Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 16:58:59.800 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 16:58:59.936 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 16:59:00.132 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 16:59:00.133 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 16:59:00.021 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 16:59:28.902 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51278 12 6556 1 2025-10-17 17:00:29.308 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60374 10 6452 1 2025-10-17 16:56:45.764 00:05:00.338 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 17:01:29.709 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50926 10 6452 1 2025-10-17 17:02:30.129 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:44964 12 10375 1 2025-10-17 17:03:30.605 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38002 10 6452 1 2025-10-17 17:04:00.145 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:04:00.239 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:04:00.072 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 17:04:00.174 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 17:04:00.322 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 17:04:31.017 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42060 10 6452 1 2025-10-17 17:00:45.762 00:05:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 17:05:31.417 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50706 10 6452 1 2025-10-17 17:06:31.827 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48462 10 6452 1 2025-10-17 17:02:45.777 00:05:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 17:07:32.229 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35074 10 6452 1 2025-10-17 17:08:32.588 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60486 10 6452 1 2025-10-17 17:09:00.624 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 17:09:00.439 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 17:09:00.443 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 17:09:00.237 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:09:00.541 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:09:32.997 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56154 10 6452 1 2025-10-17 17:10:33.404 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36260 10 6452 1 2025-10-17 17:06:45.776 00:05:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 17:11:33.807 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51254 10 6452 1 2025-10-17 17:12:34.215 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:38220 10 6452 1 2025-10-17 17:08:45.780 00:05:00.324 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 17:13:34.628 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:47852 10 6452 1 2025-10-17 17:14:00.423 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 17:14:00.430 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 17:14:00.291 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:14:00.163 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:14:00.245 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 17:14:35.037 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38908 10 6452 1 2025-10-17 17:15:35.447 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60564 10 6452 1 2025-10-17 17:16:35.856 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:32828 10 6452 1 2025-10-17 17:12:45.778 00:05:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 17:17:36.274 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34368 10 6452 1 2025-10-17 17:18:36.681 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:46676 10 6452 1 2025-10-17 17:14:45.781 00:05:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 17:19:00.652 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 17:19:00.516 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 17:19:00.480 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:19:00.516 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:19:00.598 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 17:19:37.094 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52756 10 6452 1 2025-10-17 17:20:37.498 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41614 10 6452 1 2025-10-17 17:21:37.902 00:00:11.029 TCP 1.101.0.1:3000 -> 23.104.0.1:53676 10 6452 1 2025-10-17 17:22:38.972 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59354 10 6452 1 2025-10-17 17:18:45.779 00:05:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 17:23:39.373 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42596 10 6452 1 2025-10-17 17:24:00.713 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 17:24:00.725 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 17:24:00.461 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 17:24:00.448 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:24:00.630 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:20:45.788 00:05:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 17:24:39.774 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39292 10 6452 1 2025-10-17 17:25:40.177 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47236 10 6452 1 2025-10-17 17:26:40.577 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54388 10 6452 1 2025-10-17 17:27:40.981 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43382 10 6452 1 2025-10-17 17:24:45.781 00:05:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 17:28:41.392 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57752 10 6452 1 2025-10-17 17:29:00.888 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 17:29:00.805 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:29:00.988 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 17:29:00.993 00:00:00.029 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 17:29:01.014 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:29:41.753 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38228 10 6452 1 2025-10-17 17:26:45.784 00:05:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 17:30:42.157 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42112 10 6452 1 2025-10-17 17:31:42.555 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37514 10 6452 1 2025-10-17 17:32:42.953 00:00:10.491 TCP 1.101.0.1:3000 -> 23.104.0.1:40350 14 14298 1 2025-10-17 17:33:43.483 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53160 10 6452 1 2025-10-17 17:34:00.925 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 17:34:01.032 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 17:34:00.750 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:34:00.833 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:34:00.916 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 17:30:45.783 00:05:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 17:34:43.889 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:55626 10 6452 1 2025-10-17 17:35:44.315 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38618 10 6452 1 2025-10-17 17:32:45.788 00:05:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 17:36:44.720 00:00:10.430 TCP 1.101.0.1:3000 -> 23.104.0.1:52224 11 6504 1 2025-10-17 17:37:45.192 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48804 10 6452 1 2025-10-17 17:38:45.595 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:38640 10 6452 1 2025-10-17 17:39:00.814 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 17:39:00.844 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:39:00.793 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:39:00.983 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 17:39:00.877 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 17:39:45.955 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56402 10 6452 1 2025-10-17 17:36:45.789 00:05:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 17:40:46.363 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:53926 10 6452 1 2025-10-17 17:41:46.744 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33482 10 6452 1 2025-10-17 17:38:45.793 00:05:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 17:42:47.149 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35254 10 6452 1 2025-10-17 17:43:47.551 00:00:10.410 TCP 1.101.0.1:3000 -> 23.104.0.1:37988 11 6504 1 2025-10-17 17:44:01.041 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 17:44:00.960 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 17:44:00.891 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 17:44:00.854 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:44:00.958 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:44:48.001 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54814 10 6452 1 2025-10-17 17:45:48.407 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35062 10 6452 1 2025-10-17 17:42:45.793 00:05:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 17:46:48.826 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:40150 10 6452 1 2025-10-17 17:47:49.226 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38506 10 6452 1 2025-10-17 17:44:45.794 00:05:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 17:49:01.410 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 17:49:01.499 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 17:49:01.321 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:49:01.540 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:48:49.623 00:00:10.690 TCP 1.101.0.1:3000 -> 23.104.0.1:47556 10 6452 1 2025-10-17 17:49:01.622 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 17:49:50.362 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43560 10 6452 1 2025-10-17 17:50:50.776 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38854 10 6452 1 2025-10-17 17:51:51.187 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:53044 12 10375 1 2025-10-17 17:48:45.794 00:05:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 17:52:51.637 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:50886 10 6452 1 2025-10-17 17:54:01.314 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 17:54:01.158 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:54:01.305 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 17:53:52.038 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48522 10 6452 1 2025-10-17 17:54:01.354 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 17:54:01.389 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 17:50:45.797 00:05:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 17:54:52.403 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36328 10 6452 1 2025-10-17 17:55:52.805 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:36032 10 6452 1 2025-10-17 17:56:53.220 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:42892 10 6452 1 2025-10-17 17:57:53.584 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48954 10 6452 1 2025-10-17 17:54:45.796 00:05:00.321 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 426448, total packets: 1022, avg bps: 902, avg pps: 0, avg bpp: 417 Time window: 2025-10-17 16:56:45 - 2025-10-17 17:59:46 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0050s User: 0.0012s Wall: 0.0021s flows/second: 67314.2 Runtime: 0.0021s