Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 13:55:04.101 00:04:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 13:59:15.682 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:34230 10 6452 1 2025-11-21 13:56:04.099 00:04:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 14:00:16.049 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46328 10 6452 1 2025-11-21 14:00:49.361 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 14:00:49.189 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 14:00:49.277 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 14:00:49.317 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:00:49.271 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:01:16.452 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56476 10 6452 1 2025-11-21 14:02:16.856 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48126 10 6452 1 2025-11-21 14:03:17.274 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:59730 12 10369 1 2025-11-21 14:00:04.102 00:04:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 14:04:17.750 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:41284 10 6452 1 2025-11-21 14:05:18.180 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49788 10 6452 1 2025-11-21 14:05:49.668 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 14:05:49.782 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 14:05:49.538 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:05:49.727 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:05:49.809 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 14:01:04.099 00:06:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 14:06:18.598 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36674 10 6452 1 2025-11-21 14:07:19.010 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39888 10 6452 1 2025-11-21 14:08:19.410 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35184 10 6452 1 2025-11-21 14:09:19.813 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47378 10 6452 1 2025-11-21 14:05:04.103 00:06:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 14:10:20.222 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44366 10 6452 1 2025-11-21 14:10:49.444 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 14:10:49.436 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 14:10:49.472 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:10:49.570 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:10:49.654 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 14:11:20.622 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57792 10 6452 1 2025-11-21 14:12:21.029 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53526 10 6452 1 2025-11-21 14:08:04.100 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-11-21 14:13:21.436 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56218 10 6452 1 2025-11-21 14:14:21.805 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34330 10 6452 1 2025-11-21 14:15:22.219 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33520 10 6452 1 2025-11-21 14:15:49.961 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 14:15:49.459 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 14:15:49.670 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 14:15:49.461 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:15:49.879 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:16:22.618 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39098 10 6452 1 2025-11-21 14:12:04.105 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-11-21 14:14:04.392 00:03:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 421 1 2025-11-21 14:17:23.024 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54786 10 6452 1 2025-11-21 14:18:23.422 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40632 10 6452 1 2025-11-21 14:19:23.786 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:35206 10 6452 1 2025-11-21 14:20:24.159 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50936 10 6452 1 2025-11-21 14:20:49.897 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 14:20:49.900 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 14:20:49.917 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:20:49.947 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:20:50.030 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 14:21:24.563 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49480 10 6452 1 2025-11-21 14:18:04.103 00:04:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 14:22:24.965 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49122 10 6452 1 2025-11-21 14:18:04.392 00:06:00.005 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-11-21 14:23:25.369 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60884 10 6452 1 2025-11-21 14:24:25.781 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39624 10 6452 1 2025-11-21 14:25:26.151 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58406 10 6452 1 2025-11-21 14:25:49.783 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 14:25:49.841 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 14:25:49.657 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:25:49.794 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:25:49.878 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 14:25:04.106 00:01:00.291 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-21 14:26:26.548 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45390 10 6452 1 2025-11-21 14:23:04.104 00:04:00.296 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 14:27:26.958 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37012 10 6452 1 2025-11-21 14:28:27.372 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:39526 12 10375 1 2025-11-21 14:29:27.856 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:56376 10 6452 1 2025-11-21 14:30:28.233 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37436 10 6452 1 2025-11-21 14:30:49.637 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:30:49.843 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:30:49.832 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 14:30:49.925 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 14:30:50.102 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 14:27:04.107 00:04:00.292 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 14:31:28.632 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52804 10 6452 1 2025-11-21 14:28:04.111 00:04:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 14:32:29.040 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50428 10 6452 1 2025-11-21 14:33:29.440 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45736 10 6452 1 2025-11-21 14:34:29.851 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:57262 10 6452 1 2025-11-21 14:35:30.270 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56638 10 6452 1 2025-11-21 14:35:49.863 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 14:35:49.867 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 14:35:49.586 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:35:50.001 00:00:00.044 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:35:50.082 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 14:32:04.109 00:04:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 14:36:30.675 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58646 10 6452 1 2025-11-21 14:33:04.106 00:04:00.296 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 14:37:31.104 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50550 10 6452 1 2025-11-21 14:38:31.478 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46292 10 6452 1 2025-11-21 14:39:31.881 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39400 10 6452 1 2025-11-21 14:40:32.287 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34476 10 6452 1 2025-11-21 14:40:50.215 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 14:40:50.384 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 14:40:50.200 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 14:40:50.073 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:40:50.133 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:37:04.110 00:04:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-21 14:41:32.696 00:00:10.831 TCP 1.101.0.1:3000 -> 23.104.0.1:36508 10 6452 1 2025-11-21 14:42:33.567 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59622 10 6452 1 2025-11-21 14:38:04.110 00:06:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-21 14:43:33.973 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:42450 10 6452 1 2025-11-21 14:44:34.346 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36866 10 6452 1 2025-11-21 14:45:34.759 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42096 10 6452 1 2025-11-21 14:45:50.180 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 14:45:50.171 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 14:45:50.211 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 14:45:49.985 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:45:50.098 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:46:35.118 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:46646 10 6452 1 2025-11-21 14:42:04.113 00:06:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-21 14:47:35.473 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34022 10 6452 1 2025-11-21 14:48:35.839 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:37888 10 6452 1 2025-11-21 14:45:04.113 00:04:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 14:49:36.267 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59928 10 6452 1 2025-11-21 14:50:49.914 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:50:36.674 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60058 10 6452 1 2025-11-21 14:50:50.117 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 14:50:50.363 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 14:50:50.299 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 14:50:50.036 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:51:37.098 00:00:10.514 TCP 1.101.0.1:3000 -> 23.104.0.1:56514 10 6452 1 2025-11-21 14:52:37.655 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52546 10 6452 1 2025-11-21 14:53:38.061 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51346 10 6452 1 2025-11-21 14:50:04.114 00:04:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-21 14:49:04.116 00:06:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-11-21 14:54:38.460 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58900 10 6452 1 2025-11-21 14:55:38.867 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:36390 10 6452 1 2025-11-21 14:55:50.801 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-21 14:55:50.589 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-21 14:55:50.712 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-21 14:55:50.518 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:55:50.720 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-21 14:56:39.235 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54152 10 6452 1 2025-11-21 14:57:39.652 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56838 10 6452 1 2025-11-21 14:55:04.404 00:03:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 440 1 Summary: total flows: 142, total bytes: 418757, total packets: 1020, avg bps: 886, avg pps: 0, avg bpp: 410 Time window: 2025-11-21 13:55:04 - 2025-11-21 14:58:04 Total flows processed: 142, passed: 142, Blocks skipped: 0, Bytes read: 14832 Sys: 0.0039s User: 0.0019s Wall: 0.0017s flows/second: 85230.6 Runtime: 0.0017s