Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 04:59:32.708 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 04:59:32.746 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 04:59:32.617 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 04:59:32.657 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 04:59:32.741 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 04:59:33.115 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39508 10 6452 1 2025-10-29 05:00:33.477 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45176 10 6452 1 2025-10-29 04:56:51.689 00:05:00.369 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 05:01:33.886 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:51764 10 6452 1 2025-10-29 04:57:51.687 00:05:00.375 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 05:02:34.302 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36048 10 6452 1 2025-10-29 05:03:34.702 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58480 10 6452 1 2025-10-29 05:04:32.804 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 05:04:33.126 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 05:04:32.421 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 05:04:32.645 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:04:32.721 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:04:35.091 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51460 10 6452 1 2025-10-29 05:05:35.496 00:00:10.942 TCP 1.101.0.1:3000 -> 23.104.0.1:46848 10 6452 1 2025-10-29 05:06:36.473 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45018 10 6452 1 2025-10-29 05:02:51.693 00:05:00.369 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 05:07:36.874 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49954 10 6452 1 2025-10-29 05:03:51.691 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 05:08:37.279 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58074 10 6452 1 2025-10-29 05:09:32.871 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 05:09:32.738 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 05:09:32.738 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 05:09:32.760 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:09:32.788 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:09:37.695 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48272 10 6452 1 2025-10-29 05:10:38.107 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47448 10 6452 1 2025-10-29 05:11:38.469 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46046 10 6452 1 2025-10-29 05:12:38.881 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32796 10 6452 1 2025-10-29 05:08:51.694 00:05:00.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 05:13:39.285 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37900 10 6452 1 2025-10-29 05:09:51.692 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 05:14:32.841 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 05:14:32.892 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 05:14:32.676 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:14:32.758 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:14:32.892 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 05:14:39.694 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53840 10 6452 1 2025-10-29 05:15:40.112 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50890 10 6452 1 2025-10-29 05:16:40.479 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57886 10 6452 1 2025-10-29 05:17:40.902 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60552 12 6556 1 2025-10-29 05:18:41.312 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47484 10 6452 1 2025-10-29 05:14:51.695 00:05:00.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 05:19:32.896 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 05:19:32.894 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 05:19:32.905 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:19:32.740 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:19:32.823 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 05:15:51.692 00:05:00.374 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 05:19:41.717 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42212 10 6452 1 2025-10-29 05:20:42.130 00:00:10.948 TCP 1.101.0.1:3000 -> 23.104.0.1:48462 10 6452 1 2025-10-29 05:21:43.114 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36588 10 6452 1 2025-10-29 05:22:43.478 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47004 10 6452 1 2025-10-29 05:23:43.885 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43266 10 6452 1 2025-10-29 05:24:33.437 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 05:24:33.339 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:24:33.443 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:24:33.499 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 05:24:33.527 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 05:20:51.698 00:05:00.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 05:24:44.249 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37220 10 6452 1 2025-10-29 05:21:51.695 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 05:25:44.654 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40210 10 6452 1 2025-10-29 05:26:45.066 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:60026 10 6452 1 2025-10-29 05:27:45.468 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45652 10 6452 1 2025-10-29 05:28:45.866 00:00:10.829 TCP 1.101.0.1:3000 -> 23.104.0.1:58852 10 6452 1 2025-10-29 05:29:33.273 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 05:29:33.231 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 05:29:33.309 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 05:29:33.198 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:29:33.189 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:29:46.731 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42818 10 6452 1 2025-10-29 05:26:51.698 00:05:00.369 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 05:30:47.139 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55074 10 6452 1 2025-10-29 05:27:51.697 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 05:31:47.544 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33400 10 6452 1 2025-10-29 05:32:47.951 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54174 10 6452 1 2025-10-29 05:33:48.390 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38826 10 6452 1 2025-10-29 05:34:33.203 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 05:34:33.266 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 05:34:33.157 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:34:33.323 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:34:33.407 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 05:34:48.802 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50474 10 6452 1 2025-10-29 05:35:49.208 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37256 10 6452 1 2025-10-29 05:32:51.701 00:05:00.368 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 05:36:49.620 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33472 10 6452 1 2025-10-29 05:33:51.698 00:05:00.373 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 05:37:50.034 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37642 10 6452 1 2025-10-29 05:38:50.439 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59252 10 6452 1 2025-10-29 05:39:33.457 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 05:39:33.462 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 05:39:33.209 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 05:39:33.153 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:39:33.375 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:39:50.799 00:00:10.907 TCP 1.101.0.1:3000 -> 23.104.0.1:56000 10 6452 1 2025-10-29 05:40:51.743 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55384 10 6452 1 2025-10-29 05:41:52.152 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39280 10 6452 1 2025-10-29 05:38:51.706 00:05:00.364 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 05:42:52.554 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40130 10 6452 1 2025-10-29 05:39:51.705 00:05:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 05:43:52.956 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52026 10 6452 1 2025-10-29 05:44:33.823 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 05:44:34.073 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 05:44:33.694 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 05:44:33.391 00:00:00.041 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:44:33.740 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:44:53.363 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51492 10 6452 1 2025-10-29 05:45:53.729 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:36494 10 6452 1 2025-10-29 05:46:54.112 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37354 10 6452 1 2025-10-29 05:47:54.520 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:55938 10 6452 1 2025-10-29 05:44:51.708 00:05:00.363 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 05:48:54.919 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53474 10 6452 1 2025-10-29 05:49:33.597 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 05:49:33.575 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 05:49:33.415 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 05:49:33.577 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:49:33.513 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:45:51.706 00:05:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 05:49:55.323 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49194 10 6452 1 2025-10-29 05:50:55.726 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40908 12 6556 1 2025-10-29 05:51:56.138 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33372 10 6452 1 2025-10-29 05:52:56.506 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:51650 10 6452 1 2025-10-29 05:53:56.868 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47604 10 6452 1 2025-10-29 05:54:33.806 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 05:54:33.667 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 05:54:33.727 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 05:54:33.401 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:54:33.724 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 05:50:51.709 00:05:00.362 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 05:54:57.277 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50204 10 6452 1 2025-10-29 05:51:51.708 00:05:00.368 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 05:55:57.645 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45026 10 6452 1 2025-10-29 05:56:58.101 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57464 10 6452 1 2025-10-29 05:57:58.505 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49350 10 6452 1 Summary: total flows: 139, total bytes: 410756, total packets: 1014, avg bps: 893, avg pps: 0, avg bpp: 405 Time window: 2025-10-29 04:56:51 - 2025-10-29 05:58:08 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0029s User: 0.0022s Wall: 0.0022s flows/second: 63062.0 Runtime: 0.0022s