Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 02:59:12.165 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 02:59:12.073 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 02:59:12.086 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:59:12.083 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 02:59:12.093 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 02:59:00.997 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:51440 10 6452 1 2025-10-18 03:00:01.362 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:45932 10 6452 1 2025-10-18 02:55:46.003 00:06:00.261 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 03:01:01.756 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:32778 10 6452 1 2025-10-18 03:02:02.178 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43126 10 6452 1 2025-10-18 03:03:02.586 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43262 10 6452 1 2025-10-18 02:58:46.039 00:06:00.229 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 03:04:02.991 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53540 10 6452 1 2025-10-18 03:04:12.118 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 03:04:11.917 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:04:12.200 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:04:12.200 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 03:04:12.284 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 03:05:03.398 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55842 10 6452 1 2025-10-18 03:06:03.801 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47366 10 6452 1 2025-10-18 03:07:04.209 00:00:15.772 TCP 1.101.0.1:3000 -> 23.104.0.1:60772 10 6452 1 2025-10-18 03:02:46.006 00:06:00.262 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 03:08:10.064 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:52270 10 6452 1 2025-10-18 03:09:12.516 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 03:09:12.296 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 03:09:12.238 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:09:12.433 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:09:12.369 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 03:09:10.468 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50702 10 6452 1 2025-10-18 03:10:10.840 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:48448 10 6452 1 2025-10-18 03:05:46.002 00:06:00.272 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 03:11:11.265 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34418 10 6452 1 2025-10-18 03:12:11.665 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:33670 10 6452 1 2025-10-18 03:13:12.031 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54518 10 6452 1 2025-10-18 03:14:12.475 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 03:14:12.331 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:14:12.476 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:14:12.573 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 03:14:12.559 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 03:14:12.430 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:60212 10 6452 1 2025-10-18 03:09:46.037 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 03:15:12.829 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35774 10 6452 1 2025-10-18 03:16:13.232 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:41376 10 6452 1 2025-10-18 03:17:13.593 00:00:10.439 TCP 1.101.0.1:3000 -> 23.104.0.1:37036 12 10375 1 2025-10-18 03:12:46.036 00:06:00.239 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 03:18:14.092 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:38280 10 6452 1 2025-10-18 03:19:12.331 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 03:19:12.369 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:19:12.659 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:19:12.334 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 03:19:12.743 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 03:19:14.500 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47292 10 6452 1 2025-10-18 03:20:14.910 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46176 12 6556 1 2025-10-18 03:21:15.314 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37932 10 6452 1 2025-10-18 03:16:46.041 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 03:22:15.678 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47576 10 6452 1 2025-10-18 03:23:16.102 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:37054 10 6452 1 2025-10-18 03:24:12.754 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 03:24:12.673 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 03:24:12.492 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:24:12.672 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:24:12.636 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 03:24:16.503 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35698 10 6452 1 2025-10-18 03:19:46.038 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 03:25:16.909 00:00:16.927 TCP 1.101.0.1:3000 -> 23.104.0.1:33744 12 6556 1 2025-10-18 03:26:23.873 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:59128 10 6452 1 2025-10-18 03:27:24.289 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:55922 10 6452 1 2025-10-18 03:28:24.698 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:57922 10 6452 1 2025-10-18 03:23:46.043 00:06:00.232 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 03:29:12.691 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 03:29:12.727 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:29:12.718 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:29:12.719 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 03:29:12.801 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 03:29:25.065 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:52128 10 6452 1 2025-10-18 03:30:25.428 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53480 10 6452 1 2025-10-18 03:31:25.830 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:44214 10 6452 1 2025-10-18 03:26:46.041 00:06:00.238 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 03:32:26.231 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:57320 12 10375 1 2025-10-18 03:33:26.669 00:00:10.783 TCP 1.101.0.1:3000 -> 23.104.0.1:59856 10 6452 1 2025-10-18 03:34:12.919 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 03:34:12.826 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:34:12.873 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:34:12.868 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 03:34:12.956 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 03:34:27.490 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:60226 10 6452 1 2025-10-18 03:35:27.898 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58274 12 6556 1 2025-10-18 03:30:46.043 00:06:00.234 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 03:36:28.314 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42614 10 6452 1 2025-10-18 03:37:28.712 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:58408 10 6452 1 2025-10-18 03:38:29.112 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:51054 10 6452 1 2025-10-18 03:33:46.045 00:06:00.235 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 03:39:12.978 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 03:39:13.081 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 03:39:12.920 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:39:12.896 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:39:12.802 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 03:39:29.473 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44816 10 6452 1 2025-10-18 03:40:29.880 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:38354 10 6452 1 2025-10-18 03:41:30.281 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50462 10 6452 1 2025-10-18 03:42:30.684 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:54924 10 6452 1 2025-10-18 03:37:46.053 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 03:43:31.116 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41418 10 6452 1 2025-10-18 03:44:13.162 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 03:44:13.155 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 03:44:12.653 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:44:13.080 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:44:12.926 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 03:44:31.483 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33022 10 6452 1 2025-10-18 03:45:31.890 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:51942 10 6452 1 2025-10-18 03:40:46.050 00:06:00.231 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 03:46:32.314 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45252 10 6452 1 2025-10-18 03:47:32.716 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44958 10 6452 1 2025-10-18 03:48:33.135 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59468 10 6452 1 2025-10-18 03:49:13.046 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 03:49:12.859 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:49:13.027 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:49:12.933 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 03:49:13.110 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 03:49:33.546 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54980 10 6452 1 2025-10-18 03:44:46.053 00:06:00.226 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 03:50:33.958 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:35492 10 6452 1 2025-10-18 03:51:34.368 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:44052 10 6452 1 2025-10-18 03:52:34.738 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:46526 10 6452 1 2025-10-18 03:47:46.052 00:06:00.234 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-18 03:53:35.149 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:47072 10 6452 1 2025-10-18 03:54:12.984 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-18 03:54:13.005 00:00:00.042 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-18 03:54:12.936 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:54:12.900 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-18 03:54:13.154 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-18 03:54:35.566 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:37190 10 6452 1 2025-10-18 03:55:35.944 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:45998 10 6452 1 2025-10-18 03:56:36.362 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:55656 10 6452 1 2025-10-18 03:51:46.054 00:06:00.229 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-18 03:57:36.766 00:00:11.141 TCP 1.101.0.1:3000 -> 23.104.0.1:45370 10 6452 1 2025-10-18 03:58:37.948 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:56108 10 6452 1 Summary: total flows: 137, total bytes: 425035, total packets: 1028, avg bps: 898, avg pps: 0, avg bpp: 413 Time window: 2025-10-18 02:55:46 - 2025-10-18 03:58:48 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0040s User: 0.0010s Wall: 0.0019s flows/second: 71390.2 Runtime: 0.0019s