Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-27 01:59:04.565 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 01:59:04.425 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 01:58:52.539 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:53382 10 6452 1 2025-09-27 01:59:04.233 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 01:59:04.234 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 01:59:04.482 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 01:54:35.495 00:06:00.182 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 01:59:52.936 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:53194 10 6452 1 2025-09-27 02:00:53.356 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54588 10 6452 1 2025-09-27 02:01:53.763 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34784 10 6452 1 2025-09-27 02:02:54.179 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38770 10 6452 1 2025-09-27 02:04:04.524 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:04:04.517 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 02:03:54.584 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33842 10 6452 1 2025-09-27 02:04:04.522 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 02:04:04.381 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:04:04.606 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 02:04:54.985 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54664 10 6452 1 2025-09-27 02:00:35.499 00:06:00.179 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 02:05:55.391 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34216 10 6452 1 2025-09-27 02:01:35.498 00:06:00.184 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 02:06:55.826 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36724 10 6452 1 2025-09-27 02:07:56.191 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47740 10 6452 1 2025-09-27 02:09:04.709 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:09:04.565 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 02:09:04.647 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 02:09:04.397 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:09:04.791 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 02:08:56.602 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:58614 10 6452 1 2025-09-27 02:09:56.980 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54992 10 6452 1 2025-09-27 02:10:57.392 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38418 10 6452 1 2025-09-27 02:11:57.756 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:42030 10 6452 1 2025-09-27 02:07:35.502 00:06:00.178 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 02:12:58.184 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51776 10 6452 1 2025-09-27 02:08:35.500 00:06:00.183 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 02:14:04.955 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 02:14:04.961 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 02:14:04.729 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:14:04.953 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:13:58.597 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42830 10 6452 1 2025-09-27 02:14:05.036 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 02:14:59.004 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:59976 10 6452 1 2025-09-27 02:15:59.381 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:37596 10 6452 1 2025-09-27 02:16:59.742 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:36100 10 6452 1 2025-09-27 02:18:00.143 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41822 10 6452 1 2025-09-27 02:19:04.854 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 02:19:04.940 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 02:19:04.743 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:19:04.943 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:19:05.026 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 02:19:00.551 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57110 10 6452 1 2025-09-27 02:14:35.503 00:06:00.180 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 02:20:00.955 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35272 10 6452 1 2025-09-27 02:15:35.501 00:06:00.185 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 02:21:01.362 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54072 10 6452 1 2025-09-27 02:22:01.727 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:51804 10 6452 1 2025-09-27 02:23:02.109 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:58760 10 6452 1 2025-09-27 02:24:05.782 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 02:24:05.692 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 02:24:05.789 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 02:24:05.522 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:24:05.699 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:24:02.528 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:56862 10 6452 1 2025-09-27 02:25:02.894 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:33254 10 6452 1 2025-09-27 02:26:03.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43372 10 6452 1 2025-09-27 02:21:35.505 00:06:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 02:27:03.681 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58610 10 6452 1 2025-09-27 02:22:35.502 00:06:00.186 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 02:28:04.113 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41188 10 6452 1 2025-09-27 02:29:04.963 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 02:29:05.249 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 02:29:05.063 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:29:05.089 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:29:05.173 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 02:29:04.520 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50892 10 6452 1 2025-09-27 02:30:04.892 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:52202 10 6452 1 2025-09-27 02:31:05.316 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53248 10 6452 1 2025-09-27 02:32:05.730 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:49204 10 6452 1 2025-09-27 02:33:06.144 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51440 10 6452 1 2025-09-27 02:28:35.506 00:06:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 02:34:04.960 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 02:34:05.071 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 02:34:04.988 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:34:05.073 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:34:05.157 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 02:34:06.547 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58740 10 6452 1 2025-09-27 02:29:35.504 00:06:00.187 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 02:35:06.949 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:46794 10 6452 1 2025-09-27 02:36:07.359 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52886 10 6452 1 2025-09-27 02:37:07.764 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35036 10 6452 1 2025-09-27 02:38:08.176 00:00:10.609 TCP 1.101.0.1:3000 -> 23.104.0.1:51162 10 6452 1 2025-09-27 02:39:05.269 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 02:39:05.187 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:39:05.111 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 02:39:05.111 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 02:39:05.157 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:39:08.825 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46786 10 6452 1 2025-09-27 02:40:09.225 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37344 10 6452 1 2025-09-27 02:35:35.509 00:06:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 02:41:09.626 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57554 10 6452 1 2025-09-27 02:36:35.507 00:06:00.186 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 02:42:09.992 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:55876 10 6452 1 2025-09-27 02:43:10.352 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33586 10 6452 1 2025-09-27 02:44:05.379 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 02:44:05.142 00:00:00.032 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 02:44:05.138 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 02:44:05.056 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:44:05.296 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:44:10.753 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54744 10 6452 1 2025-09-27 02:45:11.150 00:00:10.754 TCP 1.101.0.1:3000 -> 23.104.0.1:38500 10 6452 1 2025-09-27 02:46:11.947 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:40730 10 6452 1 2025-09-27 02:47:12.355 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:58240 12 10367 1 2025-09-27 02:42:35.512 00:06:00.181 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 02:48:12.840 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34016 10 6452 1 2025-09-27 02:43:35.510 00:06:00.186 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 02:49:05.794 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 02:49:05.657 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:49:05.943 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:49:05.791 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 02:49:06.026 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 02:49:13.249 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57186 10 6452 1 2025-09-27 02:50:13.651 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58554 10 6452 1 2025-09-27 02:51:14.060 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47830 10 6452 1 2025-09-27 02:52:14.425 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35146 10 6452 1 2025-09-27 02:53:14.789 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:50240 10 6452 1 2025-09-27 02:54:05.475 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-09-27 02:54:05.445 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:54:05.541 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-09-27 02:54:05.359 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-09-27 02:54:05.625 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-09-27 02:54:15.154 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:39330 10 6452 1 2025-09-27 02:49:35.513 00:06:00.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-09-27 02:55:15.571 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49312 10 6452 1 2025-09-27 02:50:35.513 00:06:00.192 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-09-27 02:56:15.978 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:40186 10 6452 1 2025-09-27 02:57:16.422 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57994 10 6452 1 2025-09-27 02:58:16.834 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:33024 10 6452 1 Summary: total flows: 137, total bytes: 420792, total packets: 1020, avg bps: 878, avg pps: 0, avg bpp: 412 Time window: 2025-09-27 01:54:35 - 2025-09-27 02:58:27 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0030s User: 0.0007s Wall: 0.0013s flows/second: 101774.6 Runtime: 0.0014s