Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 02:58:54.650 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 02:58:54.471 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 02:58:54.296 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:58:54.568 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:58:54.746 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 02:58:55.322 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51156 10 6452 1 2025-10-07 02:59:55.690 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33246 10 6452 1 2025-10-07 03:00:56.108 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45522 10 6452 1 2025-10-07 02:56:40.441 00:06:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 03:01:56.513 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:49014 10 6452 1 2025-10-07 02:57:40.444 00:06:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 03:02:56.930 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:43498 10 6452 1 2025-10-07 03:03:54.371 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 03:03:54.374 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 03:03:54.352 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:03:54.370 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:03:54.453 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 03:03:57.360 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60120 10 6452 1 2025-10-07 03:04:57.766 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:48188 10 6452 1 2025-10-07 03:05:58.193 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:38554 10 6452 1 2025-10-07 03:06:58.590 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42044 10 6452 1 2025-10-07 03:07:59.000 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33468 10 6452 1 2025-10-07 03:03:40.443 00:06:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 03:08:54.632 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 03:08:54.463 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:08:54.637 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:08:54.549 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 03:08:54.720 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 03:08:59.396 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45266 10 6452 1 2025-10-07 03:04:40.445 00:06:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 03:09:59.762 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:46970 10 6452 1 2025-10-07 03:11:00.166 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:39664 10 6452 1 2025-10-07 03:12:00.526 00:00:10.709 TCP 1.101.0.1:3000 -> 23.104.0.1:33930 10 6452 1 2025-10-07 03:13:01.273 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59088 10 6452 1 2025-10-07 03:13:54.769 00:00:00.035 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 03:13:54.733 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 03:13:54.683 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 03:13:54.528 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:13:54.687 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:14:01.680 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60774 10 6452 1 2025-10-07 03:15:02.112 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39494 10 6452 1 2025-10-07 03:10:40.444 00:06:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 03:16:02.533 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35964 10 6452 1 2025-10-07 03:11:40.447 00:06:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 03:17:02.938 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:48160 10 6452 1 2025-10-07 03:18:03.370 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60344 10 6452 1 2025-10-07 03:18:54.817 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 03:18:54.881 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 03:18:54.639 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 03:18:54.652 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:18:54.735 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:19:03.778 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42660 10 6452 1 2025-10-07 03:20:04.194 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43808 10 6452 1 2025-10-07 03:21:04.606 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58992 10 6452 1 2025-10-07 03:22:05.004 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56062 10 6452 1 2025-10-07 03:17:40.445 00:06:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 03:23:05.415 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:39758 10 6452 1 2025-10-07 03:18:40.448 00:06:00.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 03:23:54.908 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:23:54.846 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 03:23:54.906 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 03:23:54.894 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:23:54.991 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 03:24:05.786 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57120 10 6452 1 2025-10-07 03:25:06.186 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57142 10 6452 1 2025-10-07 03:26:06.582 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55252 10 6452 1 2025-10-07 03:27:06.995 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38478 10 6452 1 2025-10-07 03:28:07.357 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45814 10 6452 1 2025-10-07 03:28:54.930 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:28:54.977 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 03:28:55.071 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 03:28:54.979 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:28:55.062 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 03:29:07.768 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33740 10 6452 1 2025-10-07 03:24:40.446 00:06:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 03:30:08.172 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57472 10 6452 1 2025-10-07 03:25:40.450 00:06:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 03:31:08.571 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39720 10 6452 1 2025-10-07 03:32:08.975 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60092 10 6452 1 2025-10-07 03:33:09.388 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60830 10 6452 1 2025-10-07 03:33:54.942 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:33:55.129 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 03:33:55.263 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 03:33:55.087 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:33:55.025 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 03:34:09.791 00:00:10.788 TCP 1.101.0.1:3000 -> 23.104.0.1:44916 10 6452 1 2025-10-07 03:35:10.631 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45976 10 6452 1 2025-10-07 03:36:11.049 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53922 10 6452 1 2025-10-07 03:31:40.449 00:06:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 03:37:11.451 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57370 10 6452 1 2025-10-07 03:32:40.452 00:06:00.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 03:38:11.853 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:40960 10 6452 1 2025-10-07 03:38:55.203 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 03:38:55.126 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 03:38:55.191 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 03:38:55.094 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:38:55.121 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:39:12.230 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49196 10 6452 1 2025-10-07 03:40:12.638 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45052 10 6452 1 2025-10-07 03:41:13.053 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58072 10 6452 1 2025-10-07 03:42:13.460 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38284 10 6452 1 2025-10-07 03:43:13.859 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:44292 10 6452 1 2025-10-07 03:38:40.452 00:06:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 03:43:55.541 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 03:43:55.409 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 03:43:55.464 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 03:43:55.106 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:43:55.460 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:44:14.235 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57570 10 6452 1 2025-10-07 03:39:40.455 00:06:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 03:45:14.631 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41180 10 6452 1 2025-10-07 03:46:14.997 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55278 10 6452 1 2025-10-07 03:47:15.400 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:51638 10 6452 1 2025-10-07 03:48:15.813 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55812 10 6452 1 2025-10-07 03:48:55.369 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 03:48:55.416 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 03:48:55.095 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:48:55.363 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:48:55.447 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 03:49:16.221 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50586 10 6452 1 2025-10-07 03:50:16.584 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49946 10 6452 1 2025-10-07 03:45:40.454 00:06:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 03:51:16.987 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59502 10 6452 1 2025-10-07 03:46:40.456 00:06:00.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 03:52:17.391 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45912 10 6452 1 2025-10-07 03:53:17.798 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:32972 10 6452 1 2025-10-07 03:53:55.470 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:53:55.298 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 03:53:55.562 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 03:53:55.348 00:00:00.015 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 03:53:55.552 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 03:54:18.205 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46856 10 6452 1 2025-10-07 03:55:18.611 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57770 10 6452 1 2025-10-07 03:56:18.969 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:32794 10 6452 1 2025-10-07 03:57:19.348 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39146 10 6452 1 2025-10-07 03:52:40.457 00:06:00.348 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 03:58:19.762 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:60556 10 6452 1 2025-10-07 03:53:40.459 00:06:00.344 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 Summary: total flows: 138, total bytes: 417738, total packets: 1032, avg bps: 884, avg pps: 0, avg bpp: 404 Time window: 2025-10-07 02:56:40 - 2025-10-07 03:59:40 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0050s User: 0.0008s Wall: 0.0031s flows/second: 45142.3 Runtime: 0.0031s