Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 00:58:51.979 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 00:58:51.700 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 00:58:52.072 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 00:58:51.751 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 00:58:51.896 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 00:59:00.852 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:48602 10 6452 1 2025-10-07 01:00:01.268 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57104 10 6452 1 2025-10-07 01:01:01.668 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:52584 10 6452 1 2025-10-07 01:02:02.064 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36672 10 6452 1 2025-10-07 00:57:40.363 00:06:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 01:03:02.472 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:60664 10 6452 1 2025-10-07 00:58:40.365 00:06:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 01:03:51.906 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:03:52.135 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:03:52.138 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:03:51.902 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:03:51.989 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:04:02.888 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:54320 10 6452 1 2025-10-07 01:05:03.316 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49954 10 6452 1 2025-10-07 01:06:03.677 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60588 10 6452 1 2025-10-07 01:07:04.102 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47938 10 6452 1 2025-10-07 01:08:04.505 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34418 10 6452 1 2025-10-07 01:08:52.400 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:08:52.154 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:08:52.152 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:08:52.110 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:08:52.318 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:09:04.907 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:41966 10 6452 1 2025-10-07 01:04:40.365 00:06:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 01:10:05.281 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37584 10 6452 1 2025-10-07 01:05:40.367 00:06:00.360 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 01:11:05.689 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42040 10 6452 1 2025-10-07 01:12:06.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50948 10 6452 1 2025-10-07 01:13:06.515 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40300 10 6452 1 2025-10-07 01:13:52.577 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:13:52.719 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:13:52.556 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:13:52.671 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:13:52.754 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:14:06.918 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56826 10 6452 1 2025-10-07 01:15:07.323 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55478 10 6452 1 2025-10-07 01:16:07.682 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46520 10 6452 1 2025-10-07 01:11:40.367 00:06:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 01:17:08.101 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45134 10 6452 1 2025-10-07 01:12:40.369 00:06:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 01:18:08.511 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39910 10 6452 1 2025-10-07 01:18:52.421 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:18:52.370 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:18:52.307 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:18:52.476 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:18:52.559 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:19:08.878 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60900 10 6452 1 2025-10-07 01:20:09.281 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35440 10 6452 1 2025-10-07 01:21:09.693 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38284 10 6452 1 2025-10-07 01:22:10.109 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55600 10 6452 1 2025-10-07 01:23:10.509 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60466 10 6452 1 2025-10-07 01:18:40.368 00:06:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 01:23:52.448 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:23:52.458 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:23:52.293 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:23:52.446 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:23:52.531 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:24:10.921 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40452 10 6452 1 2025-10-07 01:19:40.371 00:06:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 01:25:11.326 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:32928 10 6452 1 2025-10-07 01:26:11.728 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56774 10 6452 1 2025-10-07 01:27:12.136 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33498 10 6452 1 2025-10-07 01:28:12.538 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36362 10 6452 1 2025-10-07 01:28:53.262 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:28:53.313 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:28:52.993 00:00:00.052 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:28:53.016 00:00:00.043 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:28:53.179 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:29:12.952 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58662 10 6452 1 2025-10-07 01:30:13.369 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:35180 10 6452 1 2025-10-07 01:25:40.379 00:06:00.356 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 01:31:13.733 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:42168 10 6452 1 2025-10-07 01:26:40.384 00:06:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 01:32:14.144 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34714 10 6452 1 2025-10-07 01:33:14.551 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51088 10 6452 1 2025-10-07 01:33:52.450 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:33:52.715 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:33:52.758 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:33:52.415 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:33:52.368 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:34:14.950 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:38112 12 10369 1 2025-10-07 01:35:15.428 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46696 10 6452 1 2025-10-07 01:36:15.842 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:60136 10 6452 1 2025-10-07 01:37:16.271 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42580 10 6452 1 2025-10-07 01:32:40.381 00:06:00.355 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 01:38:16.677 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42182 10 6452 1 2025-10-07 01:33:40.386 00:06:00.349 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 01:38:52.893 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:38:52.814 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:38:52.743 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:38:52.664 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:38:52.808 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:39:17.107 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60712 10 6452 1 2025-10-07 01:40:17.514 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54062 10 6452 1 2025-10-07 01:41:17.915 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44576 10 6452 1 2025-10-07 01:42:18.322 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55140 10 6452 1 2025-10-07 01:43:18.728 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45426 10 6452 1 2025-10-07 01:43:52.933 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:43:52.946 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:43:52.951 00:00:00.028 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:43:52.941 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:43:53.023 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:44:19.108 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42906 10 6452 1 2025-10-07 01:39:40.384 00:06:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 01:45:19.513 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50772 10 6452 1 2025-10-07 01:40:40.387 00:06:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 01:46:19.932 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:33316 10 6452 1 2025-10-07 01:47:20.353 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53174 10 6452 1 2025-10-07 01:48:20.756 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:41420 10 6452 1 2025-10-07 01:48:53.159 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:48:53.141 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:48:53.141 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:48:53.001 00:00:00.040 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:48:53.075 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:49:21.173 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:47410 10 6452 1 2025-10-07 01:50:21.546 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45748 10 6452 1 2025-10-07 01:51:21.952 00:00:11.059 TCP 1.101.0.1:3000 -> 23.104.0.1:35688 10 6452 1 2025-10-07 01:46:40.409 00:06:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 01:52:23.055 00:00:15.255 TCP 1.101.0.1:3000 -> 23.104.0.1:45182 10 6452 1 2025-10-07 01:47:40.411 00:06:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 01:53:28.375 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46966 10 6452 1 2025-10-07 01:53:53.073 00:00:00.054 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:53:53.004 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:53:53.000 00:00:00.048 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:53:52.833 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:53:52.990 00:00:00.055 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:54:28.780 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:42364 12 10375 1 2025-10-07 01:55:29.267 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56264 10 6452 1 2025-10-07 01:56:29.674 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54248 10 6452 1 2025-10-07 01:57:30.038 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50148 10 6452 1 2025-10-07 01:53:40.410 00:06:00.336 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 01:58:30.441 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32860 10 6452 1 Summary: total flows: 137, total bytes: 424717, total packets: 1022, avg bps: 913, avg pps: 0, avg bpp: 415 Time window: 2025-10-07 00:57:40 - 2025-10-07 01:59:40 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0051s User: 0.0000s Wall: 0.0017s flows/second: 78467.8 Runtime: 0.0018s