Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 01:56:59.338 00:02:00.126 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 01:56:59.337 00:02:00.131 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 01:58:53.706 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49544 10 6452 1 2025-11-12 01:59:54.118 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33408 10 6452 1 2025-11-12 01:59:59.340 00:01:00.126 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 01:59:59.339 00:01:00.131 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 02:00:54.522 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45518 10 6452 1 2025-11-12 02:01:13.219 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:01:13.297 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:01:13.231 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:01:13.277 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:01:13.137 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:01:54.928 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:56858 10 6452 1 2025-11-12 02:02:55.357 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45998 10 6452 1 2025-11-12 02:01:59.339 00:02:00.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 02:01:59.342 00:02:00.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 02:03:55.758 00:00:10.692 TCP 1.101.0.1:3000 -> 23.104.0.1:52292 10 6452 1 2025-11-12 02:04:56.487 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49562 10 6452 1 2025-11-12 02:04:59.339 00:01:00.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 02:04:59.343 00:01:00.129 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 02:05:56.893 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:39880 10 6452 1 2025-11-12 02:06:13.592 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:06:13.451 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:06:13.555 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:06:13.450 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:06:13.533 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:06:57.265 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52308 10 6452 1 2025-11-12 02:07:57.667 00:00:11.678 TCP 1.101.0.1:3000 -> 23.104.0.1:51490 10 6452 1 2025-11-12 02:08:59.387 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:47600 10 6452 1 2025-11-12 02:09:59.745 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56202 10 6452 1 2025-11-12 02:06:59.340 00:04:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-12 02:06:59.342 00:04:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-12 02:11:13.549 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:11:13.549 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:11:13.525 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:11:00.150 00:00:10.862 TCP 1.101.0.1:3000 -> 23.104.0.1:36094 10 6452 1 2025-11-12 02:11:13.486 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:11:13.569 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:12:01.052 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36192 10 6452 1 2025-11-12 02:11:59.341 00:01:00.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 02:13:01.455 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33230 10 6452 1 2025-11-12 02:14:01.861 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52198 10 6452 1 2025-11-12 02:15:02.274 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41108 10 6452 1 2025-11-12 02:13:59.340 00:02:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 02:11:59.343 00:04:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-12 02:16:13.749 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:16:13.659 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:16:13.612 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:16:13.626 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:16:02.677 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58380 10 6452 1 2025-11-12 02:16:13.668 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:17:03.109 00:00:10.519 TCP 1.101.0.1:3000 -> 23.104.0.1:41396 10 6452 1 2025-11-12 02:16:59.340 00:01:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 02:16:59.343 00:01:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 02:18:03.669 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51320 10 6452 1 2025-11-12 02:19:04.098 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:36374 10 6452 1 2025-11-12 02:20:04.455 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58856 10 6452 1 2025-11-12 02:18:59.342 00:02:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 02:18:59.344 00:02:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 02:21:13.686 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:21:13.610 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:21:13.531 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:21:13.452 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:21:13.601 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:21:04.856 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42726 10 6452 1 2025-11-12 02:22:05.275 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53552 10 6452 1 2025-11-12 02:21:59.345 00:01:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 02:21:59.344 00:01:00.137 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 02:23:05.694 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52618 10 6452 1 2025-11-12 02:24:06.109 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46874 10 6452 1 2025-11-12 02:25:06.513 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38214 10 6452 1 2025-11-12 02:23:59.343 00:02:00.137 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 02:23:59.346 00:02:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 02:26:13.910 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:26:13.727 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:26:13.677 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:26:13.794 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:26:13.876 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:26:06.922 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37180 10 6452 1 2025-11-12 02:27:07.339 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43512 10 6452 1 2025-11-12 02:26:59.346 00:01:00.131 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 02:26:59.344 00:01:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 02:28:07.737 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58822 10 6452 1 2025-11-12 02:29:08.144 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51772 10 6452 1 2025-11-12 02:30:08.551 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40404 10 6452 1 2025-11-12 02:28:59.344 00:02:00.138 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 02:28:59.346 00:02:00.133 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 02:31:14.056 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:31:13.974 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:31:13.848 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:31:13.768 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:31:13.697 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:31:08.952 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54412 10 6452 1 2025-11-12 02:32:09.361 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49124 10 6452 1 2025-11-12 02:31:59.344 00:01:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 02:31:59.348 00:01:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 02:33:09.767 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56828 10 6452 1 2025-11-12 02:34:10.180 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51040 10 6452 1 2025-11-12 02:35:10.550 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51342 10 6452 1 2025-11-12 02:33:59.346 00:02:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 02:33:59.344 00:02:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 02:36:14.133 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:36:13.895 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:36:13.966 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:36:14.100 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:36:14.184 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:36:10.946 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51740 10 6452 1 2025-11-12 02:37:11.354 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44848 10 6452 1 2025-11-12 02:36:59.346 00:01:00.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 02:36:59.348 00:01:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 02:38:11.764 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42116 10 6452 1 2025-11-12 02:39:12.133 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45302 10 6452 1 2025-11-12 02:40:12.539 00:00:11.135 TCP 1.101.0.1:3000 -> 23.104.0.1:55038 10 6452 1 2025-11-12 02:41:14.073 00:00:00.045 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:41:14.138 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:41:14.139 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:41:13.934 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:41:13.990 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:41:13.711 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41456 10 6452 1 2025-11-12 02:42:14.114 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54776 10 6452 1 2025-11-12 02:38:59.349 00:04:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-12 02:38:59.347 00:04:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-12 02:43:14.519 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57944 10 6452 1 2025-11-12 02:44:14.884 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45314 10 6452 1 2025-11-12 02:43:59.349 00:01:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 02:45:15.286 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57724 10 6452 1 2025-11-12 02:46:14.191 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:46:14.172 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:46:14.168 00:00:00.031 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:46:13.914 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:46:14.110 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:46:15.710 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34920 10 6452 1 2025-11-12 02:47:16.118 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39964 10 6452 1 2025-11-12 02:45:59.350 00:02:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 02:43:59.347 00:04:00.147 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-12 02:48:16.521 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58836 10 6452 1 2025-11-12 02:49:16.922 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34446 10 6452 1 2025-11-12 02:48:59.353 00:01:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 02:48:59.351 00:01:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 02:50:17.343 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48064 10 6452 1 2025-11-12 02:51:14.063 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:51:14.345 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:51:14.369 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:51:14.159 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:51:14.241 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:51:17.744 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37724 10 6452 1 2025-11-12 02:52:18.157 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56534 10 6452 1 2025-11-12 02:50:59.353 00:02:00.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 02:50:59.351 00:02:00.148 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 02:53:18.563 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47890 10 6452 1 2025-11-12 02:54:18.961 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37204 10 6452 1 2025-11-12 02:53:59.351 00:01:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 02:53:59.354 00:01:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 02:55:19.365 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59512 10 6452 1 2025-11-12 02:56:14.947 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 02:56:14.851 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:56:15.091 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 02:56:15.181 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 02:56:15.009 00:00:00.035 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 02:56:19.766 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:52060 10 6452 1 2025-11-12 02:57:20.187 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57600 10 6452 1 2025-11-12 02:55:59.359 00:02:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 02:55:59.356 00:02:00.140 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 02:58:20.594 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56294 10 6452 1 Summary: total flows: 164, total bytes: 417492, total packets: 1028, avg bps: 904, avg pps: 0, avg bpp: 406 Time window: 2025-11-12 01:56:59 - 2025-11-12 02:58:30 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0017s Wall: 0.0024s flows/second: 68883.0 Runtime: 0.0024s