Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 20:59:04.982 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 20:59:04.996 00:00:00.034 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 20:59:04.777 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 20:59:04.900 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 20:59:04.611 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 20:59:16.544 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60712 10 6452 1 2025-10-17 20:55:45.862 00:05:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 21:00:16.944 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:38146 10 6452 1 2025-10-17 21:01:17.318 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36180 10 6452 1 2025-10-17 21:02:17.720 00:00:10.655 TCP 1.101.0.1:3000 -> 23.104.0.1:45494 10 6452 1 2025-10-17 20:58:45.859 00:05:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 21:03:18.420 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37426 10 6452 1 2025-10-17 21:04:05.540 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 21:04:05.340 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 21:04:05.310 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:04:05.456 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:04:05.343 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 21:04:18.838 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:57128 10 6452 1 2025-10-17 21:05:19.248 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38898 10 6452 1 2025-10-17 21:01:45.863 00:05:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 21:06:19.611 00:00:10.425 TCP 1.101.0.1:3000 -> 23.104.0.1:45466 11 6504 1 2025-10-17 21:07:20.104 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58784 10 6452 1 2025-10-17 21:08:20.509 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58106 10 6452 1 2025-10-17 21:04:45.864 00:05:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 21:09:05.182 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 21:09:04.723 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:09:04.993 00:00:00.053 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:09:05.182 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 21:09:05.076 00:00:00.053 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 21:09:20.911 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48464 10 6452 1 2025-10-17 21:10:21.314 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42968 10 6452 1 2025-10-17 21:11:21.714 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36808 10 6452 1 2025-10-17 21:07:45.867 00:05:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 21:12:22.114 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:48904 10 6452 1 2025-10-17 21:13:22.490 00:00:10.770 TCP 1.101.0.1:3000 -> 23.104.0.1:34984 10 6452 1 2025-10-17 21:14:05.172 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 21:14:05.268 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:14:05.246 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:14:05.247 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 21:14:05.328 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 21:14:23.290 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:34272 10 6452 1 2025-10-17 21:10:45.866 00:05:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 21:15:23.689 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:58720 10 6452 1 2025-10-17 21:16:24.108 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:37056 10 6452 1 2025-10-17 21:17:24.508 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39610 10 6452 1 2025-10-17 21:13:45.871 00:05:00.302 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 21:18:24.916 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34650 10 6452 1 2025-10-17 21:19:05.384 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 21:19:05.245 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 21:19:05.227 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:19:05.303 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:19:05.154 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 21:19:25.325 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56968 10 6452 1 2025-10-17 21:20:25.723 00:00:10.390 TCP 1.101.0.1:3000 -> 23.104.0.1:60048 10 6452 1 2025-10-17 21:16:45.867 00:05:00.308 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 21:21:26.154 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35420 10 6452 1 2025-10-17 21:22:26.559 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35180 10 6452 1 2025-10-17 21:23:26.961 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:55336 10 6452 1 2025-10-17 21:19:45.872 00:05:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 21:24:05.701 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 21:24:05.522 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 21:24:05.582 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:24:05.619 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:24:05.452 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 21:24:27.366 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36884 10 6452 1 2025-10-17 21:25:27.767 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47114 10 6452 1 2025-10-17 21:26:28.178 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48124 10 6452 1 2025-10-17 21:22:45.873 00:05:00.305 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 21:27:28.586 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38110 10 6452 1 2025-10-17 21:28:28.951 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55704 10 6452 1 2025-10-17 21:29:05.786 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 21:29:05.772 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 21:29:05.640 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:29:05.702 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:29:05.452 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 21:29:29.367 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59350 10 6452 1 2025-10-17 21:25:45.873 00:05:00.303 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 21:30:29.764 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:32828 10 6452 1 2025-10-17 21:31:30.170 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:38318 10 6452 1 2025-10-17 21:32:30.579 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51448 10 6452 1 2025-10-17 21:28:45.873 00:05:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 21:33:30.980 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:38480 10 6452 1 2025-10-17 21:34:05.518 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 21:34:05.637 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:34:05.608 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:34:05.672 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 21:34:05.691 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 21:34:31.345 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43542 10 6452 1 2025-10-17 21:35:31.744 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37082 10 6452 1 2025-10-17 21:31:45.876 00:05:00.302 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 21:36:32.144 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:37466 10 6452 1 2025-10-17 21:37:32.500 00:00:10.842 TCP 1.101.0.1:3000 -> 23.104.0.1:37028 10 6452 1 2025-10-17 21:38:33.383 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45368 10 6452 1 2025-10-17 21:34:45.874 00:05:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 21:39:05.758 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 21:39:05.413 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 21:39:05.566 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:39:05.676 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:39:05.666 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 21:39:33.790 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44058 10 6452 1 2025-10-17 21:40:34.195 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:38000 10 6452 1 2025-10-17 21:41:34.597 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:46870 10 6452 1 2025-10-17 21:37:45.878 00:05:00.301 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 21:42:34.954 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:38430 10 6452 1 2025-10-17 21:43:35.322 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:49148 10 6452 1 2025-10-17 21:44:05.732 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 21:44:05.556 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:44:05.742 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:44:05.818 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 21:44:05.827 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 21:44:35.726 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35020 10 6452 1 2025-10-17 21:40:45.876 00:05:00.305 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 21:45:36.142 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56766 10 6452 1 2025-10-17 21:46:36.548 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:34492 10 6452 1 2025-10-17 21:47:36.908 00:00:10.458 TCP 1.101.0.1:3000 -> 23.104.0.1:56042 12 6556 1 2025-10-17 21:43:45.880 00:05:00.300 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 21:48:37.404 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46380 10 6452 1 2025-10-17 21:49:05.902 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 21:49:05.724 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 21:49:05.783 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:49:05.821 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:49:05.820 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 21:49:37.762 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:38180 10 6452 1 2025-10-17 21:50:38.174 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:49132 10 6452 1 2025-10-17 21:46:45.879 00:05:00.306 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 21:51:38.602 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43096 10 6452 1 2025-10-17 21:52:38.969 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:53194 10 6452 1 2025-10-17 21:53:39.386 00:00:10.707 TCP 1.101.0.1:3000 -> 23.104.0.1:57768 10 6452 1 2025-10-17 21:49:45.882 00:05:00.299 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-17 21:54:05.769 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:54:06.322 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-17 21:54:06.435 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-17 21:54:06.065 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-17 21:54:06.518 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-17 21:54:40.130 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60686 10 6452 1 2025-10-17 21:55:40.537 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60710 10 6452 1 2025-10-17 21:52:45.880 00:05:00.304 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-17 21:56:40.944 00:00:10.532 TCP 1.101.0.1:3000 -> 23.104.0.1:57472 10 6452 1 2025-10-17 21:57:41.522 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34946 10 6452 1 Summary: total flows: 139, total bytes: 410704, total packets: 1013, avg bps: 881, avg pps: 0, avg bpp: 405 Time window: 2025-10-17 20:55:45 - 2025-10-17 21:57:51 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0022s User: 0.0022s Wall: 0.0014s flows/second: 101534.0 Runtime: 0.0014s