Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 00:59:20.694 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 00:59:21.222 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 00:59:20.878 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 00:59:20.687 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 00:59:20.770 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 00:59:34.118 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:48194 10 6452 1 2025-10-08 01:00:34.481 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60378 10 6452 1 2025-10-08 01:01:34.881 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:35262 12 6556 1 2025-10-08 00:58:40.912 00:05:00.347 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:02:35.301 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56764 10 6452 1 2025-10-08 00:59:40.915 00:05:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:03:35.664 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56514 10 6452 1 2025-10-08 01:04:21.476 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:04:21.725 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:04:21.464 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:04:21.238 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:04:21.394 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:04:36.096 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46224 10 6452 1 2025-10-08 01:05:36.499 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37234 10 6452 1 2025-10-08 01:06:36.899 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53740 10 6452 1 2025-10-08 01:07:37.314 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33202 10 6452 1 2025-10-08 01:04:40.914 00:05:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:08:37.717 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46004 10 6452 1 2025-10-08 01:09:21.119 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:09:21.223 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:09:21.029 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:09:21.073 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:09:21.036 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:05:40.917 00:05:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:09:38.123 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34512 10 6452 1 2025-10-08 01:10:38.519 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46546 10 6452 1 2025-10-08 01:11:38.938 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:35700 10 6452 1 2025-10-08 01:12:39.360 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59628 10 6452 1 2025-10-08 01:13:39.768 00:00:15.767 TCP 1.101.0.1:3000 -> 23.104.0.1:36470 10 6452 1 2025-10-08 01:14:21.249 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:14:21.397 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:14:20.932 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:14:21.203 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:14:21.285 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:10:40.917 00:05:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:14:45.617 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:51016 10 6452 1 2025-10-08 01:11:40.920 00:05:00.341 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:15:45.979 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37556 10 6452 1 2025-10-08 01:16:46.400 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33228 10 6452 1 2025-10-08 01:17:46.762 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:45370 10 6452 1 2025-10-08 01:18:47.188 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55840 10 6452 1 2025-10-08 01:19:21.450 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:19:21.185 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:19:21.195 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:19:21.286 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:19:21.366 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:19:47.585 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:35080 12 10375 1 2025-10-08 01:16:40.919 00:05:00.346 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:20:48.108 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:41670 10 6452 1 2025-10-08 01:17:40.921 00:05:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:21:48.471 00:00:10.600 TCP 1.101.0.1:3000 -> 23.104.0.1:48736 10 6452 1 2025-10-08 01:22:49.116 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60768 10 6452 1 2025-10-08 01:23:49.522 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45346 10 6452 1 2025-10-08 01:24:21.488 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:24:21.440 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:24:21.387 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:24:21.438 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:24:21.532 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:24:49.929 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:35614 10 6452 1 2025-10-08 01:25:50.360 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47480 10 6452 1 2025-10-08 01:22:40.922 00:05:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:26:50.776 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:60194 10 6452 1 2025-10-08 01:23:40.925 00:05:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:27:51.151 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:59654 10 6452 1 2025-10-08 01:28:51.564 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59656 10 6452 1 2025-10-08 01:29:21.452 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:29:21.350 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:29:21.497 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:29:21.578 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:29:21.660 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:29:51.996 00:00:11.037 TCP 1.101.0.1:3000 -> 23.104.0.1:44718 10 6452 1 2025-10-08 01:30:53.114 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57630 10 6452 1 2025-10-08 01:31:53.518 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40016 10 6452 1 2025-10-08 01:28:40.924 00:05:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:32:53.878 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37736 10 6452 1 2025-10-08 01:29:40.927 00:05:00.338 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:33:54.280 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48308 10 6452 1 2025-10-08 01:34:21.497 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:34:21.566 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:34:21.531 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:34:21.417 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:34:21.499 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:34:54.682 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55966 10 6452 1 2025-10-08 01:35:55.115 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48186 10 6452 1 2025-10-08 01:36:55.480 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40276 10 6452 1 2025-10-08 01:37:55.888 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:50676 10 6452 1 2025-10-08 01:34:40.926 00:05:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:38:56.311 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:48880 10 6452 1 2025-10-08 01:39:21.714 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:39:21.726 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:39:21.598 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:39:21.714 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:39:21.796 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:35:40.928 00:05:00.337 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:39:56.707 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:43214 10 6452 1 2025-10-08 01:40:57.117 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54682 10 6452 1 2025-10-08 01:41:57.528 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:43606 10 6452 1 2025-10-08 01:42:57.939 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:50420 10 6452 1 2025-10-08 01:43:58.374 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33512 10 6452 1 2025-10-08 01:44:21.970 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:44:21.891 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:44:21.748 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:44:21.582 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:44:21.888 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:40:40.927 00:05:00.345 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:44:58.791 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37742 10 6452 1 2025-10-08 01:41:40.931 00:05:00.338 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:45:59.193 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44714 10 6452 1 2025-10-08 01:46:59.599 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41436 10 6452 1 2025-10-08 01:48:00.006 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:42416 10 6452 1 2025-10-08 01:49:00.400 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37790 10 6452 1 2025-10-08 01:49:21.777 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:49:21.771 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:49:21.550 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:49:21.912 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:49:21.995 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:50:00.789 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:47542 10 6452 1 2025-10-08 01:46:40.931 00:05:00.342 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:51:01.197 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47054 10 6452 1 2025-10-08 01:47:40.934 00:05:00.336 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:52:01.599 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46998 10 6452 1 2025-10-08 01:53:01.963 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48754 10 6452 1 2025-10-08 01:54:02.370 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37028 10 6452 1 2025-10-08 01:54:22.294 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-08 01:54:22.118 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-08 01:54:22.126 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-08 01:54:21.880 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:54:22.211 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-08 01:55:02.771 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:42314 10 6452 1 2025-10-08 01:56:03.190 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50878 10 6452 1 2025-10-08 01:52:40.932 00:05:00.341 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-08 01:57:03.592 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57774 10 6452 1 2025-10-08 01:53:40.935 00:05:00.336 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-08 01:58:03.993 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55342 10 6452 1 Summary: total flows: 139, total bytes: 414575, total packets: 1014, avg bps: 921, avg pps: 0, avg bpp: 408 Time window: 2025-10-08 00:58:40 - 2025-10-08 01:58:41 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0048s User: 0.0000s Wall: 0.0022s flows/second: 62615.0 Runtime: 0.0022s