Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 08:53:57.141 00:06:00.095 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 08:59:25.962 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 08:59:15.008 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34462 10 6452 1 2025-11-08 08:59:26.356 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 08:59:26.195 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 08:59:26.274 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 08:59:26.246 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 08:54:57.139 00:06:00.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 09:00:15.366 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46292 10 6452 1 2025-11-08 09:01:15.769 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:49564 10 6452 1 2025-11-08 09:02:16.194 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:56638 10 6452 1 2025-11-08 09:03:16.580 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42924 10 6452 1 2025-11-08 09:04:26.929 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 09:04:26.712 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 09:04:26.903 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:04:26.845 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:04:26.582 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 09:04:16.981 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53688 10 6452 1 2025-11-08 09:05:17.387 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51004 10 6452 1 2025-11-08 09:00:57.143 00:06:00.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 09:06:17.794 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34900 10 6452 1 2025-11-08 09:01:57.140 00:06:00.108 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 09:07:18.199 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56698 10 6452 1 2025-11-08 09:08:18.597 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:41830 12 10369 1 2025-11-08 09:09:26.432 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 09:09:26.336 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:09:19.098 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45140 10 6452 1 2025-11-08 09:09:26.470 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:09:26.370 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 09:09:26.568 00:00:00.014 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 09:10:19.502 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:40306 10 6452 1 2025-11-08 09:11:19.932 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:58488 10 6452 1 2025-11-08 09:12:20.373 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32978 10 6452 1 2025-11-08 09:07:57.145 00:06:00.104 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 09:13:20.780 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45556 10 6452 1 2025-11-08 09:08:57.145 00:06:00.106 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 09:14:26.518 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 09:14:26.549 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 09:14:26.172 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:14:26.437 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:14:26.442 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 09:14:21.188 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48460 10 6452 1 2025-11-08 09:15:21.555 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55244 10 6452 1 2025-11-08 09:16:21.967 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58656 10 6452 1 2025-11-08 09:17:22.365 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59886 10 6452 1 2025-11-08 09:18:22.770 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37168 10 6452 1 2025-11-08 09:19:26.481 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 09:19:26.592 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:19:26.387 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:19:26.554 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 09:19:26.469 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 09:19:23.131 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52108 10 6452 1 2025-11-08 09:14:57.151 00:06:00.099 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 09:20:23.506 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39324 10 6452 1 2025-11-08 09:15:57.148 00:06:00.105 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 09:21:23.911 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:56254 10 6452 1 2025-11-08 09:22:24.279 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33508 10 6452 1 2025-11-08 09:23:24.684 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39698 10 6452 1 2025-11-08 09:24:26.752 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 09:24:26.545 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:24:26.747 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:24:26.622 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 09:24:26.831 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 09:24:25.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58792 10 6452 1 2025-11-08 09:25:25.518 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35662 10 6452 1 2025-11-08 09:26:25.921 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:58086 10 6452 1 2025-11-08 09:21:57.153 00:06:00.099 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 09:27:26.306 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58516 10 6452 1 2025-11-08 09:22:57.150 00:06:00.106 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 09:28:26.718 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39702 10 6452 1 2025-11-08 09:29:26.929 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 09:29:26.779 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:29:26.694 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:29:27.077 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 09:29:26.777 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 09:29:27.128 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:51302 10 6452 1 2025-11-08 09:30:27.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34452 10 6452 1 2025-11-08 09:31:27.943 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44720 10 6452 1 2025-11-08 09:32:28.364 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58590 10 6452 1 2025-11-08 09:33:28.769 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:57502 10 6452 1 2025-11-08 09:28:57.155 00:06:00.098 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 09:34:27.013 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 09:34:26.943 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 09:34:26.786 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:34:26.929 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:34:26.871 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 09:34:29.187 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60946 10 6452 1 2025-11-08 09:29:57.154 00:06:00.103 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 09:35:29.586 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58830 10 6452 1 2025-11-08 09:36:29.994 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59100 10 6452 1 2025-11-08 09:37:30.394 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:36076 10 6452 1 2025-11-08 09:38:30.774 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37722 10 6452 1 2025-11-08 09:39:27.124 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 09:39:26.607 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:39:27.042 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:39:27.079 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 09:39:26.946 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 09:39:31.187 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57734 10 6452 1 2025-11-08 09:40:31.548 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53058 10 6452 1 2025-11-08 09:35:57.159 00:06:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 09:41:31.949 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36306 10 6452 1 2025-11-08 09:36:57.156 00:06:00.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 09:42:32.361 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43656 10 6452 1 2025-11-08 09:43:32.764 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:40034 10 6452 1 2025-11-08 09:44:27.308 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 09:44:27.269 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:44:27.260 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:44:27.326 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 09:44:27.344 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 09:44:33.193 00:00:21.619 TCP 1.101.0.1:3000 -> 23.104.0.1:54348 10 6452 1 2025-11-08 09:45:44.847 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:40274 10 6452 1 2025-11-08 09:46:45.269 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54214 10 6452 1 2025-11-08 09:47:45.669 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34040 10 6452 1 2025-11-08 09:42:57.161 00:06:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 09:43:57.158 00:06:00.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 09:48:46.104 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41908 10 6452 1 2025-11-08 09:49:27.188 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 09:49:27.141 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:49:27.190 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:49:26.990 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 09:49:27.273 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 09:49:46.505 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52664 10 6452 1 2025-11-08 09:50:46.910 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43104 10 6452 1 2025-11-08 09:51:47.319 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37748 10 6452 1 2025-11-08 09:52:47.723 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55256 10 6452 1 2025-11-08 09:53:48.142 00:00:10.487 TCP 1.101.0.1:3000 -> 23.104.0.1:38314 10 6452 1 2025-11-08 09:54:27.063 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 09:54:27.135 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:54:27.307 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 09:54:27.405 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 09:54:27.389 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 09:54:48.666 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32788 10 6452 1 2025-11-08 09:49:57.163 00:06:00.095 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 09:50:57.161 00:06:00.100 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 09:55:49.030 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55968 10 6452 1 2025-11-08 09:56:49.439 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42750 10 6452 1 2025-11-08 09:57:49.839 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:55446 10 6452 1 Summary: total flows: 137, total bytes: 415203, total packets: 1024, avg bps: 864, avg pps: 0, avg bpp: 405 Time window: 2025-11-08 08:53:57 - 2025-11-08 09:58:00 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0035s User: 0.0018s Wall: 0.0023s flows/second: 59874.9 Runtime: 0.0023s