Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 22:59:07.475 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 22:59:07.214 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 22:59:06.981 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 22:59:07.300 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 22:59:07.382 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 22:59:08.759 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:57404 10 6452 1 2025-10-17 23:00:09.191 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52026 10 6452 1 2025-10-17 22:56:45.912 00:05:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 23:01:09.601 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:59488 10 6452 1 2025-10-17 23:02:10.008 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42238 10 6452 1 2025-10-17 23:03:10.416 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:57668 10 6452 1 2025-10-17 23:04:07.359 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 23:04:07.359 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 23:04:07.272 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:04:07.463 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:04:07.548 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 23:04:10.836 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:45134 10 6452 1 2025-10-17 23:00:45.913 00:05:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 23:05:11.268 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32866 10 6452 1 2025-10-17 23:06:11.679 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36904 10 6452 1 2025-10-17 23:02:45.915 00:05:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 23:07:12.107 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37560 10 6452 1 2025-10-17 23:08:12.469 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35746 10 6452 1 2025-10-17 23:09:07.576 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:09:07.267 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 23:09:07.578 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 23:09:07.311 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:09:07.659 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 23:09:12.872 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:50546 10 6452 1 2025-10-17 23:10:13.241 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47198 10 6452 1 2025-10-17 23:06:45.916 00:05:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 23:11:13.606 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:35020 10 6452 1 2025-10-17 23:12:13.978 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:53738 10 6452 1 2025-10-17 23:08:45.921 00:05:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 23:13:14.391 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49960 10 6452 1 2025-10-17 23:14:07.493 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 23:14:07.379 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 23:14:07.692 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:14:07.661 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:14:07.745 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 23:14:14.757 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53956 10 6452 1 2025-10-17 23:15:15.169 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47216 10 6452 1 2025-10-17 23:16:15.573 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:36680 10 6452 1 2025-10-17 23:12:45.920 00:05:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 23:17:15.943 00:00:10.456 TCP 1.101.0.1:3000 -> 23.104.0.1:35174 12 10375 1 2025-10-17 23:18:16.431 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44876 10 6452 1 2025-10-17 23:14:45.924 00:05:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 23:19:07.786 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 23:19:07.698 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 23:19:07.768 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 23:19:07.725 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:19:07.702 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:19:16.839 00:00:10.545 TCP 1.101.0.1:3000 -> 23.104.0.1:52776 10 6452 1 2025-10-17 23:20:17.426 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42960 10 6452 1 2025-10-17 23:21:17.830 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42474 10 6452 1 2025-10-17 23:22:18.233 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47644 10 6452 1 2025-10-17 23:18:45.920 00:05:00.288 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 23:23:18.637 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46704 10 6452 1 2025-10-17 23:24:07.822 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 23:24:07.909 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 23:24:07.763 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:24:07.892 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:24:07.978 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 23:24:19.041 00:00:10.725 TCP 1.101.0.1:3000 -> 23.104.0.1:57818 10 6452 1 2025-10-17 23:20:45.921 00:05:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 23:25:19.811 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37122 10 6452 1 2025-10-17 23:26:20.215 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38046 10 6452 1 2025-10-17 23:27:20.619 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:34974 10 6452 1 2025-10-17 23:28:20.980 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54632 12 6556 1 2025-10-17 23:24:45.919 00:05:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 23:29:08.103 00:00:00.033 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 23:29:08.021 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:29:08.055 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 23:29:07.953 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 23:29:07.801 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:29:21.390 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44528 10 6452 1 2025-10-17 23:30:21.797 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48692 10 6452 1 2025-10-17 23:26:45.923 00:05:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 23:31:22.200 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:46130 10 6452 1 2025-10-17 23:32:22.557 00:00:10.434 TCP 1.101.0.1:3000 -> 23.104.0.1:45074 12 10369 1 2025-10-17 23:33:23.035 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:51720 10 6452 1 2025-10-17 23:34:08.063 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 23:34:07.977 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 23:34:07.983 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 23:34:07.852 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:34:07.980 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:34:23.467 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57050 10 6452 1 2025-10-17 23:30:45.923 00:05:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 23:35:23.873 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51778 10 6452 1 2025-10-17 23:36:24.285 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50736 10 6452 1 2025-10-17 23:32:45.925 00:05:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 23:37:24.692 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40450 10 6452 1 2025-10-17 23:38:25.111 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35228 10 6452 1 2025-10-17 23:39:08.010 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 23:39:07.925 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 23:39:08.189 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 23:39:07.925 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:39:07.927 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:39:25.517 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:41912 10 6452 1 2025-10-17 23:40:25.877 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33188 10 6452 1 2025-10-17 23:36:45.925 00:05:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 23:41:26.286 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35020 10 6452 1 2025-10-17 23:42:26.682 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42136 10 6452 1 2025-10-17 23:38:45.928 00:05:00.284 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 23:43:27.049 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52630 10 6452 1 2025-10-17 23:44:08.458 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 23:44:08.302 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 23:44:08.251 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 23:44:08.178 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:44:08.376 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:44:27.444 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33804 10 6452 1 2025-10-17 23:45:27.854 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:57680 10 6452 1 2025-10-17 23:46:28.280 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48524 10 6452 1 2025-10-17 23:42:45.926 00:05:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 23:47:28.680 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:43262 12 10375 1 2025-10-17 23:48:29.155 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33010 10 6452 1 2025-10-17 23:44:45.932 00:05:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 23:49:08.246 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 23:49:08.254 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:49:08.417 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:49:08.249 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 23:49:08.500 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 23:49:29.556 00:00:12.653 TCP 1.101.0.1:3000 -> 23.104.0.1:34792 10 6452 1 2025-10-17 23:50:32.288 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35124 10 6452 1 2025-10-17 23:51:32.689 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53714 10 6452 1 2025-10-17 23:52:33.109 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:56306 10 6452 1 2025-10-17 23:48:45.927 00:05:00.291 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 23:53:33.472 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38104 10 6452 1 2025-10-17 23:54:08.562 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 23:54:08.404 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 23:54:08.429 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:54:08.402 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 23:54:08.485 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 23:54:33.882 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40784 10 6452 1 2025-10-17 23:50:45.930 00:05:00.286 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 23:55:34.282 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39562 10 6452 1 2025-10-17 23:56:34.653 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:50438 10 6452 1 2025-10-17 23:57:35.018 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37130 10 6452 1 2025-10-17 23:58:35.383 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41088 10 6452 1 2025-10-17 23:54:45.929 00:05:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 140, total bytes: 428867, total packets: 1028, avg bps: 907, avg pps: 0, avg bpp: 417 Time window: 2025-10-17 22:56:45 - 2025-10-17 23:59:46 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0039s User: 0.0008s Wall: 0.0020s flows/second: 71540.3 Runtime: 0.0020s