Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 17:59:12.402 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 17:59:12.323 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 17:59:12.514 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 17:59:12.404 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 17:59:12.597 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 17:59:35.641 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35352 10 6452 1 2025-10-07 18:00:36.055 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:60874 10 6452 1 2025-10-07 17:57:40.786 00:05:00.313 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 17:57:40.783 00:05:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 18:01:36.459 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42618 10 6452 1 2025-10-07 18:02:36.872 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:59006 10 6452 1 2025-10-07 18:03:37.281 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:53486 10 6452 1 2025-10-07 18:04:12.719 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 18:04:12.539 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 18:04:12.566 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:04:12.637 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:04:12.712 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 18:04:37.643 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42962 10 6452 1 2025-10-07 18:05:38.049 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56158 10 6452 1 2025-10-07 18:06:38.455 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40224 10 6452 1 2025-10-07 18:03:40.789 00:05:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 18:03:40.792 00:05:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 18:07:38.827 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52924 10 6452 1 2025-10-07 18:08:39.231 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33800 10 6452 1 2025-10-07 18:09:12.565 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:09:12.754 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 18:09:12.661 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 18:09:12.773 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:09:12.654 00:00:00.017 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 18:09:39.637 00:00:10.393 TCP 1.101.0.1:3000 -> 23.104.0.1:45794 10 6452 1 2025-10-07 18:10:40.098 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:34400 10 6452 1 2025-10-07 18:11:40.497 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44038 10 6452 1 2025-10-07 18:12:40.901 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:59058 10 6452 1 2025-10-07 18:09:40.793 00:05:00.308 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 18:09:40.790 00:05:00.313 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 18:13:41.274 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33376 10 6452 1 2025-10-07 18:14:12.698 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 18:14:12.655 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:14:12.686 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:14:12.871 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 18:14:12.768 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 18:14:41.679 00:00:10.452 TCP 1.101.0.1:3000 -> 23.104.0.1:36766 12 10369 1 2025-10-07 18:15:42.175 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39234 10 6452 1 2025-10-07 18:16:42.584 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43432 10 6452 1 2025-10-07 18:17:42.989 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59744 10 6452 1 2025-10-07 18:18:43.396 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:39544 10 6452 1 2025-10-07 18:19:12.908 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 18:19:13.567 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 18:19:12.714 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:19:12.826 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:19:13.436 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 18:15:40.791 00:05:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 18:15:40.794 00:05:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 18:19:43.771 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:44996 10 6452 1 2025-10-07 18:20:44.200 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:50618 10 6452 1 2025-10-07 18:21:44.566 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:45298 10 6452 1 2025-10-07 18:22:44.930 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55114 10 6452 1 2025-10-07 18:23:45.345 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57448 10 6452 1 2025-10-07 18:24:13.154 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 18:24:13.152 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 18:24:13.126 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:24:13.072 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:24:13.073 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 18:24:45.748 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:42114 10 6452 1 2025-10-07 18:21:40.799 00:05:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 18:21:40.796 00:05:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 18:25:46.123 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59114 10 6452 1 2025-10-07 18:26:46.489 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:52200 10 6452 1 2025-10-07 18:27:46.898 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55478 12 6556 1 2025-10-07 18:28:47.312 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56396 10 6452 1 2025-10-07 18:29:13.092 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 18:29:12.944 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:29:12.948 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:29:13.007 00:00:00.043 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 18:29:13.032 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 18:29:47.712 00:00:10.453 TCP 1.101.0.1:3000 -> 23.104.0.1:52872 12 10375 1 2025-10-07 18:30:48.205 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:51626 10 6452 1 2025-10-07 18:27:40.800 00:05:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 18:27:40.798 00:05:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 18:31:48.615 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54410 10 6452 1 2025-10-07 18:32:49.025 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43320 10 6452 1 2025-10-07 18:33:49.427 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:55036 10 6452 1 2025-10-07 18:34:13.328 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 18:34:13.179 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:34:13.271 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:34:13.359 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 18:34:13.355 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 18:34:49.834 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:44748 10 6452 1 2025-10-07 18:35:50.235 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51286 10 6452 1 2025-10-07 18:36:50.595 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:40458 10 6452 1 2025-10-07 18:33:40.799 00:05:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 18:33:40.801 00:05:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 18:37:50.960 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51576 10 6452 1 2025-10-07 18:38:51.361 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60888 10 6452 1 2025-10-07 18:39:13.185 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 18:39:13.250 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 18:39:13.207 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:39:13.101 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:39:13.191 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 18:39:51.768 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:45750 10 6452 1 2025-10-07 18:40:52.179 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52764 10 6452 1 2025-10-07 18:41:52.584 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43216 10 6452 1 2025-10-07 18:42:52.988 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47850 10 6452 1 2025-10-07 18:39:40.801 00:05:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 18:39:40.803 00:05:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 18:43:53.402 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38910 10 6452 1 2025-10-07 18:44:13.405 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 18:44:13.307 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 18:44:13.146 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:44:13.323 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:44:13.316 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 18:44:53.808 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:37606 12 10375 1 2025-10-07 18:45:54.263 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60418 10 6452 1 2025-10-07 18:46:54.625 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:45920 10 6452 1 2025-10-07 18:47:55.027 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60156 10 6452 1 2025-10-07 18:48:55.431 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51424 10 6452 1 2025-10-07 18:49:13.533 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 18:49:13.482 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:49:13.579 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:49:13.465 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 18:49:13.661 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 18:45:40.803 00:05:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 18:45:40.800 00:05:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 18:49:55.840 00:00:10.480 TCP 1.101.0.1:3000 -> 23.104.0.1:56494 14 10473 1 2025-10-07 18:50:56.363 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37872 10 6452 1 2025-10-07 18:51:56.728 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:47980 10 6452 1 2025-10-07 18:52:57.147 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:40220 10 6452 1 2025-10-07 18:53:57.555 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52300 10 6452 1 2025-10-07 18:54:13.503 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-07 18:54:13.594 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-07 18:54:13.527 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:54:13.419 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-07 18:54:13.522 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-07 18:54:57.960 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:33048 10 6452 1 2025-10-07 18:51:40.803 00:05:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-07 18:51:40.805 00:05:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-07 18:55:58.333 00:00:10.688 TCP 1.101.0.1:3000 -> 23.104.0.1:43242 10 6452 1 2025-10-07 18:56:59.071 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:44224 10 6452 1 2025-10-07 18:57:59.478 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:44442 10 6452 1 Summary: total flows: 139, total bytes: 426436, total packets: 1022, avg bps: 940, avg pps: 0, avg bpp: 417 Time window: 2025-10-07 17:57:40 - 2025-10-07 18:58:09 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0035s User: 0.0012s Wall: 0.0019s flows/second: 73705.2 Runtime: 0.0019s