Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-07 18:59:09.566 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 18:59:09.512 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 18:59:09.615 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 18:59:09.658 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 18:59:09.698 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 18:59:30.396 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48472 10 6452 1 2025-11-07 19:00:30.798 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49258 10 6452 1 2025-11-07 19:01:31.205 00:00:10.424 TCP 1.101.0.1:3000 -> 23.104.0.1:38112 11 6504 1 2025-11-07 19:02:31.664 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37584 10 6452 1 2025-11-07 18:57:56.838 00:06:00.092 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 19:03:32.101 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54270 10 6452 1 2025-11-07 19:04:09.679 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 19:04:09.583 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:04:09.531 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:04:09.960 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 19:04:09.613 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 19:04:32.509 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38046 10 6452 1 2025-11-07 18:59:56.833 00:06:00.101 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 19:05:32.920 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42008 10 6452 1 2025-11-07 19:06:33.330 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60158 10 6452 1 2025-11-07 19:07:33.735 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48702 10 6452 1 2025-11-07 19:08:34.138 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47430 10 6452 1 2025-11-07 19:09:10.051 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 19:09:09.808 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 19:09:09.302 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:09:09.968 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:09:09.905 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 19:09:34.544 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50512 10 6452 1 2025-11-07 19:04:56.838 00:06:00.094 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 19:10:34.945 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45418 10 6452 1 2025-11-07 19:11:35.361 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55426 10 6452 1 2025-11-07 19:06:56.838 00:06:00.099 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 19:12:35.775 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59130 10 6452 1 2025-11-07 19:13:36.217 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38360 10 6452 1 2025-11-07 19:14:09.645 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 19:14:09.478 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:14:09.487 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:14:09.642 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 19:14:09.569 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 19:14:36.578 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55444 10 6452 1 2025-11-07 19:15:36.983 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33362 10 6452 1 2025-11-07 19:16:37.387 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40874 10 6452 1 2025-11-07 19:11:56.841 00:06:00.092 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 19:17:37.788 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46182 10 6452 1 2025-11-07 19:18:38.186 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37084 10 6452 1 2025-11-07 19:13:56.841 00:06:00.096 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 19:19:09.863 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 19:19:09.800 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:19:09.913 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:19:09.914 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 19:19:09.996 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 19:19:38.552 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:37216 10 6452 1 2025-11-07 19:20:38.981 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50282 10 6452 1 2025-11-07 19:21:39.386 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48938 10 6452 1 2025-11-07 19:22:39.795 00:00:10.430 TCP 1.101.0.1:3000 -> 23.104.0.1:60268 10 6452 1 2025-11-07 19:23:40.262 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46104 10 6452 1 2025-11-07 19:18:56.845 00:06:00.090 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 19:24:10.041 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 19:24:10.055 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 19:24:09.782 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:24:09.958 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:24:10.154 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 19:24:40.667 00:00:10.587 TCP 1.101.0.1:3000 -> 23.104.0.1:43476 10 6452 1 2025-11-07 19:25:41.295 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43280 10 6452 1 2025-11-07 19:20:56.845 00:06:00.093 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 19:26:41.701 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47736 10 6452 1 2025-11-07 19:27:42.111 00:00:10.518 TCP 1.101.0.1:3000 -> 23.104.0.1:46266 12 10375 1 2025-11-07 19:28:42.687 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42738 10 6452 1 2025-11-07 19:29:09.926 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 19:29:09.778 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 19:29:09.846 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:29:09.845 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:29:09.780 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 19:29:43.110 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54288 10 6452 1 2025-11-07 19:30:43.509 00:00:16.454 TCP 1.101.0.1:3000 -> 23.104.0.1:33352 10 6452 1 2025-11-07 19:25:56.850 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 19:31:50.015 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58604 10 6452 1 2025-11-07 19:27:56.847 00:06:00.097 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 19:32:50.380 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56304 10 6452 1 2025-11-07 19:33:50.787 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52608 10 6452 1 2025-11-07 19:34:09.894 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 19:34:09.980 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 19:34:09.851 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:34:09.811 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:34:10.067 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 19:34:51.189 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43946 10 6452 1 2025-11-07 19:35:51.594 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41220 10 6452 1 2025-11-07 19:36:52.002 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58818 10 6452 1 2025-11-07 19:32:56.850 00:06:00.092 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 19:37:52.401 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56676 10 6452 1 2025-11-07 19:38:52.806 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34448 10 6452 1 2025-11-07 19:39:09.971 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 19:39:10.234 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 19:39:09.945 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:39:09.888 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:39:10.205 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 19:34:56.850 00:06:00.095 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 19:39:53.208 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52286 10 6452 1 2025-11-07 19:40:53.606 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:52246 10 6452 1 2025-11-07 19:41:53.975 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50604 10 6452 1 2025-11-07 19:42:54.384 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56924 10 6452 1 2025-11-07 19:43:54.785 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57794 10 6452 1 2025-11-07 19:44:10.463 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 19:44:10.317 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:44:10.475 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:44:10.593 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 19:44:10.560 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 19:39:56.854 00:06:00.089 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 19:44:55.196 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34692 10 6452 1 2025-11-07 19:45:55.595 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37598 10 6452 1 2025-11-07 19:41:56.853 00:06:00.094 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 19:46:55.995 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56986 10 6452 1 2025-11-07 19:47:56.400 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57802 10 6452 1 2025-11-07 19:48:56.802 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:32796 10 6452 1 2025-11-07 19:49:10.345 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 19:49:10.288 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:49:10.261 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:49:10.423 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 19:49:10.342 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 19:49:57.215 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55658 10 6452 1 2025-11-07 19:50:57.620 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39526 10 6452 1 2025-11-07 19:46:56.861 00:06:00.085 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-11-07 19:51:58.021 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60904 10 6452 1 2025-11-07 19:52:58.426 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:34030 10 6452 1 2025-11-07 19:48:56.857 00:06:00.091 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-11-07 19:53:58.832 00:00:10.399 TCP 1.101.0.1:3000 -> 23.104.0.1:43822 10 6452 1 2025-11-07 19:54:10.492 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-11-07 19:54:10.345 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:54:10.407 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-11-07 19:54:10.415 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-11-07 19:54:10.491 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-11-07 19:54:59.270 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40210 10 6452 1 2025-11-07 19:55:59.634 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35618 10 6452 1 2025-11-07 19:57:00.033 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43252 12 6556 1 2025-11-07 19:58:00.439 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:53976 10 6452 1 Summary: total flows: 135, total bytes: 413643, total packets: 999, avg bps: 915, avg pps: 0, avg bpp: 414 Time window: 2025-11-07 18:57:56 - 2025-11-07 19:58:10 Total flows processed: 135, passed: 135, Blocks skipped: 0, Bytes read: 14104 Sys: 0.0051s User: 0.0010s Wall: 0.0020s flows/second: 66599.7 Runtime: 0.0021s