Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 22:59:22.139 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 22:59:22.185 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:59:13.580 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49142 10 6452 1 2025-11-28 22:59:22.313 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 22:59:22.139 00:00:00.032 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 22:59:22.395 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 23:00:13.982 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38100 10 6452 1 2025-11-28 23:01:14.389 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36180 10 6452 1 2025-11-28 22:58:07.780 00:05:02.114 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 22:58:07.777 00:05:02.120 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 23:02:14.792 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38948 10 6452 1 2025-11-28 23:03:15.167 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:38510 10 6452 1 2025-11-28 23:04:22.496 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 23:04:22.251 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 23:04:22.075 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:04:22.415 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:04:22.463 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 23:04:15.605 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47032 10 6452 1 2025-11-28 23:05:16.010 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37278 10 6452 1 2025-11-28 23:06:16.417 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:41864 10 6452 1 2025-11-28 23:07:16.787 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43106 10 6452 1 2025-11-28 23:04:07.781 00:05:02.116 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 23:04:07.779 00:05:02.121 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 23:08:17.190 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45718 10 6452 1 2025-11-28 23:09:22.689 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 23:09:22.583 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:09:22.730 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:09:22.561 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 23:09:22.813 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 23:09:17.589 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52370 10 6452 1 2025-11-28 23:10:17.997 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48776 10 6452 1 2025-11-28 23:11:18.402 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51872 10 6452 1 2025-11-28 23:12:18.765 00:00:10.459 TCP 1.101.0.1:3000 -> 23.104.0.1:49890 12 10369 1 2025-11-28 23:13:19.260 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59380 10 6452 1 2025-11-28 23:10:07.782 00:05:02.118 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 23:10:07.779 00:05:02.123 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 23:14:22.608 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 23:14:22.587 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 23:14:22.462 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:14:22.527 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:14:22.576 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 23:14:19.664 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39048 10 6452 1 2025-11-28 23:15:20.096 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54508 10 6452 1 2025-11-28 23:16:20.508 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58630 10 6452 1 2025-11-28 23:17:20.870 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43176 10 6452 1 2025-11-28 23:18:21.285 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44412 10 6452 1 2025-11-28 23:19:22.684 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 23:19:22.600 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 23:19:22.264 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:19:22.602 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:19:22.612 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 23:19:21.651 00:00:20.162 TCP 1.101.0.1:3000 -> 23.104.0.1:32856 10 6452 1 2025-11-28 23:16:07.782 00:05:02.121 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 23:16:07.784 00:05:02.116 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 23:20:31.854 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46076 10 6452 1 2025-11-28 23:21:32.275 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39038 10 6452 1 2025-11-28 23:22:32.642 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41788 10 6452 1 2025-11-28 23:23:33.053 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46266 10 6452 1 2025-11-28 23:24:22.682 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 23:24:22.708 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:24:22.744 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:24:22.747 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 23:24:22.828 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 23:24:33.452 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50512 10 6452 1 2025-11-28 23:25:33.853 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36996 10 6452 1 2025-11-28 23:22:07.787 00:05:02.118 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 23:22:07.784 00:05:02.123 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 23:26:34.271 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:37090 10 6452 1 2025-11-28 23:27:34.630 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46392 10 6452 1 2025-11-28 23:28:35.030 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33366 10 6452 1 2025-11-28 23:29:23.226 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 23:29:23.066 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 23:29:22.931 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:29:23.143 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:29:23.112 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 23:29:35.435 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55540 10 6452 1 2025-11-28 23:30:35.838 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:42360 10 6452 1 2025-11-28 23:31:36.262 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40704 10 6452 1 2025-11-28 23:28:07.785 00:05:02.125 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 23:28:07.789 00:05:02.120 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 23:32:36.670 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58528 10 6452 1 2025-11-28 23:33:37.096 00:00:17.437 TCP 1.101.0.1:3000 -> 23.104.0.1:40930 10 6452 1 2025-11-28 23:34:22.968 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 23:34:22.980 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 23:34:22.906 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:34:22.886 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:34:23.180 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 23:34:44.568 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51176 10 6452 1 2025-11-28 23:35:44.973 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46772 10 6452 1 2025-11-28 23:36:45.377 00:00:10.532 TCP 1.101.0.1:3000 -> 23.104.0.1:57480 10 6452 1 2025-11-28 23:37:45.948 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47476 10 6452 1 2025-11-28 23:34:07.789 00:05:02.123 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 23:34:07.788 00:05:02.129 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 23:38:46.355 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:45848 10 6452 1 2025-11-28 23:39:23.245 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 23:39:23.165 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 23:39:22.999 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:39:23.163 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:39:23.143 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 23:39:46.716 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:43412 10 6452 1 2025-11-28 23:40:47.136 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45422 10 6452 1 2025-11-28 23:41:47.549 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:42074 10 6452 1 2025-11-28 23:42:47.936 00:00:10.749 TCP 1.101.0.1:3000 -> 23.104.0.1:52196 10 6452 1 2025-11-28 23:43:48.723 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:56806 10 6452 1 2025-11-28 23:40:07.790 00:05:02.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 23:40:07.791 00:05:02.123 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 23:44:23.322 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 23:44:23.283 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 23:44:23.100 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:44:23.240 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:44:23.105 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 23:44:49.146 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43710 10 6452 1 2025-11-28 23:45:49.523 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50648 10 6452 1 2025-11-28 23:46:49.887 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:59108 10 6452 1 2025-11-28 23:47:50.262 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56784 10 6452 1 2025-11-28 23:48:50.674 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59702 10 6452 1 2025-11-28 23:49:23.367 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 23:49:22.991 00:00:00.048 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 23:49:22.862 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:49:23.284 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:49:23.130 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 23:46:07.790 00:05:02.130 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 23:49:51.035 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42188 10 6452 1 2025-11-28 23:46:07.792 00:05:02.124 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 23:50:51.441 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48606 10 6452 1 2025-11-28 23:51:51.860 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:33382 10 6452 1 2025-11-28 23:52:52.281 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57128 10 6452 1 2025-11-28 23:53:52.685 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:56280 10 6452 1 2025-11-28 23:54:23.598 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-28 23:54:23.254 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-28 23:54:23.057 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:54:23.515 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-28 23:54:23.405 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-28 23:54:53.112 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55098 10 6452 1 2025-11-28 23:52:07.791 00:05:02.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-28 23:55:53.518 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:33380 10 6452 1 2025-11-28 23:52:07.795 00:05:02.122 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-28 23:56:53.892 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:44994 10 6452 1 2025-11-28 23:57:54.270 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38084 10 6452 1 Summary: total flows: 139, total bytes: 414465, total packets: 1012, avg bps: 921, avg pps: 0, avg bpp: 409 Time window: 2025-11-28 22:58:07 - 2025-11-28 23:58:04 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0029s User: 0.0020s Wall: 0.0015s flows/second: 91209.1 Runtime: 0.0015s