Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 11:59:27.777 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 11:59:27.833 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 11:59:27.831 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 11:59:27.677 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 11:59:27.860 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 11:59:25.274 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48666 10 6452 1 2025-09-17 11:55:30.930 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 12:00:25.687 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41346 10 6452 1 2025-09-17 12:01:26.107 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:55546 10 6452 1 2025-09-17 12:02:26.470 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57334 10 6452 1 2025-09-17 12:03:26.873 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49738 10 6452 1 2025-09-17 12:04:27.780 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 12:04:27.677 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 12:04:27.920 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:04:27.888 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:04:27.972 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 11:59:30.903 00:06:00.034 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 12:04:27.279 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:37118 10 6452 1 2025-09-17 12:05:27.644 00:00:10.801 TCP 1.101.0.1:3000 -> 23.104.0.1:33844 10 6452 1 2025-09-17 12:06:28.489 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33330 10 6452 1 2025-09-17 12:02:30.933 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 12:07:28.884 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:49748 12 6556 1 2025-09-17 12:08:29.307 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37604 10 6452 1 2025-09-17 12:09:27.976 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 12:09:28.070 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 12:09:27.977 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 12:09:27.626 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:09:27.894 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:09:29.714 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:35296 10 6452 1 2025-09-17 12:10:30.112 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33452 10 6452 1 2025-09-17 12:06:30.903 00:06:00.034 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 12:11:30.519 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39060 10 6452 1 2025-09-17 12:12:30.918 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54006 10 6452 1 2025-09-17 12:13:31.319 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36080 10 6452 1 2025-09-17 12:14:28.137 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 12:14:27.842 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 12:14:28.041 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 12:14:27.727 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:14:28.053 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:09:30.935 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 12:14:31.722 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:52076 10 6452 1 2025-09-17 12:15:32.102 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37698 10 6452 1 2025-09-17 12:16:32.503 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35832 10 6452 1 2025-09-17 12:17:32.915 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48740 10 6452 1 2025-09-17 12:13:30.906 00:06:00.034 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 12:18:33.324 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58326 10 6452 1 2025-09-17 12:19:28.198 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 12:19:28.244 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 12:19:28.125 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 12:19:28.003 00:00:00.034 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:19:28.114 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:19:33.725 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33030 10 6452 1 2025-09-17 12:20:34.131 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54484 10 6452 1 2025-09-17 12:16:30.936 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 12:21:34.529 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:53082 10 6452 1 2025-09-17 12:22:34.896 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47602 12 6556 1 2025-09-17 12:23:35.310 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40358 10 6452 1 2025-09-17 12:24:28.813 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 12:24:28.673 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 12:24:28.583 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 12:24:28.651 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:24:28.731 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:24:35.711 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:54946 10 6452 1 2025-09-17 12:20:30.907 00:06:00.035 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 12:25:36.101 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34076 10 6452 1 2025-09-17 12:26:36.504 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38432 10 6452 1 2025-09-17 12:27:36.905 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32920 10 6452 1 2025-09-17 12:23:30.938 00:06:00.002 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 12:28:37.311 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48744 10 6452 1 2025-09-17 12:29:28.247 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 12:29:28.146 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 12:29:28.081 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:29:28.241 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:29:28.324 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 12:29:37.716 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53982 10 6452 1 2025-09-17 12:30:38.128 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36384 10 6452 1 2025-09-17 12:31:38.506 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43892 10 6452 1 2025-09-17 12:27:30.910 00:06:00.033 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 12:32:38.914 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42076 10 6452 1 2025-09-17 12:33:39.328 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40156 10 6452 1 2025-09-17 12:34:28.375 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 12:34:28.624 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 12:34:28.321 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:34:28.261 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:34:28.344 00:00:00.051 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 12:34:39.733 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34566 10 6452 1 2025-09-17 12:30:30.941 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 12:35:40.142 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53878 10 6452 1 2025-09-17 12:36:40.545 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42864 10 6452 1 2025-09-17 12:37:40.951 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:33074 10 6452 1 2025-09-17 12:38:41.362 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43184 10 6452 1 2025-09-17 12:39:28.295 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 12:39:28.506 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 12:39:28.454 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:39:28.517 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:39:28.600 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 12:34:30.912 00:06:00.034 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 12:39:41.733 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37342 10 6452 1 2025-09-17 12:40:42.110 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55694 10 6452 1 2025-09-17 12:41:42.509 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56320 10 6452 1 2025-09-17 12:37:30.942 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 12:42:42.908 00:00:18.677 TCP 1.101.0.1:3000 -> 23.104.0.1:49710 10 6452 1 2025-09-17 12:43:51.631 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54676 10 6452 1 2025-09-17 12:44:28.599 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 12:44:28.598 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 12:44:28.481 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:44:28.550 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:44:28.632 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 12:44:52.039 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52868 10 6452 1 2025-09-17 12:45:52.441 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56640 10 6452 1 2025-09-17 12:41:30.914 00:06:00.033 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 12:46:52.843 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:56774 10 6452 1 2025-09-17 12:47:53.230 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:35778 10 6452 1 2025-09-17 12:48:53.654 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39788 10 6452 1 2025-09-17 12:49:28.637 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:49:28.634 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 12:49:28.547 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 12:49:28.569 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:49:28.718 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 12:44:30.944 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 12:49:54.062 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46396 10 6452 1 2025-09-17 12:50:54.471 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48266 10 6452 1 2025-09-17 12:51:54.835 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60060 10 6452 1 2025-09-17 12:52:55.202 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:35532 10 6452 1 2025-09-17 12:48:30.916 00:06:00.032 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-17 12:53:55.615 00:00:10.496 TCP 1.101.0.1:3000 -> 23.104.0.1:37184 10 6452 1 2025-09-17 12:54:28.762 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-17 12:54:28.824 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-17 12:54:28.687 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:54:28.880 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-17 12:54:28.964 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-17 12:54:56.152 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39206 10 6452 1 2025-09-17 12:55:56.558 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43434 10 6452 1 2025-09-17 12:51:30.945 00:06:00.001 TCP 179.21.23.21:38570 -> 179.21.23.23:179 7 497 1 2025-09-17 12:56:56.968 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56354 10 6452 1 2025-09-17 12:57:57.378 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58320 10 6452 1 Summary: total flows: 136, total bytes: 407357, total packets: 949, avg bps: 867, avg pps: 0, avg bpp: 429 Time window: 2025-09-17 11:55:30 - 2025-09-17 12:58:07 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0029s User: 0.0019s Wall: 0.0020s flows/second: 68200.1 Runtime: 0.0020s