Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 01:58:53.177 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 01:58:53.146 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:58:53.181 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 01:58:53.300 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 01:58:53.263 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 01:59:30.845 00:00:10.353 TCP 1.101.0.1:3000 -> 23.104.0.1:51944 10 6452 1 2025-10-07 01:58:40.415 00:02:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 01:58:40.412 00:02:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 02:00:31.228 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33704 10 6452 1 2025-10-07 02:01:31.628 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:36242 10 6452 1 2025-10-07 02:01:40.413 00:01:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:01:40.416 00:01:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 02:02:32.034 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39946 10 6452 1 2025-10-07 02:03:32.402 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57718 10 6452 1 2025-10-07 02:03:53.435 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 02:03:53.214 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 02:03:53.301 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:03:53.353 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:03:53.353 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 02:04:32.808 00:00:10.515 TCP 1.101.0.1:3000 -> 23.104.0.1:37514 14 14286 1 2025-10-07 02:03:40.418 00:02:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 02:03:40.415 00:02:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 02:05:33.357 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:39940 10 6452 1 2025-10-07 02:06:33.751 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40708 10 6452 1 2025-10-07 02:06:40.419 00:01:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 02:06:40.417 00:01:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:07:34.150 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39352 10 6452 1 2025-10-07 02:08:34.554 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51846 10 6452 1 2025-10-07 02:08:53.324 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 02:08:53.801 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 02:08:53.142 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:08:53.242 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:08:53.272 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 02:09:34.918 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49214 10 6452 1 2025-10-07 02:08:40.419 00:02:00.327 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 02:08:40.417 00:02:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 02:10:35.320 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44126 10 6452 1 2025-10-07 02:11:35.729 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34500 10 6452 1 2025-10-07 02:11:40.420 00:01:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 02:11:40.418 00:01:00.332 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:12:36.144 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:53476 10 6452 1 2025-10-07 02:13:36.547 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:43286 10 6452 1 2025-10-07 02:13:53.389 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 02:13:53.307 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:13:53.527 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 02:13:53.519 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 02:13:53.428 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:14:36.961 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49152 10 6452 1 2025-10-07 02:13:40.419 00:02:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 02:13:40.417 00:02:00.334 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 02:15:37.364 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:41472 10 6452 1 2025-10-07 02:16:37.732 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45532 10 6452 1 2025-10-07 02:16:40.418 00:01:00.333 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:16:40.420 00:01:00.328 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 02:17:38.158 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:44884 10 6452 1 2025-10-07 02:18:38.553 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53808 10 6452 1 2025-10-07 02:18:53.794 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 02:18:53.706 00:00:00.029 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 02:18:53.688 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:18:53.710 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:18:53.611 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 02:18:40.421 00:01:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:18:40.424 00:01:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 02:19:38.966 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:58670 10 6452 1 2025-10-07 02:20:39.380 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56748 10 6452 1 2025-10-07 02:21:39.795 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40804 10 6452 1 2025-10-07 02:20:40.423 00:02:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 02:20:40.421 00:02:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 02:22:40.204 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46584 10 6452 1 2025-10-07 02:23:40.563 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52916 10 6452 1 2025-10-07 02:23:53.772 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 02:23:53.551 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:23:53.714 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:23:53.541 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 02:23:53.796 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 02:23:40.424 00:01:00.326 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 02:23:40.421 00:01:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:24:40.967 00:00:10.392 TCP 1.101.0.1:3000 -> 23.104.0.1:44260 10 6452 1 2025-10-07 02:25:41.392 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52866 10 6452 1 2025-10-07 02:26:41.798 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47172 10 6452 1 2025-10-07 02:25:40.424 00:02:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 02:25:40.421 00:02:00.331 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 02:27:42.203 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38304 10 6452 1 2025-10-07 02:28:53.873 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 02:28:42.608 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59946 10 6452 1 2025-10-07 02:28:53.799 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 02:28:53.689 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:28:53.791 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:28:53.867 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 02:28:40.425 00:01:00.325 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 02:28:40.422 00:01:00.330 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:29:43.015 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:39260 10 6452 1 2025-10-07 02:30:43.419 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:49506 10 6452 1 2025-10-07 02:31:43.780 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55384 10 6452 1 2025-10-07 02:30:40.428 00:02:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 02:30:40.431 00:02:00.320 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 02:32:44.189 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:57408 10 6452 1 2025-10-07 02:33:53.876 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 02:33:44.601 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37262 10 6452 1 2025-10-07 02:33:53.809 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:33:53.930 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:33:53.932 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 02:33:54.014 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 02:33:40.428 00:01:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:33:40.431 00:01:00.320 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 02:34:45.019 00:00:10.443 TCP 1.101.0.1:3000 -> 23.104.0.1:54010 12 10375 1 2025-10-07 02:35:45.505 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:42498 10 6452 1 2025-10-07 02:36:45.914 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60452 10 6452 1 2025-10-07 02:35:40.430 00:02:00.351 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 02:35:40.430 00:02:00.346 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 02:37:46.320 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41260 10 6452 1 2025-10-07 02:38:54.179 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 02:38:54.198 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:38:54.263 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:38:54.353 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 02:38:54.346 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 02:38:46.692 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56194 10 6452 1 2025-10-07 02:38:40.429 00:01:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:38:40.431 00:01:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 02:39:47.114 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:40260 10 6452 1 2025-10-07 02:40:47.513 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49572 10 6452 1 2025-10-07 02:41:47.913 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46712 10 6452 1 2025-10-07 02:40:40.429 00:02:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 6 369 1 2025-10-07 02:40:40.431 00:02:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 02:42:48.325 00:00:10.949 TCP 1.101.0.1:3000 -> 23.104.0.1:49836 10 6452 1 2025-10-07 02:43:53.881 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 02:43:53.901 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 02:43:54.063 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:43:53.798 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:43:54.101 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 02:43:49.309 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:42728 10 6452 1 2025-10-07 02:43:40.432 00:01:00.347 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 02:43:40.429 00:01:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:44:49.670 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53704 10 6452 1 2025-10-07 02:45:50.100 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57482 10 6452 1 2025-10-07 02:45:40.429 00:01:00.353 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:46:50.502 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51432 10 6452 1 2025-10-07 02:45:40.432 00:02:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 6 369 1 2025-10-07 02:47:40.431 00:00:00.352 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-07 02:47:50.901 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:52810 10 6452 1 2025-10-07 02:48:54.053 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 02:48:54.212 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 02:48:54.109 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:48:53.970 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:48:54.208 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 02:48:51.323 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:38056 10 6452 1 2025-10-07 02:48:40.433 00:01:00.348 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 02:48:40.430 00:01:00.354 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:49:51.679 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:44698 10 6452 1 2025-10-07 02:50:52.109 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60178 10 6452 1 2025-10-07 02:50:40.440 00:01:00.343 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:50:40.441 00:01:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 02:51:52.510 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:58544 10 6452 1 2025-10-07 02:52:40.443 00:00:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 2 123 1 2025-10-07 02:52:40.440 00:00:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 2 123 1 2025-10-07 02:52:52.921 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46454 10 6452 1 2025-10-07 02:53:54.330 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 02:53:54.325 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 02:53:54.331 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:53:54.247 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 02:53:54.246 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 02:53:53.329 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38634 10 6452 1 2025-10-07 02:53:40.440 00:01:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:53:40.443 00:01:00.339 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 02:54:53.737 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37978 10 6452 1 2025-10-07 02:55:54.141 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46036 10 6452 1 2025-10-07 02:55:40.443 00:01:00.340 TCP 179.21.23.21:38570 -> 179.21.23.23:179 4 246 1 2025-10-07 02:55:40.440 00:01:00.344 TCP 179.21.23.23:179 -> 179.21.23.21:38570 4 246 1 2025-10-07 02:56:54.543 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:53414 10 6452 1 2025-10-07 02:57:54.915 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39378 10 6452 1 Summary: total flows: 170, total bytes: 422059, total packets: 1012, avg bps: 947, avg pps: 0, avg bpp: 417 Time window: 2025-10-07 01:58:40 - 2025-10-07 02:58:05 Total flows processed: 170, passed: 170, Blocks skipped: 0, Bytes read: 17744 Sys: 0.0030s User: 0.0030s Wall: 0.0028s flows/second: 61750.4 Runtime: 0.0028s