Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 01:59:10.613 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 01:59:10.921 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:59:10.994 00:00:00.033 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:59:10.729 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 01:59:11.077 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 01:59:24.403 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53636 10 6452 1 2025-10-18 02:00:24.817 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:55928 10 6452 1 2025-10-18 01:56:45.972 00:05:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:01:25.188 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42668 10 6452 1 2025-10-18 02:02:25.550 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46338 12 6556 1 2025-10-18 02:03:25.954 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43146 10 6452 1 2025-10-18 02:04:11.374 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:04:11.378 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:04:11.157 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:04:11.320 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:04:11.403 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:04:26.359 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51016 10 6452 1 2025-10-18 02:00:45.974 00:05:00.285 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:05:26.761 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:56570 10 6452 1 2025-10-18 02:06:27.140 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59844 10 6452 1 2025-10-18 02:02:45.978 00:05:00.273 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:07:27.540 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60116 10 6452 1 2025-10-18 02:08:27.946 00:00:15.411 TCP 1.101.0.1:3000 -> 23.104.0.1:59820 10 6452 1 2025-10-18 02:09:11.613 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:09:11.530 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:09:11.394 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:09:11.107 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:09:11.530 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:09:33.397 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52952 10 6452 1 2025-10-18 02:10:33.818 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38018 10 6452 1 2025-10-18 02:06:45.975 00:05:00.279 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:11:34.217 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54212 10 6452 1 2025-10-18 02:12:34.578 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47732 10 6452 1 2025-10-18 02:08:45.985 00:05:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:13:34.942 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:33878 10 6452 1 2025-10-18 02:14:11.259 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:14:11.185 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:14:10.964 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:14:11.218 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:14:11.343 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:14:35.324 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46020 10 6452 1 2025-10-18 02:15:35.727 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41004 10 6452 1 2025-10-18 02:16:36.135 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40038 10 6452 1 2025-10-18 02:12:45.988 00:05:00.268 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:17:36.537 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43304 10 6452 1 2025-10-18 02:14:45.987 00:05:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:18:36.939 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:43498 10 6452 1 2025-10-18 02:19:11.186 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:19:11.399 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:19:10.975 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:19:11.330 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:19:11.412 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:19:37.379 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51172 10 6452 1 2025-10-18 02:20:37.781 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50662 10 6452 1 2025-10-18 02:21:38.184 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53212 10 6452 1 2025-10-18 02:18:45.984 00:05:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:22:38.551 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:43492 13 10427 1 2025-10-18 02:23:39.039 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35184 10 6452 1 2025-10-18 02:24:11.691 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:24:11.687 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:24:11.652 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:24:11.682 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:24:11.764 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:24:39.456 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42498 10 6452 1 2025-10-18 02:20:45.988 00:05:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:25:39.883 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45160 10 6452 1 2025-10-18 02:26:40.288 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51204 10 6452 1 2025-10-18 02:27:40.688 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43250 10 6452 1 2025-10-18 02:24:45.987 00:05:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:28:41.110 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:56330 10 6452 1 2025-10-18 02:29:11.419 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:29:11.486 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:29:11.429 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:29:11.453 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:29:11.501 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:29:41.492 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54974 10 6452 1 2025-10-18 02:26:45.989 00:05:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:30:41.895 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40072 10 6452 1 2025-10-18 02:31:42.312 00:00:17.207 TCP 1.101.0.1:3000 -> 23.104.0.1:40436 10 6452 1 2025-10-18 02:32:49.571 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:36218 10 6452 1 2025-10-18 02:33:49.939 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45232 10 6452 1 2025-10-18 02:34:11.557 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:34:11.457 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:34:11.273 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:34:11.461 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:34:11.543 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:30:45.988 00:05:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:34:50.354 00:00:10.652 TCP 1.101.0.1:3000 -> 23.104.0.1:53872 10 6452 1 2025-10-18 02:35:51.039 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37684 10 6452 1 2025-10-18 02:32:45.990 00:05:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:36:51.443 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40634 10 6452 1 2025-10-18 02:37:51.848 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39354 10 6452 1 2025-10-18 02:38:52.264 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47036 10 6452 1 2025-10-18 02:39:11.733 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:39:11.721 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:39:11.704 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:39:11.396 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:39:11.649 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:39:52.669 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33234 10 6452 1 2025-10-18 02:36:45.988 00:05:00.276 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:40:53.107 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:52294 10 6452 1 2025-10-18 02:41:53.594 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:39114 12 10369 1 2025-10-18 02:38:45.992 00:05:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:42:54.101 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50092 10 6452 1 2025-10-18 02:43:54.502 00:00:10.936 TCP 1.101.0.1:3000 -> 23.104.0.1:37748 10 6452 1 2025-10-18 02:44:12.181 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:44:12.099 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:44:12.099 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:44:12.101 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:44:12.225 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:44:55.477 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:37456 10 6452 1 2025-10-18 02:45:55.873 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33698 10 6452 1 2025-10-18 02:42:45.989 00:05:00.275 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:46:56.276 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33850 10 6452 1 2025-10-18 02:47:56.679 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35070 10 6452 1 2025-10-18 02:44:45.993 00:05:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:48:57.107 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38956 10 6452 1 2025-10-18 02:49:11.934 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:49:11.785 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:49:11.866 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:49:11.822 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:49:11.852 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:49:57.507 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47948 10 6452 1 2025-10-18 02:50:57.867 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37504 10 6452 1 2025-10-18 02:51:58.231 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39246 10 6452 1 2025-10-18 02:48:45.995 00:05:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:52:58.640 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52184 10 6452 1 2025-10-18 02:53:59.037 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59448 10 6452 1 2025-10-18 02:54:11.943 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:54:11.873 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:54:12.112 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:54:12.074 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:54:11.859 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:54:59.436 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48632 10 6452 1 2025-10-18 02:50:46.000 00:06:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 02:55:59.844 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:39174 10 6452 1 2025-10-18 02:57:00.229 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41222 10 6452 1 2025-10-18 02:58:00.637 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55106 10 6452 1 2025-10-18 02:54:45.997 00:05:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 Summary: total flows: 139, total bytes: 418667, total packets: 1019, avg bps: 885, avg pps: 0, avg bpp: 410 Time window: 2025-10-18 01:56:45 - 2025-10-18 02:59:46 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0040s User: 0.0016s Wall: 0.0015s flows/second: 90783.0 Runtime: 0.0015s