Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 14:53:57.824 00:06:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 14:58:57.311 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56368 10 6452 1 2025-11-09 15:00:02.347 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:00:02.498 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:00:02.497 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 15:00:02.701 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 15:00:02.580 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 14:59:57.719 00:00:10.942 TCP 1.101.0.1:3000 -> 23.104.0.1:50028 10 6452 1 2025-11-09 15:00:58.706 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:55052 10 6452 1 2025-11-09 15:01:59.101 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53456 10 6452 1 2025-11-09 15:02:59.517 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45924 10 6452 1 2025-11-09 15:03:59.886 00:00:10.493 TCP 1.101.0.1:3000 -> 23.104.0.1:50708 12 6556 1 2025-11-09 14:59:57.828 00:06:00.080 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 15:05:02.335 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 15:05:02.330 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 15:05:02.245 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:05:02.248 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:05:02.331 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 15:05:00.420 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49884 10 6452 1 2025-11-09 15:00:57.826 00:06:00.084 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 15:06:00.827 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33346 10 6452 1 2025-11-09 15:07:01.230 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57154 10 6452 1 2025-11-09 15:08:01.597 00:00:10.984 TCP 1.101.0.1:3000 -> 23.104.0.1:57150 10 6452 1 2025-11-09 15:09:02.623 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36786 10 6452 1 2025-11-09 15:10:02.574 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 15:10:02.492 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 15:10:02.227 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 15:10:02.346 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:10:02.491 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:10:03.034 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45464 10 6452 1 2025-11-09 15:11:03.438 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53240 10 6452 1 2025-11-09 15:06:57.830 00:06:00.080 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 15:12:03.843 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:43012 10 6452 1 2025-11-09 15:07:57.828 00:06:00.085 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 15:13:04.273 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55726 10 6452 1 2025-11-09 15:14:04.674 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47766 10 6452 1 2025-11-09 15:15:02.378 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 15:15:02.466 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 15:15:02.426 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:15:02.469 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:15:02.552 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 15:15:05.106 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:55910 10 6452 1 2025-11-09 15:16:05.466 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54828 10 6452 1 2025-11-09 15:17:05.828 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48664 10 6452 1 2025-11-09 15:18:06.228 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58278 10 6452 1 2025-11-09 15:13:57.832 00:06:00.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 15:19:06.627 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53736 10 6452 1 2025-11-09 15:20:02.671 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 15:20:02.821 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 15:20:02.712 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:20:02.672 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:14:57.829 00:06:00.086 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 15:20:02.754 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 15:20:07.032 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34102 10 6452 1 2025-11-09 15:21:07.436 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58656 10 6452 1 2025-11-09 15:22:07.842 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:37156 10 6452 1 2025-11-09 15:23:08.226 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46194 10 6452 1 2025-11-09 15:24:08.587 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54148 10 6452 1 2025-11-09 15:25:02.659 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 15:25:02.517 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 15:25:03.249 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:25:02.661 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:25:02.746 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 15:25:08.987 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47380 10 6452 1 2025-11-09 15:20:57.834 00:06:00.099 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 15:26:09.390 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50262 10 6452 1 2025-11-09 15:21:57.831 00:06:00.105 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 15:27:09.791 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36814 10 6452 1 2025-11-09 15:28:10.204 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37902 10 6452 1 2025-11-09 15:29:10.606 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51604 10 6452 1 2025-11-09 15:30:02.777 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 15:30:02.777 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 15:30:02.835 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:30:02.708 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:30:02.791 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 15:30:11.008 00:00:10.536 TCP 1.101.0.1:3000 -> 23.104.0.1:42658 10 6452 1 2025-11-09 15:31:11.583 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39976 10 6452 1 2025-11-09 15:32:11.991 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51870 10 6452 1 2025-11-09 15:27:57.863 00:06:00.071 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 15:33:12.354 00:00:10.866 TCP 1.101.0.1:3000 -> 23.104.0.1:40318 10 6452 1 2025-11-09 15:28:57.847 00:06:00.091 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 15:34:13.256 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46646 10 6452 1 2025-11-09 15:35:02.892 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 15:35:02.888 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 15:35:03.070 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 15:35:02.982 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:35:02.809 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:35:13.661 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55426 10 6452 1 2025-11-09 15:36:14.071 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32768 10 6452 1 2025-11-09 15:37:14.484 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44434 10 6452 1 2025-11-09 15:38:14.882 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50526 10 6452 1 2025-11-09 15:39:15.290 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40168 10 6452 1 2025-11-09 15:34:57.849 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 15:40:02.930 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:40:03.072 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:40:03.069 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 15:40:03.065 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 15:40:03.156 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 15:40:15.685 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33114 10 6452 1 2025-11-09 15:35:57.847 00:06:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 15:41:16.110 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33998 10 6452 1 2025-11-09 15:42:16.529 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:55172 10 6452 1 2025-11-09 15:43:16.885 00:00:10.544 TCP 1.101.0.1:3000 -> 23.104.0.1:40944 14 14292 1 2025-11-09 15:44:17.470 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46706 10 6452 1 2025-11-09 15:45:03.274 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 15:45:03.352 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 15:45:03.411 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 15:45:03.156 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:45:03.193 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:45:17.869 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37304 10 6452 1 2025-11-09 15:46:18.280 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44838 10 6452 1 2025-11-09 15:41:57.855 00:06:00.088 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 15:47:18.680 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55630 10 6452 1 2025-11-09 15:42:57.855 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 15:48:19.114 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47930 10 6452 1 2025-11-09 15:49:19.521 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40000 10 6452 1 2025-11-09 15:50:03.619 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 15:50:03.567 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 15:50:03.306 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 15:50:03.319 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:50:03.535 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:50:19.883 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35336 12 6556 1 2025-11-09 15:51:20.288 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36336 10 6452 1 2025-11-09 15:52:20.668 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42982 10 6452 1 2025-11-09 15:53:21.106 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36186 10 6452 1 2025-11-09 15:48:57.892 00:06:00.057 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 15:54:21.507 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43990 10 6452 1 2025-11-09 15:55:03.199 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 15:55:03.412 00:00:00.052 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 15:55:03.252 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:55:03.412 00:00:00.052 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 15:49:57.891 00:06:00.061 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 15:55:03.495 00:00:00.052 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 15:55:21.916 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48916 10 6452 1 2025-11-09 15:56:22.312 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58634 10 6452 1 2025-11-09 15:57:22.719 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41976 10 6452 1 2025-11-09 15:58:23.133 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55006 10 6452 1 Summary: total flows: 137, total bytes: 424925, total packets: 1026, avg bps: 877, avg pps: 0, avg bpp: 414 Time window: 2025-11-09 14:53:57 - 2025-11-09 15:58:33 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0035s User: 0.0012s Wall: 0.0025s flows/second: 55691.0 Runtime: 0.0025s