Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-07 04:58:52.582 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 04:58:52.546 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 04:58:52.440 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 04:58:52.499 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 04:58:52.549 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 04:59:05.950 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39888 10 6452 1 2025-11-07 05:00:06.320 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59320 10 6452 1 2025-11-07 05:01:06.727 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41192 10 6452 1 2025-11-07 05:02:07.135 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55180 10 6452 1 2025-11-07 04:57:56.514 00:06:00.160 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 05:03:07.494 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34936 10 6452 1 2025-11-07 05:03:52.606 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 05:03:52.582 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:03:52.609 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:03:52.657 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 05:03:52.692 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 05:04:07.903 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56168 10 6452 1 2025-11-07 04:59:56.512 00:06:00.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 05:05:08.307 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:55158 10 6452 1 2025-11-07 05:06:08.705 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46468 10 6452 1 2025-11-07 05:07:09.102 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50140 10 6452 1 2025-11-07 05:08:09.503 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59306 10 6452 1 2025-11-07 05:08:52.843 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 05:08:52.561 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:08:52.674 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:08:52.764 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 05:08:52.755 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 05:09:09.905 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46376 12 6556 1 2025-11-07 05:04:56.516 00:06:00.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 05:10:10.318 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57790 10 6452 1 2025-11-07 05:11:10.684 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48996 10 6452 1 2025-11-07 05:06:56.514 00:06:00.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 05:12:11.042 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:41264 10 6452 1 2025-11-07 05:13:11.446 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34804 10 6452 1 2025-11-07 05:13:52.897 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 05:13:52.741 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:13:52.692 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:13:52.688 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 05:13:52.775 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 05:14:11.849 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:42448 10 6452 1 2025-11-07 05:15:12.272 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35536 10 6452 1 2025-11-07 05:16:12.677 00:00:10.918 TCP 1.101.0.1:3000 -> 23.104.0.1:47252 10 6452 1 2025-11-07 05:11:56.516 00:06:00.165 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 05:17:13.635 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49704 10 6452 1 2025-11-07 05:18:14.055 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53780 10 6452 1 2025-11-07 05:18:52.862 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 05:18:52.834 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:18:52.795 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:18:53.011 00:00:00.041 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 05:18:52.879 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 05:13:56.516 00:06:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 05:19:14.467 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34948 10 6452 1 2025-11-07 05:20:14.873 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:48576 10 6452 1 2025-11-07 05:21:15.251 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51400 10 6452 1 2025-11-07 05:22:15.662 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:59182 12 10375 1 2025-11-07 05:23:16.145 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:55926 10 6452 1 2025-11-07 05:23:53.327 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 05:23:53.312 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 05:23:53.269 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:23:53.244 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:23:53.160 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 05:18:56.518 00:06:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 05:24:16.507 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60288 10 6452 1 2025-11-07 05:25:16.911 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50656 10 6452 1 2025-11-07 05:20:56.516 00:06:00.169 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 05:26:17.317 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:37618 10 6452 1 2025-11-07 05:27:17.682 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34938 10 6452 1 2025-11-07 05:28:18.108 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39346 10 6452 1 2025-11-07 05:28:53.281 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 05:28:53.146 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 05:28:52.763 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:28:53.200 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:28:53.155 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 05:29:18.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39376 10 6452 1 2025-11-07 05:30:18.924 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:55114 10 6452 1 2025-11-07 05:25:56.519 00:06:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 05:31:19.317 00:00:10.695 TCP 1.101.0.1:3000 -> 23.104.0.1:50536 10 6452 1 2025-11-07 05:32:20.056 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36466 10 6452 1 2025-11-07 05:27:56.517 00:06:00.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 05:33:20.464 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:42016 10 6452 1 2025-11-07 05:33:53.131 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 05:33:53.128 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:33:53.147 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:33:53.321 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 05:33:53.231 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 05:34:20.861 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50578 10 6452 1 2025-11-07 05:35:21.280 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54110 10 6452 1 2025-11-07 05:36:21.679 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47294 10 6452 1 2025-11-07 05:37:22.107 00:00:12.005 TCP 1.101.0.1:3000 -> 23.104.0.1:53114 10 6452 1 2025-11-07 05:32:56.525 00:06:00.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 05:38:24.146 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49008 10 6452 1 2025-11-07 05:38:53.399 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 05:38:53.150 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:38:53.209 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:38:53.120 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 05:38:53.292 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 05:39:24.549 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33900 10 6452 1 2025-11-07 05:34:56.520 00:06:00.168 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 05:40:24.948 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58222 10 6452 1 2025-11-07 05:41:25.354 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43280 10 6452 1 2025-11-07 05:42:25.752 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45986 10 6452 1 2025-11-07 05:43:26.152 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38260 10 6452 1 2025-11-07 05:43:53.385 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 05:43:53.409 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:43:53.292 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:43:53.441 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 05:43:53.374 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 05:44:26.558 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40154 10 6452 1 2025-11-07 05:39:56.522 00:06:00.163 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 05:45:26.962 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40020 10 6452 1 2025-11-07 05:46:27.364 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35552 10 6452 1 2025-11-07 05:41:56.520 00:06:00.170 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 05:47:27.766 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56384 10 6452 1 2025-11-07 05:48:28.175 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:47092 10 6452 1 2025-11-07 05:48:53.625 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 05:48:53.683 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:48:53.681 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:48:53.615 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 05:48:53.763 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 05:49:28.604 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51398 10 6452 1 2025-11-07 05:50:28.962 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43350 10 6452 1 2025-11-07 05:51:29.367 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52044 10 6452 1 2025-11-07 05:46:56.527 00:06:00.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 05:52:29.773 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55770 10 6452 1 2025-11-07 05:53:30.186 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47784 10 6452 1 2025-11-07 05:53:53.588 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 05:53:53.310 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:53:53.591 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 05:53:53.630 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 05:53:53.674 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 05:48:56.526 00:06:00.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 05:54:30.589 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57856 10 6452 1 2025-11-07 05:55:30.991 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42364 10 6452 1 2025-11-07 05:56:31.408 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:48080 10 6452 1 2025-11-07 05:57:31.767 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58914 10 6452 1 2025-11-07 05:58:32.185 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56830 10 6452 1 Summary: total flows: 136, total bytes: 420043, total packets: 1008, avg bps: 921, avg pps: 0, avg bpp: 416 Time window: 2025-11-07 04:57:56 - 2025-11-07 05:58:42 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0052s User: 0.0009s Wall: 0.0028s flows/second: 49293.6 Runtime: 0.0028s