Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 09:59:03.171 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 09:59:02.935 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 09:59:03.075 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 09:59:02.925 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 09:59:03.008 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 09:59:01.389 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:57472 10 6452 1 2025-10-07 10:00:01.758 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45268 10 6452 1 2025-10-07 10:01:02.162 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58792 10 6452 1 2025-10-07 09:56:40.587 00:06:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 10:02:02.569 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56356 10 6452 1 2025-10-07 09:57:40.590 00:06:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 10:03:02.939 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:33812 10 6452 1 2025-10-07 10:04:02.849 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 10:04:02.993 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 10:04:02.873 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:04:03.003 00:00:00.042 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:04:03.084 00:00:00.043 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 10:04:03.324 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:37302 10 6452 1 2025-10-07 10:05:03.684 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:40194 10 6452 1 2025-10-07 10:06:04.107 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52142 10 6452 1 2025-10-07 10:07:04.508 00:00:10.915 TCP 1.101.0.1:3000 -> 23.104.0.1:60862 10 6452 1 2025-10-07 10:08:05.463 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45032 10 6452 1 2025-10-07 10:03:40.589 00:06:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 10:09:02.931 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 10:09:03.020 00:00:00.039 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 10:09:02.897 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:09:03.061 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:09:03.143 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 10:09:05.868 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38146 10 6452 1 2025-10-07 10:04:40.591 00:06:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 10:10:06.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45630 10 6452 1 2025-10-07 10:11:06.675 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53696 10 6452 1 2025-10-07 10:12:07.105 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:36094 10 6452 1 2025-10-07 10:13:07.467 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37016 10 6452 1 2025-10-07 10:14:03.186 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 10:14:02.856 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:14:03.057 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:14:02.908 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 10:14:03.140 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 10:14:07.872 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59770 10 6452 1 2025-10-07 10:15:08.276 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45266 10 6452 1 2025-10-07 10:10:40.590 00:06:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 10:16:08.679 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:40228 10 6452 1 2025-10-07 10:11:40.592 00:06:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 10:17:09.111 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50888 10 6452 1 2025-10-07 10:18:09.523 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33618 10 6452 1 2025-10-07 10:19:03.419 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 10:19:03.353 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 10:19:03.332 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:19:03.337 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:19:03.338 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 10:19:09.934 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:52146 10 6452 1 2025-10-07 10:20:10.360 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35310 10 6452 1 2025-10-07 10:21:10.762 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:45702 10 6452 1 2025-10-07 10:22:11.181 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49390 10 6452 1 2025-10-07 10:17:40.593 00:06:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 10:23:11.590 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44562 10 6452 1 2025-10-07 10:18:40.595 00:06:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 10:24:03.335 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 10:24:03.045 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 10:24:03.094 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:24:03.271 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:24:03.355 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 10:24:11.995 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:39992 12 10375 1 2025-10-07 10:25:12.497 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39240 10 6452 1 2025-10-07 10:26:12.902 00:00:10.494 TCP 1.101.0.1:3000 -> 23.104.0.1:48668 10 6452 1 2025-10-07 10:27:13.437 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45106 10 6452 1 2025-10-07 10:28:13.849 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:35922 10 6452 1 2025-10-07 10:29:03.420 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:29:03.559 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:29:03.462 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 10:29:03.462 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 10:29:03.642 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 10:29:14.298 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35632 10 6452 1 2025-10-07 10:24:40.594 00:06:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 10:30:14.700 00:00:10.859 TCP 1.101.0.1:3000 -> 23.104.0.1:41344 10 6452 1 2025-10-07 10:25:40.595 00:06:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 10:31:15.601 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43978 10 6452 1 2025-10-07 10:32:16.008 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38882 12 6556 1 2025-10-07 10:33:16.414 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46048 10 6452 1 2025-10-07 10:34:03.624 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 10:34:03.490 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 10:34:03.266 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:34:03.505 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:34:03.587 00:00:00.038 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 10:34:16.818 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52320 10 6452 1 2025-10-07 10:35:17.225 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46022 10 6452 1 2025-10-07 10:36:17.624 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46508 10 6452 1 2025-10-07 10:31:40.594 00:06:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 10:37:18.026 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:53228 10 6452 1 2025-10-07 10:32:40.597 00:06:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 10:38:18.425 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50748 10 6452 1 2025-10-07 10:39:04.300 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 10:39:03.687 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:39:04.213 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:39:04.232 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 10:39:04.298 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 10:39:18.787 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:43130 10 6452 1 2025-10-07 10:40:19.154 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60448 10 6452 1 2025-10-07 10:41:19.515 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52618 10 6452 1 2025-10-07 10:42:19.920 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:50910 10 6452 1 2025-10-07 10:43:20.336 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47930 10 6452 1 2025-10-07 10:38:40.597 00:06:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 10:44:03.690 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 10:44:03.751 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 10:44:03.745 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:44:03.693 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:44:03.775 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 10:44:20.738 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:53050 10 6452 1 2025-10-07 10:39:40.599 00:06:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 10:45:21.147 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49722 10 6452 1 2025-10-07 10:46:21.552 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38972 10 6452 1 2025-10-07 10:47:21.963 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53448 10 6452 1 2025-10-07 10:48:22.369 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43324 10 6452 1 2025-10-07 10:49:03.973 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 10:49:03.890 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 10:49:03.743 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 10:49:03.937 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:49:03.891 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:49:22.767 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:56448 10 6452 1 2025-10-07 10:50:23.138 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38244 10 6452 1 2025-10-07 10:45:40.597 00:06:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 10:51:23.540 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41134 10 6452 1 2025-10-07 10:46:40.600 00:06:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 10:52:23.945 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55160 10 6452 1 2025-10-07 10:53:24.361 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:42484 10 6452 1 2025-10-07 10:54:03.973 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 10:54:03.892 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 10:54:03.935 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 10:54:03.648 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:54:03.890 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 10:54:24.716 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38152 10 6452 1 2025-10-07 10:55:25.139 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:45118 10 6452 1 2025-10-07 10:56:25.549 00:00:10.773 TCP 1.101.0.1:3000 -> 23.104.0.1:42052 10 6452 1 2025-10-07 10:57:26.375 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59772 12 6556 1 2025-10-07 10:52:40.599 00:06:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 10:58:26.783 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50738 10 6452 1 2025-10-07 10:53:40.602 00:06:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 138, total bytes: 421869, total packets: 1038, avg bps: 892, avg pps: 0, avg bpp: 406 Time window: 2025-10-07 09:56:40 - 2025-10-07 10:59:40 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0038s User: 0.0013s Wall: 0.0024s flows/second: 57382.2 Runtime: 0.0024s