Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 06:59:34.789 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 06:59:23.892 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:40002 10 6452 1 2025-10-29 06:59:35.271 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 06:59:35.097 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 06:59:35.210 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 06:59:35.188 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:00:24.259 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:32782 10 6452 1 2025-10-29 06:56:51.734 00:05:00.359 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:01:24.624 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58862 10 6452 1 2025-10-29 06:57:51.731 00:05:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:02:25.031 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:35190 10 6452 1 2025-10-29 07:03:25.443 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48874 10 6452 1 2025-10-29 07:04:34.968 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:04:34.872 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:04:34.972 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:04:35.124 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:04:25.846 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:54912 10 6452 1 2025-10-29 07:04:35.054 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:05:26.271 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40390 10 6452 1 2025-10-29 07:06:26.630 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54850 10 6452 1 2025-10-29 07:02:51.736 00:05:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:07:27.036 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34378 10 6452 1 2025-10-29 07:03:51.733 00:05:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:08:27.435 00:00:10.591 TCP 1.101.0.1:3000 -> 23.104.0.1:47360 10 6452 1 2025-10-29 07:09:34.908 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:09:35.335 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:09:34.994 00:00:00.031 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:09:35.001 00:00:00.028 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:09:28.067 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46346 10 6452 1 2025-10-29 07:09:35.254 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:10:28.430 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58776 10 6452 1 2025-10-29 07:11:28.833 00:00:10.346 TCP 1.101.0.1:3000 -> 23.104.0.1:59830 10 6452 1 2025-10-29 07:12:29.218 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:58144 10 6452 1 2025-10-29 07:08:51.737 00:05:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:13:29.619 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57288 10 6452 1 2025-10-29 07:09:51.737 00:05:00.361 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:14:35.297 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:14:35.329 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:14:35.275 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:14:35.126 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:14:35.214 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:14:30.025 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52868 10 6452 1 2025-10-29 07:15:30.424 00:00:15.575 TCP 1.101.0.1:3000 -> 23.104.0.1:45212 10 6452 1 2025-10-29 07:16:36.033 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:56462 10 6452 1 2025-10-29 07:17:36.439 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:51582 10 6452 1 2025-10-29 07:18:36.849 00:00:10.652 TCP 1.101.0.1:3000 -> 23.104.0.1:49054 10 6452 1 2025-10-29 07:14:51.738 00:05:00.356 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:19:35.150 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:19:35.428 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:19:35.431 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:19:35.422 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:19:35.511 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:19:37.540 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48506 10 6452 1 2025-10-29 07:15:51.737 00:05:00.361 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:20:37.948 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60334 10 6452 1 2025-10-29 07:21:38.364 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:39722 10 6452 1 2025-10-29 07:22:38.727 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46244 10 6452 1 2025-10-29 07:23:39.135 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53350 10 6452 1 2025-10-29 07:24:35.707 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:24:35.490 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:24:35.622 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:24:35.544 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:24:35.624 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:24:39.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39388 10 6452 1 2025-10-29 07:20:51.740 00:05:00.357 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:21:51.737 00:05:00.362 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:25:39.940 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:42888 10 6452 1 2025-10-29 07:26:40.353 00:00:11.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60930 10 6452 1 2025-10-29 07:27:41.781 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:48486 10 6452 1 2025-10-29 07:28:42.146 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47594 10 6452 1 2025-10-29 07:29:35.637 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:29:35.591 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:29:35.715 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:29:35.592 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:29:35.677 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:29:42.554 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41468 10 6452 1 2025-10-29 07:30:42.971 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58422 10 6452 1 2025-10-29 07:26:51.741 00:05:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:27:51.738 00:05:00.364 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:31:43.337 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:56778 10 6452 1 2025-10-29 07:32:43.707 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46672 10 6452 1 2025-10-29 07:33:44.105 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37790 10 6452 1 2025-10-29 07:34:35.816 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:34:35.825 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:34:35.834 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:34:35.750 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:34:35.732 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:34:44.509 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:32878 10 6452 1 2025-10-29 07:35:44.914 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45798 10 6452 1 2025-10-29 07:32:51.741 00:05:00.358 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:36:45.282 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49148 10 6452 1 2025-10-29 07:33:51.740 00:05:00.363 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:37:45.684 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:32960 10 6452 1 2025-10-29 07:38:46.058 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52994 10 6452 1 2025-10-29 07:39:35.892 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:39:35.750 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:39:35.698 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:39:35.788 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:39:35.809 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:39:46.422 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48040 10 6452 1 2025-10-29 07:40:46.824 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51168 10 6452 1 2025-10-29 07:41:47.221 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40916 10 6452 1 2025-10-29 07:38:51.745 00:05:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:42:47.622 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39806 10 6452 1 2025-10-29 07:39:51.744 00:05:00.361 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:43:48.036 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59398 10 6452 1 2025-10-29 07:44:35.805 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:44:35.824 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:44:35.543 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:44:35.893 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:44:35.976 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:44:48.457 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58446 10 6452 1 2025-10-29 07:45:48.863 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43942 10 6452 1 2025-10-29 07:46:49.272 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58010 10 6452 1 2025-10-29 07:47:49.676 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:36426 10 6452 1 2025-10-29 07:44:51.747 00:05:00.355 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:48:50.108 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51608 10 6452 1 2025-10-29 07:49:35.852 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:49:35.930 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:49:35.914 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:49:35.916 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:49:35.997 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:45:51.745 00:05:00.360 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:49:50.511 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37126 10 6452 1 2025-10-29 07:50:50.911 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45262 10 6452 1 2025-10-29 07:51:51.273 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35212 10 6452 1 2025-10-29 07:52:51.681 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:55362 10 6452 1 2025-10-29 07:53:52.111 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:39358 10 6452 1 2025-10-29 07:54:36.278 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-29 07:54:36.312 00:00:00.027 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-29 07:54:36.312 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-29 07:54:36.098 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:54:36.196 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-29 07:50:51.748 00:05:00.354 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-29 07:54:52.528 00:00:10.548 TCP 1.101.0.1:3000 -> 23.104.0.1:47826 10 6452 1 2025-10-29 07:51:51.746 00:05:00.359 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-29 07:55:53.146 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53312 10 6452 1 2025-10-29 07:56:53.546 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48882 10 6452 1 2025-10-29 07:57:53.946 00:00:10.728 TCP 1.101.0.1:3000 -> 23.104.0.1:57632 10 6452 1 Summary: total flows: 139, total bytes: 410548, total packets: 1010, avg bps: 894, avg pps: 0, avg bpp: 406 Time window: 2025-10-29 06:56:51 - 2025-10-29 07:58:04 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0034s User: 0.0023s Wall: 0.0020s flows/second: 70882.5 Runtime: 0.0020s