Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 04:58:56.844 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 04:58:56.829 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 04:58:56.831 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 04:58:56.857 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 04:58:56.761 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 04:58:46.552 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53776 10 6452 1 2025-10-07 04:59:46.954 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57762 10 6452 1 2025-10-07 04:55:40.469 00:06:00.350 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 05:00:47.364 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40446 10 6452 1 2025-10-07 04:56:40.471 00:06:00.345 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 05:01:47.769 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52906 10 6452 1 2025-10-07 05:02:48.182 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:45366 10 6452 1 2025-10-07 05:03:56.768 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 05:03:56.861 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 05:03:56.822 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:03:48.557 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:35018 10 6452 1 2025-10-07 05:03:56.767 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:03:56.848 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 05:04:48.958 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51414 10 6452 1 2025-10-07 05:05:49.323 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57058 10 6452 1 2025-10-07 05:06:49.728 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:53710 10 6452 1 2025-10-07 05:02:40.470 00:06:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 05:07:50.109 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56570 10 6452 1 2025-10-07 05:03:40.474 00:06:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 05:08:57.094 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 05:08:56.894 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:08:57.144 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:08:56.970 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 05:08:57.226 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 05:08:50.509 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:35140 10 6452 1 2025-10-07 05:09:50.908 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59924 10 6452 1 2025-10-07 05:10:51.317 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41976 10 6452 1 2025-10-07 05:11:51.719 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:54782 12 6556 1 2025-10-07 05:12:52.131 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:47988 10 6452 1 2025-10-07 05:13:57.202 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 05:13:57.234 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 05:13:57.165 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:13:56.976 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:13:57.059 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 05:13:52.496 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58444 10 6452 1 2025-10-07 05:09:40.488 00:06:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 05:14:52.907 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:46566 10 6452 1 2025-10-07 05:10:40.492 00:06:00.334 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 05:15:53.319 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:33370 10 6452 1 2025-10-07 05:16:53.689 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47012 10 6452 1 2025-10-07 05:17:54.062 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38510 10 6452 1 2025-10-07 05:18:57.360 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 05:18:57.124 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 05:18:57.278 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 05:18:57.066 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:18:57.277 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:18:54.462 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44108 12 6556 1 2025-10-07 05:19:54.867 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:41670 10 6452 1 2025-10-07 05:20:55.257 00:00:12.275 TCP 1.101.0.1:3000 -> 23.104.0.1:43274 10 6452 1 2025-10-07 05:16:40.489 00:06:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 05:21:57.573 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51164 10 6452 1 2025-10-07 05:17:40.492 00:06:00.336 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 05:22:57.979 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:38334 10 6452 1 2025-10-07 05:23:57.482 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 05:23:57.320 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 05:23:57.341 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 05:23:57.370 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:23:57.400 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:23:58.397 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59958 10 6452 1 2025-10-07 05:24:58.756 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57670 10 6452 1 2025-10-07 05:25:59.154 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50044 12 6556 1 2025-10-07 05:26:59.561 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:39092 10 6452 1 2025-10-07 05:27:59.921 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:53400 10 6452 1 2025-10-07 05:23:40.492 00:06:00.340 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 05:28:57.432 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 05:28:57.371 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 05:28:57.450 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:28:57.283 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:28:57.368 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 05:29:00.356 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38908 10 6452 1 2025-10-07 05:24:40.494 00:06:00.335 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 05:30:00.758 00:00:10.460 TCP 1.101.0.1:3000 -> 23.104.0.1:45930 12 10369 1 2025-10-07 05:31:01.255 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:53752 10 6452 1 2025-10-07 05:32:01.615 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53370 10 6452 1 2025-10-07 05:33:02.021 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38560 10 6452 1 2025-10-07 05:33:57.492 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 05:33:57.637 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 05:33:57.636 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 05:33:57.421 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:33:57.409 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:34:02.386 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47018 10 6452 1 2025-10-07 05:35:02.792 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:50488 10 6452 1 2025-10-07 05:30:40.506 00:06:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 05:36:03.216 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39512 10 6452 1 2025-10-07 05:31:40.507 00:06:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 05:37:03.624 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52608 10 6452 1 2025-10-07 05:38:04.027 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36494 10 6452 1 2025-10-07 05:38:57.596 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 05:38:57.701 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 05:38:57.378 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:38:57.598 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:38:57.682 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 05:39:04.425 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43356 10 6452 1 2025-10-07 05:40:04.843 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:56532 10 6452 1 2025-10-07 05:41:05.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36224 10 6452 1 2025-10-07 05:42:05.683 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60478 10 6452 1 2025-10-07 05:37:40.506 00:06:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 05:43:06.108 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60940 10 6452 1 2025-10-07 05:38:40.510 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 05:43:57.764 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 05:43:57.692 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 05:43:57.729 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:43:57.760 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:43:57.843 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 05:44:06.482 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57232 10 6452 1 2025-10-07 05:45:06.892 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:59196 12 6556 1 2025-10-07 05:46:07.305 00:00:10.413 TCP 1.101.0.1:3000 -> 23.104.0.1:45070 11 6504 1 2025-10-07 05:47:07.758 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55846 10 6452 1 2025-10-07 05:48:08.169 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43936 10 6452 1 2025-10-07 05:48:58.052 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 05:48:57.972 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 05:48:57.894 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 05:48:57.985 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:48:57.970 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:49:08.568 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54162 10 6452 1 2025-10-07 05:44:40.510 00:06:00.329 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 05:50:08.981 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34654 10 6452 1 2025-10-07 05:45:40.511 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 05:51:09.391 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52390 10 6452 1 2025-10-07 05:52:09.793 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58952 10 6452 1 2025-10-07 05:53:10.195 00:00:14.743 TCP 1.101.0.1:3000 -> 23.104.0.1:34946 10 6452 1 2025-10-07 05:53:58.006 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 05:53:58.109 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 05:53:57.950 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:53:58.106 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 05:53:58.190 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 05:54:15.008 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:41926 10 6452 1 2025-10-07 05:55:15.409 00:00:10.822 TCP 1.101.0.1:3000 -> 23.104.0.1:48184 10 6452 1 2025-10-07 05:56:16.266 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54194 10 6452 1 2025-10-07 05:51:40.512 00:06:00.328 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-07 05:57:16.630 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59438 10 6452 1 2025-10-07 05:52:40.514 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-07 05:58:17.039 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:43828 10 6452 1 Summary: total flows: 138, total bytes: 422123, total packets: 1043, avg bps: 893, avg pps: 0, avg bpp: 404 Time window: 2025-10-07 04:55:40 - 2025-10-07 05:58:40 Total flows processed: 138, passed: 138, Blocks skipped: 0, Bytes read: 14416 Sys: 0.0046s User: 0.0009s Wall: 0.0028s flows/second: 48762.8 Runtime: 0.0029s