Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 21:58:52.414 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 21:58:52.282 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:58:52.345 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 21:58:52.519 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 21:58:52.428 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 21:59:02.878 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51404 10 6870 1 2025-11-27 22:00:03.278 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39182 10 6870 1 2025-11-27 22:01:03.678 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45910 10 6870 1 2025-11-27 21:58:07.239 00:05:01.958 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 21:58:07.242 00:05:01.953 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:02:04.106 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33592 10 6870 1 2025-11-27 22:03:04.480 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42860 10 6870 1 2025-11-27 22:03:52.274 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:03:52.211 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:03:52.279 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:03:52.277 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:03:52.363 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:04:04.851 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:57710 10 6870 1 2025-11-27 22:05:05.233 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34344 10 6870 1 2025-11-27 22:06:05.639 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45722 10 6870 1 2025-11-27 22:07:06.027 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43818 10 6870 1 2025-11-27 22:04:07.240 00:05:01.963 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:04:07.244 00:05:01.957 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:08:06.428 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58704 10 6870 1 2025-11-27 22:08:52.484 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:08:52.447 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:08:52.257 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:08:52.401 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:08:52.300 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:09:06.835 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:56568 10 6870 1 2025-11-27 22:10:07.269 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:40512 10 6870 1 2025-11-27 22:11:07.633 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:39240 10 6870 1 2025-11-27 22:12:08.096 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36902 10 6870 1 2025-11-27 22:13:08.502 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54216 10 6870 1 2025-11-27 22:13:52.366 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:13:52.525 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:13:52.116 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:13:52.284 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:13:52.527 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:10:07.242 00:05:01.962 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:10:07.244 00:05:01.957 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:14:08.906 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46674 10 6870 1 2025-11-27 22:15:09.271 00:00:10.760 TCP 1.101.0.1:3000 -> 23.104.0.1:51594 10 6870 1 2025-11-27 22:16:10.102 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48472 10 6870 1 2025-11-27 22:17:10.503 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36368 10 6870 1 2025-11-27 22:18:10.907 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46700 10 6870 1 2025-11-27 22:18:52.869 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:18:52.684 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:18:52.452 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:18:52.786 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:18:52.689 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:19:11.315 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59850 10 6870 1 2025-11-27 22:16:07.242 00:05:01.963 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:16:07.246 00:05:01.958 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:20:11.711 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37568 10 6870 1 2025-11-27 22:21:12.125 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34804 10 6870 1 2025-11-27 22:22:12.528 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33470 10 6870 1 2025-11-27 22:23:12.932 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:48074 10 6870 1 2025-11-27 22:23:52.800 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:23:52.658 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:23:52.385 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:23:52.716 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:23:52.752 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:24:13.362 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45660 10 6870 1 2025-11-27 22:25:13.761 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57510 10 6870 1 2025-11-27 22:22:07.249 00:05:01.958 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:22:07.253 00:05:01.953 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:26:14.167 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52098 11 6910 1 2025-11-27 22:27:14.570 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:53494 10 6870 1 2025-11-27 22:28:14.929 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:47546 10 6870 1 2025-11-27 22:28:52.956 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:28:52.926 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:28:52.740 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:28:52.873 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:28:52.866 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:29:15.358 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54758 10 6870 1 2025-11-27 22:30:15.774 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:39822 10 6870 1 2025-11-27 22:31:16.145 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48308 10 6870 1 2025-11-27 22:28:07.248 00:05:01.964 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:28:07.251 00:05:01.959 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:32:16.547 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47100 10 6870 1 2025-11-27 22:33:16.948 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56332 10 6870 1 2025-11-27 22:33:53.746 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:33:53.718 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:33:53.500 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:33:53.663 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:33:53.661 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:34:17.912 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34760 10 6870 1 2025-11-27 22:35:18.313 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46438 10 6870 1 2025-11-27 22:36:18.682 00:00:10.454 TCP 1.101.0.1:3000 -> 23.104.0.1:54968 12 10369 1 2025-11-27 22:37:19.177 00:00:11.250 TCP 1.101.0.1:3000 -> 23.104.0.1:51018 10 6452 1 2025-11-27 22:34:07.250 00:05:01.964 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:34:07.251 00:05:01.960 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:38:20.466 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33526 10 6452 1 2025-11-27 22:38:53.133 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:38:52.952 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:38:52.973 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:38:53.049 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:38:53.047 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:39:20.866 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40518 10 6452 1 2025-11-27 22:40:21.282 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:54116 10 6452 1 2025-11-27 22:41:21.709 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59888 10 6452 1 2025-11-27 22:42:22.092 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47848 10 6452 1 2025-11-27 22:43:22.499 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57200 10 6452 1 2025-11-27 22:43:53.260 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:43:53.167 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:43:53.203 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:43:53.177 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:43:53.169 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:40:07.263 00:05:01.950 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:40:07.261 00:05:01.955 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:44:22.906 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37446 10 6452 1 2025-11-27 22:45:23.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50672 10 6452 1 2025-11-27 22:46:23.725 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48712 10 6452 1 2025-11-27 22:47:24.142 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:53494 10 6452 1 2025-11-27 22:48:24.500 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59634 10 6452 1 2025-11-27 22:48:53.373 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:48:53.242 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:48:52.994 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:48:53.290 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:48:53.185 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:49:24.866 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44590 10 6452 1 2025-11-27 22:46:07.261 00:05:01.955 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:46:07.266 00:05:01.950 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:50:25.280 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37286 10 6452 1 2025-11-27 22:51:25.639 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32950 10 6452 1 2025-11-27 22:52:26.037 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50902 10 6452 1 2025-11-27 22:53:26.433 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54636 10 6452 1 2025-11-27 22:53:53.412 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:53:53.258 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:53:53.188 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:53:53.329 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:53:53.323 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:54:26.838 00:00:11.161 TCP 1.101.0.1:3000 -> 23.104.0.1:39220 10 6452 1 2025-11-27 22:55:28.033 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42694 10 6452 1 2025-11-27 22:52:07.265 00:05:01.950 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:52:07.263 00:05:01.955 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 22:56:28.442 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50366 10 6452 1 2025-11-27 22:57:28.848 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:35426 10 6452 1 2025-11-27 22:58:29.275 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:49258 10 6452 1 Summary: total flows: 140, total bytes: 436423, total packets: 1023, avg bps: 961, avg pps: 0, avg bpp: 426 Time window: 2025-11-27 21:58:07 - 2025-11-27 22:58:39 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0052s User: 0.0013s Wall: 0.0029s flows/second: 48982.5 Runtime: 0.0029s