Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 00:59:20.770 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 00:59:20.695 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 00:59:20.879 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 00:59:20.688 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 00:59:21.223 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 00:59:34.118 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48194 10 6452 1 2025-10-08 01:00:34.480 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60378 10 6452 1 2025-10-08 01:01:34.881 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:35262 12 6556 1 2025-10-08 00:57:40.912 00:05:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 00:57:40.909 00:05:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:02:35.299 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56764 10 6452 1 2025-10-08 01:03:35.664 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56514 10 6452 1 2025-10-08 01:04:21.725 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:04:21.238 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:04:21.394 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:04:21.464 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:04:21.477 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:04:36.096 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46224 10 6452 1 2025-10-08 01:05:36.499 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37234 10 6452 1 2025-10-08 01:06:36.899 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53740 10 6452 1 2025-10-08 01:03:40.914 00:05:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:03:40.917 00:05:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:07:37.314 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33202 10 6452 1 2025-10-08 01:08:37.717 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46004 10 6452 1 2025-10-08 01:09:21.118 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:09:21.223 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:09:21.073 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:09:21.036 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:09:21.030 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:09:38.123 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34512 10 6452 1 2025-10-08 01:10:38.520 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46546 10 6452 1 2025-10-08 01:11:38.936 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:35700 10 6452 1 2025-10-08 01:12:39.361 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59628 10 6452 1 2025-10-08 01:09:40.916 00:05:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:09:40.919 00:05:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:13:39.767 00:00:15.767 TCP 1.101.0.1:3000 -> 23.104.0.1:36470 10 6452 1 2025-10-08 01:14:20.931 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:14:21.287 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:14:21.249 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:14:21.203 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:14:21.397 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:14:45.618 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:51016 10 6452 1 2025-10-08 01:15:45.979 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37556 10 6452 1 2025-10-08 01:16:46.401 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33228 10 6452 1 2025-10-08 01:17:46.762 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:45370 10 6452 1 2025-10-08 01:18:47.188 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55840 10 6452 1 2025-10-08 01:19:21.449 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:19:21.185 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:19:21.286 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:19:21.366 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:19:21.195 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:15:40.918 00:05:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:15:40.921 00:05:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:19:47.586 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:35080 12 10375 1 2025-10-08 01:20:48.108 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41670 10 6452 1 2025-10-08 01:21:48.472 00:00:10.600 TCP 1.101.0.1:3000 -> 23.104.0.1:48736 10 6452 1 2025-10-08 01:22:49.116 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60768 10 6452 1 2025-10-08 01:23:49.521 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45346 10 6452 1 2025-10-08 01:24:21.532 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:24:21.488 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:24:21.387 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:24:21.439 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:24:21.441 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:24:49.931 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:35614 10 6452 1 2025-10-08 01:21:40.922 00:05:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:21:40.925 00:05:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:25:50.361 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47480 10 6452 1 2025-10-08 01:26:50.775 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60194 10 6452 1 2025-10-08 01:27:51.150 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59654 10 6452 1 2025-10-08 01:28:51.564 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59656 10 6452 1 2025-10-08 01:29:21.451 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:29:21.495 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:29:21.577 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:29:21.348 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:29:21.661 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:29:51.996 00:00:11.038 TCP 1.101.0.1:3000 -> 23.104.0.1:44718 10 6452 1 2025-10-08 01:30:53.115 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57630 10 6452 1 2025-10-08 01:27:40.928 00:05:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:27:40.926 00:05:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:31:53.517 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40016 10 6452 1 2025-10-08 01:32:53.879 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37736 10 6452 1 2025-10-08 01:33:54.280 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48308 10 6452 1 2025-10-08 01:34:21.497 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:34:21.530 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:34:21.416 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:34:21.565 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:34:21.499 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:34:54.682 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55966 10 6452 1 2025-10-08 01:35:55.115 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48186 10 6452 1 2025-10-08 01:36:55.481 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40276 10 6452 1 2025-10-08 01:33:40.926 00:05:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:33:40.929 00:05:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:37:55.889 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50676 10 6452 1 2025-10-08 01:38:56.311 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:48880 10 6452 1 2025-10-08 01:39:21.797 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:39:21.715 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:39:21.599 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:39:21.714 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:39:21.727 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:39:56.707 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43214 10 6452 1 2025-10-08 01:40:57.117 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54682 10 6452 1 2025-10-08 01:41:57.526 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43606 10 6452 1 2025-10-08 01:42:57.939 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:50420 10 6452 1 2025-10-08 01:39:40.930 00:05:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:39:40.927 00:05:00.345 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:43:58.374 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33512 10 6452 1 2025-10-08 01:44:21.890 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:44:21.581 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:44:21.887 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:44:21.747 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:44:21.971 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:44:58.791 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37742 10 6452 1 2025-10-08 01:45:59.194 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44714 10 6452 1 2025-10-08 01:46:59.599 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41436 10 6452 1 2025-10-08 01:48:00.006 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:42416 10 6452 1 2025-10-08 01:49:00.398 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37790 10 6452 1 2025-10-08 01:49:21.994 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:49:21.776 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:49:21.549 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:49:21.911 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:49:21.770 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:45:40.933 00:05:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:45:40.935 00:05:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:50:00.789 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47542 10 6452 1 2025-10-08 01:51:01.197 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47054 10 6452 1 2025-10-08 01:52:01.600 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46998 10 6452 1 2025-10-08 01:53:01.964 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48754 10 6452 1 2025-10-08 01:54:02.371 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37028 10 6452 1 2025-10-08 01:54:22.118 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:54:21.881 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:54:22.211 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:54:22.126 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:54:22.294 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:55:02.772 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42314 10 6452 1 2025-10-08 01:51:40.933 00:05:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:51:40.936 00:05:00.336 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:56:03.190 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50878 10 6452 1 2025-10-08 01:57:03.593 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57774 10 6452 1 2025-10-08 01:58:03.993 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55342 10 6452 1 Summary: total flows: 139, total bytes: 414575, total packets: 1014, avg bps: 912, avg pps: 0, avg bpp: 408 Time window: 2025-10-08 00:57:40 - 2025-10-08 01:58:14 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0035s User: 0.0018s Wall: 0.0018s flows/second: 76160.5 Runtime: 0.0018s