Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 22:58:53.525 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 22:58:53.371 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:58:53.510 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 22:58:53.349 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 22:58:53.592 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 22:59:29.679 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49242 10 6452 1 2025-11-27 23:00:30.064 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51094 10 6452 1 2025-11-27 23:01:30.433 00:00:10.451 TCP 1.101.0.1:3000 -> 23.104.0.1:35458 12 10369 1 2025-11-27 22:58:07.266 00:05:01.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 22:58:07.263 00:05:01.956 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 23:02:30.948 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38676 10 6452 1 2025-11-27 23:03:31.359 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41908 10 6452 1 2025-11-27 23:03:53.600 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 23:03:53.640 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:03:53.604 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:03:53.401 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 23:03:53.686 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 23:04:31.716 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:48582 10 6452 1 2025-11-27 23:05:32.139 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:40516 11 6504 1 2025-11-27 23:06:32.594 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:37758 10 6452 1 2025-11-27 23:07:33.010 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45750 10 6452 1 2025-11-27 23:04:07.267 00:05:01.953 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 23:04:07.270 00:05:01.948 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 23:08:33.420 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45894 10 6452 1 2025-11-27 23:08:53.468 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 23:08:53.502 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:08:53.263 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:08:53.388 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 23:08:53.346 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 23:09:33.821 00:00:11.019 TCP 1.101.0.1:3000 -> 23.104.0.1:55458 10 6452 1 2025-11-27 23:10:34.879 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54368 10 6452 1 2025-11-27 23:11:35.283 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57852 10 6452 1 2025-11-27 23:12:35.695 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47952 10 6452 1 2025-11-27 23:13:36.124 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52888 10 6452 1 2025-11-27 23:13:53.855 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 23:13:53.622 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 23:13:53.504 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:13:53.772 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:13:53.630 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 23:10:07.268 00:05:01.954 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 23:10:07.270 00:05:01.949 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 23:14:36.486 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54222 10 6452 1 2025-11-27 23:15:36.855 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:55978 10 6452 1 2025-11-27 23:16:37.269 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44748 10 6452 1 2025-11-27 23:17:37.672 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50372 10 6452 1 2025-11-27 23:18:38.105 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55332 10 6452 1 2025-11-27 23:18:53.730 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 23:18:53.655 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:18:53.724 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:18:53.590 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 23:18:53.808 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 23:19:38.514 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56112 10 6452 1 2025-11-27 23:16:07.271 00:05:01.949 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 23:16:07.268 00:05:01.954 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 23:20:38.921 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37592 10 6452 1 2025-11-27 23:21:39.344 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:48638 12 10369 1 2025-11-27 23:22:39.785 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43656 10 6452 1 2025-11-27 23:23:40.190 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58420 10 6452 1 2025-11-27 23:23:54.028 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 23:23:53.739 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 23:23:53.790 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:23:53.946 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:23:53.997 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 23:24:40.595 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43096 10 6452 1 2025-11-27 23:25:40.964 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50024 10 6452 1 2025-11-27 23:22:07.271 00:05:01.953 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 23:22:07.273 00:05:01.947 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 23:26:41.368 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52710 10 6452 1 2025-11-27 23:27:41.772 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:39730 10 6452 1 2025-11-27 23:28:54.145 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 23:28:54.063 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:28:53.937 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 23:28:42.155 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48762 10 6452 1 2025-11-27 23:28:54.056 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 23:28:53.769 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:29:42.557 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57778 10 6452 1 2025-11-27 23:30:42.962 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46442 10 6452 1 2025-11-27 23:31:43.367 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39928 10 6452 1 2025-11-27 23:28:07.272 00:05:01.955 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 23:28:07.275 00:05:01.949 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 23:32:43.765 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45652 10 6452 1 2025-11-27 23:33:54.075 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 23:33:54.103 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:33:54.074 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:33:44.180 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45534 10 6452 1 2025-11-27 23:33:54.159 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 23:33:54.156 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 23:34:44.606 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35934 10 6452 1 2025-11-27 23:35:45.013 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:54142 10 6452 1 2025-11-27 23:36:45.378 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53710 10 6452 1 2025-11-27 23:37:45.780 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38294 10 6452 1 2025-11-27 23:34:07.277 00:05:01.950 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 23:34:07.273 00:05:01.955 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 23:38:54.221 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 23:38:54.139 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:38:54.335 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 23:38:54.041 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 23:38:53.953 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:38:46.193 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44238 10 6452 1 2025-11-27 23:39:46.554 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58784 10 6452 1 2025-11-27 23:40:46.956 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52240 10 6452 1 2025-11-27 23:41:47.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36896 10 6452 1 2025-11-27 23:42:47.764 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:51654 10 6452 1 2025-11-27 23:43:54.309 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 23:43:54.058 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 23:43:54.097 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:43:54.225 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:43:54.384 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 23:43:48.180 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39926 10 6452 1 2025-11-27 23:40:07.274 00:05:01.957 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 23:40:07.277 00:05:01.951 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 23:44:48.610 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56938 10 6452 1 2025-11-27 23:45:49.009 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56026 10 6452 1 2025-11-27 23:46:49.415 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51792 10 6452 1 2025-11-27 23:47:49.794 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:53926 10 6452 1 2025-11-27 23:48:54.447 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 23:48:54.123 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:48:54.387 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:48:54.390 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 23:48:54.472 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 23:48:50.180 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:60798 10 6452 1 2025-11-27 23:49:50.542 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36106 10 6452 1 2025-11-27 23:46:07.278 00:05:01.952 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 23:46:07.276 00:05:01.957 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 23:50:50.954 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42348 10 6452 1 2025-11-27 23:51:51.357 00:00:10.500 TCP 1.101.0.1:3000 -> 23.104.0.1:33120 10 6452 1 2025-11-27 23:52:51.895 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43642 10 6452 1 2025-11-27 23:53:54.597 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-27 23:53:54.392 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-27 23:53:54.341 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:53:54.514 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-27 23:53:54.312 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-27 23:53:52.310 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50880 10 6452 1 2025-11-27 23:54:52.712 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59870 10 6452 1 2025-11-27 23:55:53.120 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52100 10 6452 1 2025-11-27 23:52:07.281 00:05:01.952 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-27 23:52:07.278 00:05:01.957 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-27 23:56:53.527 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:35036 13 13949 1 2025-11-27 23:57:54.007 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48692 10 6452 1 Summary: total flows: 139, total bytes: 425931, total packets: 1018, avg bps: 947, avg pps: 0, avg bpp: 418 Time window: 2025-11-27 22:58:07 - 2025-11-27 23:58:04 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0045s User: 0.0009s Wall: 0.0022s flows/second: 62588.1 Runtime: 0.0022s