Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 03:57:04.401 00:02:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 03:59:21.248 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50178 10 6452 1 2025-11-22 03:58:04.400 00:02:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 04:00:21.661 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54448 10 6452 1 2025-11-22 04:00:04.401 00:01:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 04:01:06.117 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 04:01:06.011 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 04:01:06.141 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:01:06.034 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:01:06.275 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 04:01:22.073 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59370 10 6452 1 2025-11-22 04:01:04.399 00:01:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:02:22.476 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33458 10 6452 1 2025-11-22 04:03:22.887 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37838 10 6452 1 2025-11-22 04:02:04.402 00:02:00.288 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 04:04:23.293 00:00:10.532 TCP 1.101.0.1:3000 -> 23.104.0.1:41168 10 6452 1 2025-11-22 04:03:04.398 00:02:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 04:05:23.867 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56878 10 6452 1 2025-11-22 04:05:04.401 00:01:00.289 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 04:06:06.223 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 04:06:06.185 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:06:06.226 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:06:06.309 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 04:06:06.306 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 04:06:24.282 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36748 10 6452 1 2025-11-22 04:06:04.400 00:01:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:07:24.687 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39972 10 6452 1 2025-11-22 04:08:25.104 00:00:10.469 TCP 1.101.0.1:3000 -> 23.104.0.1:54042 12 10369 1 2025-11-22 04:07:04.402 00:02:00.288 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 04:08:04.400 00:01:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:09:25.616 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:37718 10 6452 1 2025-11-22 04:10:04.404 00:00:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-11-22 04:10:25.974 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36230 10 6452 1 2025-11-22 04:10:04.405 00:01:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 04:11:06.550 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 04:11:06.335 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 04:11:06.212 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:11:06.468 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:11:06.035 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 04:11:26.334 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38076 10 6452 1 2025-11-22 04:11:04.402 00:01:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:12:26.694 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:38704 10 6452 1 2025-11-22 04:13:27.066 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:38264 10 6452 1 2025-11-22 04:12:04.406 00:02:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 04:13:04.403 00:01:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:14:27.493 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49710 10 6452 1 2025-11-22 04:15:27.900 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37676 10 6452 1 2025-11-22 04:15:04.405 00:01:00.288 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 04:16:06.610 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 04:16:06.476 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 04:16:06.493 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:16:06.527 00:00:00.028 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:16:06.287 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 04:16:28.265 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48678 10 6452 1 2025-11-22 04:15:04.405 00:02:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 04:17:28.675 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45046 10 6452 1 2025-11-22 04:17:04.407 00:01:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 04:18:04.408 00:01:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:18:29.102 00:00:36.910 TCP 1.101.0.1:3000 -> 23.104.0.1:55040 10 6452 1 2025-11-22 04:19:56.103 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60186 10 6452 1 2025-11-22 04:21:06.748 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 04:19:04.406 00:02:00.288 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 04:21:06.669 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 04:21:06.655 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 04:21:06.567 00:00:00.035 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:21:06.664 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:20:56.466 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46116 10 6452 1 2025-11-22 04:20:04.405 00:02:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 04:21:56.827 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51110 10 6452 1 2025-11-22 04:22:04.408 00:01:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 04:22:57.224 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46404 10 6452 1 2025-11-22 04:23:04.407 00:01:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:23:57.590 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:47528 12 10375 1 2025-11-22 04:24:58.091 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43502 10 6452 1 2025-11-22 04:24:04.409 00:02:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 04:26:06.942 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 04:26:06.698 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 04:26:06.795 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 04:26:06.822 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:25:58.494 00:00:10.602 TCP 1.101.0.1:3000 -> 23.104.0.1:41010 10 6452 1 2025-11-22 04:26:06.859 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:25:04.406 00:02:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 04:26:59.142 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35840 10 6452 1 2025-11-22 04:27:04.409 00:01:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 04:27:59.548 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50980 10 6452 1 2025-11-22 04:28:04.407 00:01:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:28:59.952 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:51316 10 6452 1 2025-11-22 04:30:00.369 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33330 10 6452 1 2025-11-22 04:29:04.411 00:02:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 04:31:06.847 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 04:31:06.695 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 04:31:06.573 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 04:31:06.691 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:31:06.764 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:31:00.733 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54852 10 6452 1 2025-11-22 04:30:04.407 00:02:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 04:32:01.136 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37162 10 6452 1 2025-11-22 04:32:04.410 00:01:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 04:33:01.541 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55396 10 6452 1 2025-11-22 04:33:04.409 00:01:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:34:01.945 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:36524 10 6452 1 2025-11-22 04:35:02.364 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45800 10 6452 1 2025-11-22 04:34:04.410 00:02:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 04:36:06.954 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 04:36:06.914 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 04:36:06.751 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 04:36:06.549 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:36:06.873 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:36:02.727 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48032 10 6452 1 2025-11-22 04:35:04.409 00:02:00.292 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 04:37:03.139 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45590 10 6452 1 2025-11-22 04:37:04.412 00:01:00.288 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 04:38:03.544 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43452 10 6452 1 2025-11-22 04:38:04.408 00:01:00.295 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:39:03.944 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:38070 10 6452 1 2025-11-22 04:40:04.365 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:49164 10 6452 1 2025-11-22 04:40:04.409 00:01:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:39:04.411 00:02:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 04:41:07.052 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 04:41:06.919 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 04:41:06.864 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 04:41:06.867 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:41:06.969 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:41:04.781 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51012 10 6452 1 2025-11-22 04:42:04.410 00:00:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-11-22 04:42:05.189 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:45846 10 6452 1 2025-11-22 04:42:04.413 00:01:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 04:43:05.650 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36254 10 6452 1 2025-11-22 04:43:04.411 00:01:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:44:06.058 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47388 10 6452 1 2025-11-22 04:45:06.462 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46994 10 6452 1 2025-11-22 04:45:04.409 00:01:00.295 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:44:04.412 00:02:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 04:46:06.959 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 04:46:06.878 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:46:07.139 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 04:46:06.950 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 04:46:06.911 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:46:06.823 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49910 10 6452 1 2025-11-22 04:47:07.226 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41756 10 6452 1 2025-11-22 04:47:04.414 00:01:00.289 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 04:48:07.639 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47624 10 6452 1 2025-11-22 04:47:04.410 00:02:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 04:49:08.094 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45456 10 6452 1 2025-11-22 04:49:04.414 00:01:00.289 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 04:50:08.494 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56800 10 6452 1 2025-11-22 04:51:07.308 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:51:07.081 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 04:51:07.157 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 04:51:06.906 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:50:04.412 00:01:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:51:07.392 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 04:51:08.891 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56658 12 6556 1 2025-11-22 04:52:09.310 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39522 10 6452 1 2025-11-22 04:51:04.414 00:02:00.289 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 04:53:09.716 00:00:12.790 TCP 1.101.0.1:3000 -> 23.104.0.1:41956 10 6452 1 2025-11-22 04:52:04.412 00:02:00.294 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-22 04:54:12.541 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38146 10 6452 1 2025-11-22 04:54:04.415 00:01:00.289 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-22 04:55:12.947 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:55848 10 6452 1 2025-11-22 04:56:08.353 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:56:08.307 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-22 04:56:08.304 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-22 04:56:08.437 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-22 04:55:04.413 00:01:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-22 04:56:08.436 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-22 04:56:13.360 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47732 10 6452 1 2025-11-22 04:57:13.763 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37656 10 6452 1 2025-11-22 04:56:04.416 00:02:00.287 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-22 04:58:14.181 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56860 10 6452 1 Summary: total flows: 170, total bytes: 418615, total packets: 1018, avg bps: 910, avg pps: 0, avg bpp: 411 Time window: 2025-11-22 03:57:04 - 2025-11-22 04:58:24 Total flows processed: 170, passed: 170, Blocks skipped: 0, Bytes read: 17744 Sys: 0.0034s User: 0.0017s Wall: 0.0024s flows/second: 71097.0 Runtime: 0.0024s