Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 01:59:10.922 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:59:10.613 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 01:59:10.730 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 01:59:11.077 00:00:00.032 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 01:59:10.994 00:00:00.034 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 01:59:24.403 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:53636 10 6452 1 2025-10-18 01:55:45.973 00:05:00.273 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:00:24.815 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:55928 10 6452 1 2025-10-18 02:01:25.188 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42668 10 6452 1 2025-10-18 02:02:25.550 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46338 12 6556 1 2025-10-18 01:58:45.974 00:05:00.275 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:03:25.953 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43146 10 6452 1 2025-10-18 02:04:11.403 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:04:11.374 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:04:11.158 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:04:11.320 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:04:11.378 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:04:26.358 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51016 10 6452 1 2025-10-18 02:05:26.760 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:56570 10 6452 1 2025-10-18 02:01:45.977 00:05:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:06:27.142 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:59844 10 6452 1 2025-10-18 02:07:27.540 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:60116 10 6452 1 2025-10-18 02:08:27.946 00:00:15.411 TCP 1.101.0.1:3000 -> 23.104.0.1:59820 10 6452 1 2025-10-18 02:04:45.975 00:05:00.278 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:09:11.612 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:09:11.529 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:09:11.105 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:09:11.529 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:09:11.393 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:09:33.398 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:52952 10 6452 1 2025-10-18 02:10:33.818 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38018 10 6452 1 2025-10-18 02:11:34.218 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:54212 10 6452 1 2025-10-18 02:07:45.981 00:05:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:12:34.579 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:47732 10 6452 1 2025-10-18 02:13:34.942 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:33878 10 6452 1 2025-10-18 02:14:10.964 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:14:11.342 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:14:11.187 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:14:11.219 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:14:11.261 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:14:35.323 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:46020 10 6452 1 2025-10-18 02:10:45.985 00:05:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:15:35.728 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41004 10 6452 1 2025-10-18 02:16:36.135 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40038 10 6452 1 2025-10-18 02:17:36.538 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43304 10 6452 1 2025-10-18 02:13:45.988 00:05:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:18:36.940 00:00:10.397 TCP 1.101.0.1:3000 -> 23.104.0.1:43498 10 6452 1 2025-10-18 02:19:10.975 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:19:11.186 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:19:11.330 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:19:11.399 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:19:11.412 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:19:37.378 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51172 10 6452 1 2025-10-18 02:20:37.780 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50662 10 6452 1 2025-10-18 02:16:45.986 00:05:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:21:38.184 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53212 10 6452 1 2025-10-18 02:22:38.551 00:00:10.445 TCP 1.101.0.1:3000 -> 23.104.0.1:43492 13 10427 1 2025-10-18 02:23:39.038 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35184 10 6452 1 2025-10-18 02:19:45.987 00:05:00.267 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:24:11.765 00:00:00.031 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:24:11.689 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:24:11.651 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:24:11.681 00:00:00.031 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:24:11.686 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:24:39.455 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42498 10 6452 1 2025-10-18 02:25:39.883 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45160 10 6452 1 2025-10-18 02:22:45.987 00:05:00.271 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:26:40.288 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51204 10 6452 1 2025-10-18 02:27:40.686 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:43250 10 6452 1 2025-10-18 02:28:41.109 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:56330 10 6452 1 2025-10-18 02:29:11.501 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:29:11.485 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:29:11.452 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:29:11.419 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:29:11.428 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:25:45.990 00:05:00.269 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:29:41.491 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54974 10 6452 1 2025-10-18 02:30:41.896 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:40072 10 6452 1 2025-10-18 02:31:42.313 00:00:17.206 TCP 1.101.0.1:3000 -> 23.104.0.1:40436 10 6452 1 2025-10-18 02:28:45.988 00:05:00.274 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:32:49.570 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:36218 10 6452 1 2025-10-18 02:33:49.941 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:45232 10 6452 1 2025-10-18 02:34:11.543 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:34:11.558 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:34:11.273 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:34:11.461 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:34:11.457 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:34:50.354 00:00:10.652 TCP 1.101.0.1:3000 -> 23.104.0.1:53872 10 6452 1 2025-10-18 02:31:45.991 00:05:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:35:51.040 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37684 10 6452 1 2025-10-18 02:36:51.443 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40634 10 6452 1 2025-10-18 02:37:51.848 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:39354 10 6452 1 2025-10-18 02:34:45.989 00:05:00.275 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:38:52.264 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47036 10 6452 1 2025-10-18 02:39:11.721 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:39:11.396 00:00:00.025 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:39:11.649 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:39:11.705 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:39:11.732 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:39:52.668 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:33234 10 6452 1 2025-10-18 02:40:53.107 00:00:10.449 TCP 1.101.0.1:3000 -> 23.104.0.1:52294 10 6452 1 2025-10-18 02:37:45.990 00:05:00.271 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:41:53.592 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:39114 12 10369 1 2025-10-18 02:42:54.100 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50092 10 6452 1 2025-10-18 02:43:54.502 00:00:10.936 TCP 1.101.0.1:3000 -> 23.104.0.1:37748 10 6452 1 2025-10-18 02:44:12.182 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:44:12.099 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:44:12.225 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:44:12.099 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:44:12.101 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:40:45.990 00:05:00.275 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:44:55.477 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:37456 10 6452 1 2025-10-18 02:45:55.871 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:33698 10 6452 1 2025-10-18 02:46:56.276 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33850 10 6452 1 2025-10-18 02:43:45.994 00:05:00.270 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:47:56.679 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35070 10 6452 1 2025-10-18 02:48:57.107 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38956 10 6452 1 2025-10-18 02:49:11.934 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:49:11.784 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:49:11.821 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:49:11.851 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:49:11.865 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:49:57.509 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47948 10 6452 1 2025-10-18 02:46:45.993 00:05:00.273 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:50:57.867 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37504 10 6452 1 2025-10-18 02:51:58.231 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39246 10 6452 1 2025-10-18 02:52:58.639 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:52184 10 6452 1 2025-10-18 02:49:45.999 00:05:00.264 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-10-18 02:54:11.943 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:53:59.037 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59448 10 6452 1 2025-10-18 02:54:11.875 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:54:12.076 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:54:11.860 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:54:12.113 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:54:59.436 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48632 10 6452 1 2025-10-18 02:55:59.844 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:39174 10 6452 1 2025-10-18 02:52:45.996 00:05:00.269 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-10-18 02:57:00.229 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41222 10 6452 1 2025-10-18 02:58:00.638 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:55106 10 6452 1 Summary: total flows: 139, total bytes: 418544, total packets: 1017, avg bps: 894, avg pps: 0, avg bpp: 411 Time window: 2025-10-18 01:55:45 - 2025-10-18 02:58:10 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0033s User: 0.0016s Wall: 0.0018s flows/second: 75754.7 Runtime: 0.0019s