Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-07 22:59:14.071 00:00:00.036 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 22:59:14.219 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 22:59:13.745 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 22:59:13.989 00:00:00.036 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 22:59:14.311 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 22:59:18.742 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46994 10 6452 1 2025-11-07 23:00:19.113 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50178 10 6452 1 2025-11-07 22:55:56.924 00:06:00.071 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 23:01:19.509 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52232 10 6452 1 2025-11-07 23:02:19.911 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37244 10 6452 1 2025-11-07 22:57:56.921 00:06:00.076 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 23:03:20.275 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34242 10 6452 1 2025-11-07 23:04:14.361 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 23:04:14.278 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:04:14.256 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:04:14.322 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 23:04:14.338 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 23:04:20.676 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36126 10 6452 1 2025-11-07 23:05:21.111 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58510 10 6452 1 2025-11-07 23:06:21.516 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52880 10 6452 1 2025-11-07 23:07:21.926 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:52370 10 6452 1 2025-11-07 23:02:56.927 00:06:00.068 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 23:08:22.353 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49242 10 6452 1 2025-11-07 23:04:56.925 00:05:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-07 23:09:14.446 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 23:09:14.236 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:09:14.487 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:09:14.379 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 23:09:14.571 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 23:09:22.759 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44848 10 6452 1 2025-11-07 23:10:23.173 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37394 10 6452 1 2025-11-07 23:11:23.578 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34930 10 6452 1 2025-11-07 23:12:23.980 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58990 10 6452 1 2025-11-07 23:13:24.390 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58944 10 6452 1 2025-11-07 23:09:56.930 00:05:00.070 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-07 23:14:14.541 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:14:14.425 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 23:14:14.276 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 23:14:14.289 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:14:14.624 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 23:14:24.799 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50838 10 6452 1 2025-11-07 23:10:56.933 00:05:00.071 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-07 23:15:25.203 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37640 10 6452 1 2025-11-07 23:16:25.566 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:58128 10 6452 1 2025-11-07 23:17:25.931 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:39206 10 6452 1 2025-11-07 23:18:26.325 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37952 10 6452 1 2025-11-07 23:19:14.550 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 23:19:14.517 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:19:14.504 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:19:14.556 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 23:19:14.587 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 23:19:26.731 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45062 10 6452 1 2025-11-07 23:15:56.933 00:05:00.069 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-07 23:20:27.138 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44462 10 6452 1 2025-11-07 23:16:56.929 00:05:00.075 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-07 23:21:27.552 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:44132 10 6452 1 2025-11-07 23:22:27.980 00:00:10.482 TCP 1.101.0.1:3000 -> 23.104.0.1:36612 10 6452 1 2025-11-07 23:23:28.503 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34792 10 6452 1 2025-11-07 23:24:14.816 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 23:24:14.815 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 23:24:14.657 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:24:14.733 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:24:14.801 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 23:24:28.915 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51876 10 6452 1 2025-11-07 23:25:29.323 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52212 10 6452 1 2025-11-07 23:21:56.933 00:05:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-07 23:26:29.725 00:00:11.054 TCP 1.101.0.1:3000 -> 23.104.0.1:56222 10 6452 1 2025-11-07 23:22:56.931 00:05:00.082 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-07 23:27:30.815 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49582 10 6452 1 2025-11-07 23:28:31.189 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43558 10 6452 1 2025-11-07 23:29:14.779 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 23:29:14.781 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:29:14.697 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:29:14.771 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 23:29:14.695 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 23:29:31.590 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48290 10 6452 1 2025-11-07 23:30:31.948 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56874 10 6452 1 2025-11-07 23:31:32.358 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35226 10 6452 1 2025-11-07 23:27:56.934 00:05:00.099 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-07 23:32:32.768 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33060 10 6452 1 2025-11-07 23:28:56.932 00:05:00.103 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-07 23:33:33.181 00:00:10.530 TCP 1.101.0.1:3000 -> 23.104.0.1:54180 10 6452 1 2025-11-07 23:34:14.664 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 23:34:14.897 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 23:34:14.719 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:34:14.581 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:34:15.008 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 23:34:33.754 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57802 10 6452 1 2025-11-07 23:35:34.150 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49940 10 6452 1 2025-11-07 23:36:34.550 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51108 10 6452 1 2025-11-07 23:37:34.964 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:52918 12 10375 1 2025-11-07 23:33:56.940 00:05:00.095 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-07 23:38:35.399 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53086 10 6452 1 2025-11-07 23:34:56.937 00:05:00.100 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-07 23:39:14.911 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 23:39:14.777 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:39:14.972 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:39:14.638 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 23:39:15.056 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 23:39:35.813 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35150 10 6452 1 2025-11-07 23:40:36.215 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:32876 12 6556 1 2025-11-07 23:41:36.619 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44282 10 6452 1 2025-11-07 23:42:37.021 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36400 10 6452 1 2025-11-07 23:43:37.387 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36858 10 6452 1 2025-11-07 23:39:56.939 00:05:00.096 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-07 23:44:15.252 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 23:44:14.808 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:44:15.173 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:44:15.252 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 23:44:15.256 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 23:44:37.795 00:00:10.605 TCP 1.101.0.1:3000 -> 23.104.0.1:54394 10 6452 1 2025-11-07 23:40:56.937 00:05:00.102 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-07 23:45:38.437 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43438 10 6452 1 2025-11-07 23:46:38.842 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:45594 10 6452 1 2025-11-07 23:47:39.274 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:41238 10 6452 1 2025-11-07 23:48:39.679 00:00:10.758 TCP 1.101.0.1:3000 -> 23.104.0.1:45166 10 6452 1 2025-11-07 23:49:15.093 00:00:00.042 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 23:49:15.007 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 23:49:15.143 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 23:49:15.054 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:49:15.011 00:00:00.041 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:49:40.476 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47778 10 6452 1 2025-11-07 23:45:56.941 00:05:00.103 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-07 23:50:40.878 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47546 10 6452 1 2025-11-07 23:46:56.940 00:05:00.108 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-07 23:51:41.288 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:57292 10 6452 1 2025-11-07 23:52:41.675 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42760 10 6452 1 2025-11-07 23:53:42.101 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57342 10 6452 1 2025-11-07 23:54:15.409 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 23:54:15.269 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:54:15.322 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 23:54:15.136 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 23:54:15.405 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 23:54:42.505 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36378 10 6452 1 2025-11-07 23:55:42.909 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35848 10 6452 1 2025-11-07 23:51:56.943 00:05:00.110 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-11-07 23:56:43.319 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36522 10 6452 1 2025-11-07 23:52:56.941 00:05:00.115 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-11-07 23:57:43.690 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35470 10 6452 1 Summary: total flows: 139, total bytes: 414944, total packets: 1020, avg bps: 892, avg pps: 0, avg bpp: 406 Time window: 2025-11-07 22:55:56 - 2025-11-07 23:57:57 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0036s User: 0.0012s Wall: 0.0016s flows/second: 89322.5 Runtime: 0.0016s