Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 11:54:55.085 00:04:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 11:58:55.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58290 10 6452 1 2025-11-04 11:59:55.515 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47480 10 6452 1 2025-11-04 12:00:55.917 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40738 10 6452 1 2025-11-04 11:58:55.395 00:03:00.000 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 440 1 2025-11-04 12:01:56.357 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49360 10 6452 1 2025-11-04 12:02:34.164 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 12:02:34.377 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:02:34.411 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:02:34.353 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 12:02:34.493 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 12:02:56.721 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56100 11 6492 1 2025-11-04 11:59:55.087 00:04:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 12:03:57.126 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47448 10 6452 1 2025-11-04 12:04:57.528 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45764 10 6452 1 2025-11-04 12:05:57.936 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:47850 10 6452 1 2025-11-04 12:02:55.098 00:04:00.300 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 12:06:58.352 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54336 10 6452 1 2025-11-04 12:07:34.586 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 12:07:34.485 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:07:34.470 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:07:34.546 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 12:07:34.554 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 12:07:58.756 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:47822 10 6452 1 2025-11-04 12:04:55.094 00:04:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 12:08:59.189 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46902 10 6452 1 2025-11-04 12:09:59.592 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37570 10 6452 1 2025-11-04 12:10:59.999 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39092 10 6452 1 2025-11-04 12:07:55.099 00:04:00.300 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 12:12:00.414 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55944 10 6452 1 2025-11-04 12:12:34.770 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 12:12:34.659 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 12:12:34.227 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:12:34.687 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:12:34.423 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 12:13:00.819 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58326 10 6452 1 2025-11-04 12:14:01.221 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55236 10 6452 1 2025-11-04 12:09:55.096 00:06:00.307 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-04 12:15:01.632 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35628 12 6556 1 2025-11-04 12:16:02.072 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:53946 10 6452 1 2025-11-04 12:12:55.097 00:04:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 12:17:02.429 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:49886 10 6452 1 2025-11-04 12:17:34.754 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 12:17:34.503 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 12:17:34.330 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:17:34.671 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:17:34.482 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 12:18:02.827 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59984 10 6452 1 2025-11-04 12:19:03.231 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48596 10 6452 1 2025-11-04 12:20:03.635 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46408 10 6452 1 2025-11-04 12:21:04.038 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45760 10 6452 1 2025-11-04 12:16:55.096 00:06:00.002 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-11-04 12:22:04.439 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39856 10 6452 1 2025-11-04 12:22:34.928 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 12:22:34.793 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 12:22:34.678 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:22:34.845 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:22:34.805 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 12:17:55.099 00:06:00.304 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-04 12:23:04.842 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:56146 10 6452 1 2025-11-04 12:24:05.263 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34128 10 6452 1 2025-11-04 12:25:05.667 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:52676 10 6452 1 2025-11-04 12:22:55.405 00:03:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 421 1 2025-11-04 12:26:06.088 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37038 10 6452 1 2025-11-04 12:27:06.489 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42500 10 6452 1 2025-11-04 12:27:34.919 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 12:27:34.840 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 12:27:34.437 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:27:34.837 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:27:35.406 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 12:28:06.893 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:39750 10 6452 1 2025-11-04 12:29:07.321 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55080 10 6452 1 2025-11-04 12:24:55.100 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 790 1 2025-11-04 12:30:07.754 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:56294 10 6452 1 2025-11-04 12:26:55.099 00:04:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 12:31:08.119 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36456 10 6452 1 2025-11-04 12:32:08.481 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55952 10 6452 1 2025-11-04 12:32:34.882 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 12:32:34.803 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 12:32:34.838 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:32:34.800 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:32:35.107 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 12:33:08.877 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38570 10 6452 1 2025-11-04 12:30:55.404 00:03:00.004 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 440 1 2025-11-04 12:34:09.241 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44576 10 6452 1 2025-11-04 12:35:09.643 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57624 10 6452 1 2025-11-04 12:31:55.102 00:04:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 12:36:10.051 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56996 10 6452 1 2025-11-04 12:37:10.451 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59764 10 6452 1 2025-11-04 12:37:35.372 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 12:37:35.184 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:37:35.289 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:37:35.182 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 12:37:34.981 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 12:38:10.856 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:50658 10 6452 1 2025-11-04 12:34:55.106 00:04:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 12:39:11.235 00:00:10.316 TCP 1.101.0.1:3000 -> 23.104.0.1:48336 10 6452 1 2025-11-04 12:40:11.589 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50336 10 6452 1 2025-11-04 12:36:55.102 00:04:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 12:41:11.993 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49660 10 6452 1 2025-11-04 12:42:12.398 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47170 10 6452 1 2025-11-04 12:42:35.335 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 12:42:35.031 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 12:42:34.966 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:42:35.252 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:42:35.143 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 12:43:12.802 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43452 10 6452 1 2025-11-04 12:39:55.104 00:04:00.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 12:44:13.204 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45330 10 6452 1 2025-11-04 12:45:13.608 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40892 10 6452 1 2025-11-04 12:46:14.018 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55792 10 6452 1 2025-11-04 12:41:55.103 00:06:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-04 12:47:14.425 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35276 10 6452 1 2025-11-04 12:47:35.239 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 12:47:35.207 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:47:35.309 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:47:35.312 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 12:47:35.392 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 12:48:14.826 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:33690 10 6452 1 2025-11-04 12:44:55.107 00:04:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 12:49:15.184 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39316 10 6452 1 2025-11-04 12:50:15.589 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38504 10 6452 1 2025-11-04 12:51:15.950 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44092 10 6452 1 2025-11-04 12:52:16.357 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38978 10 6452 1 2025-11-04 12:52:35.429 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 12:52:35.430 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 12:52:35.303 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:52:35.347 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:52:35.424 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 12:53:16.761 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:49586 10 6452 1 2025-11-04 12:48:55.106 00:06:00.001 TCP 179.21.23.23:179 -> 179.21.23.21:38570 13 809 1 2025-11-04 12:54:17.134 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57246 10 6452 1 2025-11-04 12:49:55.109 00:06:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-04 12:55:17.537 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:35194 10 6452 1 2025-11-04 12:56:17.937 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:44910 10 6452 1 2025-11-04 12:57:18.361 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47608 10 6452 1 2025-11-04 12:57:35.507 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 12:57:35.280 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:57:35.507 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 12:57:35.510 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 12:57:35.590 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 12:54:55.418 00:03:00.000 TCP 179.21.23.23:179 -> 179.21.23.21:38570 7 421 1 2025-11-04 12:58:18.766 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33316 10 6452 1 Summary: total flows: 143, total bytes: 417338, total packets: 1026, avg bps: 875, avg pps: 0, avg bpp: 406 Time window: 2025-11-04 11:54:55 - 2025-11-04 12:58:29 Total flows processed: 143, passed: 143, Blocks skipped: 0, Bytes read: 14936 Sys: 0.0034s User: 0.0009s Wall: 0.0013s flows/second: 112067.5 Runtime: 0.0013s