Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 03:53:51.234 00:06:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 03:59:02.452 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 03:59:02.374 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 03:59:02.282 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 03:59:02.382 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 03:59:02.465 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 03:59:37.106 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60816 10 6452 1 2025-10-28 04:00:37.512 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42692 10 6452 1 2025-10-28 04:01:37.915 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55404 10 6452 1 2025-10-28 03:56:51.231 00:06:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 04:02:38.323 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40192 10 6452 1 2025-10-28 04:03:38.729 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51306 10 6452 1 2025-10-28 04:04:02.561 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 04:04:02.480 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:04:02.479 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 04:04:02.646 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 04:04:02.351 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:04:39.132 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47710 10 6452 1 2025-10-28 04:05:39.532 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42954 10 6452 1 2025-10-28 04:00:51.235 00:06:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 04:06:39.935 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50704 10 6452 1 2025-10-28 04:07:40.353 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:32950 10 6452 1 2025-10-28 04:03:51.233 00:06:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 04:08:40.725 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:46260 10 6452 1 2025-10-28 04:09:02.567 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 04:09:02.668 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 04:09:02.578 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 04:09:02.592 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:09:02.484 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:09:41.113 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39454 10 6452 1 2025-10-28 04:10:41.519 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34988 10 6452 1 2025-10-28 04:11:41.921 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50580 10 6452 1 2025-10-28 04:12:42.325 00:00:10.518 TCP 1.101.0.1:3000 -> 23.104.0.1:46062 10 6452 1 2025-10-28 04:07:51.238 00:06:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 04:13:42.881 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58298 10 6452 1 2025-10-28 04:14:02.725 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 04:14:02.807 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 04:14:02.777 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:14:02.871 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:14:02.954 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 04:14:43.285 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:34148 10 6452 1 2025-10-28 04:15:43.655 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57776 10 6452 1 2025-10-28 04:10:51.235 00:06:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 04:16:44.065 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59988 10 6452 1 2025-10-28 04:17:44.467 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44688 10 6452 1 2025-10-28 04:18:44.868 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:35416 10 6452 1 2025-10-28 04:19:02.914 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 04:19:02.985 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 04:19:02.736 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:19:03.094 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:19:03.179 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 04:14:51.237 00:06:00.304 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 04:19:45.233 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43140 10 6452 1 2025-10-28 04:20:45.638 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:39744 10 6452 1 2025-10-28 04:21:46.002 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:47926 10 6452 1 2025-10-28 04:17:51.235 00:06:00.311 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 04:22:46.371 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42858 10 6452 1 2025-10-28 04:23:46.777 00:00:11.079 TCP 1.101.0.1:3000 -> 23.104.0.1:47712 10 6452 1 2025-10-28 04:24:02.863 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 04:24:02.969 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 04:24:02.863 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:24:02.780 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:24:02.968 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 04:24:47.899 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40058 10 6452 1 2025-10-28 04:25:48.310 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46940 10 6452 1 2025-10-28 04:21:51.239 00:06:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 04:26:48.712 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:55526 12 10375 1 2025-10-28 04:27:49.154 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35066 10 6452 1 2025-10-28 04:28:49.558 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34884 10 6452 1 2025-10-28 04:29:03.222 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:29:03.270 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:29:03.273 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 04:29:03.212 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 04:29:03.354 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 04:24:51.238 00:06:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 04:29:49.921 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:37104 10 6452 1 2025-10-28 04:30:50.343 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50444 10 6452 1 2025-10-28 04:31:50.763 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48670 10 6452 1 2025-10-28 04:32:51.174 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47302 10 6452 1 2025-10-28 04:28:51.243 00:06:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 04:34:03.239 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 04:34:03.158 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:33:51.573 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40600 10 6452 1 2025-10-28 04:34:03.162 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 04:34:03.159 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 04:34:03.189 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:34:51.933 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:49186 10 6452 1 2025-10-28 04:35:52.357 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47352 10 6452 1 2025-10-28 04:31:51.241 00:06:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 04:36:52.762 00:00:10.427 TCP 1.101.0.1:3000 -> 23.104.0.1:57378 11 6504 1 2025-10-28 04:37:53.235 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41058 10 6452 1 2025-10-28 04:39:03.394 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 04:39:03.250 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 04:39:03.427 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 04:39:03.092 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:39:03.312 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:38:53.638 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48994 10 6452 1 2025-10-28 04:39:54.039 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:60176 10 6452 1 2025-10-28 04:35:51.243 00:06:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 04:40:54.399 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48608 10 6452 1 2025-10-28 04:41:54.802 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37978 10 6452 1 2025-10-28 04:42:55.219 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40192 10 6452 1 2025-10-28 04:38:51.240 00:06:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 04:44:03.293 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 04:44:03.218 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 04:44:03.326 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 04:44:03.348 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:44:03.209 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:43:55.613 00:00:10.637 TCP 1.101.0.1:3000 -> 23.104.0.1:43198 10 6452 1 2025-10-28 04:44:56.286 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58700 10 6452 1 2025-10-28 04:45:56.652 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37582 10 6452 1 2025-10-28 04:46:57.065 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57798 10 6452 1 2025-10-28 04:42:51.243 00:06:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 04:47:57.427 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38216 10 6452 1 2025-10-28 04:49:03.434 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 04:49:03.439 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 04:49:03.329 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:49:03.440 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:49:03.523 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 04:48:57.836 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:53718 10 6452 1 2025-10-28 04:49:58.260 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46220 10 6452 1 2025-10-28 04:45:51.241 00:06:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 04:50:58.685 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:54414 10 6452 1 2025-10-28 04:51:59.056 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58896 10 6452 1 2025-10-28 04:52:59.453 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36316 10 6452 1 2025-10-28 04:54:03.672 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 04:54:03.497 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 04:54:03.446 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:54:03.410 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:54:03.492 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 04:53:59.864 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40450 10 6452 1 2025-10-28 04:49:51.244 00:06:00.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 04:55:00.279 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55520 10 6452 1 2025-10-28 04:56:00.681 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42962 10 6452 1 2025-10-28 04:57:01.106 00:00:10.558 TCP 1.101.0.1:3000 -> 23.104.0.1:44946 10 6452 1 2025-10-28 04:52:51.244 00:06:00.311 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 04:58:01.703 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56028 10 6452 1 Summary: total flows: 137, total bytes: 415261, total packets: 1025, avg bps: 851, avg pps: 0, avg bpp: 405 Time window: 2025-10-28 03:53:51 - 2025-10-28 04:58:51 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0020s User: 0.0030s Wall: 0.0026s flows/second: 52333.3 Runtime: 0.0026s