Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-06 01:58:55.276 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-06 01:58:54.861 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 01:58:55.226 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-06 01:58:55.229 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-06 01:58:55.193 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 01:58:51.108 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59270 10 6452 1 2025-08-06 01:54:08.264 00:06:00.118 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-06 01:59:51.503 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:43750 10 6452 1 2025-08-06 02:00:51.871 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59910 10 6452 1 2025-08-06 02:01:52.275 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46048 10 6452 1 2025-08-06 02:02:52.678 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43452 10 6452 1 2025-08-06 02:03:55.070 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-06 02:03:55.065 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-06 02:03:55.282 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:03:55.022 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:03:55.105 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-06 02:03:53.109 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:57652 10 6452 1 2025-08-06 02:04:53.535 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:59534 10 6452 1 2025-08-06 02:00:08.268 00:06:00.112 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-06 02:05:53.898 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58280 12 6556 1 2025-08-06 02:01:08.267 00:06:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-06 02:06:54.330 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37494 10 6452 1 2025-08-06 02:07:54.734 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50172 10 6452 1 2025-08-06 02:08:55.377 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-06 02:08:55.463 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-06 02:08:55.556 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-06 02:08:55.487 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:08:55.294 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:08:55.162 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39368 10 6452 1 2025-08-06 02:09:55.566 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:36060 10 6452 1 2025-08-06 02:10:55.990 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43860 10 6452 1 2025-08-06 02:07:08.276 00:06:00.106 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-06 02:11:56.362 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52714 10 6452 1 2025-08-06 02:08:08.273 00:06:00.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-06 02:12:56.720 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50856 10 6452 1 2025-08-06 02:13:55.813 00:00:00.013 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-06 02:13:55.299 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-06 02:13:55.524 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-06 02:13:55.307 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:13:55.731 00:00:00.012 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:13:57.134 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39552 10 6452 1 2025-08-06 02:14:57.543 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46414 10 6452 1 2025-08-06 02:15:57.914 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:38874 10 6452 1 2025-08-06 02:16:58.330 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:48258 11 6504 1 2025-08-06 02:17:58.805 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48790 10 6452 1 2025-08-06 02:18:55.648 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-06 02:18:55.402 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-06 02:18:55.564 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:18:55.271 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:18:55.353 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-06 02:14:08.278 00:06:00.108 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-06 02:18:59.210 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:36004 10 6452 1 2025-08-06 02:15:08.275 00:06:00.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-06 02:19:59.605 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56266 10 6452 1 2025-08-06 02:21:00.011 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52568 10 6452 1 2025-08-06 02:22:00.414 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51542 10 6452 1 2025-08-06 02:23:00.821 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43700 10 6452 1 2025-08-06 02:23:55.570 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-06 02:23:55.487 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:23:55.502 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-06 02:23:55.566 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-06 02:23:55.535 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:24:01.222 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37788 10 6452 1 2025-08-06 02:25:01.623 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56648 10 6452 1 2025-08-06 02:21:08.279 00:06:00.109 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-06 02:26:02.035 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58714 10 6452 1 2025-08-06 02:22:08.277 00:06:00.113 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-06 02:27:02.442 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:34020 10 6452 1 2025-08-06 02:28:02.838 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:40808 10 6452 1 2025-08-06 02:28:55.826 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-06 02:28:55.734 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-06 02:28:55.600 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-06 02:28:55.616 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:28:55.737 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:29:03.271 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53582 10 6452 1 2025-08-06 02:30:03.671 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44342 10 6452 1 2025-08-06 02:31:04.101 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60952 10 6452 1 2025-08-06 02:32:04.502 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44960 10 6452 1 2025-08-06 02:28:08.283 00:06:00.111 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-06 02:33:04.909 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46106 10 6452 1 2025-08-06 02:33:55.867 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-06 02:33:55.616 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-06 02:33:55.860 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-06 02:33:55.473 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:33:55.784 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:29:08.280 00:06:00.117 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-06 02:34:05.309 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:43200 12 10365 1 2025-08-06 02:35:05.788 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53510 10 6452 1 2025-08-06 02:36:06.192 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59450 10 6452 1 2025-08-06 02:37:06.589 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58036 10 6452 1 2025-08-06 02:38:06.999 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52142 10 6452 1 2025-08-06 02:38:55.994 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-06 02:38:55.917 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-06 02:38:55.619 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:38:55.914 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:38:55.997 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-06 02:39:07.409 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34380 10 6452 1 2025-08-06 02:35:08.287 00:06:00.109 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-06 02:40:07.840 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:47458 10 6452 1 2025-08-06 02:36:08.282 00:06:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-06 02:41:08.277 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41084 10 6452 1 2025-08-06 02:42:08.686 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37660 10 6452 1 2025-08-06 02:43:09.125 00:00:10.459 TCP 1.101.0.1:3000 -> 23.104.0.1:56228 10 6452 1 2025-08-06 02:43:56.016 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-06 02:43:55.784 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-06 02:43:56.004 00:00:00.038 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-06 02:43:55.932 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:43:55.934 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:44:09.619 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38384 11 6492 1 2025-08-06 02:45:10.031 00:00:12.405 TCP 1.101.0.1:3000 -> 23.104.0.1:39092 10 6452 1 2025-08-06 02:46:12.481 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43490 10 6452 1 2025-08-06 02:42:08.290 00:06:00.106 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-06 02:47:12.884 00:00:10.604 TCP 1.101.0.1:3000 -> 23.104.0.1:54828 10 6452 1 2025-08-06 02:43:08.287 00:06:00.112 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-06 02:48:13.536 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49154 10 6452 1 2025-08-06 02:48:55.960 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-06 02:48:55.960 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-06 02:48:55.774 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:48:55.959 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:48:56.041 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-06 02:49:13.942 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:46150 10 6452 1 2025-08-06 02:50:14.318 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54528 10 6452 1 2025-08-06 02:51:14.724 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38962 10 6452 1 2025-08-06 02:52:15.136 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46328 10 6452 1 2025-08-06 02:53:15.541 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51292 10 6452 1 2025-08-06 02:53:56.302 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-06 02:53:56.313 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-06 02:53:56.080 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:53:56.307 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-06 02:53:56.391 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-06 02:49:08.292 00:06:00.106 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-08-06 02:54:15.939 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:33308 10 6452 1 2025-08-06 02:50:08.289 00:06:00.111 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-08-06 02:55:16.359 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37072 10 6452 1 2025-08-06 02:56:16.758 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42676 10 6452 1 2025-08-06 02:57:17.172 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43614 10 6452 1 2025-08-06 02:58:17.573 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:33032 10 6452 1 Summary: total flows: 137, total bytes: 420986, total packets: 1024, avg bps: 872, avg pps: 0, avg bpp: 411 Time window: 2025-08-06 01:54:08 - 2025-08-06 02:58:27 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0026s User: 0.0017s Wall: 0.0021s flows/second: 64958.1 Runtime: 0.0021s