Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 15:59:38.925 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 15:59:39.035 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 15:59:38.847 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 15:59:38.484 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:59:38.841 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 15:59:35.146 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33302 10 6452 1 2025-10-08 16:00:35.555 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35802 10 6452 1 2025-10-08 16:01:35.966 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49102 10 6452 1 2025-10-08 15:57:41.241 00:06:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 16:02:36.381 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:36506 10 6452 1 2025-10-08 16:03:36.744 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51014 10 6452 1 2025-10-08 16:04:39.222 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:04:39.224 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 16:04:39.312 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 16:04:39.165 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:04:39.305 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 16:04:37.109 00:00:10.455 TCP 1.101.0.1:3000 -> 23.104.0.1:40622 12 10369 1 2025-10-08 16:00:41.246 00:06:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 16:05:37.607 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53760 10 6452 1 2025-10-08 16:06:38.014 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57220 10 6452 1 2025-10-08 16:07:38.426 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45106 10 6452 1 2025-10-08 16:08:38.791 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45214 10 6452 1 2025-10-08 16:09:39.051 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 16:09:39.052 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 16:09:39.165 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:09:39.059 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:09:39.142 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 16:04:41.245 00:06:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 16:09:39.195 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44764 10 6452 1 2025-10-08 16:10:39.596 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:57992 10 6452 1 2025-10-08 16:11:40.020 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:50248 10 6452 1 2025-10-08 16:07:41.247 00:06:00.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 16:12:40.421 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57760 10 6452 1 2025-10-08 16:13:40.828 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56382 10 6452 1 2025-10-08 16:14:39.427 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 16:14:39.259 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 16:14:39.263 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 16:14:39.250 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:14:39.344 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:14:41.234 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51278 10 6452 1 2025-10-08 16:15:41.633 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49822 10 6452 1 2025-10-08 16:11:41.246 00:06:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 16:16:42.039 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39750 10 6452 1 2025-10-08 16:17:42.408 00:00:11.058 TCP 1.101.0.1:3000 -> 23.104.0.1:41736 10 6452 1 2025-10-08 16:18:43.516 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33608 10 6452 1 2025-10-08 16:19:39.377 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 16:19:39.314 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 16:19:39.434 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:19:39.464 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:19:39.548 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 16:14:41.250 00:06:00.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 16:19:43.918 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50208 10 6452 1 2025-10-08 16:20:44.319 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38790 10 6452 1 2025-10-08 16:21:44.720 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36976 10 6452 1 2025-10-08 16:22:45.131 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40454 10 6452 1 2025-10-08 16:18:41.248 00:06:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 16:23:45.527 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38226 10 6452 1 2025-10-08 16:24:39.443 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 16:24:39.534 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 16:24:39.316 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:24:39.490 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:24:39.572 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 16:24:45.923 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56296 10 6452 1 2025-10-08 16:25:46.318 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46282 10 6452 1 2025-10-08 16:21:41.251 00:06:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 16:26:46.724 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45656 10 6452 1 2025-10-08 16:27:47.140 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60476 10 6452 1 2025-10-08 16:28:47.548 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43256 10 6452 1 2025-10-08 16:29:39.602 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 16:29:39.501 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 16:29:39.471 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:29:39.430 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:29:39.514 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 16:29:47.950 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57182 10 6452 1 2025-10-08 16:25:41.249 00:06:00.349 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 16:30:48.312 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55002 10 6452 1 2025-10-08 16:31:48.676 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:35924 10 6452 1 2025-10-08 16:32:49.080 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33802 10 6452 1 2025-10-08 16:28:41.253 00:06:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 16:33:49.441 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48134 10 6452 1 2025-10-08 16:34:39.785 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 16:34:39.765 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 16:34:39.610 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 16:34:39.687 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:34:39.702 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:34:49.846 00:00:10.420 TCP 1.101.0.1:3000 -> 23.104.0.1:51780 12 10369 1 2025-10-08 16:35:50.306 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35618 10 6452 1 2025-10-08 16:36:50.717 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57530 10 6452 1 2025-10-08 16:32:41.253 00:06:00.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 16:37:51.104 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53382 10 6452 1 2025-10-08 16:38:51.517 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33154 10 6452 1 2025-10-08 16:39:39.770 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 16:39:39.717 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:39:39.694 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:39:39.819 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 16:39:39.777 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 16:39:51.923 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:37588 10 6452 1 2025-10-08 16:35:41.256 00:06:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 16:40:52.337 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35144 10 6452 1 2025-10-08 16:41:52.734 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:47564 10 6452 1 2025-10-08 16:42:53.148 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39102 10 6452 1 2025-10-08 16:43:53.551 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37214 10 6452 1 2025-10-08 16:44:39.953 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 16:44:39.871 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:44:39.859 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:44:39.859 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 16:44:39.943 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 16:39:41.254 00:06:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 16:44:53.956 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44130 10 6452 1 2025-10-08 16:45:54.366 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46158 10 6452 1 2025-10-08 16:46:54.774 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56304 10 6452 1 2025-10-08 16:42:41.257 00:06:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 16:47:55.185 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40880 10 6452 1 2025-10-08 16:48:55.603 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:38932 10 6452 1 2025-10-08 16:49:39.946 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 16:49:39.783 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:49:39.945 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:49:40.152 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 16:49:40.028 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 16:49:55.965 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:51378 10 6452 1 2025-10-08 16:50:56.346 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45182 10 6452 1 2025-10-08 16:46:41.257 00:06:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-08 16:51:56.753 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56288 10 6452 1 2025-10-08 16:52:57.151 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33948 12 6556 1 2025-10-08 16:53:57.554 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46832 10 6452 1 2025-10-08 16:54:40.263 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 16:49:41.265 00:06:00.338 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-08 16:54:40.261 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 16:54:40.331 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:54:40.191 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 16:54:40.273 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 16:54:57.963 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:44806 10 6452 1 2025-10-08 16:55:58.388 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38908 10 6452 1 2025-10-08 16:56:58.786 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:52716 10 6452 1 2025-10-08 16:57:59.157 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44166 10 6452 1 2025-10-08 16:53:41.259 00:06:00.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 136, total bytes: 418363, total packets: 1014, avg bps: 899, avg pps: 0, avg bpp: 412 Time window: 2025-10-08 15:57:41 - 2025-10-08 16:59:41 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0058s User: 0.0000s Wall: 0.0019s flows/second: 71878.2 Runtime: 0.0019s