Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 05:53:57.553 00:06:00.126 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 05:59:08.313 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37600 10 6452 1 2025-11-09 05:59:51.162 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 05:59:51.187 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 05:59:51.356 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 05:59:51.560 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 05:59:51.439 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 05:54:57.562 00:06:00.119 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 06:00:08.715 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46914 10 6452 1 2025-11-09 06:01:09.138 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55696 10 6452 1 2025-11-09 06:02:09.540 00:00:10.535 TCP 1.101.0.1:3000 -> 23.104.0.1:43500 10 6452 1 2025-11-09 06:03:10.117 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:42568 12 10369 1 2025-11-09 06:04:10.604 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34292 10 6452 1 2025-11-09 06:04:51.590 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 06:04:51.417 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:04:51.582 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:04:51.715 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 06:04:51.666 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 06:05:11.021 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53468 10 6452 1 2025-11-09 06:00:57.555 00:06:00.126 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 06:06:11.427 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50800 10 6452 1 2025-11-09 06:01:57.552 00:06:00.130 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 06:07:11.788 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49392 10 6452 1 2025-11-09 06:08:12.195 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:33074 12 10375 1 2025-11-09 06:09:12.633 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36546 10 6452 1 2025-11-09 06:09:51.662 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 06:09:51.522 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:09:51.647 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:09:51.652 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 06:09:51.730 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 06:10:12.991 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56534 10 6452 1 2025-11-09 06:11:13.404 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:60886 10 6452 1 2025-11-09 06:12:13.820 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37252 10 6452 1 2025-11-09 06:07:57.557 00:06:00.127 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 06:13:14.220 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48804 10 6452 1 2025-11-09 06:08:57.554 00:06:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 06:14:14.625 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37466 10 6452 1 2025-11-09 06:14:51.802 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 06:14:51.720 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:14:51.641 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 06:14:51.715 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 06:14:51.591 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:15:15.027 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36278 10 6452 1 2025-11-09 06:16:15.429 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45522 10 6452 1 2025-11-09 06:17:15.833 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:40244 10 6452 1 2025-11-09 06:18:16.258 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50856 10 6452 1 2025-11-09 06:19:16.658 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:45156 10 6452 1 2025-11-09 06:19:51.686 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 06:19:51.707 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 06:19:51.548 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:19:51.604 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:19:51.702 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 06:14:57.558 00:06:00.126 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 06:20:17.095 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55478 10 6452 1 2025-11-09 06:15:57.555 00:06:00.132 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 06:21:17.498 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50168 10 6452 1 2025-11-09 06:22:17.934 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:37602 13 6608 1 2025-11-09 06:23:18.376 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36822 10 6452 1 2025-11-09 06:24:18.779 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48806 10 6452 1 2025-11-09 06:24:52.382 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 06:24:52.144 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:24:52.324 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:24:52.382 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 06:24:52.406 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 06:25:19.189 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55104 10 6452 1 2025-11-09 06:26:19.595 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36840 10 6452 1 2025-11-09 06:21:57.559 00:06:00.127 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 06:27:19.957 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36500 10 6452 1 2025-11-09 06:22:57.556 00:06:00.132 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 06:28:20.363 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45316 10 6452 1 2025-11-09 06:29:20.729 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56652 10 6452 1 2025-11-09 06:29:52.316 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 06:29:52.326 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:29:52.124 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:29:52.251 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 06:29:52.212 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 06:30:21.140 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38966 10 6452 1 2025-11-09 06:31:21.546 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46850 10 6452 1 2025-11-09 06:32:21.948 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:35888 10 6452 1 2025-11-09 06:33:22.386 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52588 10 6452 1 2025-11-09 06:28:57.571 00:06:00.118 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 06:34:22.783 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:46056 10 6452 1 2025-11-09 06:34:52.215 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 06:34:51.831 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 06:34:51.752 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:34:52.133 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:34:52.259 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 06:29:57.568 00:06:00.123 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 06:35:23.171 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50224 10 6452 1 2025-11-09 06:36:23.532 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60064 10 6452 1 2025-11-09 06:37:23.893 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:33190 10 6452 1 2025-11-09 06:38:24.308 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44456 10 6452 1 2025-11-09 06:39:24.675 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46286 10 6452 1 2025-11-09 06:39:52.274 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 06:39:52.339 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 06:39:52.216 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:39:52.192 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:39:52.188 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 06:40:25.033 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38646 10 6452 1 2025-11-09 06:35:57.572 00:06:00.118 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 06:41:25.394 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32962 10 6452 1 2025-11-09 06:36:57.569 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 06:42:25.796 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46504 10 6452 1 2025-11-09 06:43:26.200 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36896 10 6452 1 2025-11-09 06:44:26.604 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53860 10 6452 1 2025-11-09 06:44:52.258 00:00:00.035 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 06:44:52.241 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:44:52.526 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:44:52.528 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 06:44:52.609 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 06:45:27.003 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58900 10 6452 1 2025-11-09 06:46:27.369 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47512 10 6452 1 2025-11-09 06:47:27.726 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46918 10 6452 1 2025-11-09 06:42:57.572 00:06:00.118 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 06:48:28.141 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36410 10 6452 1 2025-11-09 06:43:57.570 00:06:00.123 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 06:49:28.550 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41928 10 6452 1 2025-11-09 06:49:52.388 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 06:49:52.522 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 06:49:52.364 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:49:52.305 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:49:52.306 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 06:50:28.959 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40658 10 6452 1 2025-11-09 06:51:29.360 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49132 10 6452 1 2025-11-09 06:52:29.767 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40898 10 6452 1 2025-11-09 06:53:30.174 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35930 10 6452 1 2025-11-09 06:54:30.582 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58172 10 6452 1 2025-11-09 06:54:52.458 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 06:54:52.277 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:54:52.367 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 06:54:52.576 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 06:54:52.450 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 06:49:57.573 00:06:00.119 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 06:55:30.988 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44718 10 6452 1 2025-11-09 06:50:57.571 00:06:00.124 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 06:56:31.403 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36590 10 6452 1 2025-11-09 06:57:31.768 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60590 10 6452 1 2025-11-09 06:58:32.184 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50748 10 6452 1 Summary: total flows: 138, total bytes: 425734, total packets: 1039, avg bps: 876, avg pps: 0, avg bpp: 409 Time window: 2025-11-09 05:53:57 - 2025-11-09 06:58:42 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0037s User: 0.0028s Wall: 0.0019s flows/second: 72360.8 Runtime: 0.0019s