Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-06 03:58:53.267 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 03:58:53.106 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 03:58:53.131 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 03:58:53.185 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 03:58:53.197 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 03:58:52.184 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45120 11 6492 1 2025-09-06 03:57:25.335 00:02:00.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-06 03:59:52.580 00:00:10.564 TCP 1.101.0.1:3000 -> 23.104.0.1:56036 10 6452 1 2025-09-06 03:56:25.333 00:04:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-06 04:00:53.191 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38882 10 6452 1 2025-09-06 04:00:25.337 00:01:00.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-06 04:01:53.571 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53170 10 6452 1 2025-09-06 04:01:25.334 00:01:00.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-06 04:02:53.977 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38536 10 6452 1 2025-09-06 04:03:53.128 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 04:03:53.168 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:03:53.300 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:03:53.200 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 04:03:53.387 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 04:03:54.393 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58294 10 6452 1 2025-09-06 04:02:25.337 00:02:00.129 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-06 04:04:54.812 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36442 10 6452 1 2025-09-06 04:03:25.336 00:02:00.135 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-06 04:05:55.221 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59428 10 6452 1 2025-09-06 04:05:25.336 00:01:00.130 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-06 04:06:55.624 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51646 10 6452 1 2025-09-06 04:06:25.334 00:01:00.135 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-06 04:07:56.026 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49384 10 6452 1 2025-09-06 04:08:53.242 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 04:08:53.276 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:08:53.300 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:08:52.948 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 04:08:53.382 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 04:08:56.429 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49534 10 6452 1 2025-09-06 04:09:56.827 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60570 10 6452 1 2025-09-06 04:08:25.335 00:02:00.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-06 04:10:57.231 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37708 10 6452 1 2025-09-06 04:07:25.338 00:04:00.129 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-06 04:11:57.631 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47478 10 6452 1 2025-09-06 04:11:25.337 00:01:00.133 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-06 04:12:58.032 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41028 10 6452 1 2025-09-06 04:13:53.463 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 04:13:53.224 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:13:53.350 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:13:53.498 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 04:13:53.433 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 04:13:58.435 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33854 10 6452 1 2025-09-06 04:14:58.835 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:33720 10 6452 1 2025-09-06 04:13:25.337 00:02:00.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-06 04:15:59.260 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41082 10 6452 1 2025-09-06 04:12:25.340 00:04:00.129 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-06 04:16:59.662 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46728 10 6452 1 2025-09-06 04:16:25.338 00:01:00.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-06 04:18:00.088 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37318 10 6452 1 2025-09-06 04:17:25.340 00:01:00.129 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-06 04:18:53.629 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 04:18:53.412 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 04:18:53.458 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:18:53.546 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:18:53.412 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 04:19:00.452 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53198 10 6452 1 2025-09-06 04:20:00.847 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:60654 10 6452 1 2025-09-06 04:18:25.338 00:02:00.135 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-06 04:21:01.230 00:00:10.870 TCP 1.101.0.1:3000 -> 23.104.0.1:45300 10 6452 1 2025-09-06 04:19:25.340 00:02:00.130 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-06 04:22:02.140 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57194 10 6452 1 2025-09-06 04:21:25.339 00:01:00.135 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-06 04:23:02.538 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33922 10 6452 1 2025-09-06 04:22:25.341 00:01:00.130 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-06 04:23:53.832 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 04:23:53.869 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:23:53.849 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:23:53.953 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 04:23:53.932 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 04:24:02.951 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60380 10 6452 1 2025-09-06 04:25:03.358 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:48670 11 6504 1 2025-09-06 04:26:03.813 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44278 10 6452 1 2025-09-06 04:24:25.341 00:02:00.133 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-06 04:27:04.218 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34474 10 6452 1 2025-09-06 04:23:25.339 00:04:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-06 04:28:04.622 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46328 10 6452 1 2025-09-06 04:27:25.343 00:01:00.131 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-06 04:28:53.815 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 04:28:53.738 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 04:28:53.573 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:28:53.733 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:28:53.666 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 04:29:05.033 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41636 10 6452 1 2025-09-06 04:30:05.400 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48346 10 6452 1 2025-09-06 04:31:05.803 00:00:10.884 TCP 1.101.0.1:3000 -> 23.104.0.1:51788 10 6452 1 2025-09-06 04:29:25.345 00:02:00.131 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-06 04:32:06.758 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:54736 10 6452 1 2025-09-06 04:28:25.340 00:04:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 10 615 1 2025-09-06 04:33:07.171 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38462 10 6452 1 2025-09-06 04:32:25.344 00:01:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-06 04:33:53.755 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 04:33:53.519 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:33:53.769 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:33:53.934 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 04:33:53.852 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 04:34:07.583 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41636 10 6452 1 2025-09-06 04:33:25.343 00:01:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-06 04:35:07.992 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39112 10 6452 1 2025-09-06 04:36:08.408 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37170 10 6452 1 2025-09-06 04:37:08.824 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60974 10 6452 1 2025-09-06 04:35:25.342 00:02:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-06 04:38:09.239 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36412 10 6452 1 2025-09-06 04:34:25.345 00:04:00.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 10 615 1 2025-09-06 04:38:53.934 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 04:38:54.095 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 04:38:53.960 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:38:53.852 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:38:53.934 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 04:39:09.601 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39096 10 6452 1 2025-09-06 04:38:25.343 00:01:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-06 04:40:10.005 00:00:10.703 TCP 1.101.0.1:3000 -> 23.104.0.1:37080 10 6452 1 2025-09-06 04:39:25.346 00:01:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-06 04:41:10.746 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35672 10 6452 1 2025-09-06 04:42:11.157 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51864 10 6452 1 2025-09-06 04:40:25.343 00:02:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-06 04:41:25.345 00:02:00.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-06 04:43:11.555 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:49512 10 6452 1 2025-09-06 04:43:53.997 00:00:00.039 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 04:43:53.648 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:43:53.967 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:43:53.987 00:00:00.046 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 04:43:54.049 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 04:44:11.915 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:38814 10 6452 1 2025-09-06 04:43:25.343 00:01:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-06 04:44:25.346 00:01:00.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-06 04:45:12.282 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46116 10 6452 1 2025-09-06 04:46:12.683 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36830 10 6452 1 2025-09-06 04:47:13.111 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46188 10 6452 1 2025-09-06 04:45:25.344 00:02:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-06 04:48:13.486 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53220 10 6452 1 2025-09-06 04:46:25.348 00:02:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-06 04:48:53.814 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:48:54.242 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:48:54.090 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 04:48:54.243 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 04:48:54.325 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 04:49:13.895 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44540 10 6452 1 2025-09-06 04:48:25.345 00:01:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-06 04:50:14.296 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40646 10 6452 1 2025-09-06 04:49:25.348 00:01:00.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-06 04:51:14.703 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45640 10 6452 1 2025-09-06 04:52:15.121 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54446 10 6452 1 2025-09-06 04:50:25.346 00:02:00.139 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-09-06 04:53:15.521 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50992 10 6452 1 2025-09-06 04:51:25.348 00:02:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-06 04:53:54.146 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-06 04:53:54.077 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:53:54.442 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-06 04:53:54.240 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-06 04:53:54.525 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-06 04:53:25.348 00:01:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-09-06 04:54:15.885 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:41130 10 6452 1 2025-09-06 04:54:25.351 00:01:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-09-06 04:55:16.248 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58134 10 6452 1 2025-09-06 04:56:16.657 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:41664 10 6452 1 2025-09-06 04:57:17.027 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:48464 10 6452 1 2025-09-06 04:56:25.350 00:02:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-09-06 04:58:17.457 00:00:10.569 TCP 1.101.0.1:3000 -> 23.104.0.1:48240 10 6452 1 Summary: total flows: 163, total bytes: 417215, total packets: 1024, avg bps: 896, avg pps: 0, avg bpp: 407 Time window: 2025-09-06 03:56:25 - 2025-09-06 04:58:28 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0051s User: 0.0043s Wall: 0.0075s flows/second: 21779.9 Runtime: 0.0075s