Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-26 22:59:00.985 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 22:59:00.896 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 22:59:00.796 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 22:59:00.680 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 22:59:00.902 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 22:59:31.841 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:52266 10 6452 1 2025-09-26 23:00:32.269 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51818 10 6452 1 2025-09-26 23:01:32.628 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46734 10 6452 1 2025-09-26 23:02:33.032 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42286 10 6452 1 2025-09-26 22:58:35.440 00:06:00.185 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 23:03:33.437 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48352 10 6452 1 2025-09-26 23:04:00.813 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 23:04:00.815 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 23:04:00.652 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:04:00.886 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:04:00.968 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 22:59:35.438 00:06:00.189 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 23:04:33.797 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44708 10 6452 1 2025-09-26 23:05:34.205 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58356 12 6556 1 2025-09-26 23:06:34.605 00:00:10.467 TCP 1.101.0.1:3000 -> 23.104.0.1:37826 12 10365 1 2025-09-26 23:07:35.108 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47550 10 6452 1 2025-09-26 23:08:35.510 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39128 10 6452 1 2025-09-26 23:09:00.973 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 23:09:01.080 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 23:09:00.754 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:09:00.972 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:09:01.054 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 23:09:35.916 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43504 10 6452 1 2025-09-26 23:05:35.441 00:06:00.184 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 23:10:36.321 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41750 10 6452 1 2025-09-26 23:06:35.440 00:06:00.189 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 23:11:36.726 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:42340 10 6452 1 2025-09-26 23:12:37.132 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57560 10 6452 1 2025-09-26 23:13:37.539 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60276 10 6452 1 2025-09-26 23:14:01.201 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 23:14:00.994 00:00:00.044 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 23:14:00.987 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:14:00.985 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:14:01.067 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 23:14:37.943 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52200 10 6452 1 2025-09-26 23:15:38.358 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35344 10 6452 1 2025-09-26 23:16:38.714 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41066 10 6452 1 2025-09-26 23:12:35.445 00:06:00.184 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 23:17:39.120 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40266 10 6452 1 2025-09-26 23:13:35.441 00:06:00.189 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 23:18:39.524 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36370 10 6452 1 2025-09-26 23:19:01.109 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 23:19:01.098 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:19:01.413 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:19:01.102 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 23:19:01.496 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 23:19:39.924 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:35348 10 6452 1 2025-09-26 23:20:40.348 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:44232 10 6452 1 2025-09-26 23:21:40.704 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:58328 12 10367 1 2025-09-26 23:22:41.181 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50368 10 6452 1 2025-09-26 23:23:41.590 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:35324 10 6452 1 2025-09-26 23:24:01.492 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 23:24:01.523 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 23:24:01.528 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 23:24:01.036 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:24:01.409 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:19:35.446 00:06:00.186 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 23:24:41.977 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41540 10 6452 1 2025-09-26 23:20:35.442 00:06:00.191 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 23:25:42.382 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33500 10 6452 1 2025-09-26 23:26:42.801 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:52874 10 6452 1 2025-09-26 23:27:43.177 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49882 10 6452 1 2025-09-26 23:28:43.582 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38230 10 6452 1 2025-09-26 23:29:01.469 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 23:29:01.331 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 23:29:01.488 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:29:01.468 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:29:01.552 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 23:29:43.985 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53212 10 6452 1 2025-09-26 23:30:44.393 00:00:10.815 TCP 1.101.0.1:3000 -> 23.104.0.1:46078 10 6452 1 2025-09-26 23:26:35.446 00:06:00.185 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 23:31:45.248 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60784 10 6452 1 2025-09-26 23:27:35.443 00:06:00.190 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 23:32:45.652 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49100 10 6452 1 2025-09-26 23:33:46.064 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54282 10 6452 1 2025-09-26 23:34:01.579 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 23:34:01.459 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 23:34:01.397 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:34:01.302 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:34:01.385 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 23:34:46.472 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43382 10 6452 1 2025-09-26 23:35:46.875 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51788 10 6452 1 2025-09-26 23:36:47.283 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35524 10 6452 1 2025-09-26 23:37:47.685 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55610 10 6452 1 2025-09-26 23:33:35.447 00:06:00.186 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 23:38:48.112 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32960 10 6452 1 2025-09-26 23:39:01.681 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 23:39:01.598 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:39:01.831 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 23:39:01.788 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 23:39:01.402 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:34:35.445 00:06:00.191 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 23:39:48.506 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40388 10 6452 1 2025-09-26 23:40:48.906 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55910 10 6452 1 2025-09-26 23:41:49.272 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39924 10 6452 1 2025-09-26 23:42:49.680 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45356 10 6452 1 2025-09-26 23:44:01.659 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 23:44:01.730 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 23:44:01.519 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:43:50.105 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47248 10 6452 1 2025-09-26 23:44:01.783 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:44:01.866 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 23:44:50.508 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54474 10 6452 1 2025-09-26 23:40:35.449 00:06:00.187 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 23:45:50.913 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:48900 10 6452 1 2025-09-26 23:41:35.447 00:06:00.192 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 23:46:51.316 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47896 10 6452 1 2025-09-26 23:47:51.717 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39434 10 6452 1 2025-09-26 23:48:52.136 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:48088 10 6452 1 2025-09-26 23:49:01.626 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 23:49:01.748 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 23:49:01.773 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:49:01.732 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:49:01.814 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 23:49:52.505 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38240 10 6452 1 2025-09-26 23:50:52.906 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49126 12 6556 1 2025-09-26 23:51:53.309 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33894 10 6452 1 2025-09-26 23:47:35.453 00:06:00.185 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-26 23:52:53.721 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:35596 10 6452 1 2025-09-26 23:48:35.450 00:06:00.190 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-26 23:54:01.990 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-26 23:54:01.909 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-26 23:54:01.689 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-26 23:54:01.736 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:53:54.143 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36666 10 6452 1 2025-09-26 23:54:01.908 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-26 23:54:54.549 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38266 10 6452 1 2025-09-26 23:55:54.909 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58016 12 6556 1 2025-09-26 23:56:55.314 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48574 10 6452 1 2025-09-26 23:57:55.723 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57500 10 6452 1 Summary: total flows: 135, total bytes: 417704, total packets: 1004, avg bps: 935, avg pps: 0, avg bpp: 416 Time window: 2025-09-26 22:58:35 - 2025-09-26 23:58:06 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0048s User: 0.0000s Wall: 0.0030s flows/second: 45255.0 Runtime: 0.0030s