Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 06:59:06.280 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:59:06.089 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:59:06.004 00:00:00.036 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:59:06.111 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:59:06.198 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:59:01.725 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38950 10 6452 1 2025-10-28 07:00:02.136 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58734 10 6452 1 2025-10-28 06:55:51.276 00:06:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 07:01:02.540 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49692 10 6452 1 2025-10-28 07:02:02.942 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:41948 10 6452 1 2025-10-28 07:03:03.312 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38258 10 6452 1 2025-10-28 06:58:51.274 00:06:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 07:04:06.446 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 07:04:06.447 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 07:04:05.889 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:04:06.444 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:04:06.528 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 07:04:03.714 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:47084 10 6452 1 2025-10-28 07:05:04.134 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57412 10 6452 1 2025-10-28 07:06:04.537 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41578 10 6452 1 2025-10-28 07:07:04.937 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:58434 10 6452 1 2025-10-28 07:02:51.278 00:06:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 07:08:05.313 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39918 10 6452 1 2025-10-28 07:09:06.289 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 07:09:06.294 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 07:09:06.235 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:09:06.288 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:09:06.371 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 07:09:05.732 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42602 10 6452 1 2025-10-28 07:10:06.142 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:36636 10 6452 1 2025-10-28 07:05:51.275 00:06:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 07:11:06.557 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53884 10 6452 1 2025-10-28 07:12:06.962 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39174 10 6452 1 2025-10-28 07:13:07.370 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56108 10 6452 1 2025-10-28 07:14:06.528 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 07:14:06.361 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 07:14:06.410 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:14:06.528 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:14:06.611 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 07:14:07.771 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:39292 10 6452 1 2025-10-28 07:09:51.279 00:06:00.320 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 07:15:08.144 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48320 10 6452 1 2025-10-28 07:16:08.548 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:37664 10 6452 1 2025-10-28 07:17:08.911 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42494 10 6452 1 2025-10-28 07:12:51.286 00:06:00.317 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 07:18:09.319 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44064 10 6452 1 2025-10-28 07:19:06.488 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 07:19:06.251 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:19:06.334 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:19:06.468 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 07:19:06.417 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 07:19:09.719 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60832 10 6452 1 2025-10-28 07:20:10.146 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43238 10 6452 1 2025-10-28 07:21:10.547 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51180 10 6452 1 2025-10-28 07:16:51.291 00:06:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 07:22:10.958 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:42274 12 10369 1 2025-10-28 07:23:11.443 00:00:11.142 TCP 1.101.0.1:3000 -> 23.104.0.1:34868 10 6452 1 2025-10-28 07:24:06.621 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 07:24:06.683 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 07:24:06.658 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:24:06.681 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:24:06.764 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 07:24:12.627 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51628 10 6452 1 2025-10-28 07:19:51.288 00:06:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 07:25:13.032 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47478 10 6452 1 2025-10-28 07:26:13.434 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46134 10 6452 1 2025-10-28 07:27:13.839 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:44734 12 10375 1 2025-10-28 07:28:14.298 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51508 10 6452 1 2025-10-28 07:23:51.291 00:06:00.313 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 07:29:06.847 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:29:06.636 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 07:29:06.423 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 07:29:06.767 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:29:06.930 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 07:29:14.706 00:00:10.744 TCP 1.101.0.1:3000 -> 23.104.0.1:46990 10 6452 1 2025-10-28 07:30:15.489 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43354 10 6452 1 2025-10-28 07:31:15.852 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:45934 10 6452 1 2025-10-28 07:26:51.291 00:06:00.317 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 07:32:16.281 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42808 10 6452 1 2025-10-28 07:33:16.683 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53002 10 6452 1 2025-10-28 07:34:07.016 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 07:34:06.765 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 07:34:06.857 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 07:34:06.766 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:34:06.929 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:34:17.105 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41168 10 6452 1 2025-10-28 07:35:17.511 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54230 10 6452 1 2025-10-28 07:30:51.294 00:06:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 07:36:17.917 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57772 10 6452 1 2025-10-28 07:37:18.328 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36328 10 6452 1 2025-10-28 07:38:18.734 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41884 10 6452 1 2025-10-28 07:33:51.292 00:06:00.317 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 07:39:06.927 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 07:39:06.680 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 07:39:06.675 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 07:39:06.504 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:39:06.846 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:39:19.145 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39482 10 6452 1 2025-10-28 07:40:19.523 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45396 10 6452 1 2025-10-28 07:41:19.929 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:49002 10 6452 1 2025-10-28 07:42:20.355 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43212 10 6452 1 2025-10-28 07:37:51.295 00:06:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 07:43:20.754 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:47246 10 6452 1 2025-10-28 07:44:06.967 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 07:44:07.054 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 07:44:06.855 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:44:06.961 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:44:07.044 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 07:44:21.184 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37986 10 6452 1 2025-10-28 07:45:21.592 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48040 10 6452 1 2025-10-28 07:40:51.294 00:06:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 07:46:21.988 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57338 10 6452 1 2025-10-28 07:47:22.397 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42540 10 6452 1 2025-10-28 07:48:22.798 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:36386 10 6452 1 2025-10-28 07:49:07.411 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 07:49:07.218 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 07:49:07.040 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:49:07.320 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:49:07.403 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 07:49:23.216 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:45922 10 6452 1 2025-10-28 07:44:51.297 00:06:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 07:50:23.612 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35362 10 6452 1 2025-10-28 07:51:23.979 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34474 10 6452 1 2025-10-28 07:52:24.391 00:00:10.663 TCP 1.101.0.1:3000 -> 23.104.0.1:44998 10 6452 1 2025-10-28 07:47:51.294 00:06:00.320 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 07:53:25.109 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58342 10 6452 1 2025-10-28 07:54:07.187 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:54:07.065 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:54:07.137 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 07:54:07.008 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 07:54:07.148 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 07:54:25.467 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52396 10 6452 1 2025-10-28 07:55:25.869 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45068 10 6452 1 2025-10-28 07:56:26.279 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35648 10 6452 1 2025-10-28 07:51:51.298 00:06:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 07:57:26.680 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:38248 10 6452 1 2025-10-28 07:58:27.108 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44966 10 6452 1 Summary: total flows: 137, total bytes: 424717, total packets: 1022, avg bps: 902, avg pps: 0, avg bpp: 415 Time window: 2025-10-28 06:55:51 - 2025-10-28 07:58:37 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0051s User: 0.0010s Wall: 0.0027s flows/second: 51604.8 Runtime: 0.0027s