Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 06:59:03.399 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 06:59:02.943 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 06:59:03.317 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 06:59:02.718 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 06:59:03.315 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 06:59:04.482 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57242 10 6452 1 2025-11-28 07:00:04.889 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48208 10 6452 1 2025-11-28 07:01:05.298 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48520 10 6452 1 2025-11-28 06:58:07.431 00:05:02.027 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 06:58:07.428 00:05:02.032 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 07:02:05.676 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45016 10 6452 1 2025-11-28 07:03:06.113 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60070 10 6452 1 2025-11-28 07:04:03.397 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 07:04:03.220 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 07:04:03.181 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:04:03.313 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:04:03.055 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 07:04:06.530 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39532 10 6452 1 2025-11-28 07:05:06.929 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:46004 10 6452 1 2025-11-28 07:06:07.363 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42390 12 6556 1 2025-11-28 07:07:07.767 00:00:10.519 TCP 1.101.0.1:3000 -> 23.104.0.1:59568 10 6452 1 2025-11-28 07:04:07.433 00:05:02.025 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 07:04:07.429 00:05:02.030 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 07:08:08.324 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:44068 10 6452 1 2025-11-28 07:09:03.192 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 07:09:03.067 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:09:03.317 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:09:03.119 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 07:09:03.399 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 07:09:08.682 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35130 10 6452 1 2025-11-28 07:10:09.105 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57802 10 6452 1 2025-11-28 07:11:09.512 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39930 10 6452 1 2025-11-28 07:12:09.919 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60782 10 6452 1 2025-11-28 07:13:10.327 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38364 10 6452 1 2025-11-28 07:14:03.489 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 07:14:03.204 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 07:14:03.160 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:14:03.405 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:14:03.268 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 07:10:07.434 00:05:02.026 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 07:10:07.432 00:05:02.031 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 07:14:10.737 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47876 10 6452 1 2025-11-28 07:15:11.107 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56514 10 6452 1 2025-11-28 07:16:11.510 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33746 10 6452 1 2025-11-28 07:17:11.917 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:35228 10 6452 1 2025-11-28 07:18:12.318 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48910 10 6452 1 2025-11-28 07:19:03.269 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 07:19:03.622 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 07:19:03.123 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:19:03.188 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:19:03.437 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 07:19:12.719 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51030 10 6452 1 2025-11-28 07:16:07.436 00:05:02.026 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 07:16:07.432 00:05:02.032 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 07:20:13.135 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59326 10 6452 1 2025-11-28 07:21:13.536 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47918 10 6452 1 2025-11-28 07:22:13.903 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34042 10 6452 1 2025-11-28 07:23:14.308 00:00:10.711 TCP 1.101.0.1:3000 -> 23.104.0.1:54666 10 6452 1 2025-11-28 07:24:03.511 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 07:24:03.538 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 07:24:03.642 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:24:03.426 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:24:03.657 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 07:24:15.064 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33730 10 6452 1 2025-11-28 07:25:15.424 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50356 10 6452 1 2025-11-28 07:22:07.434 00:05:02.032 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 07:22:07.437 00:05:02.027 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 07:26:15.827 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49982 10 6452 1 2025-11-28 07:27:16.229 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:50112 10 6452 1 2025-11-28 07:28:16.640 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45816 10 6452 1 2025-11-28 07:29:03.510 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 07:29:03.479 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:29:03.507 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:29:03.582 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 07:29:03.591 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 07:29:17.053 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51966 10 6452 1 2025-11-28 07:30:17.464 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60618 10 6452 1 2025-11-28 07:31:17.874 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39740 10 6452 1 2025-11-28 07:28:07.437 00:05:02.031 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 07:28:07.441 00:05:02.026 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 07:32:18.290 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58294 10 6452 1 2025-11-28 07:33:18.693 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47854 10 6452 1 2025-11-28 07:34:03.825 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 07:34:03.556 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:34:03.758 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:34:03.862 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 07:34:03.840 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 07:34:19.117 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60850 10 6452 1 2025-11-28 07:35:19.527 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42032 10 6452 1 2025-11-28 07:36:19.928 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:45218 10 6452 1 2025-11-28 07:37:20.379 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:39598 10 6452 1 2025-11-28 07:34:07.442 00:05:02.025 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 07:34:07.439 00:05:02.029 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 07:38:20.744 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34264 10 6452 1 2025-11-28 07:39:03.889 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 07:39:03.644 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:39:03.848 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:39:03.539 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 07:39:03.930 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 07:39:21.153 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44070 10 6452 1 2025-11-28 07:40:21.558 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50644 10 6452 1 2025-11-28 07:41:21.955 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38648 10 6452 1 2025-11-28 07:42:22.355 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:49982 10 6452 1 2025-11-28 07:43:22.720 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38372 10 6452 1 2025-11-28 07:44:03.996 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 07:44:04.004 00:00:00.037 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:44:04.000 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:44:04.005 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 07:44:04.081 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 07:40:07.441 00:05:02.028 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 07:40:07.443 00:05:02.023 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 07:44:23.139 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35616 10 6452 1 2025-11-28 07:45:23.544 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:48182 10 6452 1 2025-11-28 07:46:23.930 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:53486 10 6452 1 2025-11-28 07:47:24.318 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53378 10 6452 1 2025-11-28 07:48:24.717 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41346 10 6452 1 2025-11-28 07:49:04.039 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 07:49:03.583 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:49:04.001 00:00:00.040 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:49:03.988 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 07:49:04.082 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 07:49:25.123 00:00:10.569 TCP 1.101.0.1:3000 -> 23.104.0.1:42224 10 6452 1 2025-11-28 07:46:07.443 00:05:02.037 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 07:46:07.445 00:05:02.032 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 07:50:25.732 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35984 10 6452 1 2025-11-28 07:51:26.136 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57582 10 6452 1 2025-11-28 07:52:26.542 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37602 10 6452 1 2025-11-28 07:53:26.942 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37154 10 6452 1 2025-11-28 07:54:04.245 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 07:54:04.129 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:54:03.903 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 07:54:04.349 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 07:54:03.987 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 07:54:27.360 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36506 10 6452 1 2025-11-28 07:55:27.762 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54814 10 6452 1 2025-11-28 07:52:07.443 00:05:02.039 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 07:52:07.446 00:05:02.034 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 07:56:28.170 00:00:11.023 TCP 1.101.0.1:3000 -> 23.104.0.1:49850 14 14298 1 2025-11-28 07:57:29.225 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59760 10 6452 1 2025-11-28 07:58:29.637 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40502 10 6452 1 Summary: total flows: 140, total bytes: 424950, total packets: 1026, avg bps: 935, avg pps: 0, avg bpp: 414 Time window: 2025-11-28 06:58:07 - 2025-11-28 07:58:40 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0050s User: 0.0010s Wall: 0.0017s flows/second: 81488.0 Runtime: 0.0017s