Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 13:59:34.117 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-07 13:59:33.979 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-07 13:59:34.036 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 13:59:33.989 00:00:00.054 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 13:59:34.073 00:00:00.053 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-07 13:59:32.027 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47634 10 6452 1 2025-09-07 14:00:32.441 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54994 10 6452 1 2025-09-07 14:01:32.853 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:40448 10 6452 1 2025-09-07 13:58:25.963 00:05:00.141 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-07 14:02:33.243 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60402 10 6452 1 2025-09-07 14:03:33.644 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58118 10 6452 1 2025-09-07 14:00:25.961 00:05:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-07 14:04:34.209 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-07 14:04:34.312 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-07 14:04:34.122 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:04:34.317 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:04:34.400 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-07 14:04:34.057 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41614 10 6452 1 2025-09-07 14:05:34.458 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41406 10 6452 1 2025-09-07 14:06:34.867 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53114 10 6452 1 2025-09-07 14:07:35.274 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48998 10 6452 1 2025-09-07 14:04:25.966 00:05:00.139 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-07 14:08:35.634 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:38056 12 10365 1 2025-09-07 14:09:34.343 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-07 14:09:34.442 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-07 14:09:34.113 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:09:34.273 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:09:34.356 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-07 14:09:36.122 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60760 10 6452 1 2025-09-07 14:06:25.963 00:05:00.145 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-07 14:10:36.528 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:49798 10 6452 1 2025-09-07 14:11:36.938 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:53452 10 6452 1 2025-09-07 14:12:37.355 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53570 10 6452 1 2025-09-07 14:13:37.765 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:58834 10 6452 1 2025-09-07 14:14:34.299 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-07 14:14:34.206 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:14:34.381 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:14:34.280 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-07 14:10:25.968 00:05:00.138 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-07 14:14:34.463 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-07 14:14:38.185 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40732 10 6452 1 2025-09-07 14:15:38.590 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51956 10 6452 1 2025-09-07 14:12:25.968 00:05:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-07 14:16:38.991 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42244 10 6452 1 2025-09-07 14:17:39.397 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35280 10 6452 1 2025-09-07 14:18:39.797 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53552 10 6452 1 2025-09-07 14:19:34.422 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-07 14:19:34.410 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-07 14:19:34.495 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-07 14:19:34.369 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:19:34.339 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:19:40.191 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56684 10 6452 1 2025-09-07 14:16:25.973 00:05:00.136 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-07 14:20:40.597 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54234 10 6452 1 2025-09-07 14:21:41.005 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58934 10 6452 1 2025-09-07 14:18:25.971 00:05:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-07 14:22:41.411 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:41318 10 6452 1 2025-09-07 14:23:41.809 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:37476 10 6452 1 2025-09-07 14:24:34.670 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-07 14:24:34.469 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-07 14:24:34.473 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-07 14:24:34.412 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:24:34.586 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:24:42.223 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45020 10 6452 1 2025-09-07 14:25:42.583 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48308 10 6452 1 2025-09-07 14:22:25.973 00:05:00.138 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-07 14:26:42.983 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 10 6452 1 2025-09-07 14:27:43.398 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46076 10 6452 1 2025-09-07 14:24:25.972 00:05:00.142 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-07 14:28:43.798 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58814 10 6452 1 2025-09-07 14:29:34.946 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-07 14:29:34.673 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-07 14:29:34.786 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-07 14:29:34.455 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:29:34.865 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:29:44.203 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54526 10 6452 1 2025-09-07 14:30:44.610 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35392 10 6452 1 2025-09-07 14:31:45.018 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:36242 10 6452 1 2025-09-07 14:28:25.978 00:05:00.134 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-07 14:32:45.383 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40624 10 6452 1 2025-09-07 14:33:45.780 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55234 10 6452 1 2025-09-07 14:34:34.689 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-07 14:30:25.976 00:05:00.138 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-07 14:34:34.491 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-07 14:34:34.744 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-07 14:34:34.651 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:34:34.606 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:34:46.188 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50266 10 6452 1 2025-09-07 14:35:46.588 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52368 10 6452 1 2025-09-07 14:36:46.987 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38782 10 6452 1 2025-09-07 14:37:47.410 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52420 10 6452 1 2025-09-07 14:34:25.979 00:05:00.135 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-07 14:38:47.825 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43264 10 6452 1 2025-09-07 14:39:34.904 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-07 14:39:34.908 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-07 14:39:34.873 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-07 14:39:34.821 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:39:34.821 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:39:48.234 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33388 10 6452 1 2025-09-07 14:36:25.983 00:05:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-07 14:40:48.640 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53374 10 6452 1 2025-09-07 14:41:49.067 00:00:10.800 TCP 1.101.0.1:3000 -> 23.104.0.1:37968 10 6452 1 2025-09-07 14:42:49.916 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52214 10 6452 1 2025-09-07 14:43:50.322 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46630 10 6452 1 2025-09-07 14:40:25.985 00:05:00.129 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-07 14:44:34.924 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:44:35.183 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-07 14:44:35.102 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:44:35.098 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-07 14:44:35.142 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-07 14:44:50.732 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:43382 10 6452 1 2025-09-07 14:45:51.138 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54574 10 6452 1 2025-09-07 14:42:25.984 00:05:00.134 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-07 14:46:51.538 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50700 10 6452 1 2025-09-07 14:47:51.937 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:51996 10 6452 1 2025-09-07 14:48:52.363 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37676 10 6452 1 2025-09-07 14:49:34.685 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:49:34.950 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:49:35.033 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-07 14:49:35.103 00:00:00.036 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-07 14:49:35.296 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-07 14:49:52.764 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60738 10 6452 1 2025-09-07 14:46:25.987 00:05:00.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-07 14:50:53.179 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43220 10 6452 1 2025-09-07 14:51:53.584 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32828 10 6452 1 2025-09-07 14:48:25.986 00:05:00.132 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-09-07 14:52:53.989 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45182 10 6452 1 2025-09-07 14:53:54.395 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:40870 10 6452 1 2025-09-07 14:54:35.315 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-07 14:54:35.083 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-07 14:54:35.207 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:54:35.232 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-07 14:54:35.082 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-07 14:54:54.793 00:00:10.637 TCP 1.101.0.1:3000 -> 23.104.0.1:33930 10 6452 1 2025-09-07 14:55:55.467 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:56608 10 6452 1 2025-09-07 14:52:25.989 00:05:00.127 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-09-07 14:56:55.862 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47550 10 6452 1 2025-09-07 14:57:56.275 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52918 10 6452 1 2025-09-07 14:54:25.986 00:05:00.133 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 Summary: total flows: 139, total bytes: 414461, total packets: 1012, avg bps: 905, avg pps: 0, avg bpp: 409 Time window: 2025-09-07 13:58:25 - 2025-09-07 14:59:26 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0019s User: 0.0028s Wall: 0.0027s flows/second: 51407.1 Runtime: 0.0027s