Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 21:53:51.548 00:06:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 21:59:24.176 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 21:59:13.394 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36106 10 6452 1 2025-10-28 21:59:24.091 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 21:59:23.990 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:59:24.094 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 21:59:24.079 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:00:13.808 00:00:10.653 TCP 1.101.0.1:3000 -> 23.104.0.1:32800 10 6452 1 2025-10-28 22:01:14.509 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51716 10 6452 1 2025-10-28 22:02:14.909 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59636 10 6452 1 2025-10-28 22:03:15.316 00:00:10.783 TCP 1.101.0.1:3000 -> 23.104.0.1:33908 10 6452 1 2025-10-28 22:04:24.452 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 22:04:24.286 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:04:24.011 00:00:00.044 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:04:24.369 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:04:24.327 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:04:16.140 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33906 10 6452 1 2025-10-28 21:59:51.547 00:06:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 22:05:16.510 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52642 10 6452 1 2025-10-28 22:00:51.550 00:06:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 22:06:16.930 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45726 10 6452 1 2025-10-28 22:07:17.346 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:58616 10 6452 1 2025-10-28 22:08:17.751 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35264 10 6452 1 2025-10-28 22:09:24.345 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 22:09:24.588 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:09:24.356 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:09:24.263 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:09:24.343 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:09:18.153 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:39152 10 6452 1 2025-10-28 22:10:18.571 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56258 10 6452 1 2025-10-28 22:11:18.977 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48798 10 6452 1 2025-10-28 22:06:51.547 00:06:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 22:12:19.391 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:33096 10 6452 1 2025-10-28 22:07:51.550 00:06:00.351 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 22:13:19.824 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42244 10 6452 1 2025-10-28 22:14:24.975 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 22:14:24.710 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:14:24.740 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:14:24.889 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:14:24.813 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:14:20.234 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:45466 10 6452 1 2025-10-28 22:15:20.651 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40330 10 6452 1 2025-10-28 22:16:21.060 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53276 10 6452 1 2025-10-28 22:17:21.469 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58154 10 6452 1 2025-10-28 22:18:21.876 00:00:10.429 TCP 1.101.0.1:3000 -> 23.104.0.1:58168 10 6452 1 2025-10-28 22:13:51.548 00:06:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 22:19:24.500 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:19:24.466 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:19:24.579 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:19:24.466 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:19:24.548 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 22:19:22.343 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46532 10 6452 1 2025-10-28 22:14:51.552 00:06:00.352 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 22:20:22.702 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:54092 10 6452 1 2025-10-28 22:21:23.103 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41760 10 6452 1 2025-10-28 22:22:23.502 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46526 10 6452 1 2025-10-28 22:23:23.902 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:41098 10 6452 1 2025-10-28 22:24:24.704 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 22:24:24.553 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:24:24.624 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:24:24.622 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:24:24.626 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:24:24.280 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40622 10 6452 1 2025-10-28 22:25:24.679 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:59936 10 6452 1 2025-10-28 22:20:51.552 00:06:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 22:26:25.052 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57170 10 6452 1 2025-10-28 22:21:51.553 00:06:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 22:27:25.460 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52452 10 6452 1 2025-10-28 22:28:25.866 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45314 10 6452 1 2025-10-28 22:29:24.768 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 22:29:24.802 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:29:24.530 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:29:24.685 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:29:24.673 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:29:26.280 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41956 10 6452 1 2025-10-28 22:30:26.685 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56236 10 6452 1 2025-10-28 22:31:27.117 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:43026 10 6452 1 2025-10-28 22:32:27.530 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:34016 10 6452 1 2025-10-28 22:27:51.554 00:06:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 22:33:27.952 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:56944 10 6452 1 2025-10-28 22:28:51.556 00:06:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 22:34:24.932 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 22:34:24.695 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:34:24.819 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:34:24.850 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:34:24.594 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:34:28.366 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36930 10 6452 1 2025-10-28 22:35:28.773 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49948 10 6452 1 2025-10-28 22:36:29.181 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59238 10 6452 1 2025-10-28 22:37:29.586 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50516 10 6452 1 2025-10-28 22:38:29.990 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48846 10 6452 1 2025-10-28 22:39:24.827 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:39:24.852 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:39:24.634 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:39:24.745 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:39:24.716 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 22:39:30.392 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36816 10 6452 1 2025-10-28 22:34:51.557 00:06:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 22:40:30.789 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44188 10 6452 1 2025-10-28 22:35:51.560 00:06:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 22:41:31.195 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40228 10 6452 1 2025-10-28 22:42:31.598 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35504 10 6452 1 2025-10-28 22:43:31.999 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41628 10 6452 1 2025-10-28 22:44:25.069 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:44:24.873 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:44:24.926 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:44:24.814 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:44:25.009 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 22:44:32.398 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60824 10 6452 1 2025-10-28 22:45:32.796 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50420 10 6452 1 2025-10-28 22:46:33.203 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49210 10 6452 1 2025-10-28 22:41:51.559 00:06:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 22:47:33.608 00:00:10.951 TCP 1.101.0.1:3000 -> 23.104.0.1:36400 10 6452 1 2025-10-28 22:42:51.561 00:06:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 22:48:34.599 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43714 10 6452 1 2025-10-28 22:49:25.397 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 22:49:25.114 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:49:25.011 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:49:25.315 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:49:25.276 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:49:34.961 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57080 10 6452 1 2025-10-28 22:50:35.370 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60696 10 6452 1 2025-10-28 22:51:35.778 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57634 10 6452 1 2025-10-28 22:52:36.149 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57148 10 6452 1 2025-10-28 22:53:36.554 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48770 10 6452 1 2025-10-28 22:48:51.561 00:06:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 22:54:25.142 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 22:54:25.207 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 22:54:25.154 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:54:25.060 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 22:54:24.912 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 22:54:36.965 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47492 10 6452 1 2025-10-28 22:49:51.565 00:06:00.350 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 22:55:37.371 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35680 10 6452 1 2025-10-28 22:56:37.774 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53088 10 6452 1 2025-10-28 22:57:38.182 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60664 10 6452 1 2025-10-28 22:58:38.594 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42164 10 6452 1 Summary: total flows: 137, total bytes: 416877, total packets: 1018, avg bps: 855, avg pps: 0, avg bpp: 409 Time window: 2025-10-28 21:53:51 - 2025-10-28 22:58:48 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0024s User: 0.0031s Wall: 0.0020s flows/second: 67753.8 Runtime: 0.0020s