Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 06:59:35.272 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 06:59:35.098 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 06:59:35.211 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 06:59:23.893 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40002 10 6452 1 2025-10-29 06:59:35.189 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 06:59:34.789 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 06:55:51.732 00:05:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:00:24.260 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:32782 10 6452 1 2025-10-29 07:01:24.625 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58862 10 6452 1 2025-10-29 07:02:25.031 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35190 10 6452 1 2025-10-29 06:58:51.734 00:05:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:03:25.443 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48874 10 6452 1 2025-10-29 07:04:35.125 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:04:34.872 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:04:34.972 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:04:34.969 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:04:35.056 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:04:25.845 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:54912 10 6452 1 2025-10-29 07:05:26.271 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40390 10 6452 1 2025-10-29 07:01:51.732 00:05:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:06:26.629 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54850 10 6452 1 2025-10-29 07:07:27.035 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34378 10 6452 1 2025-10-29 07:08:27.434 00:00:10.591 TCP 1.101.0.1:3000 -> 23.104.0.1:47360 10 6452 1 2025-10-29 07:04:51.735 00:05:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:09:34.993 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:09:34.907 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:09:35.253 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:09:35.000 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:09:35.336 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:09:28.067 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46346 10 6452 1 2025-10-29 07:10:28.431 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58776 10 6452 1 2025-10-29 07:11:28.833 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:59830 10 6452 1 2025-10-29 07:07:51.734 00:05:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:12:29.218 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58144 10 6452 1 2025-10-29 07:13:29.619 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57288 10 6452 1 2025-10-29 07:14:35.330 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:14:35.126 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:14:35.214 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:14:35.275 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:14:35.297 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:14:30.025 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52868 10 6452 1 2025-10-29 07:10:51.738 00:05:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:15:30.423 00:00:15.575 TCP 1.101.0.1:3000 -> 23.104.0.1:45212 10 6452 1 2025-10-29 07:16:36.033 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56462 10 6452 1 2025-10-29 07:17:36.440 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51582 10 6452 1 2025-10-29 07:13:51.736 00:05:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:18:36.847 00:00:10.652 TCP 1.101.0.1:3000 -> 23.104.0.1:49054 10 6452 1 2025-10-29 07:19:35.511 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:19:35.432 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:19:35.151 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:19:35.429 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:19:35.423 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:19:37.540 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48506 10 6452 1 2025-10-29 07:20:37.947 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60334 10 6452 1 2025-10-29 07:16:51.740 00:05:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:21:38.363 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:39722 10 6452 1 2025-10-29 07:22:38.727 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46244 10 6452 1 2025-10-29 07:23:39.136 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53350 10 6452 1 2025-10-29 07:19:51.738 00:05:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:24:35.707 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:24:35.490 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:24:35.545 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:24:35.625 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:24:35.622 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:24:39.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39388 10 6452 1 2025-10-29 07:25:39.941 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42888 10 6452 1 2025-10-29 07:26:40.354 00:00:11.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60930 10 6452 1 2025-10-29 07:22:51.741 00:05:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:27:41.781 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48486 10 6452 1 2025-10-29 07:28:42.146 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47594 10 6452 1 2025-10-29 07:29:35.675 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:29:35.637 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:29:35.715 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:29:35.592 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:29:35.591 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:25:51.738 00:05:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:29:42.554 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41468 10 6452 1 2025-10-29 07:30:42.971 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58422 10 6452 1 2025-10-29 07:31:43.336 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:56778 10 6452 1 2025-10-29 07:32:43.707 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46672 10 6452 1 2025-10-29 07:28:51.741 00:05:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:33:44.104 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37790 10 6452 1 2025-10-29 07:34:35.815 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:34:35.825 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:34:35.750 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:34:35.732 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:34:35.834 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:34:44.509 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32878 10 6452 1 2025-10-29 07:31:51.738 00:05:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:35:44.914 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45798 10 6452 1 2025-10-29 07:36:45.282 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49148 10 6452 1 2025-10-29 07:37:45.684 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:32960 10 6452 1 2025-10-29 07:34:51.743 00:05:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:38:46.057 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:52994 10 6452 1 2025-10-29 07:39:35.750 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:39:35.788 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:39:35.809 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:39:35.698 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:39:35.892 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:39:46.423 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48040 10 6452 1 2025-10-29 07:40:46.825 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51168 10 6452 1 2025-10-29 07:37:51.743 00:05:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:41:47.221 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40916 10 6452 1 2025-10-29 07:42:47.622 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39806 10 6452 1 2025-10-29 07:43:48.036 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59398 10 6452 1 2025-10-29 07:44:35.804 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:44:35.542 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:44:35.893 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:44:35.823 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:44:35.975 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:40:51.745 00:05:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:44:48.456 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:58446 10 6452 1 2025-10-29 07:45:48.863 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43942 10 6452 1 2025-10-29 07:46:49.271 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58010 10 6452 1 2025-10-29 07:43:51.743 00:05:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:47:49.676 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:36426 10 6452 1 2025-10-29 07:48:50.109 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51608 10 6452 1 2025-10-29 07:49:35.915 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:49:35.930 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:49:35.914 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:49:35.851 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:49:35.997 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:49:50.513 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37126 10 6452 1 2025-10-29 07:46:51.748 00:05:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:50:50.912 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45262 10 6452 1 2025-10-29 07:51:51.275 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35212 10 6452 1 2025-10-29 07:52:51.679 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:55362 10 6452 1 2025-10-29 07:49:51.746 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:53:52.112 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:39358 10 6452 1 2025-10-29 07:54:36.311 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:54:36.098 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:54:36.195 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:54:36.311 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:54:36.280 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:54:52.527 00:00:10.548 TCP 1.101.0.1:3000 -> 23.104.0.1:47826 10 6452 1 2025-10-29 07:55:53.146 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53312 10 6452 1 2025-10-29 07:52:51.751 00:05:00.353 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:56:53.545 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48882 10 6452 1 2025-10-29 07:57:53.945 00:00:10.728 TCP 1.101.0.1:3000 -> 23.104.0.1:57632 10 6452 1 Summary: total flows: 139, total bytes: 410548, total packets: 1010, avg bps: 879, avg pps: 0, avg bpp: 406 Time window: 2025-10-29 06:55:51 - 2025-10-29 07:58:04 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0049s User: 0.0008s Wall: 0.0023s flows/second: 60197.0 Runtime: 0.0023s