Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 03:59:14.227 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 03:59:13.980 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 03:59:13.979 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 03:59:13.685 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:59:14.145 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:59:38.367 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43372 10 6452 1 2025-10-18 04:00:38.773 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 10 6452 1 2025-10-18 03:56:46.052 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 04:01:39.185 00:00:13.800 TCP 1.101.0.1:3000 -> 23.104.0.1:55668 10 6452 1 2025-10-18 04:02:43.025 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50760 10 6452 1 2025-10-18 04:03:43.389 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:45652 10 6452 1 2025-10-18 04:04:13.551 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 04:04:13.468 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:04:13.382 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 04:04:13.294 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 04:04:13.307 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:04:43.750 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59978 10 6452 1 2025-10-18 04:00:46.059 00:06:00.253 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 04:05:44.147 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33638 10 6452 1 2025-10-18 04:06:44.552 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45798 10 6452 1 2025-10-18 04:07:44.956 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:50942 12 10369 1 2025-10-18 04:03:46.056 00:06:00.260 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 04:08:45.439 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48042 10 6452 1 2025-10-18 04:09:13.740 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 04:09:13.674 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:09:13.506 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:09:13.690 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 04:09:13.589 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 04:09:45.842 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:36002 10 6452 1 2025-10-18 04:10:46.264 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55656 10 6452 1 2025-10-18 04:11:46.674 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51040 10 6452 1 2025-10-18 04:07:46.060 00:06:00.260 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 04:12:47.104 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44822 10 6452 1 2025-10-18 04:13:47.515 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:35570 10 6452 1 2025-10-18 04:14:13.872 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 04:14:13.419 00:00:00.066 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:14:14.136 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:14:13.879 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 04:14:14.220 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 04:14:47.878 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35498 10 6452 1 2025-10-18 04:10:46.058 00:06:00.265 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 04:15:48.238 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:59878 10 6452 1 2025-10-18 04:16:48.595 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56034 10 6452 1 2025-10-18 04:17:49.034 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48804 10 6452 1 2025-10-18 04:18:49.436 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36692 10 6452 1 2025-10-18 04:19:13.799 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 04:19:13.775 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 04:19:13.772 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 04:19:13.578 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:19:13.716 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:14:46.061 00:06:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 04:19:49.865 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35706 10 6452 1 2025-10-18 04:20:50.281 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50598 10 6452 1 2025-10-18 04:21:50.707 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:33772 10 6452 1 2025-10-18 04:17:46.060 00:06:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 04:22:51.121 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:34354 10 6452 1 2025-10-18 04:23:51.490 00:00:10.557 TCP 1.101.0.1:3000 -> 23.104.0.1:43258 10 6452 1 2025-10-18 04:24:13.651 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:24:13.968 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:24:13.873 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 04:24:13.625 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 04:24:14.052 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 04:24:52.111 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34932 10 6452 1 2025-10-18 04:25:52.474 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:55762 11 6504 1 2025-10-18 04:21:46.066 00:06:00.263 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 04:26:52.932 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:38444 10 6452 1 2025-10-18 04:27:53.307 00:00:10.670 TCP 1.101.0.1:3000 -> 23.104.0.1:39732 10 6452 1 2025-10-18 04:28:54.016 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53320 10 6452 1 2025-10-18 04:29:14.745 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 04:29:14.675 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 04:29:14.814 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:29:14.802 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:29:14.885 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 04:24:46.065 00:06:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 04:29:54.420 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51798 10 6452 1 2025-10-18 04:30:54.824 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:39724 10 6452 1 2025-10-18 04:31:55.260 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35054 10 6452 1 2025-10-18 04:32:55.667 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42704 10 6452 1 2025-10-18 04:28:46.068 00:06:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 04:33:56.100 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55934 10 6452 1 2025-10-18 04:34:13.944 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 04:34:14.161 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 04:34:13.768 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:34:14.033 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:34:14.114 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 04:34:56.507 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46132 10 6452 1 2025-10-18 04:35:56.912 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59190 10 6452 1 2025-10-18 04:31:46.065 00:06:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 04:36:57.316 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35452 10 6452 1 2025-10-18 04:37:57.719 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:45752 10 6452 1 2025-10-18 04:38:58.112 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:55828 10 6452 1 2025-10-18 04:39:14.145 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 04:39:14.070 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 04:39:13.846 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:39:14.077 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:39:14.158 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 04:39:58.476 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:34432 10 6452 1 2025-10-18 04:35:46.068 00:06:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 04:40:58.902 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:49086 10 6452 1 2025-10-18 04:41:59.266 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54400 10 6452 1 2025-10-18 04:42:59.678 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:47678 10 6452 1 2025-10-18 04:38:46.067 00:06:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 04:44:14.070 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 04:44:14.288 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 04:44:14.177 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:44:14.344 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:44:00.066 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51846 10 6452 1 2025-10-18 04:44:14.427 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 04:45:00.430 00:00:20.033 TCP 1.101.0.1:3000 -> 23.104.0.1:45492 10 6452 1 2025-10-18 04:46:10.514 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41528 10 6452 1 2025-10-18 04:47:10.917 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:51552 10 6452 1 2025-10-18 04:42:46.070 00:06:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 04:48:11.321 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35474 10 6452 1 2025-10-18 04:49:14.624 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 04:49:14.542 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:49:14.395 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 04:49:14.536 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 04:49:14.375 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:49:11.726 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:36472 10 6452 1 2025-10-18 04:50:12.141 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43670 10 6452 1 2025-10-18 04:45:46.068 00:06:00.276 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 04:51:12.545 00:00:11.078 TCP 1.101.0.1:3000 -> 23.104.0.1:34830 10 6452 1 2025-10-18 04:52:13.662 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:49304 12 10375 1 2025-10-18 04:53:14.112 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58630 10 6452 1 2025-10-18 04:54:14.593 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 04:54:14.453 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 04:54:14.267 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:54:14.512 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:54:14.548 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 04:54:14.508 00:00:11.693 TCP 1.101.0.1:3000 -> 23.104.0.1:42040 10 6452 1 2025-10-18 04:49:46.076 00:06:00.266 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 04:55:16.241 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60754 10 6452 1 2025-10-18 04:56:16.638 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48490 10 6452 1 2025-10-18 04:57:17.036 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:53200 10 6452 1 2025-10-18 04:52:46.072 00:06:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 04:58:17.400 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52488 10 6452 1 Summary: total flows: 136, total bytes: 418317, total packets: 1013, avg bps: 899, avg pps: 0, avg bpp: 412 Time window: 2025-10-18 03:56:46 - 2025-10-18 04:58:46 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0041s User: 0.0010s Wall: 0.0032s flows/second: 42699.7 Runtime: 0.0032s