Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 19:53:51.507 00:06:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 19:59:22.614 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 19:59:21.926 00:00:00.080 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:59:22.435 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 19:59:22.734 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 19:59:22.517 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 19:59:19.966 00:00:11.457 TCP 1.101.0.1:3000 -> 23.104.0.1:45110 10 6452 1 2025-10-28 19:54:51.509 00:06:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 20:00:21.467 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38040 10 6452 1 2025-10-28 20:01:21.834 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45202 10 6452 1 2025-10-28 20:02:22.191 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43334 10 6452 1 2025-10-28 20:03:22.593 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55306 10 6452 1 2025-10-28 20:04:21.984 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 20:04:21.742 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 20:04:21.658 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:04:21.901 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:04:21.744 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 20:04:22.996 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:38380 10 6452 1 2025-10-28 20:05:23.372 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52668 10 6452 1 2025-10-28 20:00:51.508 00:06:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 20:06:23.769 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:48176 10 6452 1 2025-10-28 20:01:51.513 00:06:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 20:07:24.138 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41492 10 6452 1 2025-10-28 20:08:24.540 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53342 10 6452 1 2025-10-28 20:09:22.027 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 20:09:21.860 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 20:09:21.704 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:09:21.945 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:09:21.998 00:00:00.035 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 20:09:24.940 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57788 10 6452 1 2025-10-28 20:10:25.352 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:37696 10 6452 1 2025-10-28 20:11:25.756 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:47904 10 6452 1 2025-10-28 20:12:26.183 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:54152 12 10369 1 2025-10-28 20:07:51.511 00:06:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 20:13:26.617 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50344 10 6452 1 2025-10-28 20:08:51.514 00:06:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 20:14:22.073 00:00:00.049 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 20:14:21.923 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 20:14:21.771 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:14:21.991 00:00:00.049 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:14:22.172 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 20:14:27.025 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54308 10 6452 1 2025-10-28 20:15:27.431 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50766 10 6452 1 2025-10-28 20:16:27.832 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54928 10 6452 1 2025-10-28 20:17:28.189 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54872 10 6452 1 2025-10-28 20:18:28.592 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37184 10 6452 1 2025-10-28 20:19:23.182 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 20:19:23.040 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 20:19:22.813 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:19:23.099 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:19:23.051 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 20:19:29.003 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48942 10 6452 1 2025-10-28 20:14:51.513 00:06:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 20:20:29.374 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41094 10 6452 1 2025-10-28 20:15:51.515 00:06:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 20:21:29.777 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43634 10 6452 1 2025-10-28 20:22:30.188 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51526 10 6452 1 2025-10-28 20:23:30.587 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34376 10 6452 1 2025-10-28 20:24:22.089 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 20:24:22.378 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:24:22.213 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:24:22.403 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 20:24:22.296 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 20:24:30.991 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50552 10 6452 1 2025-10-28 20:25:31.398 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35628 10 6452 1 2025-10-28 20:26:31.807 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39178 10 6452 1 2025-10-28 20:21:51.513 00:06:00.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 20:27:32.210 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45674 10 6452 1 2025-10-28 20:22:51.517 00:06:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 20:28:32.610 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38712 10 6452 1 2025-10-28 20:29:22.540 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 20:29:22.302 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 20:29:22.269 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:29:22.457 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:29:22.446 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 20:29:33.015 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55490 10 6452 1 2025-10-28 20:30:33.377 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58060 10 6452 1 2025-10-28 20:31:33.785 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44126 10 6452 1 2025-10-28 20:32:34.194 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38942 10 6452 1 2025-10-28 20:33:34.595 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59698 10 6452 1 2025-10-28 20:28:51.514 00:06:00.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 20:34:22.606 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 20:34:22.440 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 20:34:22.461 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:34:22.524 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:34:22.365 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 20:34:35.005 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50712 10 6452 1 2025-10-28 20:29:51.518 00:06:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 20:35:35.415 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:36764 10 6452 1 2025-10-28 20:36:35.845 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:47716 10 6452 1 2025-10-28 20:37:36.260 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36182 10 6452 1 2025-10-28 20:38:36.667 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52356 10 6452 1 2025-10-28 20:39:22.555 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 20:39:22.520 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 20:39:22.535 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:39:22.471 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:39:22.472 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 20:39:37.094 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46410 10 6452 1 2025-10-28 20:40:37.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39084 10 6452 1 2025-10-28 20:35:51.517 00:06:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 20:41:37.914 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:35074 10 6452 1 2025-10-28 20:36:51.521 00:06:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 20:42:38.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40302 10 6452 1 2025-10-28 20:43:38.682 00:00:10.852 TCP 1.101.0.1:3000 -> 23.104.0.1:57206 10 6452 1 2025-10-28 20:44:22.493 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 20:44:22.664 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:44:22.697 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:44:22.746 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 20:44:22.780 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 20:44:39.576 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51036 10 6452 1 2025-10-28 20:45:39.976 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33590 10 6452 1 2025-10-28 20:46:40.379 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54970 10 6452 1 2025-10-28 20:42:51.519 00:06:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 20:47:40.780 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:60484 10 6452 1 2025-10-28 20:48:41.148 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53978 10 6452 1 2025-10-28 20:43:51.522 00:06:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 20:49:22.771 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 20:49:22.550 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:49:22.771 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:49:22.832 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 20:49:22.860 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 20:49:41.510 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38626 10 6452 1 2025-10-28 20:50:41.911 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33090 10 6452 1 2025-10-28 20:51:42.324 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42082 10 6452 1 2025-10-28 20:52:42.726 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50926 10 6452 1 2025-10-28 20:53:43.110 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34548 10 6452 1 2025-10-28 20:54:22.990 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 20:54:22.856 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 20:54:22.568 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:54:22.907 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 20:54:22.673 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 20:49:51.520 00:06:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 20:54:43.512 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59768 10 6452 1 2025-10-28 20:50:51.525 00:06:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 20:55:43.925 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:58708 10 6452 1 2025-10-28 20:56:44.345 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58466 10 6452 1 2025-10-28 20:57:44.755 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:44286 10 6452 1 Summary: total flows: 137, total bytes: 415203, total packets: 1024, avg bps: 864, avg pps: 0, avg bpp: 405 Time window: 2025-10-28 19:53:51 - 2025-10-28 20:57:55 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0057s User: 0.0000s Wall: 0.0019s flows/second: 72949.0 Runtime: 0.0019s