Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 20:54:57.994 00:05:00.114 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-09 20:59:26.514 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59382 10 6452 1 2025-11-09 21:00:09.599 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 21:00:09.244 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:00:09.325 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:00:09.660 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 21:00:09.408 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 21:00:26.877 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36300 10 6452 1 2025-11-09 21:01:27.283 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45998 10 6452 1 2025-11-09 21:02:27.638 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45436 10 6452 1 2025-11-09 21:03:28.041 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50300 10 6452 1 2025-11-09 20:59:57.998 00:05:00.108 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-09 21:04:28.446 00:00:18.669 TCP 1.101.0.1:3000 -> 23.104.0.1:59782 10 6452 1 2025-11-09 21:00:57.995 00:05:00.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-09 21:05:09.714 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 21:05:09.631 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 21:05:09.595 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:05:09.631 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:05:09.705 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 21:05:37.158 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59440 10 6452 1 2025-11-09 21:06:37.565 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58986 10 6452 1 2025-11-09 21:07:37.968 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:45648 12 10369 1 2025-11-09 21:08:38.410 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:42606 10 6452 1 2025-11-09 21:09:38.771 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49960 10 6452 1 2025-11-09 21:10:09.487 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 21:10:09.606 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:10:09.685 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:10:09.898 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 21:10:09.768 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 21:10:39.177 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40314 10 6452 1 2025-11-09 21:05:58.001 00:06:00.108 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 21:06:57.997 00:05:00.114 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-09 21:11:39.542 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51880 10 6452 1 2025-11-09 21:12:39.946 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58414 10 6452 1 2025-11-09 21:13:40.352 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43544 10 6452 1 2025-11-09 21:14:40.756 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:46256 10 6452 1 2025-11-09 21:15:09.688 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 21:15:09.871 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:15:09.902 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:15:09.766 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 21:15:09.984 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 21:15:41.180 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54998 10 6452 1 2025-11-09 21:16:41.545 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48678 10 6452 1 2025-11-09 21:12:58.000 00:06:00.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 21:17:41.950 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36820 10 6452 1 2025-11-09 21:12:58.004 00:06:00.107 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 21:18:42.362 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55758 10 6452 1 2025-11-09 21:19:42.765 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:36522 10 6452 1 2025-11-09 21:20:10.095 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 21:20:10.008 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 21:20:09.934 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:20:10.012 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:20:09.921 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 21:20:43.223 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41948 10 6452 1 2025-11-09 21:21:43.628 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34748 10 6452 1 2025-11-09 21:22:44.034 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42416 10 6452 1 2025-11-09 21:23:44.439 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57810 10 6452 1 2025-11-09 21:24:44.804 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47530 10 6452 1 2025-11-09 21:19:58.005 00:06:00.108 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 21:19:58.003 00:06:00.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 21:25:10.018 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 21:25:10.004 00:00:00.045 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 21:25:09.962 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:25:09.935 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:25:10.101 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 21:25:45.210 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38484 10 6452 1 2025-11-09 21:26:45.617 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40076 10 6452 1 2025-11-09 21:27:46.029 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44006 10 6452 1 2025-11-09 21:28:46.427 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33234 10 6452 1 2025-11-09 21:29:46.833 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53012 10 6452 1 2025-11-09 21:30:10.306 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 21:30:10.012 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:30:09.867 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:30:09.979 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 21:30:09.951 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 21:30:47.232 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49048 10 6452 1 2025-11-09 21:31:47.633 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48264 10 6452 1 2025-11-09 21:26:58.032 00:06:00.081 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 21:26:58.029 00:06:00.087 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 21:32:47.996 00:00:10.683 TCP 1.101.0.1:3000 -> 23.104.0.1:52210 10 6452 1 2025-11-09 21:33:48.716 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46994 10 6452 1 2025-11-09 21:34:49.111 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58882 10 6452 1 2025-11-09 21:35:10.308 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 21:35:10.304 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 21:35:10.348 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:35:10.225 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:35:10.397 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 21:35:49.516 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:60236 10 6452 1 2025-11-09 21:36:50.014 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37290 10 6452 1 2025-11-09 21:37:50.417 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54348 10 6452 1 2025-11-09 21:33:58.037 00:06:00.080 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 21:33:58.039 00:06:00.075 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 21:38:50.774 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:59658 10 6452 1 2025-11-09 21:39:51.145 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60472 10 6452 1 2025-11-09 21:40:10.349 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 21:40:10.160 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:40:10.160 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:40:10.349 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 21:40:10.243 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 21:40:51.550 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49806 10 6452 1 2025-11-09 21:41:51.949 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:48174 10 6452 1 2025-11-09 21:42:52.366 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:35968 10 6452 1 2025-11-09 21:43:52.740 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53870 10 6452 1 2025-11-09 21:44:53.149 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43310 10 6452 1 2025-11-09 21:45:10.752 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 21:45:10.678 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 21:45:10.695 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:45:10.670 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:45:10.672 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 21:40:58.040 00:06:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 21:40:58.043 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 21:45:53.552 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46186 10 6452 1 2025-11-09 21:46:53.959 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59592 10 6452 1 2025-11-09 21:47:54.368 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:50436 10 6452 1 2025-11-09 21:48:54.750 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45314 10 6452 1 2025-11-09 21:49:55.153 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55028 10 6452 1 2025-11-09 21:50:10.448 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 21:50:10.480 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:50:10.444 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:50:10.423 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 21:50:10.526 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 21:50:55.548 00:00:10.693 TCP 1.101.0.1:3000 -> 23.104.0.1:36948 10 6452 1 2025-11-09 21:51:56.278 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39754 10 6452 1 2025-11-09 21:47:58.046 00:06:00.074 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 21:47:58.044 00:06:00.079 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 21:52:56.679 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:45234 10 6452 1 2025-11-09 21:53:57.114 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50702 10 6452 1 2025-11-09 21:55:10.856 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-09 21:54:57.518 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42978 10 6452 1 2025-11-09 21:55:10.792 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:55:10.853 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-09 21:55:10.867 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-09 21:55:10.936 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-09 21:55:57.937 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:47436 10 6452 1 2025-11-09 21:56:58.317 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58628 10 6452 1 2025-11-09 21:57:58.720 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48864 10 6452 1 Summary: total flows: 136, total bytes: 413850, total packets: 1002, avg bps: 873, avg pps: 0, avg bpp: 413 Time window: 2025-11-09 20:54:57 - 2025-11-09 21:58:09 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0045s User: 0.0009s Wall: 0.0021s flows/second: 63345.4 Runtime: 0.0022s