Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 00:58:51.979 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 00:58:51.701 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 00:58:51.752 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 00:58:51.896 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 00:58:52.072 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 00:59:00.853 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:48602 10 6452 1 2025-10-07 01:00:01.267 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57104 10 6452 1 2025-10-07 01:01:01.669 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:52584 10 6452 1 2025-10-07 00:59:40.365 00:02:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 00:59:40.362 00:02:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 01:02:02.063 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36672 10 6452 1 2025-10-07 01:03:02.471 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60664 10 6452 1 2025-10-07 01:02:40.364 00:01:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 01:02:40.366 00:01:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 01:03:52.136 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:03:51.903 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:03:51.907 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:03:52.138 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:03:51.990 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:04:02.887 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:54320 10 6452 1 2025-10-07 01:05:03.316 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49954 10 6452 1 2025-10-07 01:06:03.678 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60588 10 6452 1 2025-10-07 01:04:40.365 00:02:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 01:04:40.368 00:02:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 01:07:04.102 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47938 10 6452 1 2025-10-07 01:08:04.504 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34418 10 6452 1 2025-10-07 01:07:40.369 00:01:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 01:07:40.365 00:01:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 01:08:52.400 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:08:52.153 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:08:52.109 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:08:52.316 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:08:52.151 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:09:04.907 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:41966 10 6452 1 2025-10-07 01:10:05.283 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37584 10 6452 1 2025-10-07 01:09:40.366 00:01:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 01:09:40.368 00:01:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 01:11:05.689 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42040 10 6452 1 2025-10-07 01:12:06.110 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50948 10 6452 1 2025-10-07 01:13:06.515 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40300 10 6452 1 2025-10-07 01:11:40.371 00:02:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 01:11:40.368 00:02:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 01:13:52.754 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:13:52.578 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:13:52.558 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:13:52.672 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:13:52.720 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:14:06.918 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56826 10 6452 1 2025-10-07 01:15:07.323 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55478 10 6452 1 2025-10-07 01:14:40.367 00:01:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 01:14:40.370 00:01:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 01:16:07.683 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46520 10 6452 1 2025-10-07 01:17:08.101 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45134 10 6452 1 2025-10-07 01:18:08.511 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39910 10 6452 1 2025-10-07 01:16:40.369 00:02:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 01:16:40.367 00:02:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 01:18:52.559 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:18:52.308 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:18:52.477 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:18:52.371 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:18:52.422 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:19:08.880 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60900 10 6452 1 2025-10-07 01:20:09.283 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35440 10 6452 1 2025-10-07 01:19:40.371 00:01:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 01:19:40.368 00:01:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 01:21:09.693 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38284 10 6452 1 2025-10-07 01:22:10.109 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55600 10 6452 1 2025-10-07 01:23:10.511 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60466 10 6452 1 2025-10-07 01:21:40.369 00:02:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 01:21:40.372 00:02:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 01:23:52.530 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:23:52.449 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:23:52.293 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:23:52.447 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:23:52.459 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:24:10.921 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40452 10 6452 1 2025-10-07 01:25:11.326 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32928 10 6452 1 2025-10-07 01:24:40.369 00:01:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 01:24:40.372 00:01:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 01:26:11.729 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56774 10 6452 1 2025-10-07 01:27:12.137 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33498 10 6452 1 2025-10-07 01:28:12.537 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36362 10 6452 1 2025-10-07 01:26:40.381 00:02:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 01:26:40.383 00:02:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 01:28:53.313 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:28:53.016 00:00:00.043 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:28:53.179 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:28:52.993 00:00:00.052 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:28:53.262 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:29:12.952 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58662 10 6452 1 2025-10-07 01:30:13.368 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35180 10 6452 1 2025-10-07 01:29:40.382 00:01:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 01:29:40.384 00:01:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 01:31:13.734 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42168 10 6452 1 2025-10-07 01:32:14.143 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34714 10 6452 1 2025-10-07 01:33:14.551 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51088 10 6452 1 2025-10-07 01:31:40.381 00:02:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 01:31:40.383 00:02:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 01:33:52.715 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:33:52.416 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:33:52.368 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:33:52.758 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:33:52.451 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:34:14.950 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:38112 12 10369 1 2025-10-07 01:35:15.428 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46696 10 6452 1 2025-10-07 01:34:40.385 00:01:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 01:34:40.383 00:01:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 01:36:15.841 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:60136 10 6452 1 2025-10-07 01:37:16.271 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42580 10 6452 1 2025-10-07 01:38:16.677 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42182 10 6452 1 2025-10-07 01:36:40.384 00:02:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 01:36:40.386 00:02:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 01:38:52.809 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:38:52.743 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:38:52.814 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:38:52.664 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:38:52.892 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:39:17.107 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60712 10 6452 1 2025-10-07 01:40:17.515 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54062 10 6452 1 2025-10-07 01:39:40.384 00:01:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 01:39:40.387 00:01:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 01:41:17.916 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44576 10 6452 1 2025-10-07 01:42:18.323 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55140 10 6452 1 2025-10-07 01:43:18.727 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:45426 10 6452 1 2025-10-07 01:41:40.412 00:02:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 01:41:40.408 00:02:00.328 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 01:43:52.934 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:43:52.952 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:43:52.941 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:43:52.946 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:43:53.025 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:44:19.108 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42906 10 6452 1 2025-10-07 01:45:19.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50772 10 6452 1 2025-10-07 01:44:40.409 00:01:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 01:44:40.411 00:01:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 01:46:19.931 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:33316 10 6452 1 2025-10-07 01:47:20.354 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53174 10 6452 1 2025-10-07 01:46:40.409 00:01:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 01:46:40.413 00:01:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 01:48:20.758 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41420 10 6452 1 2025-10-07 01:48:53.158 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:48:53.141 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:48:53.001 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:48:53.075 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:48:53.141 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:49:21.172 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:47410 10 6452 1 2025-10-07 01:48:40.409 00:02:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 01:50:21.546 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45748 10 6452 1 2025-10-07 01:48:40.412 00:02:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 01:51:21.951 00:00:11.060 TCP 1.101.0.1:3000 -> 23.104.0.1:35688 10 6452 1 2025-10-07 01:51:40.412 00:01:00.324 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 01:52:23.055 00:00:15.255 TCP 1.101.0.1:3000 -> 23.104.0.1:45182 10 6452 1 2025-10-07 01:51:40.411 00:01:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 01:53:28.374 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46966 10 6452 1 2025-10-07 01:53:53.071 00:00:00.054 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:53:53.002 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:53:52.832 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:53:52.988 00:00:00.055 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:53:52.998 00:00:00.048 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:54:28.781 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:42364 12 10375 1 2025-10-07 01:53:40.410 00:02:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 01:55:29.267 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56264 10 6452 1 2025-10-07 01:53:40.415 00:02:00.324 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 01:56:29.674 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54248 10 6452 1 2025-10-07 01:57:30.037 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50148 10 6452 1 2025-10-07 01:56:40.414 00:01:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 01:56:40.411 00:01:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 01:58:30.440 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:32860 10 6452 1 Summary: total flows: 168, total bytes: 424594, total packets: 1020, avg bps: 946, avg pps: 0, avg bpp: 416 Time window: 2025-10-07 00:58:51 - 2025-10-07 01:58:40 Total flows processed: 168, passed: 168, Blocks skipped: 0, Bytes read: 17536 Sys: 0.0039s User: 0.0024s Wall: 0.0028s flows/second: 59488.7 Runtime: 0.0029s