11-18 05:56:02.431 00:06:00.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 06:01:35.979 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54718 10 6452 1 2025-11-18 06:02:36.397 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50904 10 6452 1 2025-11-18 05:58:02.434 00:06:00.108 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 06:03:36.801 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36008 10 6452 1 2025-11-18 06:04:11.199 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 06:04:11.348 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 06:04:11.227 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:04:11.116 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:04:11.349 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 06:04:37.211 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48456 10 6452 1 2025-11-18 06:05:37.612 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58252 10 6452 1 2025-11-18 06:06:37.977 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35240 10 6452 1 2025-11-18 06:07:38.387 00:00:10.997 TCP 1.101.0.1:3000 -> 23.104.0.1:42070 10 6452 1 2025-11-18 06:03:02.433 00:06:00.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 06:08:39.422 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43224 10 6452 1 2025-11-18 06:09:11.538 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 06:09:11.409 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:09:11.450 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:09:11.263 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 06:09:11.531 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 06:09:39.826 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39298 10 6452 1 2025-11-18 06:05:02.436 00:06:00.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 06:10:40.233 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51034 10 6452 1 2025-11-18 06:11:40.634 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55044 10 6452 1 2025-11-18 06:12:41.041 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:49272 12 10369 1 2025-11-18 06:13:41.523 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:58106 10 6452 1 2025-11-18 06:14:11.366 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 06:14:11.415 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:14:11.367 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:14:11.369 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 06:14:11.451 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 06:14:41.892 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:38286 10 6452 1 2025-11-18 06:10:02.437 00:06:00.110 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 06:15:42.315 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39000 10 6452 1 2025-11-18 06:16:42.720 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58904 10 6452 1 2025-11-18 06:12:02.441 00:06:00.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 06:17:43.133 00:00:10.352 TCP 1.101.0.1:3000 -> 23.104.0.1:39026 10 6452 1 2025-11-18 06:18:43.529 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34856 10 6452 1 2025-11-18 06:19:11.883 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 06:19:11.953 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 06:19:11.977 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:19:11.799 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:19:11.687 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 06:19:43.933 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:38768 10 6452 1 2025-11-18 06:20:44.360 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53432 10 6452 1 2025-11-18 06:21:44.763 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:47696 10 6452 1 2025-11-18 06:17:02.440 00:06:00.109 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 06:22:45.188 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57556 10 6452 1 2025-11-18 06:23:45.588 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47288 10 6452 1 2025-11-18 06:19:02.444 00:06:00.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 06:24:11.713 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 06:24:11.788 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:24:11.631 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:24:11.809 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 06:24:11.717 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 06:24:45.994 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40080 10 6452 1 2025-11-18 06:25:46.394 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43508 10 6452 1 2025-11-18 06:26:46.755 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:53070 10 6452 1 2025-11-18 06:27:47.173 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42216 10 6452 1 2025-11-18 06:28:47.577 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42206 10 6452 1 2025-11-18 06:24:02.444 00:06:00.107 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 06:29:11.926 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 06:29:11.839 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 06:29:11.852 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:29:11.842 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:29:11.799 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 06:29:47.977 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44160 10 6452 1 2025-11-18 06:30:48.386 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36946 10 6452 1 2025-11-18 06:26:02.448 00:06:00.101 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 06:31:48.790 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52714 10 6452 1 2025-11-18 06:32:49.192 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56592 10 6452 1 2025-11-18 06:33:49.590 00:00:10.979 TCP 1.101.0.1:3000 -> 23.104.0.1:59068 10 6452 1 2025-11-18 06:34:12.041 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 06:34:12.294 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 06:34:12.065 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:34:11.960 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:34:12.171 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 06:34:50.609 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36806 10 6452 1 2025-11-18 06:31:02.448 00:06:00.105 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 06:35:51.007 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38730 10 6452 1 2025-11-18 06:36:51.368 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39506 10 6452 1 2025-11-18 06:37:51.773 00:00:10.628 TCP 1.101.0.1:3000 -> 23.104.0.1:47612 10 6452 1 2025-11-18 06:33:02.451 00:06:00.100 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 06:38:52.441 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36428 10 6452 1 2025-11-18 06:39:12.074 00:00:00.046 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 06:39:11.803 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 06:39:12.137 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:39:11.992 00:00:00.047 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:39:12.001 00:00:00.040 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 06:39:52.843 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:46056 10 6452 1 2025-11-18 06:40:53.268 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:33690 10 6452 1 2025-11-18 06:41:53.634 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54506 10 6452 1 2025-11-18 06:42:54.036 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33466 10 6452 1 2025-11-18 06:38:02.450 00:06:00.104 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 06:43:54.400 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45458 10 6452 1 2025-11-18 06:44:12.107 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 06:44:11.981 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:44:12.170 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:44:12.171 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 06:44:12.254 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 06:44:54.801 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:34466 11 6504 1 2025-11-18 06:40:02.453 00:06:00.101 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 06:45:55.258 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49124 10 6452 1 2025-11-18 06:46:55.623 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55354 10 6452 1 2025-11-18 06:47:56.028 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36518 10 6452 1 2025-11-18 06:48:56.431 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36130 10 6452 1 2025-11-18 06:49:12.132 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 06:49:12.209 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:49:12.298 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:49:12.222 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 06:49:12.379 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 06:45:02.452 00:06:00.106 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 06:49:56.797 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45678 10 6452 1 2025-11-18 06:50:57.208 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44582 10 6452 1 2025-11-18 06:47:02.455 00:06:00.100 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-18 06:51:57.618 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53144 10 6452 1 2025-11-18 06:52:58.026 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59114 10 6452 1 2025-11-18 06:53:58.395 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44312 10 6452 1 2025-11-18 06:54:12.455 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-18 06:54:12.197 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-18 06:54:12.253 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:54:12.373 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-18 06:54:12.297 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-18 06:54:58.808 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58878 10 6452 1 2025-11-18 06:55:59.214 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46768 10 6452 1 2025-11-18 06:52:02.453 00:06:00.107 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-18 06:56:59.621 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:38600 12 10375 1 2025-11-18 06:58:00.065 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49196 10 6452 1 Summary: total flows: 136, total bytes: 418317, total packets: 1013, avg bps: 897, avg pps: 0, avg bpp: 412 Time window: 2025-11-18 05:56:02 - 2025-11-18 06:58:10 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0039s User: 0.0020s Wall: 0.0020s flows/second: 67061.5 Runtime: 0.0020s