Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 01:59:00.854 00:00:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-11-15 01:59:00.851 00:00:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-11-15 01:59:08.806 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49470 10 6452 1 2025-11-15 02:00:00.852 00:00:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-11-15 02:00:09.212 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49546 10 6452 1 2025-11-15 02:00:00.855 00:01:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-15 02:01:00.852 00:00:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-11-15 02:01:09.614 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39184 10 6452 1 2025-11-15 02:02:00.854 00:00:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-11-15 02:02:10.024 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45728 10 6452 1 2025-11-15 02:02:40.218 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 02:02:39.827 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 02:02:39.797 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:02:40.134 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:02:40.073 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 02:03:00.856 00:00:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-11-15 02:02:00.851 00:01:00.146 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-11-15 02:03:10.428 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52016 10 6452 1 2025-11-15 02:04:00.856 00:00:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-11-15 02:04:00.854 00:00:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-11-15 02:04:10.828 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49424 10 6452 1 2025-11-15 02:05:00.854 00:00:00.144 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-11-15 02:05:11.229 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38008 10 6452 1 2025-11-15 02:05:00.857 00:01:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-15 02:06:00.855 00:00:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-11-15 02:06:11.630 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51590 10 6452 1 2025-11-15 02:07:00.855 00:00:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-11-15 02:07:00.859 00:00:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-11-15 02:07:12.032 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36366 10 6452 1 2025-11-15 02:07:39.933 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 02:07:39.848 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:07:40.170 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:07:40.161 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 02:07:40.252 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 02:08:00.858 00:00:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-11-15 02:08:00.859 00:00:00.135 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-11-15 02:08:12.434 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:39920 10 6452 1 2025-11-15 02:09:00.855 00:00:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-11-15 02:09:00.858 00:00:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-11-15 02:09:12.791 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58554 10 6452 1 2025-11-15 02:10:00.856 00:00:00.142 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-11-15 02:10:13.200 00:00:13.524 TCP 1.101.0.1:3000 -> 23.104.0.1:35976 10 6452 1 2025-11-15 02:11:00.856 00:00:00.143 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-11-15 02:10:00.859 00:01:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-15 02:11:16.765 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:39982 12 10375 1 2025-11-15 02:12:00.858 00:00:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-11-15 02:12:17.257 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37452 10 6452 1 2025-11-15 02:12:40.293 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 02:12:40.293 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 02:12:39.885 00:00:00.033 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:12:40.210 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:12:40.281 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 02:13:00.861 00:00:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-11-15 02:13:17.659 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:58096 10 6452 1 2025-11-15 02:14:00.861 00:00:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-11-15 02:14:18.098 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49528 10 6452 1 2025-11-15 02:15:18.460 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56960 10 6452 1 2025-11-15 02:15:00.860 00:01:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-15 02:12:00.856 00:05:00.145 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 02:16:18.863 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49888 10 6452 1 2025-11-15 02:17:00.861 00:00:00.136 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-11-15 02:17:19.272 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45292 10 6452 1 2025-11-15 02:17:40.242 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 02:17:40.279 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:17:40.241 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:17:40.239 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 02:17:40.323 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 02:18:00.860 00:00:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-11-15 02:18:19.683 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40954 10 6452 1 2025-11-15 02:19:00.861 00:00:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-11-15 02:19:20.107 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:47162 10 6452 1 2025-11-15 02:20:20.509 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55752 10 6452 1 2025-11-15 02:20:00.860 00:01:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-11-15 02:21:20.884 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:37026 13 13949 1 2025-11-15 02:22:00.861 00:00:00.137 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-11-15 02:18:00.858 00:05:00.153 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 02:22:40.233 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 02:22:21.320 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45040 10 6452 1 2025-11-15 02:22:40.364 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 02:22:40.174 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:22:40.150 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:22:40.361 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 02:23:21.727 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46016 10 6452 1 2025-11-15 02:24:22.139 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:57462 10 6452 1 2025-11-15 02:25:22.542 00:00:10.494 TCP 1.101.0.1:3000 -> 23.104.0.1:43386 10 6452 1 2025-11-15 02:26:23.098 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37462 10 6452 1 2025-11-15 02:23:00.862 00:05:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 02:27:23.504 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48342 10 6452 1 2025-11-15 02:27:40.548 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 02:27:40.511 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 02:27:40.364 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:27:40.465 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:27:40.335 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 02:24:00.860 00:05:00.180 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 02:28:23.910 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:58804 10 6452 1 2025-11-15 02:29:24.282 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:32982 10 6452 1 2025-11-15 02:30:24.643 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58562 10 6452 1 2025-11-15 02:31:25.040 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:56362 10 6452 1 2025-11-15 02:32:25.402 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41038 10 6452 1 2025-11-15 02:32:40.446 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 02:32:40.464 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:32:40.612 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:32:40.450 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 02:32:40.695 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 02:29:00.864 00:05:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 02:33:25.805 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42744 10 6452 1 2025-11-15 02:30:00.863 00:05:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 02:34:26.205 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:44412 10 6452 1 2025-11-15 02:35:26.604 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:46400 12 10369 1 2025-11-15 02:36:27.107 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46060 10 6452 1 2025-11-15 02:37:40.802 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 02:37:27.514 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54884 10 6452 1 2025-11-15 02:37:40.710 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 02:37:40.554 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:37:40.720 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:37:40.828 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 02:38:27.914 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:60176 10 6452 1 2025-11-15 02:35:00.865 00:05:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 02:39:28.283 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43378 10 6452 1 2025-11-15 02:36:00.865 00:05:00.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 02:40:28.688 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43134 10 6452 1 2025-11-15 02:41:29.117 00:00:20.974 TCP 1.101.0.1:3000 -> 23.104.0.1:34028 10 6452 1 2025-11-15 02:42:40.732 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 02:42:40.572 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:42:40.672 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:42:40.895 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 02:42:40.755 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 02:42:40.128 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47652 10 6452 1 2025-11-15 02:43:40.528 00:00:10.774 TCP 1.101.0.1:3000 -> 23.104.0.1:60736 10 6452 1 2025-11-15 02:44:41.345 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37934 10 6452 1 2025-11-15 02:41:00.868 00:05:00.177 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 02:45:41.743 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40366 10 6452 1 2025-11-15 02:42:00.866 00:05:00.181 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 02:46:42.145 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40076 10 6452 1 2025-11-15 02:47:40.972 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 02:47:40.689 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:47:40.922 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:47:40.820 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 02:47:41.006 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 02:47:42.552 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34746 10 6452 1 2025-11-15 02:48:42.952 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55920 10 6452 1 2025-11-15 02:49:43.365 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40250 10 6452 1 2025-11-15 02:50:43.773 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40726 10 6452 1 2025-11-15 02:47:00.869 00:05:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 02:51:44.186 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:50538 11 6504 1 2025-11-15 02:48:00.867 00:05:00.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-15 02:52:41.042 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 02:52:41.074 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:52:41.303 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:52:41.303 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 02:52:41.386 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 02:52:44.649 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46572 10 6452 1 2025-11-15 02:53:45.065 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:52904 10 6452 1 2025-11-15 02:54:45.481 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:35318 10 6452 1 2025-11-15 02:55:45.910 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35524 10 6452 1 2025-11-15 02:56:46.321 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54562 10 6452 1 2025-11-15 02:53:00.869 00:05:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-15 02:57:40.900 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-15 02:57:40.966 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:57:40.970 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-15 02:57:41.052 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-15 02:57:41.011 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-15 02:57:46.729 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39666 10 6452 1 2025-11-15 02:54:00.867 00:05:00.186 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 164, total bytes: 426060, total packets: 1020, avg bps: 946, avg pps: 0, avg bpp: 417 Time window: 2025-11-15 01:59:00 - 2025-11-15 02:59:01 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0023s User: 0.0035s Wall: 0.0082s flows/second: 20102.5 Runtime: 0.0082s