Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 00:58:00.307 00:01:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-14 00:58:00.310 00:01:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-14 00:59:01.829 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33446 10 6452 1 2025-11-14 01:00:02.227 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58876 10 6452 1 2025-11-14 01:01:02.638 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:57850 10 6452 1 2025-11-14 01:00:00.305 00:02:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-14 01:00:00.308 00:02:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-14 01:02:09.910 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 01:02:09.834 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:02:09.903 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:02:09.973 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 01:02:09.985 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 01:02:02.994 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56366 10 6452 1 2025-11-14 01:03:03.357 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46504 10 6452 1 2025-11-14 01:03:00.308 00:01:00.211 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-14 01:03:00.311 00:01:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-14 01:04:03.723 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35864 10 6452 1 2025-11-14 01:05:04.129 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:55428 10 6452 1 2025-11-14 01:06:04.491 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50424 10 6452 1 2025-11-14 01:07:09.971 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 01:07:09.749 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:07:09.973 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:07:10.044 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 01:07:10.057 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 01:07:04.856 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50848 10 6452 1 2025-11-14 01:08:05.278 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34492 10 6452 1 2025-11-14 01:05:00.308 00:04:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-14 01:05:00.310 00:04:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-14 01:09:05.678 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43054 10 6452 1 2025-11-14 01:10:06.102 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48084 10 6452 1 2025-11-14 01:11:06.504 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40510 10 6452 1 2025-11-14 01:12:10.053 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 01:12:09.871 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:12:09.734 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:12:09.953 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 01:12:09.816 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 01:12:06.906 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44072 10 6452 1 2025-11-14 01:13:07.323 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46224 10 6452 1 2025-11-14 01:10:00.312 00:04:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-14 01:10:00.311 00:04:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-14 01:14:07.724 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:33506 10 6452 1 2025-11-14 01:15:08.145 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49370 10 6452 1 2025-11-14 01:15:00.314 00:01:00.206 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-14 01:16:08.547 00:00:10.419 TCP 1.101.0.1:3000 -> 23.104.0.1:51494 11 6504 1 2025-11-14 01:17:10.182 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 01:17:09.876 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:17:10.231 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:17:10.309 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 01:17:10.314 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 01:17:09.004 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39600 10 6452 1 2025-11-14 01:18:09.409 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40172 10 6452 1 2025-11-14 01:15:00.311 00:04:00.214 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-14 01:17:00.314 00:02:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-14 01:19:09.811 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45974 10 6452 1 2025-11-14 01:20:10.179 00:00:27.571 TCP 1.101.0.1:3000 -> 23.104.0.1:60542 10 6452 1 2025-11-14 01:20:00.314 00:01:00.209 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-14 01:20:00.312 00:01:00.214 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-14 01:21:27.787 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35674 10 6452 1 2025-11-14 01:22:10.237 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 01:22:10.168 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:22:10.306 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:22:10.238 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 01:22:10.389 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 01:22:28.192 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58244 10 6452 1 2025-11-14 01:23:28.599 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45192 10 6452 1 2025-11-14 01:22:00.315 00:02:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-14 01:22:00.313 00:02:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-14 01:24:29.001 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46140 10 6452 1 2025-11-14 01:25:29.403 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:54976 12 10375 1 2025-11-14 01:25:00.314 00:01:00.214 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-14 01:25:00.316 00:01:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-14 01:26:29.884 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55120 10 6452 1 2025-11-14 01:27:10.495 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 01:27:10.105 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:27:10.497 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:27:10.758 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 01:27:10.581 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 01:27:30.252 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56904 10 6452 1 2025-11-14 01:28:30.614 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44222 10 6452 1 2025-11-14 01:27:00.317 00:02:00.208 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-14 01:27:00.316 00:02:00.213 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-14 01:29:31.014 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:43766 10 6452 1 2025-11-14 01:30:31.379 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48516 10 6452 1 2025-11-14 01:30:00.318 00:01:00.207 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-14 01:30:00.315 00:01:00.212 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-14 01:31:31.786 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56720 10 6452 1 2025-11-14 01:32:10.287 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 01:32:10.487 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:32:10.288 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:32:10.471 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 01:32:10.371 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 01:32:32.146 00:00:10.672 TCP 1.101.0.1:3000 -> 23.104.0.1:49998 10 6452 1 2025-11-14 01:33:32.852 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47738 10 6452 1 2025-11-14 01:32:00.321 00:02:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-14 01:32:00.317 00:02:00.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-14 01:34:33.278 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41772 10 6452 1 2025-11-14 01:35:33.639 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51354 10 6452 1 2025-11-14 01:35:00.322 00:01:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-14 01:35:00.320 00:01:00.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-14 01:36:34.056 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58808 10 6452 1 2025-11-14 01:37:10.759 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 01:37:10.661 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 01:37:10.592 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:37:10.676 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:37:10.733 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 01:37:34.465 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35508 10 6452 1 2025-11-14 01:38:34.863 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39978 10 6452 1 2025-11-14 01:39:35.268 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50456 10 6452 1 2025-11-14 01:40:35.690 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53090 10 6452 1 2025-11-14 01:37:00.322 00:04:00.211 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-14 01:37:00.319 00:04:00.216 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-14 01:41:36.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37642 10 6452 1 2025-11-14 01:42:10.707 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 01:42:10.741 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 01:42:10.368 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:42:10.623 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:42:10.609 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 01:42:36.515 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59708 10 6452 1 2025-11-14 01:43:36.881 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:35182 11 6504 1 2025-11-14 01:44:37.343 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:56850 10 6452 1 2025-11-14 01:45:37.704 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:47858 12 6556 1 2025-11-14 01:42:00.319 00:04:00.217 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-14 01:42:00.322 00:04:00.212 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-14 01:46:38.136 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40532 10 6452 1 2025-11-14 01:47:10.921 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 01:47:10.842 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 01:47:10.743 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:47:10.838 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:47:10.846 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 01:47:38.539 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58664 10 6452 1 2025-11-14 01:48:38.945 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:52202 10 6452 1 2025-11-14 01:49:39.371 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46476 10 6452 1 2025-11-14 01:50:39.770 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39918 10 6452 1 2025-11-14 01:47:00.332 00:04:00.205 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-11-14 01:47:00.329 00:04:00.210 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-11-14 01:51:40.192 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34150 10 6452 1 2025-11-14 01:52:10.687 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:52:10.962 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 01:52:11.435 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 01:52:11.340 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 01:52:11.352 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:52:40.602 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:59314 10 6452 1 2025-11-14 01:52:00.332 00:01:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-14 01:52:00.329 00:01:00.209 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-14 01:53:40.973 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:38550 10 6452 1 2025-11-14 01:54:41.390 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33116 10 6452 1 2025-11-14 01:55:41.798 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52186 10 6452 1 2025-11-14 01:54:00.329 00:02:00.209 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-11-14 01:54:00.333 00:02:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-11-14 01:56:42.206 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53680 10 6452 1 2025-11-14 01:57:10.922 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-14 01:57:10.859 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:57:10.919 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-14 01:57:10.927 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-14 01:57:11.003 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-14 01:57:42.609 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51468 10 6452 1 2025-11-14 01:57:00.329 00:01:00.209 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-14 01:57:00.332 00:01:00.204 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 Summary: total flows: 158, total bytes: 414925, total packets: 1020, avg bps: 921, avg pps: 0, avg bpp: 406 Time window: 2025-11-14 00:58:00 - 2025-11-14 01:58:00 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0028s User: 0.0028s Wall: 0.0023s flows/second: 70001.1 Runtime: 0.0023s