Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 00:58:55.856 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 00:58:55.670 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:58:55.851 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 00:58:55.631 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 00:58:55.933 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 00:59:18.521 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55218 10 6452 1 2025-11-28 01:00:18.928 00:00:10.636 TCP 1.101.0.1:3000 -> 23.104.0.1:37510 10 6452 1 2025-11-28 01:01:19.605 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52270 10 6452 1 2025-11-28 00:58:07.299 00:05:01.980 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 00:58:07.296 00:05:01.984 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 01:02:20.003 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38158 10 6452 1 2025-11-28 01:03:20.399 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58522 10 6452 1 2025-11-28 01:03:55.916 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 01:03:55.905 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 01:03:55.550 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:03:55.832 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:03:55.906 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 01:04:20.802 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:33128 10 6452 1 2025-11-28 01:05:21.180 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41686 10 6452 1 2025-11-28 01:06:21.590 00:00:11.017 TCP 1.101.0.1:3000 -> 23.104.0.1:40462 10 6452 1 2025-11-28 01:07:22.647 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41124 10 6452 1 2025-11-28 01:04:07.300 00:05:01.983 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 01:04:07.304 00:05:01.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 01:08:23.039 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58196 10 6452 1 2025-11-28 01:08:55.874 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:08:56.379 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 01:08:56.193 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 01:08:56.297 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:08:56.088 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 01:09:23.443 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:34330 10 6452 1 2025-11-28 01:10:23.876 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:41042 10 6452 1 2025-11-28 01:11:24.250 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:34102 10 6452 1 2025-11-28 01:12:24.618 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34434 10 6452 1 2025-11-28 01:13:25.021 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:45598 10 6452 1 2025-11-28 01:13:56.243 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 01:13:56.231 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:13:56.247 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:13:56.462 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 01:13:56.330 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 01:10:07.305 00:05:01.980 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 01:10:07.303 00:05:01.985 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 01:14:25.402 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59568 10 6452 1 2025-11-28 01:15:25.759 00:00:10.537 TCP 1.101.0.1:3000 -> 23.104.0.1:42756 10 6452 1 2025-11-28 01:16:26.333 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46194 10 6452 1 2025-11-28 01:17:26.732 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40342 10 6452 1 2025-11-28 01:18:27.146 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42142 10 6452 1 2025-11-28 01:18:56.308 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 01:18:55.997 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 01:18:56.242 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:18:56.225 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:18:55.995 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 01:19:27.560 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52482 10 6452 1 2025-11-28 01:16:07.306 00:05:01.980 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 01:16:07.303 00:05:01.986 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 01:20:27.971 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:60308 10 6452 1 2025-11-28 01:21:28.377 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51110 10 6452 1 2025-11-28 01:22:28.739 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47522 10 6452 1 2025-11-28 01:23:29.150 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37350 10 6452 1 2025-11-28 01:23:56.633 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 01:23:56.428 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 01:23:56.001 00:00:00.047 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:23:56.550 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:23:56.480 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 01:24:29.556 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37592 10 6452 1 2025-11-28 01:25:29.912 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50720 10 6452 1 2025-11-28 01:22:07.308 00:05:01.979 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 01:22:07.306 00:05:01.985 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 01:26:30.322 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40668 10 6452 1 2025-11-28 01:27:30.726 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51092 10 6452 1 2025-11-28 01:28:31.114 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33916 10 6452 1 2025-11-28 01:28:56.631 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 01:28:56.399 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 01:28:56.278 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:28:56.550 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:28:56.219 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 01:29:31.525 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:57064 10 6452 1 2025-11-28 01:30:31.900 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50704 12 6556 1 2025-11-28 01:31:32.310 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46662 10 6452 1 2025-11-28 01:28:07.324 00:05:01.965 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 01:28:07.320 00:05:01.971 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 01:32:32.717 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:40680 10 6452 1 2025-11-28 01:33:33.117 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56994 10 6452 1 2025-11-28 01:33:56.514 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 01:33:56.472 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:33:56.509 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:33:56.325 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 01:33:56.592 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 01:34:33.519 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45518 10 6452 1 2025-11-28 01:35:33.882 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33466 10 6452 1 2025-11-28 01:36:34.281 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57372 12 6556 1 2025-11-28 01:37:34.684 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:36276 10 6452 1 2025-11-28 01:34:07.312 00:05:01.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 01:34:07.309 00:05:01.984 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 01:38:35.099 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44874 10 6452 1 2025-11-28 01:38:56.705 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 01:38:56.549 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 01:38:56.374 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:38:56.622 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:38:56.697 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 01:39:35.504 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46434 10 6452 1 2025-11-28 01:40:35.914 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57012 10 6452 1 2025-11-28 01:41:36.314 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56194 10 6452 1 2025-11-28 01:42:36.715 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:57734 10 6452 1 2025-11-28 01:43:37.135 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:47226 10 6452 1 2025-11-28 01:43:56.676 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 01:43:56.491 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:43:56.634 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:43:56.674 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 01:43:56.717 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 01:40:07.310 00:05:01.984 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 01:40:07.312 00:05:01.979 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 01:44:37.495 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56556 10 6452 1 2025-11-28 01:45:37.863 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58586 10 6452 1 2025-11-28 01:46:38.276 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42914 10 6452 1 2025-11-28 01:47:38.691 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44006 10 6452 1 2025-11-28 01:48:39.113 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34706 10 6452 1 2025-11-28 01:48:56.953 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 01:48:56.870 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 01:48:56.736 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:48:56.871 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:48:56.868 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 01:49:39.521 00:00:10.688 TCP 1.101.0.1:3000 -> 23.104.0.1:33762 10 6452 1 2025-11-28 01:46:07.314 00:05:01.984 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 01:46:07.317 00:05:01.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 01:50:40.248 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44034 10 6452 1 2025-11-28 01:51:40.617 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36240 10 6452 1 2025-11-28 01:52:41.022 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48670 10 6452 1 2025-11-28 01:53:56.928 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 01:53:41.429 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37394 10 6452 1 2025-11-28 01:53:56.942 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 01:53:56.870 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:53:56.845 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 01:53:56.768 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 01:54:41.835 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:57622 10 6452 1 2025-11-28 01:55:42.270 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60426 10 6452 1 2025-11-28 01:52:07.318 00:05:01.978 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 01:52:07.314 00:05:01.983 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 01:56:42.697 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59896 10 6452 1 2025-11-28 01:57:43.093 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33886 10 6452 1 Summary: total flows: 139, total bytes: 410756, total packets: 1014, avg bps: 916, avg pps: 0, avg bpp: 405 Time window: 2025-11-28 00:58:07 - 2025-11-28 01:57:53 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0046s User: 0.0009s Wall: 0.0015s flows/second: 94231.2 Runtime: 0.0015s