Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-07 10:59:34.850 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 10:59:34.560 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 10:59:34.850 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 10:59:34.852 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 10:59:34.933 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 10:59:34.518 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56442 10 6452 1 2025-08-07 11:00:34.924 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44978 10 6452 1 2025-08-07 11:01:35.336 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50566 10 6452 1 2025-08-07 10:58:08.965 00:05:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 11:02:35.743 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45198 10 6452 1 2025-08-07 11:03:36.149 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:49384 12 10367 1 2025-08-07 11:00:08.963 00:05:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-07 11:04:34.963 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 11:04:35.056 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 11:04:34.959 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:04:34.961 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:04:35.045 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 11:04:36.586 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50926 10 6452 1 2025-08-07 11:05:36.989 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37476 10 6452 1 2025-08-07 11:06:37.393 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36872 10 6452 1 2025-08-07 11:07:37.798 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41514 10 6452 1 2025-08-07 11:04:08.967 00:05:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 11:08:38.202 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37848 10 6452 1 2025-08-07 11:09:35.009 00:00:00.042 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 11:09:34.934 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:09:35.104 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:09:34.824 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 11:09:35.188 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 11:09:38.605 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49354 10 6452 1 2025-08-07 11:06:08.965 00:05:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-07 11:10:38.967 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47970 10 6452 1 2025-08-07 11:11:39.328 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47480 10 6452 1 2025-08-07 11:12:39.733 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35054 10 6452 1 2025-08-07 11:13:40.138 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:44922 12 10367 1 2025-08-07 11:10:08.967 00:05:00.148 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 11:14:35.082 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 11:14:34.923 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:14:34.890 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:14:35.082 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 11:14:34.972 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 11:14:40.578 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56454 10 6452 1 2025-08-07 11:15:40.941 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54128 10 6452 1 2025-08-07 11:12:08.966 00:05:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-07 11:16:41.357 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:54604 10 6452 1 2025-08-07 11:17:41.793 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58342 10 6452 1 2025-08-07 11:18:42.152 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55008 10 6452 1 2025-08-07 11:19:34.924 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 11:19:35.301 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:19:35.236 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:19:35.064 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 11:19:35.319 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 11:19:42.553 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:39930 10 6452 1 2025-08-07 11:16:08.970 00:05:00.146 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 11:20:42.922 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53366 10 6452 1 2025-08-07 11:21:43.334 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56916 10 6452 1 2025-08-07 11:18:08.970 00:05:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-07 11:22:43.736 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57492 10 6452 1 2025-08-07 11:23:44.141 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34856 10 6452 1 2025-08-07 11:24:35.292 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 11:24:34.974 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:24:35.408 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:24:35.061 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 11:24:35.491 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 11:24:44.548 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33638 10 6452 1 2025-08-07 11:25:44.951 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:33504 10 6452 1 2025-08-07 11:22:08.971 00:05:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 11:26:45.360 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:35826 10 6452 1 2025-08-07 11:27:45.722 00:00:10.667 TCP 1.101.0.1:3000 -> 23.104.0.1:51252 10 6452 1 2025-08-07 11:24:08.969 00:05:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-07 11:28:46.433 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38938 10 6452 1 2025-08-07 11:29:35.385 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 11:29:35.148 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:29:35.505 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:29:35.512 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 11:29:35.587 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 11:29:46.796 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45178 10 6452 1 2025-08-07 11:30:47.206 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44708 10 6452 1 2025-08-07 11:31:47.605 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46708 10 6452 1 2025-08-07 11:28:08.972 00:05:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 11:32:48.008 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33190 10 6452 1 2025-08-07 11:33:48.372 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53096 10 6452 1 2025-08-07 11:30:08.971 00:05:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-07 11:34:35.465 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 11:34:35.426 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:34:35.386 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:34:35.590 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 11:34:35.467 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 11:34:48.778 00:00:10.503 TCP 1.101.0.1:3000 -> 23.104.0.1:56264 10 6452 1 2025-08-07 11:35:49.318 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:51646 10 6452 1 2025-08-07 11:36:49.689 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56622 10 6452 1 2025-08-07 11:37:50.060 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33490 10 6452 1 2025-08-07 11:34:08.973 00:05:00.147 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 11:38:50.463 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:58230 10 6452 1 2025-08-07 11:39:35.755 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:39:35.945 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 11:39:35.817 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 11:39:35.813 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:39:35.840 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 11:39:50.829 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:52592 10 6452 1 2025-08-07 11:36:08.972 00:05:00.151 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-07 11:40:51.266 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46932 10 6452 1 2025-08-07 11:41:51.628 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33040 10 6452 1 2025-08-07 11:42:52.027 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:44792 10 6452 1 2025-08-07 11:43:52.386 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37854 10 6452 1 2025-08-07 11:40:08.982 00:05:00.141 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 11:44:35.807 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 11:44:35.776 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:44:35.666 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:44:35.810 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 11:44:35.750 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 11:44:52.792 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48608 10 6452 1 2025-08-07 11:45:53.196 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56386 10 6452 1 2025-08-07 11:42:08.973 00:05:00.152 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-07 11:46:53.597 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45300 10 6452 1 2025-08-07 11:47:54.027 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51752 10 6452 1 2025-08-07 11:48:54.435 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46534 10 6452 1 2025-08-07 11:49:35.946 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 11:49:35.964 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 11:49:35.547 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:49:35.863 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:49:36.113 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 11:49:54.859 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57690 10 6452 1 2025-08-07 11:46:08.979 00:05:00.143 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 11:50:55.273 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42354 10 6452 1 2025-08-07 11:51:55.676 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53886 10 6452 1 2025-08-07 11:48:08.977 00:05:00.150 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-08-07 11:52:56.040 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48654 10 6452 1 2025-08-07 11:53:56.443 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:43614 12 10365 1 2025-08-07 11:54:35.822 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-08-07 11:54:35.839 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:54:35.896 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-07 11:54:35.734 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-08-07 11:54:35.979 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-07 11:54:56.927 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:38092 10 6452 1 2025-08-07 11:55:57.362 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58000 10 6452 1 2025-08-07 11:52:08.984 00:05:00.140 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-08-07 11:56:57.768 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34568 10 6452 1 2025-08-07 11:57:58.175 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:39784 10 6452 1 2025-08-07 11:54:08.982 00:05:00.148 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 422291, total packets: 1016, avg bps: 922, avg pps: 0, avg bpp: 415 Time window: 2025-08-07 10:58:08 - 2025-08-07 11:59:09 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0047s User: 0.0000s Wall: 0.0028s flows/second: 49910.8 Runtime: 0.0028s