Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 11:59:12.057 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:59:12.074 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 11:59:12.234 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 11:59:11.859 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 11:59:12.140 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 11:59:26.369 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60482 10 6452 1 2025-10-28 12:00:26.775 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60914 10 6452 1 2025-10-28 12:01:27.183 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:58150 10 6452 1 2025-10-28 11:56:51.380 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 12:02:27.547 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55844 10 6452 1 2025-10-28 12:03:27.954 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38548 10 6452 1 2025-10-28 12:04:12.362 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 12:04:12.320 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 12:04:12.071 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:04:12.278 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:04:12.271 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 12:04:28.362 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52418 10 6452 1 2025-10-28 11:59:51.377 00:06:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 12:05:28.763 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:56248 10 6452 1 2025-10-28 12:06:29.169 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40648 10 6452 1 2025-10-28 12:07:29.571 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:35828 10 6452 1 2025-10-28 12:08:29.933 00:00:10.347 TCP 1.101.0.1:3000 -> 23.104.0.1:41158 10 6452 1 2025-10-28 12:03:51.379 00:06:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 12:09:12.285 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 12:09:12.371 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 12:09:12.298 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:09:12.370 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:09:12.454 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 12:09:30.323 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44328 10 6452 1 2025-10-28 12:10:30.734 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56078 10 6452 1 2025-10-28 12:11:31.114 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41638 10 6452 1 2025-10-28 12:06:51.377 00:06:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 12:12:31.517 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42772 10 6452 1 2025-10-28 12:13:31.879 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:38034 10 6452 1 2025-10-28 12:14:12.642 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 12:14:12.214 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 12:14:12.480 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 12:14:12.345 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:14:12.560 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:14:32.276 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:45764 10 6452 1 2025-10-28 12:15:32.636 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:33370 10 6452 1 2025-10-28 12:10:51.381 00:06:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 12:16:33.035 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54382 10 6452 1 2025-10-28 12:17:33.446 00:00:10.435 TCP 1.101.0.1:3000 -> 23.104.0.1:46556 12 10375 1 2025-10-28 12:18:33.918 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:42104 10 6452 1 2025-10-28 12:13:51.379 00:06:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 12:19:12.535 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 12:19:12.530 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 12:19:12.397 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:19:12.536 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:19:12.619 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 12:19:34.315 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39624 10 6452 1 2025-10-28 12:20:34.679 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36988 10 6452 1 2025-10-28 12:21:35.111 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:37654 10 6452 1 2025-10-28 12:22:35.506 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60042 10 6452 1 2025-10-28 12:17:51.381 00:06:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 12:23:35.909 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33728 10 6452 1 2025-10-28 12:24:12.594 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 12:24:12.678 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 12:24:12.533 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:24:12.671 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:24:12.756 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 12:24:36.314 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60584 10 6452 1 2025-10-28 12:25:36.721 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:33092 10 6452 1 2025-10-28 12:20:51.379 00:06:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 12:26:37.136 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:59776 10 6452 1 2025-10-28 12:27:37.537 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:38126 10 6452 1 2025-10-28 12:28:37.930 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:42718 10 6452 1 2025-10-28 12:29:12.666 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 12:29:12.580 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 12:29:12.656 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 12:29:12.730 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:29:12.583 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:29:38.356 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36392 10 6452 1 2025-10-28 12:24:51.381 00:06:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 12:30:38.766 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39564 10 6452 1 2025-10-28 12:31:39.183 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:45118 10 6452 1 2025-10-28 12:27:51.381 00:06:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 12:32:39.577 00:00:11.051 TCP 1.101.0.1:3000 -> 23.104.0.1:50852 10 6452 1 2025-10-28 12:33:40.670 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59172 10 6452 1 2025-10-28 12:34:12.794 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:34:12.799 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 12:34:12.793 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 12:34:12.541 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:34:12.876 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 12:34:41.106 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57936 10 6452 1 2025-10-28 12:35:41.508 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59236 10 6452 1 2025-10-28 12:36:41.914 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:36262 10 6452 1 2025-10-28 12:31:51.383 00:06:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 12:37:42.301 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:46038 10 6452 1 2025-10-28 12:38:42.712 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:42946 10 6452 1 2025-10-28 12:39:12.734 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 12:39:12.653 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:39:13.121 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 12:39:12.875 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 12:39:12.959 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:39:43.122 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:54464 10 6452 1 2025-10-28 12:34:51.381 00:06:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 12:40:43.536 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:50290 10 6452 1 2025-10-28 12:41:43.940 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:37622 10 6452 1 2025-10-28 12:42:44.308 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:54946 10 6452 1 2025-10-28 12:38:51.385 00:06:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 12:43:44.666 00:00:11.229 TCP 1.101.0.1:3000 -> 23.104.0.1:48126 10 6452 1 2025-10-28 12:44:13.093 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 12:44:12.972 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:44:12.913 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:44:12.998 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 12:44:12.994 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 12:44:45.930 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:41116 10 6452 1 2025-10-28 12:45:46.353 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35676 10 6452 1 2025-10-28 12:41:51.382 00:06:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 12:46:46.755 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45162 10 6452 1 2025-10-28 12:47:47.185 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46380 10 6452 1 2025-10-28 12:48:47.585 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48628 10 6452 1 2025-10-28 12:49:13.109 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 12:49:13.165 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 12:49:12.948 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:49:12.989 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:49:13.072 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 12:49:47.990 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:40038 10 6452 1 2025-10-28 12:45:51.386 00:06:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 12:50:48.398 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41204 10 6452 1 2025-10-28 12:51:48.800 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:45084 10 6452 1 2025-10-28 12:52:49.178 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:41058 10 6452 1 2025-10-28 12:48:51.383 00:06:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 12:53:49.591 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43670 10 6452 1 2025-10-28 12:54:13.406 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 12:54:13.205 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 12:54:13.320 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 12:54:13.229 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:54:13.322 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 12:54:49.957 00:00:11.672 TCP 1.101.0.1:3000 -> 23.104.0.1:38058 10 6452 1 2025-10-28 12:55:51.670 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60910 10 6452 1 2025-10-28 12:56:52.110 00:00:10.398 TCP 1.101.0.1:3000 -> 23.104.0.1:48492 13 13949 1 2025-10-28 12:52:51.386 00:06:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 12:57:52.547 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:36520 10 6452 1 Summary: total flows: 136, total bytes: 421845, total packets: 1013, avg bps: 907, avg pps: 0, avg bpp: 416 Time window: 2025-10-28 11:56:51 - 2025-10-28 12:58:51 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0033s User: 0.0022s Wall: 0.0020s flows/second: 66825.8 Runtime: 0.0021s