Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 18:59:02.567 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 18:59:02.610 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 18:59:02.483 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 18:59:02.565 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 18:59:02.484 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 18:59:18.229 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54530 10 6452 1 2025-10-17 19:00:18.644 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:46190 10 6452 1 2025-10-17 18:56:45.817 00:05:00.313 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 19:01:19.023 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:57938 10 6452 1 2025-10-17 19:02:19.431 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35638 10 6452 1 2025-10-17 19:03:19.845 00:00:10.502 TCP 1.101.0.1:3000 -> 23.104.0.1:59616 10 6452 1 2025-10-17 19:04:02.521 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 19:04:02.665 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 19:04:02.616 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:04:02.591 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:04:02.674 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 19:04:20.386 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47896 10 6452 1 2025-10-17 19:00:45.814 00:05:00.320 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 19:05:20.789 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:44070 10 6452 1 2025-10-17 19:06:21.155 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34266 10 6452 1 2025-10-17 19:02:45.820 00:05:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 19:07:21.555 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55810 10 6452 1 2025-10-17 19:08:21.960 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54898 10 6452 1 2025-10-17 19:09:02.776 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 19:09:02.565 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 19:09:02.686 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:09:02.661 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:09:02.745 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 19:09:22.371 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59470 10 6452 1 2025-10-17 19:10:22.773 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56602 10 6452 1 2025-10-17 19:06:45.819 00:05:00.317 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 19:11:23.182 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50820 10 6452 1 2025-10-17 19:12:23.582 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53486 10 6452 1 2025-10-17 19:08:45.822 00:05:00.312 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 19:13:23.985 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55696 10 6452 1 2025-10-17 19:14:02.975 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 19:14:02.917 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 19:14:02.745 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:14:02.915 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:14:02.998 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 19:14:24.389 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43798 10 6452 1 2025-10-17 19:15:24.791 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:52164 10 6452 1 2025-10-17 19:16:25.173 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53808 10 6452 1 2025-10-17 19:12:45.820 00:05:00.316 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 19:17:25.570 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34546 11 6492 1 2025-10-17 19:18:25.973 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40112 10 6452 1 2025-10-17 19:14:45.822 00:05:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 19:19:02.920 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 19:19:02.881 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 19:19:02.670 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:19:02.878 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:19:02.962 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 19:19:26.373 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34166 10 6452 1 2025-10-17 19:20:26.777 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:40618 10 6452 1 2025-10-17 19:21:27.141 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:58898 11 6504 1 2025-10-17 19:22:27.601 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51156 10 6452 1 2025-10-17 19:18:45.820 00:05:00.320 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 19:23:28.008 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35890 10 6452 1 2025-10-17 19:24:02.902 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 19:24:03.095 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 19:24:02.888 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:24:02.959 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:24:03.042 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 19:24:28.414 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:40036 10 6452 1 2025-10-17 19:20:45.825 00:05:00.313 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 19:25:28.778 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39346 10 6452 1 2025-10-17 19:26:29.187 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49120 10 6452 1 2025-10-17 19:27:29.598 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:39972 10 6452 1 2025-10-17 19:28:30.029 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36038 10 6452 1 2025-10-17 19:24:45.826 00:05:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 19:29:03.773 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 19:29:03.820 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 19:29:03.745 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:29:03.668 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:29:03.752 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 19:29:30.431 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:36140 10 6452 1 2025-10-17 19:30:30.848 00:00:10.350 TCP 1.101.0.1:3000 -> 23.104.0.1:57824 10 6452 1 2025-10-17 19:26:45.831 00:05:00.309 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 19:31:31.237 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46592 10 6452 1 2025-10-17 19:32:31.645 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55588 10 6452 1 2025-10-17 19:33:32.068 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35586 10 6452 1 2025-10-17 19:34:03.282 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 19:34:03.270 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 19:34:03.194 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:34:03.115 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:34:03.198 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 19:34:32.473 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:33390 10 6452 1 2025-10-17 19:30:45.829 00:05:00.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 19:35:32.873 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57938 10 6452 1 2025-10-17 19:36:33.279 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52236 10 6452 1 2025-10-17 19:32:45.832 00:05:00.309 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 19:37:33.689 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:32960 10 6452 1 2025-10-17 19:38:34.064 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43328 10 6452 1 2025-10-17 19:39:03.251 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 19:39:03.308 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 19:39:03.168 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:39:03.395 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:39:03.477 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 19:39:34.469 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:58156 10 6452 1 2025-10-17 19:40:34.822 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44286 10 6452 1 2025-10-17 19:36:45.830 00:05:00.316 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 19:41:35.225 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38446 10 6452 1 2025-10-17 19:38:45.832 00:05:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 19:42:35.584 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37694 10 6452 1 2025-10-17 19:43:35.949 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:56322 10 6452 1 2025-10-17 19:44:03.466 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 19:44:03.431 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 19:44:03.148 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:44:03.393 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:44:03.476 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 19:44:36.327 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37710 10 6452 1 2025-10-17 19:45:36.732 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:47008 10 6452 1 2025-10-17 19:46:37.111 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:44954 10 6452 1 2025-10-17 19:42:45.834 00:05:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 19:47:37.478 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54252 10 6452 1 2025-10-17 19:48:37.876 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:54734 10 6452 1 2025-10-17 19:44:45.839 00:05:00.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 19:49:03.301 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 19:49:03.218 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:49:03.590 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 19:49:03.423 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 19:49:03.063 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:49:38.288 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56674 10 6452 1 2025-10-17 19:50:38.691 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38224 10 6452 1 2025-10-17 19:51:39.111 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:41286 10 6452 1 2025-10-17 19:52:39.476 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:47388 12 10375 1 2025-10-17 19:48:45.837 00:05:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 19:53:39.952 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57590 10 6452 1 2025-10-17 19:54:03.686 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 19:54:03.706 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:54:03.548 00:00:00.034 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 19:54:03.648 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 19:54:03.631 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 19:50:45.840 00:05:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 19:54:40.365 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:51622 10 6452 1 2025-10-17 19:55:40.786 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:33666 10 6452 1 2025-10-17 19:56:41.206 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46380 10 6452 1 2025-10-17 19:57:41.574 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42302 10 6452 1 2025-10-17 19:54:45.839 00:05:00.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 414563, total packets: 1014, avg bps: 877, avg pps: 0, avg bpp: 408 Time window: 2025-10-17 18:56:45 - 2025-10-17 19:59:46 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0040s User: 0.0000s Wall: 0.0014s flows/second: 97200.4 Runtime: 0.0014s