Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 05:59:04.652 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 05:59:04.750 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 05:59:04.780 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:59:04.881 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:59:04.964 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 05:59:37.704 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35728 10 6452 1 2025-10-28 06:00:38.102 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54992 10 6452 1 2025-10-28 05:55:51.257 00:06:00.316 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:01:38.511 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57554 10 6452 1 2025-10-28 06:02:38.872 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34108 10 6452 1 2025-10-28 06:03:39.274 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45196 10 6452 1 2025-10-28 06:04:05.335 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:04:05.249 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:04:05.126 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:04:05.254 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:04:05.300 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:04:39.674 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34016 10 6452 1 2025-10-28 05:59:51.261 00:06:00.313 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:05:40.098 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51526 10 6452 1 2025-10-28 06:06:40.502 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56932 10 6452 1 2025-10-28 06:07:40.908 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59398 10 6452 1 2025-10-28 06:02:51.257 00:06:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:08:41.320 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57244 10 6452 1 2025-10-28 06:09:04.936 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:09:05.307 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:09:05.307 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:09:05.307 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:09:05.389 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:09:41.729 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:42220 10 6452 1 2025-10-28 06:10:42.156 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43360 10 6452 1 2025-10-28 06:11:42.520 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59150 10 6452 1 2025-10-28 06:06:51.261 00:06:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:12:42.931 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:42108 10 6452 1 2025-10-28 06:13:43.318 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45226 10 6452 1 2025-10-28 06:14:04.913 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:14:04.995 00:00:00.039 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:14:05.213 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:14:04.999 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:14:05.297 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:09:51.259 00:06:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:14:43.724 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39472 10 6452 1 2025-10-28 06:15:44.131 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43132 10 6452 1 2025-10-28 06:16:44.492 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44942 10 6452 1 2025-10-28 06:17:44.895 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46378 12 6556 1 2025-10-28 06:13:51.262 00:06:00.316 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:18:45.301 00:00:10.659 TCP 1.101.0.1:3000 -> 23.104.0.1:49392 10 6452 1 2025-10-28 06:19:05.335 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:19:05.455 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:19:05.181 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:19:05.414 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:19:05.498 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:19:46.002 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38626 10 6452 1 2025-10-28 06:20:46.404 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49218 10 6452 1 2025-10-28 06:16:51.269 00:06:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:21:46.807 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33978 10 6452 1 2025-10-28 06:22:47.231 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40292 10 6452 1 2025-10-28 06:23:47.593 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46144 10 6452 1 2025-10-28 06:24:05.451 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:24:05.318 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:24:05.354 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:24:05.567 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:24:05.651 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:24:47.997 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45828 10 6452 1 2025-10-28 06:20:51.265 00:06:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:25:48.398 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48710 10 6452 1 2025-10-28 06:26:48.799 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33802 10 6452 1 2025-10-28 06:27:49.204 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33620 10 6452 1 2025-10-28 06:23:51.263 00:06:00.322 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:28:49.604 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49236 10 6452 1 2025-10-28 06:29:05.586 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:29:05.505 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:29:05.504 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:29:05.376 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:29:05.503 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:29:50.006 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55018 10 6452 1 2025-10-28 06:30:50.362 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54446 10 6452 1 2025-10-28 06:31:50.720 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46532 10 6452 1 2025-10-28 06:27:51.265 00:06:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:32:51.120 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36718 10 6452 1 2025-10-28 06:33:51.521 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56374 10 6452 1 2025-10-28 06:34:05.593 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:34:05.590 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:34:05.352 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:34:05.489 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:34:05.571 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:34:51.928 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:42142 10 6452 1 2025-10-28 06:30:51.266 00:06:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:35:52.308 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44056 10 6452 1 2025-10-28 06:36:52.678 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57238 10 6452 1 2025-10-28 06:37:53.113 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:57048 11 6504 1 2025-10-28 06:38:53.567 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:42838 10 6452 1 2025-10-28 06:39:05.721 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:39:05.535 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:39:05.497 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:39:05.545 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:39:05.628 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:34:51.268 00:06:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:39:53.934 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:37176 10 6452 1 2025-10-28 06:40:54.375 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50866 10 6452 1 2025-10-28 06:41:54.780 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46594 10 6452 1 2025-10-28 06:37:51.266 00:06:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:42:55.192 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49940 10 6452 1 2025-10-28 06:44:05.802 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:44:05.921 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:44:05.792 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:44:05.746 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:44:05.719 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:43:55.556 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58128 12 6556 1 2025-10-28 06:44:55.962 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56928 10 6452 1 2025-10-28 06:45:56.368 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39422 10 6452 1 2025-10-28 06:41:51.270 00:06:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:46:56.776 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:58552 10 6452 1 2025-10-28 06:47:57.183 00:00:10.558 TCP 1.101.0.1:3000 -> 23.104.0.1:56614 10 6452 1 2025-10-28 06:49:05.898 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:49:06.050 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:49:05.829 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:49:05.994 00:00:00.025 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:48:57.777 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34824 10 6452 1 2025-10-28 06:49:06.075 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:44:51.268 00:06:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:49:58.186 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51178 10 6452 1 2025-10-28 06:50:58.585 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52796 10 6452 1 2025-10-28 06:51:58.988 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45296 10 6452 1 2025-10-28 06:52:59.399 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39304 10 6452 1 2025-10-28 06:48:51.270 00:06:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:54:06.154 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:54:06.176 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:54:06.154 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:54:05.757 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:54:06.236 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:53:59.798 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53638 10 6452 1 2025-10-28 06:55:00.161 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53388 10 6452 1 2025-10-28 06:56:00.561 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37336 10 6452 1 2025-10-28 06:51:51.270 00:06:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:57:00.963 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59692 10 6452 1 2025-10-28 06:58:01.324 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51322 10 6452 1 Summary: total flows: 136, total bytes: 410685, total packets: 1013, avg bps: 878, avg pps: 0, avg bpp: 405 Time window: 2025-10-28 05:55:51 - 2025-10-28 06:58:11 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0053s User: 0.0000s Wall: 0.0026s flows/second: 51772.1 Runtime: 0.0026s