Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 17:58:50.491 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:58:50.456 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 17:58:50.492 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 17:58:50.503 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 17:58:50.573 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 17:58:51.357 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:39288 10 6452 1 2025-10-27 17:59:51.755 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34046 10 6452 1 2025-10-27 17:56:50.971 00:05:00.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:00:52.153 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52184 10 6452 1 2025-10-27 18:01:52.555 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47084 10 6452 1 2025-10-27 18:02:52.953 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38300 10 6452 1 2025-10-27 18:03:50.624 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:03:50.555 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:03:50.556 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:03:50.567 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:03:50.709 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 17:59:50.968 00:05:00.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:03:53.358 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51734 10 6452 1 2025-10-27 18:04:53.758 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:60912 10 6452 1 2025-10-27 18:05:54.135 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56694 10 6452 1 2025-10-27 18:02:50.972 00:05:00.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:06:54.533 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:55760 10 6452 1 2025-10-27 18:07:54.890 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:43456 10 6452 1 2025-10-27 18:08:51.173 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:08:51.091 00:00:00.019 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:08:51.091 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:08:51.153 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:08:50.996 00:00:00.038 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:08:55.258 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:46176 10 6452 1 2025-10-27 18:05:50.971 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:09:55.614 00:00:14.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40854 10 6452 1 2025-10-27 18:11:00.040 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57256 10 6452 1 2025-10-27 18:12:00.445 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58606 10 6452 1 2025-10-27 18:08:50.972 00:05:00.391 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:13:00.844 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:54024 10 6452 1 2025-10-27 18:13:50.682 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:13:50.810 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:13:50.808 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:13:50.903 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:13:50.892 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:14:01.225 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:33358 10 6452 1 2025-10-27 18:15:01.628 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35994 10 6452 1 2025-10-27 18:11:50.970 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:16:02.029 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54886 10 6452 1 2025-10-27 18:17:02.426 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38252 10 6452 1 2025-10-27 18:18:02.835 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:33110 10 6452 1 2025-10-27 18:18:50.972 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:18:50.967 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:14:50.974 00:05:00.390 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:18:50.828 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:18:50.789 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:18:50.889 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:19:03.256 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40590 10 6452 1 2025-10-27 18:20:03.658 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56640 10 6452 1 2025-10-27 18:21:04.068 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60960 10 6452 1 2025-10-27 18:17:50.972 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:22:04.472 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55142 10 6452 1 2025-10-27 18:23:04.876 00:00:10.405 TCP 1.101.0.1:3000 -> 23.104.0.1:50888 12 6556 1 2025-10-27 18:23:51.302 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:23:51.223 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:23:51.369 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:23:51.172 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:23:51.219 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:24:05.317 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 10 6452 1 2025-10-27 18:20:50.975 00:05:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:25:05.715 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:59814 10 6452 1 2025-10-27 18:26:06.129 00:00:10.444 TCP 1.101.0.1:3000 -> 23.104.0.1:41346 12 10375 1 2025-10-27 18:27:06.609 00:00:10.883 TCP 1.101.0.1:3000 -> 23.104.0.1:58778 10 6452 1 2025-10-27 18:23:50.974 00:05:00.398 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:28:07.538 00:00:10.403 TCP 1.101.0.1:3000 -> 23.104.0.1:35134 10 6452 1 2025-10-27 18:28:51.114 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:28:51.060 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:28:51.044 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:28:51.216 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:28:51.299 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:29:08.001 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56084 10 6452 1 2025-10-27 18:30:08.418 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48986 10 6452 1 2025-10-27 18:26:50.978 00:05:00.392 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:31:08.827 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52792 10 6452 1 2025-10-27 18:32:09.229 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:56504 10 6452 1 2025-10-27 18:33:09.591 00:00:10.485 TCP 1.101.0.1:3000 -> 23.104.0.1:53500 10 6452 1 2025-10-27 18:33:50.991 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:29:50.975 00:05:00.397 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:33:51.275 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:33:51.276 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:33:51.083 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:33:50.909 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:34:10.116 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59048 10 6452 1 2025-10-27 18:35:10.518 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40222 10 6452 1 2025-10-27 18:36:10.918 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37506 10 6452 1 2025-10-27 18:32:50.980 00:05:00.393 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:37:11.315 00:00:10.553 TCP 1.101.0.1:3000 -> 23.104.0.1:38548 10 6452 1 2025-10-27 18:38:11.912 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42082 10 6452 1 2025-10-27 18:38:51.660 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:38:51.583 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:38:51.581 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:38:51.509 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:38:51.578 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:39:12.320 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36654 10 6452 1 2025-10-27 18:35:50.978 00:05:00.396 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:40:12.725 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55514 10 6452 1 2025-10-27 18:41:13.131 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46922 10 6452 1 2025-10-27 18:42:13.559 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53510 10 6452 1 2025-10-27 18:38:50.982 00:05:00.389 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:43:13.964 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43090 10 6452 1 2025-10-27 18:43:51.523 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:43:51.375 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:43:51.175 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:43:51.462 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:43:51.544 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:44:14.366 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:33728 10 6452 1 2025-10-27 18:45:14.736 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:43150 10 6452 1 2025-10-27 18:41:50.981 00:05:00.393 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:46:15.145 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55128 10 6452 1 2025-10-27 18:47:15.542 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35898 10 6452 1 2025-10-27 18:48:15.943 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:35092 10 6452 1 2025-10-27 18:48:51.432 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:44:50.985 00:05:00.387 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:48:51.516 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:48:51.317 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:48:51.430 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:48:51.513 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:49:16.354 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48766 10 6452 1 2025-10-27 18:50:16.762 00:00:10.391 TCP 1.101.0.1:3000 -> 23.104.0.1:52970 10 6452 1 2025-10-27 18:51:17.187 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:58766 10 6452 1 2025-10-27 18:47:50.984 00:05:00.392 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:52:17.560 00:00:10.716 TCP 1.101.0.1:3000 -> 23.104.0.1:59322 10 6452 1 2025-10-27 18:53:18.316 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38952 10 6452 1 2025-10-27 18:53:51.442 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-27 18:53:51.451 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-27 18:53:51.457 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-27 18:53:51.210 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:53:51.359 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-27 18:54:18.719 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:33260 10 6452 1 2025-10-27 18:50:50.989 00:05:00.385 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-27 18:55:19.112 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39126 10 6452 1 2025-10-27 18:56:19.516 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39532 10 6452 1 2025-10-27 18:57:19.924 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:36096 10 6452 1 2025-10-27 18:53:50.987 00:05:00.390 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-27 18:58:20.303 00:00:11.357 TCP 1.101.0.1:3000 -> 23.104.0.1:53904 10 6452 1 Summary: total flows: 140, total bytes: 421027, total packets: 1024, avg bps: 905, avg pps: 0, avg bpp: 411 Time window: 2025-10-27 17:56:50 - 2025-10-27 18:58:51 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0030s User: 0.0020s Wall: 0.0030s flows/second: 46871.2 Runtime: 0.0030s