Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 04:59:14.590 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 04:59:14.416 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:59:14.508 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 04:59:14.515 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 04:59:14.424 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 04:59:17.838 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:58130 10 6452 1 2025-10-18 05:00:18.213 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34070 10 6452 1 2025-10-18 05:01:18.619 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40702 10 6452 1 2025-10-18 04:56:46.075 00:06:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:02:19.028 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37076 10 6452 1 2025-10-18 05:03:19.432 00:00:10.935 TCP 1.101.0.1:3000 -> 23.104.0.1:39740 10 6452 1 2025-10-18 05:04:14.671 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:04:14.783 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:04:14.669 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:04:14.633 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:04:14.588 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:04:20.414 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42806 10 6452 1 2025-10-18 04:59:46.074 00:06:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:05:20.816 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35654 10 6452 1 2025-10-18 05:06:21.226 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38096 10 6452 1 2025-10-18 05:07:21.592 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:48420 10 6452 1 2025-10-18 05:08:21.953 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38852 10 6452 1 2025-10-18 05:03:46.077 00:06:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:09:14.645 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:09:14.861 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:09:14.595 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:09:14.738 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:09:14.821 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:09:22.364 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41248 10 6452 1 2025-10-18 05:10:22.766 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:52570 10 6452 1 2025-10-18 05:11:23.139 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:55704 10 6452 1 2025-10-18 05:06:46.076 00:06:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:12:23.564 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:38834 10 6452 1 2025-10-18 05:13:23.989 00:00:12.351 TCP 1.101.0.1:3000 -> 23.104.0.1:37934 10 6452 1 2025-10-18 05:14:15.276 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:14:15.026 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:14:14.987 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:14:15.271 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:14:15.355 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:14:26.382 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:40274 10 6452 1 2025-10-18 05:15:26.740 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50702 10 6452 1 2025-10-18 05:10:46.079 00:06:00.268 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:16:27.115 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33942 10 6452 1 2025-10-18 05:17:27.518 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40782 10 6452 1 2025-10-18 05:18:27.922 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46526 10 6452 1 2025-10-18 05:13:46.077 00:06:00.284 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:19:14.893 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:19:14.883 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:19:14.966 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:19:15.147 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:19:15.191 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:19:28.330 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:48270 10 6452 1 2025-10-18 05:20:28.735 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:60564 10 6452 1 2025-10-18 05:21:29.143 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38358 10 6452 1 2025-10-18 05:22:29.551 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49474 10 6452 1 2025-10-18 05:17:46.080 00:06:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:23:29.955 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:42428 10 6452 1 2025-10-18 05:24:14.930 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:24:15.052 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:24:15.081 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:24:15.114 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:24:15.197 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:24:30.319 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37330 10 6452 1 2025-10-18 05:25:30.721 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43984 10 6452 1 2025-10-18 05:20:46.078 00:06:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:26:31.128 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40302 10 6452 1 2025-10-18 05:27:31.489 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:42680 10 6452 1 2025-10-18 05:28:31.908 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:57892 10 6452 1 2025-10-18 05:29:15.191 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:29:15.191 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:29:15.187 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:29:15.245 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:29:15.109 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:29:32.281 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38456 10 6452 1 2025-10-18 05:24:46.081 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:30:32.645 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:50642 10 6452 1 2025-10-18 05:31:33.017 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33716 10 6452 1 2025-10-18 05:32:33.416 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:54198 12 10369 1 2025-10-18 05:27:46.079 00:06:00.289 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:33:33.893 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:50086 10 6452 1 2025-10-18 05:34:15.458 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:34:15.385 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:34:15.284 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:34:15.463 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:34:15.546 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:34:34.276 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40576 10 6452 1 2025-10-18 05:35:34.635 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:51358 10 6452 1 2025-10-18 05:31:46.083 00:06:00.290 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:36:34.998 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43100 10 6452 1 2025-10-18 05:37:35.401 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52646 10 6452 1 2025-10-18 05:38:35.805 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:57664 10 6452 1 2025-10-18 05:39:15.442 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:39:15.358 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:39:15.206 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:39:15.281 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:39:14.982 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:34:46.079 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:39:36.208 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46042 10 6452 1 2025-10-18 05:40:36.606 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35388 10 6452 1 2025-10-18 05:41:37.016 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:51534 10 6452 1 2025-10-18 05:42:37.417 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:34520 10 6452 1 2025-10-18 05:38:46.083 00:06:00.285 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:43:37.855 00:00:10.394 TCP 1.101.0.1:3000 -> 23.104.0.1:52272 10 6452 1 2025-10-18 05:44:15.328 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:44:15.452 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:44:15.405 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:44:15.225 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:44:15.308 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:44:38.292 00:00:11.246 TCP 1.101.0.1:3000 -> 23.104.0.1:39916 10 6452 1 2025-10-18 05:45:39.590 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52650 10 6452 1 2025-10-18 05:41:46.081 00:06:00.297 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:46:39.989 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42868 10 6452 1 2025-10-18 05:47:40.394 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58934 10 6452 1 2025-10-18 05:48:40.765 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53230 10 6452 1 2025-10-18 05:49:15.684 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:49:15.579 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:49:15.524 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:49:15.685 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:49:15.768 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:49:41.190 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36462 10 6452 1 2025-10-18 05:45:46.084 00:06:00.288 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:50:41.587 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:57946 11 6504 1 2025-10-18 05:51:42.051 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48550 10 6452 1 2025-10-18 05:52:42.458 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58042 10 6452 1 2025-10-18 05:48:46.081 00:06:00.293 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 05:53:42.866 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:38160 10 6452 1 2025-10-18 05:54:15.497 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 05:54:15.776 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 05:54:15.540 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:54:15.678 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 05:54:15.761 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 05:54:43.240 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49812 10 6452 1 2025-10-18 05:55:43.644 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:46642 10 6452 1 2025-10-18 05:56:44.010 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55674 10 6452 1 2025-10-18 05:52:46.084 00:06:00.289 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 05:57:44.370 00:00:22.129 TCP 1.101.0.1:3000 -> 23.104.0.1:38222 10 6452 1 Summary: total flows: 136, total bytes: 414394, total packets: 1011, avg bps: 891, avg pps: 0, avg bpp: 409 Time window: 2025-10-18 04:56:46 - 2025-10-18 05:58:46 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0021s User: 0.0021s Wall: 0.0012s flows/second: 117540.8 Runtime: 0.0012s