Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 23:53:58.106 00:06:00.053 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-09 23:53:58.109 00:06:00.048 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-09 23:58:58.183 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34360 10 6452 1 2025-11-09 23:59:58.589 00:00:10.957 TCP 1.101.0.1:3000 -> 23.104.0.1:40106 10 6452 1 2025-11-10 00:00:13.153 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 00:00:13.145 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 00:00:13.116 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:00:13.070 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:00:13.148 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 00:00:59.585 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37812 10 6452 1 2025-11-10 00:01:59.985 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42108 10 6452 1 2025-11-10 00:03:00.392 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59144 10 6452 1 2025-11-10 00:04:00.800 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:43692 10 6452 1 2025-11-10 00:05:01.187 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56104 10 6452 1 2025-11-10 00:05:13.159 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 00:05:13.141 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:05:13.046 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:05:13.162 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 00:05:13.130 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 00:00:58.106 00:06:00.059 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 00:00:58.109 00:06:00.053 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 00:06:01.586 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53052 10 6452 1 2025-11-10 00:07:01.993 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48080 10 6452 1 2025-11-10 00:08:02.401 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54002 10 6452 1 2025-11-10 00:09:02.802 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37532 10 6452 1 2025-11-10 00:10:13.320 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 00:10:13.198 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:10:13.133 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:10:13.319 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 00:10:03.210 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38712 10 6452 1 2025-11-10 00:10:13.217 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 00:11:03.614 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45040 10 6452 1 2025-11-10 00:12:04.023 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44638 10 6452 1 2025-11-10 00:07:58.111 00:06:00.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 00:07:58.114 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 00:13:04.426 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56490 10 6452 1 2025-11-10 00:14:04.832 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54618 10 6452 1 2025-11-10 00:15:05.231 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40018 10 6452 1 2025-11-10 00:15:13.532 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 00:15:13.476 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:15:13.265 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:15:13.265 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 00:15:13.364 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 00:16:05.642 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47510 10 6452 1 2025-11-10 00:17:06.055 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58392 10 6452 1 2025-11-10 00:18:06.457 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44796 10 6452 1 2025-11-10 00:19:06.867 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38780 10 6452 1 2025-11-10 00:14:58.113 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 00:14:58.111 00:06:00.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 00:20:13.707 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 00:20:13.697 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 00:20:13.597 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:20:13.624 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:20:13.741 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 00:20:07.271 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59396 10 6452 1 2025-11-10 00:21:07.678 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:35850 10 6452 1 2025-11-10 00:22:08.050 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53186 10 6452 1 2025-11-10 00:23:08.450 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48186 10 6452 1 2025-11-10 00:24:08.850 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54320 10 6452 1 2025-11-10 00:25:13.589 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 00:25:13.589 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 00:25:13.602 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:25:13.507 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:25:13.666 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 00:25:09.272 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45310 10 6452 1 2025-11-10 00:26:09.632 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55090 10 6452 1 2025-11-10 00:21:58.112 00:06:00.057 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 00:21:58.115 00:06:00.052 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 00:27:10.032 00:00:10.313 TCP 1.101.0.1:3000 -> 23.104.0.1:33872 10 6452 1 2025-11-10 00:28:10.384 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47894 10 6452 1 2025-11-10 00:29:10.788 00:00:11.930 TCP 1.101.0.1:3000 -> 23.104.0.1:41226 10 6452 1 2025-11-10 00:30:13.603 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 00:30:13.536 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:30:13.794 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:30:13.596 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 00:30:13.877 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 00:30:12.753 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:49316 10 6452 1 2025-11-10 00:31:13.172 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54702 10 6452 1 2025-11-10 00:32:13.579 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55920 10 6452 1 2025-11-10 00:33:13.944 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60928 10 6452 1 2025-11-10 00:28:58.120 00:06:00.049 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 00:28:58.119 00:06:00.054 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 00:34:14.349 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58736 10 6452 1 2025-11-10 00:35:14.518 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 00:35:14.389 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 00:35:14.351 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:35:14.436 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:35:14.217 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 00:35:14.757 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46166 10 6452 1 2025-11-10 00:36:15.180 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48000 10 6452 1 2025-11-10 00:37:15.591 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58922 10 6452 1 2025-11-10 00:38:15.995 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55942 10 6452 1 2025-11-10 00:39:16.400 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53396 10 6452 1 2025-11-10 00:40:13.969 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 00:40:13.650 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:40:13.681 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:40:13.932 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 00:40:13.764 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 00:40:16.813 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:59296 10 6452 1 2025-11-10 00:35:58.122 00:06:00.049 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 00:35:58.119 00:06:00.054 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 00:41:17.186 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44448 10 6452 1 2025-11-10 00:42:17.594 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:38620 10 6452 1 2025-11-10 00:43:18.022 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:60580 10 6452 1 2025-11-10 00:44:18.419 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41660 10 6452 1 2025-11-10 00:45:13.774 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 00:45:14.086 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:45:14.085 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:45:13.973 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 00:45:14.169 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 00:45:18.825 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33928 10 6452 1 2025-11-10 00:46:19.218 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35334 10 6452 1 2025-11-10 00:47:19.627 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44700 10 6452 1 2025-11-10 00:42:58.122 00:06:00.056 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 00:42:58.124 00:06:00.051 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 00:48:20.031 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44338 10 6452 1 2025-11-10 00:49:20.433 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50416 10 6452 1 2025-11-10 00:50:14.335 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 00:50:14.322 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 00:50:14.117 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:50:14.252 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:50:14.193 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 00:50:20.838 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:39886 10 6452 1 2025-11-10 00:51:21.276 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34088 10 6452 1 2025-11-10 00:52:21.678 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38932 10 6452 1 2025-11-10 00:53:22.111 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39192 10 6452 1 2025-11-10 00:54:22.513 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56428 10 6452 1 2025-11-10 00:49:58.124 00:06:00.050 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-10 00:49:58.122 00:06:00.055 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-10 00:55:14.517 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-10 00:55:14.433 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:55:14.706 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-10 00:55:14.585 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-10 00:55:14.310 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-10 00:55:22.915 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59788 10 6452 1 2025-11-10 00:56:23.279 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36168 10 6452 1 2025-11-10 00:57:23.681 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:40474 10 6452 1 2025-11-10 00:58:24.106 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57916 10 6452 1 Summary: total flows: 138, total bytes: 417738, total packets: 1032, avg bps: 862, avg pps: 0, avg bpp: 404 Time window: 2025-11-09 23:53:58 - 2025-11-10 00:58:34 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0039s User: 0.0020s Wall: 0.0027s flows/second: 50662.1 Runtime: 0.0027s