Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-27 08:59:14.721 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 08:59:14.653 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 08:59:14.608 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 08:59:14.778 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 08:59:14.864 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 08:59:37.558 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37830 10 6452 1 2025-07-27 08:55:03.261 00:06:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 09:00:37.955 00:00:10.681 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 10 6452 1 2025-07-27 09:01:38.674 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:56604 10 6452 1 2025-07-27 09:02:39.038 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52290 10 6452 1 2025-07-27 09:03:39.442 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49946 10 6452 1 2025-07-27 09:04:14.965 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 09:04:14.970 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 09:04:14.879 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 09:04:14.840 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:04:14.883 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:04:39.846 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:53492 10 6452 1 2025-07-27 09:00:03.259 00:06:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 09:05:40.280 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41252 10 6452 1 2025-07-27 09:06:40.696 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:59272 10 6452 1 2025-07-27 09:02:03.262 00:06:00.339 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 09:07:41.142 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47944 10 6452 1 2025-07-27 09:08:41.511 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51688 10 6452 1 2025-07-27 09:09:15.232 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 09:09:15.157 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 09:09:15.080 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 09:09:14.994 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:09:15.150 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:09:41.916 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41512 10 6452 1 2025-07-27 09:10:42.331 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34132 10 6452 1 2025-07-27 09:11:42.733 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:42682 10 6452 1 2025-07-27 09:07:03.262 00:06:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 09:12:43.118 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51406 10 6452 1 2025-07-27 09:13:43.533 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55068 10 6452 1 2025-07-27 09:09:03.265 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 09:14:14.885 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 09:14:14.928 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:14:15.080 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 09:14:15.089 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:14:15.172 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 09:14:43.942 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:40200 10 6452 1 2025-07-27 09:15:44.319 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56304 10 6452 1 2025-07-27 09:16:44.728 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59026 10 6452 1 2025-07-27 09:17:45.136 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57188 10 6452 1 2025-07-27 09:18:45.533 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54368 10 6452 1 2025-07-27 09:14:03.263 00:06:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 09:19:14.976 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:19:15.224 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 09:19:15.145 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 09:19:15.088 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 09:19:15.142 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:19:45.941 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:50788 10 6452 1 2025-07-27 09:20:46.310 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42196 10 6452 1 2025-07-27 09:16:03.266 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 09:21:46.712 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35244 10 6452 1 2025-07-27 09:22:47.114 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55268 10 6452 1 2025-07-27 09:23:47.518 00:00:10.404 TCP 1.101.0.1:3000 -> 23.104.0.1:52662 12 10367 1 2025-07-27 09:24:15.187 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 09:24:15.327 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 09:24:15.103 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 09:24:15.206 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:24:15.105 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:24:47.962 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47196 10 6452 1 2025-07-27 09:25:48.362 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52060 10 6452 1 2025-07-27 09:21:03.266 00:06:00.343 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 09:26:48.727 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41704 10 6452 1 2025-07-27 09:27:49.134 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34230 10 6452 1 2025-07-27 09:23:03.269 00:06:00.339 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 09:28:49.537 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46354 10 6452 1 2025-07-27 09:29:15.234 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 09:29:15.355 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 09:29:15.070 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:29:15.237 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:29:15.318 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 09:29:49.897 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41416 10 6452 1 2025-07-27 09:30:50.304 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48660 10 6452 1 2025-07-27 09:31:50.665 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37448 10 6452 1 2025-07-27 09:32:51.101 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34330 10 6452 1 2025-07-27 09:28:03.269 00:06:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 09:33:51.513 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36790 10 6452 1 2025-07-27 09:34:15.326 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 09:34:15.146 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 09:34:15.186 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:34:15.333 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:34:15.417 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 09:30:03.272 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 09:34:51.922 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47962 10 6452 1 2025-07-27 09:35:52.321 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58362 10 6452 1 2025-07-27 09:36:52.723 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:37174 10 6452 1 2025-07-27 09:37:53.139 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35672 10 6452 1 2025-07-27 09:38:53.542 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50124 10 6452 1 2025-07-27 09:39:15.677 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 09:39:15.594 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:39:15.409 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 09:39:15.544 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 09:39:15.505 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:35:03.271 00:06:00.342 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 09:39:53.912 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46236 10 6452 1 2025-07-27 09:40:54.327 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45430 10 6452 1 2025-07-27 09:37:03.275 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 09:41:54.750 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:57374 10 6452 1 2025-07-27 09:42:55.119 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56172 10 6452 1 2025-07-27 09:43:55.524 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55302 10 6452 1 2025-07-27 09:44:15.663 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 09:44:15.637 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 09:44:15.701 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 09:44:15.235 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:44:15.580 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:44:55.934 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39442 10 6452 1 2025-07-27 09:45:56.355 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:52114 10 6452 1 2025-07-27 09:42:03.273 00:06:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 09:46:56.725 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54222 10 6452 1 2025-07-27 09:47:57.134 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55748 10 6452 1 2025-07-27 09:44:03.276 00:06:00.357 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 09:48:57.532 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51378 10 6452 1 2025-07-27 09:49:15.544 00:00:00.030 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 09:49:15.771 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 09:49:15.567 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:49:15.771 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:49:15.853 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 09:49:57.893 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:37678 10 6452 1 2025-07-27 09:50:58.314 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39358 10 6452 1 2025-07-27 09:51:58.716 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:44086 10 6452 1 2025-07-27 09:52:59.103 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60502 10 6452 1 2025-07-27 09:49:03.274 00:06:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-07-27 09:53:59.503 00:00:10.421 TCP 1.101.0.1:3000 -> 23.104.0.1:48900 11 6504 1 2025-07-27 09:54:16.327 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-07-27 09:54:15.921 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-07-27 09:54:15.918 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-07-27 09:54:16.093 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:54:16.243 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-07-27 09:54:59.965 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44734 10 6452 1 2025-07-27 09:51:03.278 00:06:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-07-27 09:56:00.327 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37482 10 6452 1 2025-07-27 09:57:00.738 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50098 10 6452 1 2025-07-27 09:58:01.147 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:38638 10 6452 1 Summary: total flows: 136, total bytes: 414392, total packets: 1011, avg bps: 875, avg pps: 0, avg bpp: 409 Time window: 2025-07-27 08:55:03 - 2025-07-27 09:58:11 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0018s User: 0.0027s Wall: 0.0018s flows/second: 77188.8 Runtime: 0.0018s