Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-27 11:59:16.454 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 11:59:16.330 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 11:59:16.361 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 11:59:16.332 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 11:59:16.415 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 11:59:23.866 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51638 10 6452 1 2025-09-27 12:00:24.273 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:59562 10 6452 1 2025-09-27 11:55:35.693 00:06:00.198 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 12:01:24.682 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:58430 10 6452 1 2025-09-27 11:56:35.690 00:06:00.204 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 12:02:25.061 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45934 10 6452 1 2025-09-27 12:03:25.477 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37298 10 6452 1 2025-09-27 12:04:16.515 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 12:04:16.583 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 12:04:16.515 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 12:04:16.448 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:04:16.432 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:04:25.882 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38960 10 6452 1 2025-09-27 12:05:26.288 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:47406 10 6452 1 2025-09-27 12:06:26.706 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48504 10 6452 1 2025-09-27 12:02:35.694 00:06:00.201 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 12:07:27.114 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:53890 12 10367 1 2025-09-27 12:08:27.548 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47232 10 6452 1 2025-09-27 12:03:35.691 00:06:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 12:09:16.560 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 12:09:16.641 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 12:09:16.727 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 12:09:16.708 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:09:16.477 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:09:27.949 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35642 10 6452 1 2025-09-27 12:10:28.357 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:45126 10 6452 1 2025-09-27 12:11:28.759 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46710 10 6452 1 2025-09-27 12:12:29.121 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48900 10 6452 1 2025-09-27 12:13:29.524 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55350 10 6452 1 2025-09-27 12:14:16.786 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 12:14:16.938 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 12:14:16.730 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:14:16.700 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:14:16.783 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 12:09:35.696 00:06:00.200 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 12:14:29.923 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41178 10 6452 1 2025-09-27 12:10:35.693 00:06:00.206 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 12:15:30.329 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37910 10 6452 1 2025-09-27 12:16:30.738 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43270 10 6452 1 2025-09-27 12:17:31.143 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34680 10 6452 1 2025-09-27 12:18:31.548 00:00:10.793 TCP 1.101.0.1:3000 -> 23.104.0.1:36590 10 6452 1 2025-09-27 12:19:16.951 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 12:19:16.707 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 12:19:16.804 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 12:19:16.741 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:19:16.868 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:19:32.384 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49088 10 6452 1 2025-09-27 12:20:32.743 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40908 10 6452 1 2025-09-27 12:16:35.710 00:06:00.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 12:21:33.150 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37604 10 6452 1 2025-09-27 12:17:35.705 00:06:00.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 12:22:33.555 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43842 10 6452 1 2025-09-27 12:23:33.922 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:44566 10 6452 1 2025-09-27 12:24:16.849 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 12:24:16.967 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 12:24:16.700 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:24:16.975 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:24:17.067 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 12:24:34.371 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45470 10 6452 1 2025-09-27 12:25:34.779 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38830 10 6452 1 2025-09-27 12:26:35.142 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47926 10 6452 1 2025-09-27 12:27:35.544 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40760 10 6452 1 2025-09-27 12:23:35.708 00:06:00.189 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 12:28:35.947 00:00:10.467 TCP 1.101.0.1:3000 -> 23.104.0.1:52606 10 6452 1 2025-09-27 12:29:16.983 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:29:17.075 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 12:29:16.972 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 12:29:17.126 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:29:17.065 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 12:24:35.711 00:06:00.189 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 12:29:36.449 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43134 10 6452 1 2025-09-27 12:30:36.848 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:58476 10 6452 1 2025-09-27 12:31:37.241 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35320 10 6452 1 2025-09-27 12:32:37.651 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57982 10 6452 1 2025-09-27 12:33:38.055 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34260 10 6452 1 2025-09-27 12:34:17.042 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 12:34:17.115 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:34:17.177 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:34:17.119 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 12:34:17.260 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 12:34:38.463 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40048 10 6452 1 2025-09-27 12:30:35.710 00:06:00.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 12:35:38.869 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:37534 10 6452 1 2025-09-27 12:31:35.709 00:06:00.193 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 12:36:39.280 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59226 10 6452 1 2025-09-27 12:37:39.691 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:44842 10 6452 1 2025-09-27 12:38:40.122 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48264 10 6452 1 2025-09-27 12:39:17.253 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:39:17.252 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 12:39:17.172 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 12:39:17.217 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:39:17.336 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 12:39:40.533 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41234 10 6452 1 2025-09-27 12:40:40.940 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:58212 10 6452 1 2025-09-27 12:41:41.316 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59664 10 6452 1 2025-09-27 12:37:35.712 00:06:00.189 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 12:42:41.725 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:54026 10 6452 1 2025-09-27 12:38:35.710 00:06:00.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 12:43:42.112 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41810 10 6452 1 2025-09-27 12:44:17.474 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 12:44:17.324 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:44:17.391 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:44:17.398 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 12:44:17.459 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 12:44:42.518 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52956 10 6452 1 2025-09-27 12:45:42.927 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:58950 10 6452 1 2025-09-27 12:46:43.347 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45676 10 6452 1 2025-09-27 12:47:43.754 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:53234 10 6452 1 2025-09-27 12:48:44.112 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53744 10 6452 1 2025-09-27 12:49:17.431 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:49:17.430 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 12:49:17.483 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 12:49:17.215 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:49:17.513 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 12:44:35.712 00:06:00.189 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 12:49:44.520 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45890 10 6452 1 2025-09-27 12:45:35.709 00:06:00.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 12:50:44.921 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:53612 10 6452 1 2025-09-27 12:51:45.342 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45942 10 6452 1 2025-09-27 12:52:45.746 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50314 10 6452 1 2025-09-27 12:53:46.117 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52870 10 6452 1 2025-09-27 12:54:17.530 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:54:17.530 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 12:54:17.525 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 12:54:17.525 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 12:54:17.615 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 12:54:46.520 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51250 10 6452 1 2025-09-27 12:55:46.923 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:37436 10 6452 1 2025-09-27 12:51:35.713 00:06:00.189 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 12:56:47.301 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:59814 12 10367 1 2025-09-27 12:52:35.711 00:06:00.195 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 12:57:47.783 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51650 10 6452 1 Summary: total flows: 137, total bytes: 419116, total packets: 1026, avg bps: 886, avg pps: 0, avg bpp: 408 Time window: 2025-09-27 11:55:35 - 2025-09-27 12:58:35 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0032s User: 0.0008s Wall: 0.0020s flows/second: 68948.8 Runtime: 0.0020s