Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 13:59:32.554 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 13:59:32.242 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 13:59:31.894 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:59:32.468 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 13:59:32.498 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 13:59:20.924 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:40978 10 6452 1 2025-11-08 13:54:57.243 00:06:00.087 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 14:00:21.356 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33500 10 6452 1 2025-11-08 13:55:57.240 00:06:00.092 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 14:01:21.766 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:48056 10 6452 1 2025-11-08 14:02:22.186 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:53190 10 6452 1 2025-11-08 14:03:22.544 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54232 10 6452 1 2025-11-08 14:04:22.949 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35730 10 6452 1 2025-11-08 14:04:32.518 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 14:04:32.009 00:00:00.053 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:04:32.420 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:04:32.574 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 14:04:32.503 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 14:05:23.369 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57688 10 6452 1 2025-11-08 14:06:23.732 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37272 10 6452 1 2025-11-08 14:01:57.242 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 14:07:24.141 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37020 10 6452 1 2025-11-08 14:02:57.240 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 14:08:24.545 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47194 10 6452 1 2025-11-08 14:09:32.383 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 14:09:24.947 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41286 10 6452 1 2025-11-08 14:09:32.363 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 14:09:32.274 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:09:32.300 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:09:32.369 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 14:10:25.355 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:39876 10 6452 1 2025-11-08 14:11:25.750 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57890 10 6452 1 2025-11-08 14:12:26.153 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33360 10 6452 1 2025-11-08 14:13:26.555 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44238 10 6452 1 2025-11-08 14:08:57.244 00:06:00.092 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 14:14:32.535 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 14:14:32.063 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:14:32.535 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:14:32.579 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 14:14:32.618 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 14:14:26.960 00:00:10.706 TCP 1.101.0.1:3000 -> 23.104.0.1:49050 10 6452 1 2025-11-08 14:09:57.242 00:06:00.098 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 14:15:27.709 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47218 10 6452 1 2025-11-08 14:16:28.113 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55822 10 6452 1 2025-11-08 14:17:28.526 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40638 10 6452 1 2025-11-08 14:18:28.891 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39112 12 6556 1 2025-11-08 14:19:32.503 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 14:19:32.484 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:19:32.766 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:19:32.878 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 14:19:32.850 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 14:19:29.302 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:51268 10 6452 1 2025-11-08 14:20:29.719 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45718 10 6452 1 2025-11-08 14:15:57.246 00:06:00.093 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 14:21:30.138 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43408 10 6452 1 2025-11-08 14:16:57.244 00:06:00.098 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 14:22:30.548 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:40284 10 6452 1 2025-11-08 14:23:30.916 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58850 10 6452 1 2025-11-08 14:24:32.704 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 14:24:32.584 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:24:32.704 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:24:32.526 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 14:24:32.787 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 14:24:31.318 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41442 10 6452 1 2025-11-08 14:25:31.728 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44866 10 6452 1 2025-11-08 14:26:32.137 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39596 10 6452 1 2025-11-08 14:27:32.537 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45772 10 6452 1 2025-11-08 14:22:57.246 00:06:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 14:28:32.941 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:46084 10 6452 1 2025-11-08 14:23:57.243 00:06:00.099 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 14:29:33.145 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 14:29:32.595 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:29:33.063 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:29:32.947 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 14:29:32.947 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 14:29:33.317 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49786 10 6452 1 2025-11-08 14:30:33.722 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:55558 10 6452 1 2025-11-08 14:31:34.144 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56450 10 6452 1 2025-11-08 14:32:34.550 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47992 10 6452 1 2025-11-08 14:33:34.952 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46182 10 6452 1 2025-11-08 14:34:33.069 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 14:34:32.715 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:34:32.781 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:34:32.952 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 14:34:32.864 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 14:34:35.317 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:53788 10 6452 1 2025-11-08 14:29:57.248 00:06:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 14:35:35.682 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:40308 10 6452 1 2025-11-08 14:30:57.246 00:06:00.099 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 14:36:36.071 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39894 10 6452 1 2025-11-08 14:37:36.472 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40400 10 6452 1 2025-11-08 14:38:36.870 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50026 10 6452 1 2025-11-08 14:39:33.377 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 14:39:33.011 00:00:00.043 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 14:39:33.129 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:39:33.294 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:39:33.343 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 14:39:37.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51448 10 6452 1 2025-11-08 14:40:37.679 00:00:11.048 TCP 1.101.0.1:3000 -> 23.104.0.1:54202 10 6452 1 2025-11-08 14:41:38.764 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:46924 10 6452 1 2025-11-08 14:36:57.253 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 14:42:39.135 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49318 10 6452 1 2025-11-08 14:37:57.250 00:06:00.097 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 14:43:39.538 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60722 10 6452 1 2025-11-08 14:44:33.211 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 14:44:33.164 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 14:44:32.895 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:44:33.128 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:44:33.076 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 14:44:39.946 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58964 10 6452 1 2025-11-08 14:45:40.360 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45454 10 6452 1 2025-11-08 14:46:40.763 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:44642 10 6452 1 2025-11-08 14:47:41.179 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52316 10 6452 1 2025-11-08 14:48:41.588 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54200 10 6452 1 2025-11-08 14:43:57.253 00:06:00.095 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 14:49:33.437 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 14:49:33.352 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:49:33.369 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:49:33.547 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 14:49:33.453 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 14:49:41.996 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34262 10 6452 1 2025-11-08 14:44:57.251 00:06:00.100 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 14:50:42.398 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52186 10 6452 1 2025-11-08 14:51:42.804 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34352 10 6452 1 2025-11-08 14:52:43.212 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58460 10 6452 1 2025-11-08 14:53:43.568 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:38052 10 6452 1 2025-11-08 14:54:33.333 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-08 14:54:33.257 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-08 14:54:33.320 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:54:33.251 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-08 14:54:33.109 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-08 14:54:43.941 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:33874 10 6452 1 2025-11-08 14:55:44.320 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44808 10 6452 1 2025-11-08 14:50:57.256 00:06:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-08 14:56:44.726 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:48368 10 6452 1 2025-11-08 14:51:57.253 00:06:00.100 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-08 14:57:45.112 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53642 10 6452 1 Summary: total flows: 137, total bytes: 411390, total packets: 1024, avg bps: 870, avg pps: 0, avg bpp: 401 Time window: 2025-11-08 13:54:57 - 2025-11-08 14:57:57 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0030s User: 0.0022s Wall: 0.0023s flows/second: 58844.8 Runtime: 0.0023s