Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 20:56:55.313 00:02:00.273 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-04 20:59:26.286 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51976 10 6452 1 2025-11-04 21:00:26.651 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37352 10 6452 1 2025-11-04 20:59:55.314 00:01:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-04 20:56:55.312 00:04:00.277 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 21:01:27.071 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:54016 12 10375 1 2025-11-04 21:02:27.551 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55672 10 6452 1 2025-11-04 21:02:45.240 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 21:02:45.315 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 21:02:45.247 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:02:45.157 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:02:45.531 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 21:01:55.312 00:01:00.278 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-04 21:03:27.952 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59628 10 6452 1 2025-11-04 21:01:55.314 00:02:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-04 21:04:28.371 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55830 10 6452 1 2025-11-04 21:05:28.782 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41002 10 6452 1 2025-11-04 21:04:55.315 00:01:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-04 21:03:55.312 00:02:00.277 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-04 21:06:29.191 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34344 10 6452 1 2025-11-04 21:07:29.590 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56870 10 6452 1 2025-11-04 21:07:45.255 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 21:07:45.332 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:07:45.322 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:07:45.438 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 21:07:45.406 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 21:06:55.313 00:01:00.277 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-04 21:08:29.992 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47136 10 6452 1 2025-11-04 21:06:55.315 00:02:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-04 21:09:30.394 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41192 10 6452 1 2025-11-04 21:10:30.801 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:50144 10 6452 1 2025-11-04 21:09:55.320 00:01:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-04 21:08:55.317 00:02:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-04 21:11:31.180 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38836 10 6452 1 2025-11-04 21:12:45.484 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 21:12:45.409 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 21:12:45.014 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:12:45.400 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:12:31.582 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45538 10 6452 1 2025-11-04 21:12:45.415 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 21:11:55.319 00:01:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-04 21:13:31.950 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50584 10 6452 1 2025-11-04 21:11:55.321 00:02:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-04 21:14:32.357 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44680 10 6452 1 2025-11-04 21:15:32.757 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:58264 10 6452 1 2025-11-04 21:14:55.326 00:01:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-04 21:13:55.322 00:02:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-04 21:16:33.174 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60934 10 6452 1 2025-11-04 21:17:45.363 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 21:17:33.576 00:00:12.061 TCP 1.101.0.1:3000 -> 23.104.0.1:41882 10 6452 1 2025-11-04 21:17:45.298 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 21:17:45.105 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:17:45.282 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:17:45.280 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 21:16:55.323 00:01:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-04 21:18:35.678 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39524 10 6452 1 2025-11-04 21:19:36.039 00:00:11.641 TCP 1.101.0.1:3000 -> 23.104.0.1:47650 10 6452 1 2025-11-04 21:20:37.715 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:49864 10 6452 1 2025-11-04 21:16:55.325 00:04:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 21:21:38.105 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:53958 12 10375 1 2025-11-04 21:22:45.541 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 21:22:45.552 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 21:22:45.577 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:22:45.458 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:22:45.447 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 21:18:55.323 00:04:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 21:22:38.580 00:00:17.649 TCP 1.101.0.1:3000 -> 23.104.0.1:60966 10 6452 1 2025-11-04 21:23:46.300 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49294 10 6452 1 2025-11-04 21:24:46.699 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57454 10 6452 1 2025-11-04 21:21:55.326 00:04:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 21:25:47.114 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55978 10 6452 1 2025-11-04 21:26:47.526 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51130 10 6452 1 2025-11-04 21:27:45.682 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 21:27:45.392 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:27:45.681 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:27:45.669 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 21:27:45.765 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 21:26:55.330 00:01:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-04 21:23:55.325 00:04:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 21:27:47.926 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58546 10 6452 1 2025-11-04 21:28:48.368 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56824 10 6452 1 2025-11-04 21:29:48.731 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47760 10 6452 1 2025-11-04 21:28:55.328 00:02:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-04 21:30:49.140 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35152 10 6452 1 2025-11-04 21:31:49.539 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:41216 10 6452 1 2025-11-04 21:32:45.582 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 21:32:45.751 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 21:32:45.522 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:32:45.501 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:32:45.747 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 21:28:55.326 00:04:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 21:31:55.329 00:01:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-04 21:32:49.891 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46002 10 6452 1 2025-11-04 21:33:50.304 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35932 10 6452 1 2025-11-04 21:33:55.328 00:01:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-04 21:34:50.711 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47980 10 6452 1 2025-11-04 21:33:55.329 00:02:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-04 21:35:51.104 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36132 10 6452 1 2025-11-04 21:36:51.518 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48412 10 6452 1 2025-11-04 21:37:45.887 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 21:37:45.893 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:37:45.882 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:37:45.810 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 21:37:45.964 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 21:36:55.331 00:01:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-04 21:35:55.327 00:02:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-04 21:37:51.926 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47970 10 6452 1 2025-11-04 21:38:52.335 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36490 10 6452 1 2025-11-04 21:38:55.329 00:01:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-04 21:39:52.739 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43956 10 6452 1 2025-11-04 21:38:55.331 00:02:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-04 21:40:53.149 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:52488 10 6452 1 2025-11-04 21:41:53.505 00:00:10.438 TCP 1.101.0.1:3000 -> 23.104.0.1:37712 12 10369 1 2025-11-04 21:42:45.856 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:42:45.908 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:42:45.821 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 21:42:45.992 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 21:41:55.332 00:01:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-04 21:42:45.990 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 21:40:55.329 00:02:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-04 21:42:53.986 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43514 10 6452 1 2025-11-04 21:43:54.392 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40090 10 6452 1 2025-11-04 21:43:55.330 00:01:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-04 21:44:54.801 00:00:10.807 TCP 1.101.0.1:3000 -> 23.104.0.1:33958 10 6452 1 2025-11-04 21:43:55.332 00:02:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-04 21:45:55.645 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56308 10 6452 1 2025-11-04 21:46:56.062 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:34892 12 10375 1 2025-11-04 21:47:45.945 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 21:47:46.065 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 21:47:45.982 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:47:46.128 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:47:46.211 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 21:45:55.330 00:02:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-04 21:46:55.332 00:01:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-04 21:47:56.537 00:00:10.519 TCP 1.101.0.1:3000 -> 23.104.0.1:44942 10 6452 1 2025-11-04 21:48:57.106 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34270 10 6452 1 2025-11-04 21:48:55.331 00:01:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-04 21:49:57.514 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49062 10 6452 1 2025-11-04 21:50:57.922 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46604 10 6452 1 2025-11-04 21:51:58.340 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45388 10 6452 1 2025-11-04 21:52:46.066 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:52:46.163 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 21:52:46.305 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 21:52:46.143 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:52:46.148 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 21:48:55.331 00:04:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 21:52:58.741 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60712 10 6452 1 2025-11-04 21:53:59.147 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38466 10 6452 1 2025-11-04 21:50:55.330 00:04:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-04 21:54:59.551 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59604 10 6452 1 2025-11-04 21:55:59.956 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:57878 10 6452 1 2025-11-04 21:57:00.371 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:43112 10 6452 1 2025-11-04 21:57:46.432 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-04 21:57:46.180 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:57:46.388 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-04 21:57:46.043 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-04 21:57:46.470 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-04 21:53:55.333 00:04:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-04 21:58:00.729 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:44944 10 6452 1 Summary: total flows: 159, total bytes: 426357, total packets: 1020, avg bps: 927, avg pps: 0, avg bpp: 417 Time window: 2025-11-04 20:56:55 - 2025-11-04 21:58:11 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0021s User: 0.0032s Wall: 0.0025s flows/second: 63726.2 Runtime: 0.0025s