Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 12:59:24.240 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 12:59:23.963 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 12:59:24.153 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 12:59:23.987 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 12:59:24.157 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 12:59:25.154 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:52634 10 6452 1 2025-10-18 13:00:25.516 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:46246 10 6452 1 2025-10-18 12:55:46.214 00:06:00.276 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 13:01:25.925 00:00:11.325 TCP 1.101.0.1:3000 -> 23.104.0.1:56334 10 6452 1 2025-10-18 13:02:27.291 00:00:10.433 TCP 1.101.0.1:3000 -> 23.104.0.1:42158 12 10375 1 2025-10-18 13:03:27.767 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36702 10 6452 1 2025-10-18 13:04:24.615 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 13:04:24.534 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 13:04:24.157 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 13:04:24.455 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:04:24.532 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:04:28.174 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59004 10 6452 1 2025-10-18 12:59:46.219 00:06:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 13:05:28.583 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53172 10 6452 1 2025-10-18 13:06:28.965 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41704 10 6452 1 2025-10-18 13:07:29.331 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37732 10 6452 1 2025-10-18 13:02:46.216 00:06:00.275 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 13:08:29.736 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59244 10 6452 1 2025-10-18 13:09:24.463 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 13:09:24.423 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 13:09:24.434 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:09:24.340 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:09:24.423 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 13:09:30.146 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47160 10 6452 1 2025-10-18 13:10:30.549 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:42810 10 6452 1 2025-10-18 13:11:30.952 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39898 10 6452 1 2025-10-18 13:06:46.219 00:06:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 13:12:31.373 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54962 10 6452 1 2025-10-18 13:13:31.771 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42304 10 6452 1 2025-10-18 13:14:24.561 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 13:14:24.548 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 13:14:24.415 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 13:14:24.172 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:14:24.477 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:14:32.187 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:43860 10 6452 1 2025-10-18 13:09:46.219 00:06:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 13:15:32.586 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52406 10 6452 1 2025-10-18 13:16:32.993 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51506 10 6452 1 2025-10-18 13:17:33.397 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35772 10 6452 1 2025-10-18 13:18:33.798 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44682 10 6452 1 2025-10-18 13:13:46.222 00:06:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 13:19:24.572 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 13:19:24.453 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 13:19:24.578 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:19:24.521 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:19:24.606 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 13:19:34.206 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59266 10 6452 1 2025-10-18 13:20:34.622 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56730 10 6452 1 2025-10-18 13:21:35.028 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34900 10 6452 1 2025-10-18 13:16:46.218 00:06:00.276 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 13:22:35.433 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37984 10 6452 1 2025-10-18 13:23:35.835 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60866 10 6452 1 2025-10-18 13:24:24.719 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 13:24:24.704 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 13:24:24.523 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:24:24.759 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:24:24.841 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 13:24:36.249 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58928 10 6452 1 2025-10-18 13:20:46.222 00:06:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 13:25:36.655 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:60258 10 6452 1 2025-10-18 13:26:37.096 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50868 10 6452 1 2025-10-18 13:27:37.502 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:36982 12 10375 1 2025-10-18 13:23:46.219 00:06:00.277 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 13:28:37.976 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52224 10 6452 1 2025-10-18 13:29:24.813 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 13:29:24.808 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 13:29:24.765 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:29:24.622 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:29:24.705 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 13:29:38.342 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:44726 10 6452 1 2025-10-18 13:30:38.703 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42130 10 6452 1 2025-10-18 13:31:39.075 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42640 10 6452 1 2025-10-18 13:27:46.224 00:06:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 13:32:39.487 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53810 10 6452 1 2025-10-18 13:33:39.892 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58636 10 6452 1 2025-10-18 13:34:24.896 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 13:34:24.950 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 13:34:24.918 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:34:24.894 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:34:24.978 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 13:34:40.302 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:35976 10 6452 1 2025-10-18 13:30:46.233 00:06:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 13:35:40.711 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51216 10 6452 1 2025-10-18 13:36:41.117 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36018 10 6452 1 2025-10-18 13:37:41.514 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59506 10 6452 1 2025-10-18 13:38:41.921 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:49118 10 6452 1 2025-10-18 13:39:24.662 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 13:39:24.884 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 13:39:24.967 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:39:25.227 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:39:25.309 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 13:34:46.235 00:06:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 13:39:42.318 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:46736 10 6452 1 2025-10-18 13:40:42.721 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:32878 10 6452 1 2025-10-18 13:41:43.141 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33898 10 6452 1 2025-10-18 13:37:46.233 00:06:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 13:42:43.542 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56266 10 6452 1 2025-10-18 13:43:43.951 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50134 10 6452 1 2025-10-18 13:44:24.922 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 13:44:24.921 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 13:44:24.795 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:44:25.005 00:00:00.047 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:44:25.087 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 13:44:44.369 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53502 10 6452 1 2025-10-18 13:45:44.775 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42788 10 6452 1 2025-10-18 13:41:46.237 00:06:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 13:46:45.140 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39388 10 6452 1 2025-10-18 13:47:45.543 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60290 10 6452 1 2025-10-18 13:48:45.944 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:41702 10 6452 1 2025-10-18 13:49:25.217 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 13:49:25.297 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 13:49:25.294 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 13:49:25.255 00:00:00.034 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:49:25.133 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:44:46.237 00:06:00.270 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 13:49:46.360 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46342 10 6452 1 2025-10-18 13:50:46.757 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:51304 10 6452 1 2025-10-18 13:51:47.184 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57522 10 6452 1 2025-10-18 13:52:47.584 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37434 10 6452 1 2025-10-18 13:48:46.240 00:06:00.265 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 13:53:47.987 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56764 10 6452 1 2025-10-18 13:54:25.090 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:54:25.189 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 13:54:25.191 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 13:54:25.134 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 13:54:25.172 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 13:54:48.407 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:44848 10 6452 1 2025-10-18 13:55:48.820 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42188 10 6452 1 2025-10-18 13:51:46.237 00:06:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 13:56:49.228 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39380 10 6452 1 2025-10-18 13:57:49.650 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:34708 10 6452 1 Summary: total flows: 136, total bytes: 418271, total packets: 1012, avg bps: 896, avg pps: 0, avg bpp: 413 Time window: 2025-10-18 12:55:46 - 2025-10-18 13:58:00 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0035s User: 0.0026s Wall: 0.0025s flows/second: 55150.9 Runtime: 0.0025s