Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 21:59:11.390 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 21:59:11.185 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 21:59:11.044 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 21:59:10.845 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 21:59:11.309 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 21:59:06.989 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57094 10 6452 1 2025-09-16 22:00:07.354 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37416 10 6452 1 2025-09-16 21:55:30.654 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-16 22:01:07.717 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54860 10 6452 1 2025-09-16 22:02:08.132 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37090 10 6452 1 2025-09-16 22:03:08.549 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47826 10 6452 1 2025-09-16 22:04:10.907 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 22:04:11.068 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 22:04:10.747 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:04:11.120 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:04:11.203 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 22:04:08.905 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:35304 10 6452 1 2025-09-16 21:59:30.651 00:06:00.008 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 22:05:09.275 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:38416 12 10367 1 2025-09-16 22:06:09.765 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:55646 10 6452 1 2025-09-16 22:07:10.141 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34108 10 6452 1 2025-09-16 22:02:30.656 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-16 22:08:10.548 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39238 10 6452 1 2025-09-16 22:09:11.673 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 22:09:11.329 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 22:09:11.148 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:09:11.481 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:09:11.563 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 22:09:10.973 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44682 10 6452 1 2025-09-16 22:10:11.379 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43278 10 6452 1 2025-09-16 22:11:11.751 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:35048 10 6452 1 2025-09-16 22:06:30.654 00:06:00.008 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 22:12:12.165 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43880 10 6452 1 2025-09-16 22:13:12.567 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:33334 10 6452 1 2025-09-16 22:14:11.133 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:14:10.890 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 22:14:11.191 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 22:14:10.834 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:14:11.217 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 22:14:12.959 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50404 10 6452 1 2025-09-16 22:09:30.659 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-16 22:15:13.325 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:34762 10 6452 1 2025-09-16 22:16:13.751 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51684 10 6452 1 2025-09-16 22:17:14.152 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34750 10 6452 1 2025-09-16 22:18:14.561 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55834 10 6452 1 2025-09-16 22:13:30.656 00:06:00.007 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 22:19:11.263 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 22:19:11.312 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 22:19:11.229 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 22:19:11.125 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:19:11.180 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:19:14.968 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37636 10 6452 1 2025-09-16 22:20:15.334 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46424 10 6452 1 2025-09-16 22:21:15.690 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36980 10 6452 1 2025-09-16 22:16:30.660 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 11 705 1 2025-09-16 22:22:16.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53328 10 6452 1 2025-09-16 22:23:16.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55700 10 6452 1 2025-09-16 22:24:11.403 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:24:11.496 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 22:24:11.071 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 22:24:11.416 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:24:11.485 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 22:24:16.917 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34846 10 6452 1 2025-09-16 22:25:17.320 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50324 10 6452 1 2025-09-16 22:20:30.659 00:06:00.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 22:26:17.730 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47998 10 6452 1 2025-09-16 22:27:18.129 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55358 10 6452 1 2025-09-16 22:28:18.487 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48598 10 6452 1 2025-09-16 22:23:30.661 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 757 1 2025-09-16 22:29:11.608 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 22:29:11.559 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:29:11.526 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:29:11.795 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 22:29:11.864 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 22:29:18.888 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56088 12 6556 1 2025-09-16 22:30:19.306 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37802 10 6452 1 2025-09-16 22:31:19.667 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39376 10 6452 1 2025-09-16 22:27:30.660 00:06:00.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 22:32:20.097 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40920 10 6452 1 2025-09-16 22:33:20.503 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40430 10 6452 1 2025-09-16 22:34:11.520 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 22:34:11.549 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 22:34:11.559 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 22:34:11.602 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:34:11.437 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:34:20.912 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52664 10 6452 1 2025-09-16 22:35:21.314 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49774 10 6452 1 2025-09-16 22:30:30.664 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-16 22:36:21.672 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:45970 10 6452 1 2025-09-16 22:37:22.090 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54048 10 6452 1 2025-09-16 22:38:22.493 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40008 10 6452 1 2025-09-16 22:39:11.565 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 22:39:11.585 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 22:39:11.585 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 22:39:11.762 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:39:11.483 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:34:30.663 00:06:00.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 22:39:22.894 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:56740 10 6452 1 2025-09-16 22:40:23.273 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:54242 10 6452 1 2025-09-16 22:41:23.702 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56626 10 6452 1 2025-09-16 22:42:24.107 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56706 10 6452 1 2025-09-16 22:37:30.666 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 757 1 2025-09-16 22:43:24.528 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50650 10 6452 1 2025-09-16 22:44:11.769 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 22:44:11.833 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 22:44:11.609 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:44:11.839 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:44:11.921 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 22:44:24.929 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:48034 10 6452 1 2025-09-16 22:45:25.353 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:47720 10 6452 1 2025-09-16 22:41:30.664 00:06:00.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 22:46:25.713 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39576 10 6452 1 2025-09-16 22:47:26.117 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36088 10 6452 1 2025-09-16 22:48:26.522 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55860 10 6452 1 2025-09-16 22:49:11.703 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 22:49:11.779 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 22:49:11.813 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:49:11.786 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:49:11.868 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 22:44:30.668 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 13 809 1 2025-09-16 22:49:26.885 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:56600 10 6452 1 2025-09-16 22:50:27.325 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55698 10 6452 1 2025-09-16 22:51:27.728 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40892 10 6452 1 2025-09-16 22:52:28.115 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57960 10 6452 1 2025-09-16 22:48:30.665 00:06:00.006 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-16 22:53:28.475 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38290 10 6452 1 2025-09-16 22:54:12.356 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-16 22:54:12.331 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-16 22:54:12.278 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-16 22:54:11.868 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:54:12.275 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-16 22:54:28.879 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40518 10 6452 1 2025-09-16 22:55:29.242 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41428 10 6452 1 2025-09-16 22:51:30.669 00:06:00.003 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 757 1 2025-09-16 22:56:29.645 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57028 10 6452 1 2025-09-16 22:57:30.061 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40648 10 6452 1 2025-09-16 22:58:30.475 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50628 10 6452 1 Summary: total flows: 137, total bytes: 419284, total packets: 991, avg bps: 884, avg pps: 0, avg bpp: 423 Time window: 2025-09-16 21:55:30 - 2025-09-16 22:58:40 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0033s User: 0.0016s Wall: 0.0016s flows/second: 86604.3 Runtime: 0.0016s