Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 14:58:59.568 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 14:58:59.471 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 14:58:59.580 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 14:58:59.769 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 14:58:59.651 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 14:59:08.587 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56722 10 6452 1 2025-08-16 14:56:14.211 00:04:00.522 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 15:00:08.951 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47686 10 6452 1 2025-08-16 14:57:14.208 00:04:00.527 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 15:01:09.366 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50910 10 6452 1 2025-08-16 15:01:14.213 00:01:00.521 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 15:02:09.769 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44310 10 6452 1 2025-08-16 15:03:10.181 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35572 10 6452 1 2025-08-16 15:03:59.689 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 15:03:59.491 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 15:03:59.525 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:03:59.500 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:03:59.582 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 15:04:10.585 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55308 10 6452 1 2025-08-16 15:03:14.216 00:02:00.519 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-16 15:05:11.002 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52548 10 6452 1 2025-08-16 15:02:14.209 00:04:00.528 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 15:06:11.421 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54540 10 6452 1 2025-08-16 15:06:14.217 00:01:00.517 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 15:07:11.822 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41324 10 6452 1 2025-08-16 15:08:12.228 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37494 10 6452 1 2025-08-16 15:08:59.532 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 15:08:59.751 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 15:08:59.818 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 15:08:59.497 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:08:59.451 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:09:12.640 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36806 12 6556 1 2025-08-16 15:10:13.061 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32988 10 6452 1 2025-08-16 15:07:14.218 00:04:00.520 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 15:11:13.466 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:44762 10 6452 1 2025-08-16 15:08:14.220 00:04:00.516 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 15:12:13.831 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:35346 10 6452 1 2025-08-16 15:13:14.230 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37226 10 6452 1 2025-08-16 15:13:59.945 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 15:13:59.862 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:13:59.907 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 15:13:59.816 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 15:13:59.821 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:14:14.630 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35502 10 6452 1 2025-08-16 15:15:15.040 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35904 10 6452 1 2025-08-16 15:12:14.222 00:04:00.517 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 15:16:15.447 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37874 10 6452 1 2025-08-16 15:13:14.224 00:04:00.512 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 15:17:15.813 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:50978 10 6452 1 2025-08-16 15:17:14.222 00:01:00.517 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-16 15:18:16.185 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47818 10 6452 1 2025-08-16 15:18:59.934 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 15:18:59.861 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:18:59.936 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:19:00.090 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 15:19:00.020 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 15:19:16.584 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43182 10 6452 1 2025-08-16 15:20:16.985 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47752 10 6452 1 2025-08-16 15:19:14.223 00:02:00.518 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-16 15:21:17.390 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45870 10 6452 1 2025-08-16 15:18:14.226 00:04:00.514 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 15:22:17.792 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45856 10 6452 1 2025-08-16 15:22:14.224 00:01:00.518 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-16 15:23:18.154 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38330 10 6452 1 2025-08-16 15:23:59.964 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 15:23:59.815 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:24:00.092 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 15:24:00.088 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 15:24:00.009 00:00:00.037 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:24:18.556 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42236 10 6452 1 2025-08-16 15:25:18.920 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46794 10 6452 1 2025-08-16 15:26:19.319 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51672 10 6452 1 2025-08-16 15:23:14.226 00:04:00.514 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 15:27:19.681 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:45306 10 6452 1 2025-08-16 15:24:14.224 00:04:00.518 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 15:28:20.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55696 10 6452 1 2025-08-16 15:28:59.930 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:28:59.983 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 15:28:59.986 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 15:29:00.123 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:29:00.206 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 15:29:20.513 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:42074 10 6452 1 2025-08-16 15:30:20.945 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45056 10 6452 1 2025-08-16 15:31:21.362 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:51948 10 6452 1 2025-08-16 15:28:14.231 00:04:00.513 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 15:32:21.774 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45684 10 6452 1 2025-08-16 15:29:14.233 00:04:00.514 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 15:33:22.184 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44826 10 6452 1 2025-08-16 15:34:00.060 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 15:33:59.972 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 15:33:59.991 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 15:34:00.047 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:33:59.978 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:33:14.235 00:01:00.509 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 15:34:22.585 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55792 10 6452 1 2025-08-16 15:35:22.993 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43770 10 6452 1 2025-08-16 15:36:23.397 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43898 10 6452 1 2025-08-16 15:35:14.236 00:02:00.509 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-08-16 15:37:23.810 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48644 10 6452 1 2025-08-16 15:34:14.233 00:04:00.515 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 15:38:24.219 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44692 10 6452 1 2025-08-16 15:39:00.499 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 15:39:00.194 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 15:39:00.321 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 15:39:00.250 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:39:00.417 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:38:14.238 00:01:00.508 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-08-16 15:39:24.581 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40262 10 6452 1 2025-08-16 15:40:24.990 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47240 10 6452 1 2025-08-16 15:41:25.355 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:53802 10 6452 1 2025-08-16 15:42:25.754 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49426 10 6452 1 2025-08-16 15:39:14.236 00:04:00.513 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 15:43:26.160 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:49460 10 6452 1 2025-08-16 15:44:00.451 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 15:44:00.368 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 15:44:00.341 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:44:00.368 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:44:00.451 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 15:40:14.240 00:04:00.506 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 15:44:26.577 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55518 10 6452 1 2025-08-16 15:45:26.984 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34280 10 6452 1 2025-08-16 15:46:27.393 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:33586 10 6452 1 2025-08-16 15:47:27.758 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:51040 10 6452 1 2025-08-16 15:44:14.241 00:04:00.510 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-08-16 15:48:28.136 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33778 10 6452 1 2025-08-16 15:49:00.628 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 15:49:00.551 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 15:49:00.388 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 15:49:00.490 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:49:00.544 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:45:14.243 00:04:00.505 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 15:49:28.533 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59628 10 6452 1 2025-08-16 15:49:14.247 00:01:00.506 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-16 15:50:28.940 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:57532 10 6452 1 2025-08-16 15:51:29.370 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56234 10 6452 1 2025-08-16 15:52:29.771 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59326 10 6452 1 2025-08-16 15:51:14.245 00:02:00.511 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-08-16 15:53:30.188 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37988 10 6452 1 2025-08-16 15:54:00.576 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-16 15:54:00.601 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-16 15:54:00.543 00:00:00.036 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:54:00.524 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-16 15:54:00.607 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-16 15:50:14.246 00:04:00.506 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-08-16 15:54:30.593 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:52318 10 6452 1 2025-08-16 15:54:14.244 00:01:00.511 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-08-16 15:55:30.998 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37556 10 6452 1 2025-08-16 15:56:31.399 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39982 10 6452 1 2025-08-16 15:57:31.797 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41690 10 6452 1 2025-08-16 15:58:32.200 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:51560 11 6504 1 Summary: total flows: 150, total bytes: 416910, total packets: 1019, avg bps: 889, avg pps: 0, avg bpp: 409 Time window: 2025-08-16 14:56:14 - 2025-08-16 15:58:42 Total flows processed: 150, passed: 150, Blocks skipped: 0, Bytes read: 15664 Sys: 0.0034s User: 0.0017s Wall: 0.0031s flows/second: 47724.0 Runtime: 0.0032s