Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 03:57:59.380 00:01:00.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 03:57:59.383 00:01:00.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 03:59:01.285 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:43676 12 10369 1 2025-11-12 04:00:01.767 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47170 10 6452 1 2025-11-12 04:01:02.127 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38704 10 6452 1 2025-11-12 04:01:16.081 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:01:16.078 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:01:15.851 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:01:15.988 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:01:16.071 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 03:59:59.381 00:02:00.158 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 03:59:59.383 00:02:00.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 04:02:02.530 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55246 10 6452 1 2025-11-12 04:03:02.932 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:46078 10 6452 1 2025-11-12 04:02:59.381 00:01:00.158 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 04:02:59.383 00:01:00.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 04:04:03.365 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43416 10 6452 1 2025-11-12 04:05:03.768 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49296 10 6452 1 2025-11-12 04:06:04.136 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:47124 10 6452 1 2025-11-12 04:06:15.927 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:06:15.739 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:06:15.877 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:06:15.736 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:06:15.819 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 04:04:59.382 00:02:00.157 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 04:04:59.385 00:02:00.152 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 04:07:04.501 00:00:10.664 TCP 1.101.0.1:3000 -> 23.104.0.1:57898 10 6452 1 2025-11-12 04:08:05.205 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:32920 10 6452 1 2025-11-12 04:07:59.385 00:01:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 04:07:59.383 00:01:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 04:09:05.610 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38024 10 6452 1 2025-11-12 04:10:06.017 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:51348 10 6452 1 2025-11-12 04:11:15.948 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 04:11:15.857 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:11:15.783 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:11:15.594 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:11:15.865 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:11:06.397 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50900 10 6452 1 2025-11-12 04:09:59.386 00:02:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 04:09:59.383 00:02:00.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 04:12:06.798 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59238 10 6452 1 2025-11-12 04:13:07.208 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57312 10 6452 1 2025-11-12 04:12:59.383 00:01:00.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 04:12:59.386 00:01:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 04:14:07.613 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53256 10 6452 1 2025-11-12 04:15:08.011 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56556 10 6452 1 2025-11-12 04:16:16.323 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 04:16:16.122 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:16:16.353 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:16:15.958 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:16:08.407 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52422 10 6452 1 2025-11-12 04:16:16.239 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:14:59.383 00:02:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 04:14:59.386 00:02:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 04:17:08.812 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45348 10 6452 1 2025-11-12 04:18:09.229 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60446 10 6452 1 2025-11-12 04:17:59.386 00:01:00.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 04:17:59.388 00:01:00.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 04:19:09.599 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:44850 10 6452 1 2025-11-12 04:20:09.963 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43904 10 6452 1 2025-11-12 04:19:59.384 00:01:00.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 04:19:59.388 00:01:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 04:21:15.949 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:21:16.123 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:21:16.084 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:21:15.945 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:21:16.028 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 04:21:10.368 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56654 10 6452 1 2025-11-12 04:22:10.769 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59838 10 6452 1 2025-11-12 04:23:11.183 00:00:10.495 TCP 1.101.0.1:3000 -> 23.104.0.1:45460 13 10421 1 2025-11-12 04:21:59.388 00:02:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 04:21:59.384 00:02:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 04:24:11.718 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:39832 10 6452 1 2025-11-12 04:25:12.098 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43464 10 6452 1 2025-11-12 04:24:59.387 00:01:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 04:24:59.387 00:01:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 04:26:16.343 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 04:26:16.231 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:26:16.220 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:26:16.106 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:26:16.260 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:26:12.498 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47720 10 6452 1 2025-11-12 04:27:12.900 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44092 10 6452 1 2025-11-12 04:28:13.261 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:60644 12 10375 1 2025-11-12 04:26:59.388 00:02:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 04:26:59.387 00:02:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 04:29:13.737 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38724 10 6452 1 2025-11-12 04:30:14.142 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37686 10 6452 1 2025-11-12 04:29:59.387 00:01:00.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 04:29:59.391 00:01:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 04:31:16.464 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 04:31:16.192 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:31:16.425 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:31:16.077 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:31:16.382 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:31:14.542 00:00:17.276 TCP 1.101.0.1:3000 -> 23.104.0.1:57888 10 6452 1 2025-11-12 04:32:21.896 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45658 10 6452 1 2025-11-12 04:33:22.304 00:00:10.595 TCP 1.101.0.1:3000 -> 23.104.0.1:43678 10 6452 1 2025-11-12 04:31:59.387 00:02:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 04:31:59.390 00:02:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 04:34:22.938 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:37506 10 6452 1 2025-11-12 04:35:23.361 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55894 10 6452 1 2025-11-12 04:34:59.387 00:01:00.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 04:34:59.390 00:01:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 04:36:16.595 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 04:36:16.511 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:36:16.552 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:36:16.298 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:36:16.522 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:36:23.775 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36916 10 6452 1 2025-11-12 04:37:24.186 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60694 10 6452 1 2025-11-12 04:38:24.586 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50002 10 6452 1 2025-11-12 04:36:59.389 00:02:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 04:36:59.393 00:02:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 04:39:25.000 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60748 10 6452 1 2025-11-12 04:40:25.404 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45768 10 6452 1 2025-11-12 04:39:59.392 00:01:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 04:39:59.388 00:01:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 04:41:16.851 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:41:16.559 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:41:16.810 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:41:16.788 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:41:16.870 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 04:41:25.814 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41566 10 6452 1 2025-11-12 04:42:26.224 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51412 10 6452 1 2025-11-12 04:43:26.628 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60088 10 6452 1 2025-11-12 04:41:59.390 00:02:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 04:41:59.393 00:02:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 04:44:27.036 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:42886 10 6452 1 2025-11-12 04:45:27.390 00:00:10.726 TCP 1.101.0.1:3000 -> 23.104.0.1:44606 10 6452 1 2025-11-12 04:44:59.393 00:01:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 04:44:59.390 00:01:00.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 04:46:16.719 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 04:46:16.527 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:46:16.582 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:46:16.396 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:46:16.637 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:46:28.155 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38722 10 6452 1 2025-11-12 04:47:28.564 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:56436 10 6452 1 2025-11-12 04:48:28.946 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46338 10 6452 1 2025-11-12 04:46:59.393 00:02:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 04:46:59.392 00:02:00.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 04:49:29.365 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37054 10 6452 1 2025-11-12 04:50:29.769 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:46692 10 6452 1 2025-11-12 04:49:59.390 00:01:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 04:49:59.394 00:01:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 04:51:16.810 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:51:16.689 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:51:16.627 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:51:16.685 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:51:16.767 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 04:51:30.181 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41420 10 6452 1 2025-11-12 04:52:30.588 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51410 10 6452 1 2025-11-12 04:51:59.395 00:01:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 04:51:59.392 00:01:00.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 04:53:30.991 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39120 10 6452 1 2025-11-12 04:54:31.396 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47632 10 6452 1 2025-11-12 04:55:31.803 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33880 10 6452 1 2025-11-12 04:53:59.392 00:02:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-12 04:53:59.394 00:02:00.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-12 04:56:16.728 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-12 04:56:16.643 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-12 04:56:16.729 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-12 04:56:16.811 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:56:16.647 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-12 04:56:32.203 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57268 10 6452 1 2025-11-12 04:57:32.564 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:58192 11 6504 1 2025-11-12 04:56:59.393 00:01:00.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-12 04:56:59.396 00:01:00.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-12 04:58:33.013 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35140 10 6452 1 Summary: total flows: 170, total bytes: 429107, total packets: 1032, avg bps: 942, avg pps: 0, avg bpp: 415 Time window: 2025-11-12 03:57:59 - 2025-11-12 04:58:43 Total flows processed: 170, passed: 170, Blocks skipped: 0, Bytes read: 17744 Sys: 0.0056s User: 0.0008s Wall: 0.0028s flows/second: 61680.9 Runtime: 0.0028s