Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 11:58:54.137 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 11:58:53.891 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 11:58:53.938 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 11:58:54.083 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 11:58:54.167 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 11:59:24.418 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43350 10 6452 1 2025-10-17 11:54:45.654 00:06:00.317 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 12:00:24.820 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53152 10 6452 1 2025-10-17 12:01:25.229 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45554 10 6452 1 2025-10-17 12:02:25.634 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53738 10 6452 1 2025-10-17 12:03:26.039 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:43900 10 6452 1 2025-10-17 12:03:53.991 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 12:03:54.331 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 12:03:54.027 00:00:00.032 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:03:53.973 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:03:54.056 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 12:04:26.482 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41076 10 6452 1 2025-10-17 12:05:26.887 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:52922 10 6452 1 2025-10-17 12:00:45.657 00:06:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 12:06:27.307 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:51164 10 6452 1 2025-10-17 12:01:45.655 00:06:00.317 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 12:07:27.706 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50952 10 6452 1 2025-10-17 12:08:28.119 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36940 10 6452 1 2025-10-17 12:08:54.367 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 12:08:54.202 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 12:08:54.285 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 12:08:54.173 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:08:54.283 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:09:28.522 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60104 10 6452 1 2025-10-17 12:10:28.922 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:35008 10 6452 1 2025-10-17 12:11:29.368 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:44674 10 6452 1 2025-10-17 12:12:29.789 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:60144 10 6452 1 2025-10-17 12:07:45.658 00:06:00.312 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 12:13:30.173 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58454 10 6452 1 2025-10-17 12:08:45.656 00:06:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 12:13:54.440 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 12:13:54.354 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 12:13:54.366 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 12:13:53.922 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:13:54.357 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:14:30.577 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59020 10 6452 1 2025-10-17 12:15:30.984 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58760 10 6452 1 2025-10-17 12:16:31.388 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:58006 10 6452 1 2025-10-17 12:17:31.808 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46546 10 6452 1 2025-10-17 12:18:32.212 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49308 10 6452 1 2025-10-17 12:18:54.320 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 12:18:54.243 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:18:54.546 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:18:54.472 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 12:18:54.629 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 12:19:32.622 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:55182 10 6452 1 2025-10-17 12:14:45.659 00:06:00.315 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 12:20:33.022 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44924 10 6452 1 2025-10-17 12:15:45.657 00:06:00.320 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 12:21:33.431 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:45700 10 6452 1 2025-10-17 12:22:33.833 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:34170 10 6452 1 2025-10-17 12:23:34.250 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39950 10 6452 1 2025-10-17 12:23:54.304 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 12:23:54.668 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 12:23:54.541 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:23:54.666 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:23:54.749 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 12:24:34.657 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51480 10 6452 1 2025-10-17 12:25:35.091 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34376 10 6452 1 2025-10-17 12:26:35.506 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34548 10 6452 1 2025-10-17 12:21:45.661 00:06:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 12:22:45.659 00:06:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 12:27:35.909 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58166 10 6452 1 2025-10-17 12:28:36.315 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51514 10 6452 1 2025-10-17 12:28:54.845 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 12:28:54.498 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 12:28:54.631 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:28:54.763 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:28:54.793 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 12:29:36.715 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52738 10 6452 1 2025-10-17 12:30:37.115 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42844 10 6452 1 2025-10-17 12:31:37.525 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42530 10 6452 1 2025-10-17 12:32:37.928 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52496 10 6452 1 2025-10-17 12:28:45.663 00:06:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 12:33:38.343 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34946 10 6452 1 2025-10-17 12:33:54.874 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 12:33:54.956 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:33:55.172 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 12:33:55.091 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:33:55.050 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 12:34:38.749 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60912 10 6452 1 2025-10-17 12:29:45.659 00:06:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 12:35:39.112 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:56832 10 6452 1 2025-10-17 12:36:39.516 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49530 10 6452 1 2025-10-17 12:37:39.919 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57414 10 6452 1 2025-10-17 12:38:54.770 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 12:38:40.319 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43018 10 6452 1 2025-10-17 12:38:54.932 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 12:38:54.933 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 12:38:54.755 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:38:54.688 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:39:40.719 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:37848 10 6452 1 2025-10-17 12:35:45.665 00:06:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 12:40:41.130 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34014 10 6452 1 2025-10-17 12:36:45.662 00:06:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 12:41:41.534 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:47116 10 6452 1 2025-10-17 12:42:41.943 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36954 10 6452 1 2025-10-17 12:43:54.929 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:43:42.361 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51472 10 6452 1 2025-10-17 12:43:54.777 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 12:43:54.946 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:43:55.012 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 12:43:55.008 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 12:44:42.770 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:58616 10 6452 1 2025-10-17 12:45:43.191 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:38852 10 6452 1 2025-10-17 12:46:43.561 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:41614 10 6452 1 2025-10-17 12:42:45.667 00:06:00.320 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 12:47:43.968 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:49116 10 6452 1 2025-10-17 12:43:45.665 00:06:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 12:48:55.258 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 12:48:54.817 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 12:48:54.917 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:48:44.384 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35310 10 6452 1 2025-10-17 12:48:55.216 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 12:48:55.178 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:49:44.790 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52150 10 6452 1 2025-10-17 12:50:45.193 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:51880 10 6452 1 2025-10-17 12:51:45.624 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:46726 10 6452 1 2025-10-17 12:52:45.986 00:00:10.448 TCP 1.101.0.1:3000 -> 23.104.0.1:57234 12 10369 1 2025-10-17 12:53:55.246 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:53:55.322 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 12:53:55.508 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 12:53:55.451 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 12:53:46.474 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39448 10 6452 1 2025-10-17 12:53:55.330 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 12:49:45.668 00:06:00.320 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-17 12:54:46.898 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60340 10 6452 1 2025-10-17 12:50:45.665 00:06:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-17 12:55:47.307 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55088 10 6452 1 2025-10-17 12:56:47.712 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58062 10 6452 1 2025-10-17 12:57:48.111 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34828 10 6452 1 Summary: total flows: 136, total bytes: 414342, total packets: 1010, avg bps: 873, avg pps: 0, avg bpp: 410 Time window: 2025-10-17 11:54:45 - 2025-10-17 12:57:58 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0048s User: 0.0008s Wall: 0.0027s flows/second: 51127.1 Runtime: 0.0027s