Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 04:59:14.589 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 04:59:14.507 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:59:14.423 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 04:59:14.514 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 04:59:14.416 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:59:17.837 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:58130 10 6452 1 2025-10-18 04:54:46.074 00:06:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:00:18.213 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34070 10 6452 1 2025-10-18 05:01:18.618 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40702 10 6452 1 2025-10-18 05:02:19.028 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37076 10 6452 1 2025-10-18 04:57:46.073 00:06:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:03:19.432 00:00:10.935 TCP 1.101.0.1:3000 -> 23.104.0.1:39740 10 6452 1 2025-10-18 05:04:14.783 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:04:14.632 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:04:14.588 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:04:14.668 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:04:14.671 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:04:20.414 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42806 10 6452 1 2025-10-18 05:05:20.815 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35654 10 6452 1 2025-10-18 05:06:21.225 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38096 10 6452 1 2025-10-18 05:01:46.076 00:06:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:07:21.591 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48420 10 6452 1 2025-10-18 05:08:21.953 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38852 10 6452 1 2025-10-18 05:09:14.821 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:09:14.645 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:09:14.595 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:09:14.738 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:09:14.861 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:09:22.364 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41248 10 6452 1 2025-10-18 05:04:46.075 00:06:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:10:22.766 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:52570 10 6452 1 2025-10-18 05:11:23.139 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55704 10 6452 1 2025-10-18 05:12:23.563 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:38834 10 6452 1 2025-10-18 05:13:23.990 00:00:12.351 TCP 1.101.0.1:3000 -> 23.104.0.1:37934 10 6452 1 2025-10-18 05:08:46.078 00:06:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:14:15.277 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:14:14.987 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:14:15.272 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:14:15.025 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:14:15.356 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:14:26.382 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:40274 10 6452 1 2025-10-18 05:15:26.742 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50702 10 6452 1 2025-10-18 05:16:27.115 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33942 10 6452 1 2025-10-18 05:11:46.077 00:06:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:17:27.518 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40782 10 6452 1 2025-10-18 05:18:27.922 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46526 10 6452 1 2025-10-18 05:19:14.965 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:19:15.191 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:19:14.893 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:19:14.882 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:19:15.147 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:19:28.330 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48270 10 6452 1 2025-10-18 05:20:28.737 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60564 10 6452 1 2025-10-18 05:15:46.079 00:06:00.279 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:21:29.145 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38358 10 6452 1 2025-10-18 05:22:29.551 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49474 10 6452 1 2025-10-18 05:23:29.954 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42428 10 6452 1 2025-10-18 05:18:46.077 00:06:00.285 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:24:15.053 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:24:15.081 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:24:15.115 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:24:14.930 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:24:15.199 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:24:30.319 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37330 10 6452 1 2025-10-18 05:25:30.721 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:43984 10 6452 1 2025-10-18 05:26:31.129 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40302 10 6452 1 2025-10-18 05:27:31.489 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:42680 10 6452 1 2025-10-18 05:22:46.081 00:06:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:28:31.910 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57892 10 6452 1 2025-10-18 05:29:15.191 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:29:15.246 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:29:15.110 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:29:15.187 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:29:15.191 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:29:32.280 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38456 10 6452 1 2025-10-18 05:30:32.645 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:50642 10 6452 1 2025-10-18 05:25:46.078 00:06:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:31:33.016 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33716 10 6452 1 2025-10-18 05:32:33.416 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:54198 12 10369 1 2025-10-18 05:33:33.893 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:50086 10 6452 1 2025-10-18 05:34:15.457 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:34:15.283 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:34:15.462 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:34:15.384 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:34:15.546 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:34:34.274 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40576 10 6452 1 2025-10-18 05:29:46.083 00:06:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:35:34.635 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51358 10 6452 1 2025-10-18 05:36:34.997 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43100 10 6452 1 2025-10-18 05:37:35.401 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52646 10 6452 1 2025-10-18 05:32:46.079 00:06:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:38:35.806 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57664 10 6452 1 2025-10-18 05:39:15.358 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:39:15.281 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:39:15.206 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:39:14.982 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:39:15.441 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:39:36.208 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46042 10 6452 1 2025-10-18 05:40:36.606 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35388 10 6452 1 2025-10-18 05:41:37.016 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51534 10 6452 1 2025-10-18 05:36:46.083 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:42:37.416 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34520 10 6452 1 2025-10-18 05:43:37.855 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:52272 10 6452 1 2025-10-18 05:44:15.308 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:44:15.329 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:44:15.406 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:44:15.226 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:44:15.453 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:39:46.082 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:44:38.293 00:00:11.246 TCP 1.101.0.1:3000 -> 23.104.0.1:39916 10 6452 1 2025-10-18 05:45:39.591 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52650 10 6452 1 2025-10-18 05:46:39.991 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42868 10 6452 1 2025-10-18 05:47:40.393 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58934 10 6452 1 2025-10-18 05:43:46.083 00:06:00.288 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:48:40.765 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53230 10 6452 1 2025-10-18 05:49:15.767 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:49:15.685 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:49:15.525 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:49:15.686 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:49:15.580 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:49:41.188 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36462 10 6452 1 2025-10-18 05:50:41.587 00:00:10.414 TCP 1.101.0.1:3000 -> 23.104.0.1:57946 11 6504 1 2025-10-18 05:46:46.082 00:06:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:51:42.052 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48550 10 6452 1 2025-10-18 05:52:42.456 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58042 10 6452 1 2025-10-18 05:53:42.865 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:38160 10 6452 1 2025-10-18 05:54:15.497 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:54:15.541 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:54:15.679 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:54:15.777 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:54:15.763 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:54:43.239 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49812 10 6452 1 2025-10-18 05:50:46.084 00:06:00.288 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:55:43.644 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46642 10 6452 1 2025-10-18 05:56:44.010 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55674 10 6452 1 2025-10-18 05:57:44.370 00:00:22.129 TCP 1.101.0.1:3000 -> 23.104.0.1:38222 10 6452 1 2025-10-18 05:53:46.082 00:06:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 Summary: total flows: 137, total bytes: 415255, total packets: 1025, avg bps: 851, avg pps: 0, avg bpp: 405 Time window: 2025-10-18 04:54:46 - 2025-10-18 05:59:46 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0052s User: 0.0009s Wall: 0.0025s flows/second: 54621.6 Runtime: 0.0025s