Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 07:59:07.374 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 07:59:07.320 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 07:59:06.937 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:59:07.326 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 07:59:07.408 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 07:59:27.518 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54638 10 6452 1 2025-10-28 07:54:51.297 00:06:00.322 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 08:00:27.928 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:50510 10 6452 1 2025-10-28 08:01:28.366 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54438 10 6452 1 2025-10-28 08:02:28.770 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53570 10 6452 1 2025-10-28 08:03:29.187 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52762 10 6452 1 2025-10-28 07:58:51.301 00:06:00.315 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 08:04:07.519 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:04:07.409 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 08:04:07.419 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 08:04:07.310 00:00:00.045 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:04:07.601 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 08:04:29.585 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:34536 10 6452 1 2025-10-28 08:05:29.968 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:51382 10 6452 1 2025-10-28 08:06:30.338 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:34434 10 6452 1 2025-10-28 08:01:51.301 00:06:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 08:07:30.740 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:59208 10 6452 1 2025-10-28 08:08:31.122 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32832 10 6452 1 2025-10-28 08:09:07.724 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 08:09:07.376 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 08:09:07.594 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 08:09:07.485 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:09:07.641 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:09:31.518 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52116 10 6452 1 2025-10-28 08:10:31.925 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:36252 10 6452 1 2025-10-28 08:05:51.305 00:06:00.313 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 08:11:32.346 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:34410 10 6452 1 2025-10-28 08:12:32.748 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54614 11 6492 1 2025-10-28 08:13:33.149 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39202 10 6452 1 2025-10-28 08:08:51.304 00:06:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 08:14:07.745 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 08:14:07.536 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 08:14:07.937 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:14:07.753 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:14:07.836 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 08:14:33.514 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46324 10 6452 1 2025-10-28 08:15:33.923 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:36190 10 6452 1 2025-10-28 08:16:34.324 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60730 10 6452 1 2025-10-28 08:17:34.728 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:60536 10 6452 1 2025-10-28 08:12:51.308 00:06:00.316 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 08:18:35.139 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55306 10 6452 1 2025-10-28 08:19:07.693 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 08:19:07.693 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 08:19:07.386 00:00:00.026 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:19:07.525 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:19:07.609 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 08:19:35.543 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58810 10 6452 1 2025-10-28 08:20:35.946 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60232 10 6452 1 2025-10-28 08:15:51.305 00:06:00.322 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 08:21:36.352 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39160 10 6452 1 2025-10-28 08:22:36.766 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:55200 10 6452 1 2025-10-28 08:23:37.134 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:34232 10 6452 1 2025-10-28 08:24:07.814 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 08:24:07.872 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 08:24:07.807 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 08:24:07.513 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:24:07.732 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:24:37.539 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59362 10 6452 1 2025-10-28 08:19:51.309 00:06:00.316 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 08:25:37.943 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:34178 10 6452 1 2025-10-28 08:26:38.363 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:59824 12 10375 1 2025-10-28 08:27:38.839 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:53762 10 6452 1 2025-10-28 08:22:51.307 00:06:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 08:28:39.252 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49104 10 6452 1 2025-10-28 08:29:07.774 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 08:29:07.501 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:29:07.988 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:29:07.896 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 08:29:08.071 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 08:29:39.656 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46246 10 6452 1 2025-10-28 08:30:40.070 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57214 10 6452 1 2025-10-28 08:26:51.310 00:06:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 08:31:40.480 00:00:11.973 TCP 1.101.0.1:3000 -> 23.104.0.1:48872 10 6452 1 2025-10-28 08:32:42.494 00:00:10.416 TCP 1.101.0.1:3000 -> 23.104.0.1:39660 11 6504 1 2025-10-28 08:33:42.950 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:50726 10 6452 1 2025-10-28 08:34:07.978 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 08:34:07.820 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 08:34:07.782 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:34:08.068 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:34:08.151 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 08:34:43.362 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:57190 10 6452 1 2025-10-28 08:29:51.311 00:06:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 08:35:43.721 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:53060 11 6492 1 2025-10-28 08:36:44.134 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35290 10 6452 1 2025-10-28 08:37:44.497 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48930 10 6452 1 2025-10-28 08:33:51.314 00:06:00.316 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 08:38:44.899 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56776 12 6556 1 2025-10-28 08:39:08.300 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 08:39:08.111 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 08:39:08.173 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 08:39:08.003 00:00:00.039 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:39:08.218 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:39:45.310 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46514 10 6452 1 2025-10-28 08:40:45.670 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36932 10 6452 1 2025-10-28 08:36:51.311 00:06:00.322 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 08:41:46.093 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50550 10 6452 1 2025-10-28 08:42:46.456 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60282 10 6452 1 2025-10-28 08:43:46.863 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:34394 10 6452 1 2025-10-28 08:44:08.209 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 08:44:08.325 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 08:44:08.219 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:44:08.257 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:44:08.339 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 08:44:47.278 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39002 10 6452 1 2025-10-28 08:40:51.316 00:06:00.315 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 08:45:47.681 00:00:10.710 TCP 1.101.0.1:3000 -> 23.104.0.1:47554 10 6452 1 2025-10-28 08:46:48.434 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34938 10 6452 1 2025-10-28 08:47:48.844 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:49452 10 6452 1 2025-10-28 08:43:51.315 00:06:00.320 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 08:48:49.261 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55406 10 6452 1 2025-10-28 08:49:08.314 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 08:49:08.419 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 08:49:08.337 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:49:08.364 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:49:08.448 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 08:49:49.668 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60612 10 6452 1 2025-10-28 08:50:50.104 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48886 10 6452 1 2025-10-28 08:51:50.505 00:00:10.441 TCP 1.101.0.1:3000 -> 23.104.0.1:43312 12 10375 1 2025-10-28 08:47:51.317 00:06:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 08:52:50.986 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:58070 10 6452 1 2025-10-28 08:53:51.389 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36660 10 6452 1 2025-10-28 08:54:08.511 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 08:54:08.484 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:54:08.439 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 08:54:08.457 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 08:54:08.550 00:00:00.003 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 08:54:51.792 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55456 10 6452 1 2025-10-28 08:50:51.316 00:06:00.321 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 08:55:52.195 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34640 10 6452 1 2025-10-28 08:56:52.549 00:00:11.124 TCP 1.101.0.1:3000 -> 23.104.0.1:33152 10 6452 1 2025-10-28 08:57:53.713 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:57786 10 6452 1 Summary: total flows: 136, total bytes: 418507, total packets: 1017, avg bps: 882, avg pps: 0, avg bpp: 411 Time window: 2025-10-28 07:54:51 - 2025-10-28 08:58:04 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0028s User: 0.0019s Wall: 0.0019s flows/second: 70754.8 Runtime: 0.0019s