Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-16 14:59:04.278 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 14:59:04.275 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 14:59:04.264 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 14:59:04.078 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 14:59:04.195 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 14:59:30.912 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47528 10 6438 1 2025-07-16 14:54:57.387 00:06:00.590 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 15:00:31.337 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:46074 10 6438 1 2025-07-16 15:01:31.721 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52524 10 6438 1 2025-07-16 15:02:32.139 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60148 10 6438 1 2025-07-16 15:03:32.548 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57514 10 6438 1 2025-07-16 15:04:04.346 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 15:04:04.391 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 15:04:04.255 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 15:04:04.347 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:04:04.263 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:04:32.953 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:46016 10 6438 1 2025-07-16 14:59:57.386 00:06:00.594 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 15:05:33.381 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42528 10 6438 1 2025-07-16 15:06:33.754 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52272 10 6438 1 2025-07-16 15:01:57.389 00:06:00.589 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 15:07:34.158 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33496 10 6438 1 2025-07-16 15:08:34.568 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48816 10 6438 1 2025-07-16 15:09:04.399 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 15:09:04.399 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 15:09:04.334 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:09:04.450 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:09:04.534 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 15:09:34.969 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59992 10 6438 1 2025-07-16 15:10:35.329 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:57928 10 6438 1 2025-07-16 15:11:35.694 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60896 10 6438 1 2025-07-16 15:06:57.388 00:06:00.595 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 15:12:36.117 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33184 10 6438 1 2025-07-16 15:13:36.519 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57138 10 6438 1 2025-07-16 15:08:57.391 00:06:00.589 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 15:14:04.517 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 15:14:04.567 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 15:14:04.530 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:14:04.571 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:14:04.653 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 15:14:36.926 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:54720 10 6438 1 2025-07-16 15:15:37.360 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53682 10 6438 1 2025-07-16 15:16:37.759 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36042 10 6438 1 2025-07-16 15:17:38.175 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40400 10 6438 1 2025-07-16 15:18:38.583 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37148 10 6438 1 2025-07-16 15:13:57.391 00:06:00.595 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 15:19:04.570 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 15:19:04.557 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:19:04.488 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:19:04.486 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 15:19:04.671 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 15:19:38.990 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:55778 10 6438 1 2025-07-16 15:20:39.365 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56472 10 6438 1 2025-07-16 15:15:57.396 00:06:00.589 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 15:21:39.770 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55524 10 6438 1 2025-07-16 15:22:40.192 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58420 10 6438 1 2025-07-16 15:23:40.557 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58628 10 6438 1 2025-07-16 15:24:04.912 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 15:24:04.829 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:24:04.886 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 15:24:04.770 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 15:24:04.890 00:00:00.019 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:24:40.969 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39514 10 6438 1 2025-07-16 15:25:41.368 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52234 10 6438 1 2025-07-16 15:20:57.392 00:06:00.595 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 15:26:41.765 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:51368 10 6438 1 2025-07-16 15:27:42.192 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45858 10 6438 1 2025-07-16 15:22:57.399 00:06:00.586 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 15:28:42.597 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33140 10 6438 1 2025-07-16 15:29:04.696 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 15:29:04.814 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 15:29:04.879 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:29:04.694 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:29:04.777 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 15:29:43.006 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55396 10 6438 1 2025-07-16 15:30:43.417 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60966 10 6438 1 2025-07-16 15:31:43.833 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:60584 10 6438 1 2025-07-16 15:32:44.282 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51950 10 6438 1 2025-07-16 15:27:57.397 00:06:00.592 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 15:33:44.684 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40988 10 6438 1 2025-07-16 15:34:04.893 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 15:34:04.854 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 15:34:04.896 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:34:04.857 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:34:04.945 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 15:34:45.106 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47898 12 6542 1 2025-07-16 15:29:57.402 00:06:00.586 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 15:35:45.511 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:42226 10 6438 1 2025-07-16 15:36:45.881 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:42966 12 6542 1 2025-07-16 15:37:46.322 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35324 10 6438 1 2025-07-16 15:38:46.722 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57322 10 6438 1 2025-07-16 15:39:04.828 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 15:39:04.932 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 15:39:04.952 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:39:04.746 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:39:04.932 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 15:34:57.400 00:06:00.591 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 15:39:47.130 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:45054 10 6438 1 2025-07-16 15:40:47.535 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56738 10 6438 1 2025-07-16 15:41:47.938 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:50648 10 6438 1 2025-07-16 15:36:57.403 00:06:00.586 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 15:42:48.319 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37780 10 6438 1 2025-07-16 15:43:48.693 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41964 10 6438 1 2025-07-16 15:44:04.921 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:44:05.125 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:44:05.128 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 15:44:05.139 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 15:44:05.208 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 15:44:49.066 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41348 10 6438 1 2025-07-16 15:45:49.470 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:36134 10 6438 1 2025-07-16 15:41:57.402 00:06:00.591 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 15:46:49.881 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48104 10 6438 1 2025-07-16 15:47:50.287 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48408 10 6438 1 2025-07-16 15:43:57.405 00:06:00.586 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 15:49:05.514 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 15:48:50.689 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44534 10 6438 1 2025-07-16 15:49:05.188 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 15:49:05.268 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 15:49:05.430 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:49:05.433 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:49:51.109 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51786 10 6438 1 2025-07-16 15:50:51.510 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53066 10 6438 1 2025-07-16 15:51:51.919 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45622 10 6438 1 2025-07-16 15:52:52.327 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32860 10 6438 1 2025-07-16 15:48:57.404 00:06:00.590 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-16 15:53:52.737 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39180 10 6438 1 2025-07-16 15:54:05.402 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-16 15:54:05.266 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-16 15:54:05.214 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-16 15:54:05.230 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:54:05.320 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-16 15:54:53.146 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:58446 10 6438 1 2025-07-16 15:50:57.408 00:06:00.584 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-16 15:55:53.505 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53048 10 6438 1 2025-07-16 15:56:53.912 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37804 10 6438 1 2025-07-16 15:57:54.312 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45240 10 6438 1 Summary: total flows: 136, total bytes: 409807, total packets: 1012, avg bps: 865, avg pps: 0, avg bpp: 404 Time window: 2025-07-16 14:54:57 - 2025-07-16 15:58:04 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0030s User: 0.0010s Wall: 0.0029s flows/second: 47026.0 Runtime: 0.0029s