Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 01:58:59.818 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 01:58:59.764 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 01:58:59.804 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 01:58:59.819 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 01:58:59.888 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 01:59:19.538 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47160 10 6452 1 2025-10-28 02:00:19.940 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:57084 10 6452 1 2025-10-28 01:55:51.187 00:06:00.328 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 02:01:20.323 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:36934 10 6452 1 2025-10-28 01:56:51.188 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 02:02:20.686 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46450 10 6452 1 2025-10-28 02:03:21.115 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59922 10 6452 1 2025-10-28 02:04:00.177 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 02:03:59.912 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:04:00.178 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:04:00.178 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 02:04:00.260 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 02:04:21.530 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:41012 10 6452 1 2025-10-28 02:05:21.945 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:48096 10 6452 1 2025-10-28 02:06:22.313 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59704 10 6452 1 2025-10-28 02:07:22.711 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55558 10 6452 1 2025-10-28 02:02:51.187 00:06:00.328 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 02:08:23.120 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59908 10 6452 1 2025-10-28 02:03:51.192 00:06:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 02:09:00.319 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 02:09:00.324 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:09:00.155 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:09:00.319 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 02:09:00.238 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 02:09:23.531 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46416 10 6452 1 2025-10-28 02:10:23.933 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:38684 10 6452 1 2025-10-28 02:11:24.348 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59966 10 6452 1 2025-10-28 02:12:24.744 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60648 10 6452 1 2025-10-28 02:13:25.149 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35578 10 6452 1 2025-10-28 02:14:00.687 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 02:14:00.603 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:14:00.543 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 02:14:00.416 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 02:14:00.153 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:14:25.559 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55954 10 6452 1 2025-10-28 02:09:51.195 00:06:00.321 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 02:15:25.921 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32994 10 6452 1 2025-10-28 02:10:51.197 00:06:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 02:16:26.326 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55026 10 6452 1 2025-10-28 02:17:26.736 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50176 10 6452 1 2025-10-28 02:18:27.141 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48340 10 6452 1 2025-10-28 02:19:00.474 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 02:19:00.549 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:19:00.572 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:19:00.537 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 02:19:00.654 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 02:19:27.538 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49084 10 6452 1 2025-10-28 02:20:27.899 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:41302 12 6556 1 2025-10-28 02:21:28.314 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46560 10 6452 1 2025-10-28 02:16:51.199 00:06:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 02:22:28.719 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:37178 10 6452 1 2025-10-28 02:17:51.202 00:06:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 02:23:29.138 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52052 10 6452 1 2025-10-28 02:24:00.867 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 02:24:00.772 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 02:24:00.810 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:24:00.783 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:24:00.827 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 02:24:29.558 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36550 10 6452 1 2025-10-28 02:25:29.960 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:57206 10 6452 1 2025-10-28 02:26:30.332 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51894 10 6452 1 2025-10-28 02:27:30.733 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46146 10 6452 1 2025-10-28 02:28:31.142 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46100 10 6452 1 2025-10-28 02:23:51.200 00:06:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 02:29:00.715 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 02:29:00.721 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 02:29:00.726 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:29:00.632 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:29:00.536 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 02:29:31.546 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35484 10 6452 1 2025-10-28 02:24:51.203 00:06:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 02:30:31.955 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52400 10 6452 1 2025-10-28 02:31:32.362 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:60844 10 6452 1 2025-10-28 02:32:32.722 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54500 10 6452 1 2025-10-28 02:33:33.138 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:37452 10 6452 1 2025-10-28 02:34:00.752 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 02:34:00.478 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:34:00.698 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:34:00.746 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 02:34:00.781 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 02:34:33.539 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:52794 10 6452 1 2025-10-28 02:35:33.899 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46348 10 6452 1 2025-10-28 02:30:51.202 00:06:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 02:36:34.319 00:00:11.060 TCP 1.101.0.1:3000 -> 23.104.0.1:44984 10 6452 1 2025-10-28 02:31:51.204 00:06:00.313 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 02:37:35.417 00:00:10.680 TCP 1.101.0.1:3000 -> 23.104.0.1:32860 10 6452 1 2025-10-28 02:39:00.847 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 02:39:00.706 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:39:00.852 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:39:00.940 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 02:38:36.139 00:00:24.277 TCP 1.101.0.1:3000 -> 23.104.0.1:39678 10 6452 1 2025-10-28 02:39:00.934 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 02:39:50.526 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40030 10 6452 1 2025-10-28 02:40:50.922 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52790 10 6452 1 2025-10-28 02:41:51.325 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58880 10 6452 1 2025-10-28 02:37:51.203 00:06:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 02:42:51.728 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42142 10 6452 1 2025-10-28 02:38:51.208 00:06:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 02:44:00.901 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:44:01.340 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 02:43:52.135 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48676 10 6452 1 2025-10-28 02:44:01.195 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 02:44:01.258 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:44:01.198 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 02:44:52.533 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51766 10 6452 1 2025-10-28 02:45:52.929 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:58474 10 6452 1 2025-10-28 02:46:53.359 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44818 10 6452 1 2025-10-28 02:47:53.773 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45604 10 6452 1 2025-10-28 02:49:01.081 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 02:49:01.103 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:48:54.184 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49210 10 6452 1 2025-10-28 02:49:01.135 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:49:01.189 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 02:49:01.218 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 02:44:51.208 00:06:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 02:49:54.587 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60910 10 6452 1 2025-10-28 02:45:51.210 00:06:00.309 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 02:50:54.998 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34862 10 6452 1 2025-10-28 02:51:55.407 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57698 10 6452 1 2025-10-28 02:52:55.814 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45526 10 6452 1 2025-10-28 02:54:01.301 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 02:54:00.943 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 02:54:00.976 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:54:01.218 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 02:54:01.211 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 02:53:56.214 00:00:10.459 TCP 1.101.0.1:3000 -> 23.104.0.1:40688 10 6452 1 2025-10-28 02:54:56.713 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44938 10 6452 1 2025-10-28 02:55:57.118 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:36556 10 6452 1 2025-10-28 02:51:51.209 00:06:00.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 02:56:57.478 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:41920 10 6452 1 2025-10-28 02:52:51.212 00:06:00.310 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 02:57:57.885 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:54426 10 6452 1 Summary: total flows: 137, total bytes: 411390, total packets: 1024, avg bps: 870, avg pps: 0, avg bpp: 401 Time window: 2025-10-28 01:55:51 - 2025-10-28 02:58:51 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0019s User: 0.0037s Wall: 0.0027s flows/second: 50627.3 Runtime: 0.0027s