Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 10:59:21.906 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 10:59:22.073 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 10:59:21.603 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 10:59:21.912 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 10:59:21.994 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 10:59:33.543 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40958 10 6452 1 2025-10-18 11:00:33.948 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:37380 10 6452 1 2025-10-18 11:01:34.315 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40818 10 6452 1 2025-10-18 10:56:46.176 00:06:00.285 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 11:02:34.719 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34570 10 6452 1 2025-10-18 11:03:35.109 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45912 10 6452 1 2025-10-18 11:04:21.734 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 11:04:21.932 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 11:04:21.853 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:04:21.836 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:04:21.920 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 11:04:35.513 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55804 10 6452 1 2025-10-18 11:00:46.178 00:06:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 11:05:35.930 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:35354 10 6452 1 2025-10-18 11:06:36.347 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:57506 11 6504 1 2025-10-18 11:07:36.805 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59176 10 6452 1 2025-10-18 11:03:46.176 00:06:00.285 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 11:08:37.208 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:37024 10 6452 1 2025-10-18 11:09:22.142 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 11:09:22.101 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 11:09:21.867 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:09:22.151 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:09:22.234 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 11:09:37.578 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48314 10 6452 1 2025-10-18 11:10:37.981 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39736 10 6452 1 2025-10-18 11:11:38.348 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:45814 10 6452 1 2025-10-18 11:07:46.179 00:06:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 11:12:38.742 00:00:10.409 TCP 1.101.0.1:3000 -> 23.104.0.1:57540 10 6452 1 2025-10-18 11:13:39.202 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:52528 10 6452 1 2025-10-18 11:14:21.960 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 11:14:21.871 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 11:14:21.685 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:14:22.125 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:14:22.208 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 11:14:39.587 00:00:10.825 TCP 1.101.0.1:3000 -> 23.104.0.1:47960 10 6452 1 2025-10-18 11:10:46.178 00:06:00.285 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 11:15:40.455 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48438 10 6452 1 2025-10-18 11:16:40.856 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:38464 10 6452 1 2025-10-18 11:17:41.237 00:00:11.217 TCP 1.101.0.1:3000 -> 23.104.0.1:52192 10 6452 1 2025-10-18 11:18:42.491 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44096 10 6452 1 2025-10-18 11:19:22.152 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 11:19:22.233 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 11:19:22.148 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:19:22.060 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:19:22.144 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 11:14:46.180 00:06:00.280 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 11:19:42.889 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:33534 12 6556 1 2025-10-18 11:20:43.313 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51844 10 6452 1 2025-10-18 11:21:43.721 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33244 10 6452 1 2025-10-18 11:17:46.178 00:06:00.285 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 11:22:44.128 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58736 10 6452 1 2025-10-18 11:23:44.533 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:50860 10 6452 1 2025-10-18 11:24:22.075 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 11:24:22.346 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 11:24:22.203 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:24:22.288 00:00:00.044 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:24:22.370 00:00:00.044 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 11:24:44.892 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:39764 10 6452 1 2025-10-18 11:25:45.303 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50060 10 6452 1 2025-10-18 11:21:46.181 00:06:00.279 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 11:26:45.670 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46604 10 6452 1 2025-10-18 11:27:46.101 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38934 10 6452 1 2025-10-18 11:28:46.502 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:39822 10 6452 1 2025-10-18 11:29:22.095 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 11:29:22.399 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 11:29:22.098 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:29:22.421 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:29:22.503 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 11:24:46.180 00:06:00.283 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 11:29:46.904 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43270 12 6556 1 2025-10-18 11:30:47.319 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56526 10 6452 1 2025-10-18 11:31:47.678 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32922 10 6452 1 2025-10-18 11:32:48.115 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:40316 10 6452 1 2025-10-18 11:28:46.183 00:06:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 11:33:48.524 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:57550 10 6452 1 2025-10-18 11:34:22.469 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 11:34:22.472 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 11:34:22.444 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:34:22.473 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:34:22.554 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 11:34:48.930 00:00:10.657 TCP 1.101.0.1:3000 -> 23.104.0.1:49666 10 6452 1 2025-10-18 11:35:49.620 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53570 10 6452 1 2025-10-18 11:31:46.181 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 11:36:50.024 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46548 10 6452 1 2025-10-18 11:37:50.436 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34246 10 6452 1 2025-10-18 11:38:50.837 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:35334 10 6452 1 2025-10-18 11:39:22.594 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 11:39:22.511 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:39:22.512 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 11:39:22.582 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 11:39:22.540 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:39:51.221 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45008 10 6452 1 2025-10-18 11:35:46.186 00:06:00.282 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 11:40:51.627 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41952 10 6452 1 2025-10-18 11:41:52.033 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60420 10 6452 1 2025-10-18 11:42:52.440 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:48606 10 6452 1 2025-10-18 11:38:46.183 00:06:00.286 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 11:43:52.866 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37016 10 6452 1 2025-10-18 11:44:22.805 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 11:44:22.801 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 11:44:22.781 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:44:22.804 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:44:22.887 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 11:44:53.275 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51144 10 6452 1 2025-10-18 11:45:53.679 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:47904 10 6452 1 2025-10-18 11:46:54.107 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44348 10 6452 1 2025-10-18 11:42:46.186 00:06:00.281 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 11:47:54.539 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41536 10 6452 1 2025-10-18 11:48:54.941 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33204 10 6452 1 2025-10-18 11:49:22.928 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 11:49:22.663 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 11:49:22.596 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:49:22.840 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:49:22.923 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 11:49:55.340 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:36418 10 6452 1 2025-10-18 11:45:46.184 00:06:00.287 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 11:50:55.706 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42974 10 6452 1 2025-10-18 11:51:56.107 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37356 10 6452 1 2025-10-18 11:52:56.512 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56350 10 6452 1 2025-10-18 11:53:56.916 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55380 10 6452 1 2025-10-18 11:54:22.792 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 11:54:22.625 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 11:54:22.886 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 11:54:22.618 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:54:22.709 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 11:49:46.187 00:06:00.283 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 11:54:57.322 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:56462 10 6452 1 2025-10-18 11:55:57.685 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:51572 10 6452 1 2025-10-18 11:56:58.120 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33348 10 6452 1 2025-10-18 11:52:46.185 00:06:00.290 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 11:57:58.528 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:54352 10 6452 1 Summary: total flows: 136, total bytes: 410685, total packets: 1013, avg bps: 883, avg pps: 0, avg bpp: 405 Time window: 2025-10-18 10:56:46 - 2025-10-18 11:58:46 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0034s User: 0.0009s Wall: 0.0018s flows/second: 74770.7 Runtime: 0.0018s