Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 00:59:09.781 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 00:59:09.765 00:00:00.027 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 00:58:59.699 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54382 10 6452 1 2025-10-18 00:59:09.464 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 00:59:09.700 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 00:59:09.864 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 00:55:45.952 00:05:00.277 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 01:00:00.115 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53314 10 6452 1 2025-10-18 01:01:00.519 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:56132 10 6452 1 2025-10-18 01:02:00.925 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:50446 10 6452 1 2025-10-18 00:58:45.951 00:05:00.282 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 01:03:01.345 00:00:10.426 TCP 1.101.0.1:3000 -> 23.104.0.1:45514 11 6504 1 2025-10-18 01:04:10.088 00:00:00.047 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 01:04:10.003 00:00:00.040 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 01:04:09.826 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:04:10.005 00:00:00.046 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:04:10.005 00:00:00.042 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 01:04:01.794 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:35938 10 6452 1 2025-10-18 01:05:02.154 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:38124 10 6452 1 2025-10-18 01:01:45.956 00:05:00.275 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 01:06:02.522 00:00:10.810 TCP 1.101.0.1:3000 -> 23.104.0.1:51232 10 6452 1 2025-10-18 01:07:03.371 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:40328 10 6452 1 2025-10-18 01:08:03.770 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:48672 10 6452 1 2025-10-18 01:04:45.953 00:05:00.281 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 01:09:10.067 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 01:09:09.903 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 01:09:09.903 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:09:09.985 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:09:09.892 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 01:09:04.142 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56750 10 6452 1 2025-10-18 01:10:04.540 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39572 10 6452 1 2025-10-18 01:11:04.906 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:52024 12 6556 1 2025-10-18 01:07:45.956 00:05:00.276 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 01:12:05.314 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55700 10 6452 1 2025-10-18 01:13:05.718 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42074 10 6452 1 2025-10-18 01:14:09.745 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 01:14:09.952 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:14:10.063 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:14:10.178 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 01:14:10.145 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 01:14:06.130 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47468 10 6452 1 2025-10-18 01:10:45.953 00:05:00.282 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 01:15:06.536 00:00:10.608 TCP 1.101.0.1:3000 -> 23.104.0.1:46814 10 6452 1 2025-10-18 01:16:07.185 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49442 10 6452 1 2025-10-18 01:17:07.589 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47716 10 6452 1 2025-10-18 01:13:45.958 00:05:00.275 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 01:18:08.003 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33682 10 6452 1 2025-10-18 01:19:10.521 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 01:19:10.322 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 01:19:10.167 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:19:10.438 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:19:10.307 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 01:19:08.406 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34712 10 6452 1 2025-10-18 01:20:08.816 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40362 10 6452 1 2025-10-18 01:16:45.956 00:05:00.281 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 01:21:09.233 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48080 10 6452 1 2025-10-18 01:22:09.641 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:54018 10 6452 1 2025-10-18 01:23:10.021 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39132 10 6452 1 2025-10-18 01:19:45.960 00:05:00.275 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 01:24:10.360 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 01:24:10.067 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 01:24:10.175 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:24:10.277 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:24:10.274 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 01:24:10.425 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35984 10 6452 1 2025-10-18 01:25:10.827 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58064 10 6452 1 2025-10-18 01:26:11.193 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45286 10 6452 1 2025-10-18 01:22:45.961 00:05:00.280 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 01:27:11.561 00:00:10.446 TCP 1.101.0.1:3000 -> 23.104.0.1:36064 12 10375 1 2025-10-18 01:28:12.041 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42372 10 6452 1 2025-10-18 01:29:10.386 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 01:29:10.293 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 01:29:10.214 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:29:10.304 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:29:10.292 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 01:29:12.443 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58310 10 6452 1 2025-10-18 01:25:45.963 00:05:00.275 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 01:30:12.846 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:54150 10 6452 1 2025-10-18 01:31:13.270 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59614 10 6452 1 2025-10-18 01:32:13.668 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:51704 12 10369 1 2025-10-18 01:28:45.962 00:05:00.279 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 01:33:14.148 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34654 10 6452 1 2025-10-18 01:34:10.248 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 01:34:10.240 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:34:10.552 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:34:10.335 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 01:34:10.635 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 01:34:14.550 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57498 10 6452 1 2025-10-18 01:35:14.947 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56076 10 6452 1 2025-10-18 01:31:45.968 00:05:00.273 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 01:36:15.353 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:55548 10 6452 1 2025-10-18 01:37:15.710 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:52832 10 6452 1 2025-10-18 01:38:16.103 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38726 10 6452 1 2025-10-18 01:34:45.967 00:05:00.277 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 01:39:10.547 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 01:39:10.639 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:39:10.607 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:39:10.605 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 01:39:10.690 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 01:39:16.503 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54528 10 6452 1 2025-10-18 01:40:16.905 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:55420 12 6556 1 2025-10-18 01:41:17.319 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:50810 10 6452 1 2025-10-18 01:37:45.968 00:05:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 01:42:17.723 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:39294 10 6452 1 2025-10-18 01:43:18.130 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39160 10 6452 1 2025-10-18 01:44:10.821 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 01:44:10.728 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 01:44:10.624 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:44:10.739 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:44:10.796 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 01:44:18.529 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:37726 10 6452 1 2025-10-18 01:40:45.966 00:05:00.279 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 01:45:18.931 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:42868 10 6452 1 2025-10-18 01:46:19.320 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:48232 10 6452 1 2025-10-18 01:47:19.682 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42474 10 6452 1 2025-10-18 01:43:45.970 00:05:00.274 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 01:48:20.113 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44774 10 6452 1 2025-10-18 01:49:10.833 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 01:49:10.850 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 01:49:10.637 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:49:10.751 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:49:10.632 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 01:49:20.481 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33924 10 6452 1 2025-10-18 01:50:20.886 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:58324 10 6452 1 2025-10-18 01:46:45.968 00:05:00.278 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 01:51:21.267 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46152 10 6452 1 2025-10-18 01:52:21.632 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:47254 10 6452 1 2025-10-18 01:53:22.012 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:55084 10 6452 1 2025-10-18 01:49:45.972 00:05:00.272 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 01:54:10.855 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 01:54:10.507 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:54:10.860 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:54:10.847 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 01:54:10.941 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 01:54:22.419 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:42668 10 6452 1 2025-10-18 01:55:22.779 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:42670 10 6452 1 2025-10-18 01:56:23.193 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:52798 10 6452 1 2025-10-18 01:52:45.969 00:05:00.277 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 01:57:23.567 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:42954 10 6452 1 2025-10-18 01:58:23.971 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:37396 10 6452 1 Summary: total flows: 140, total bytes: 425100, total packets: 1029, avg bps: 902, avg pps: 0, avg bpp: 413 Time window: 2025-10-18 00:55:45 - 2025-10-18 01:58:34 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0015s User: 0.0023s Wall: 0.0012s flows/second: 112728.5 Runtime: 0.0013s