Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 04:59:04.934 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 04:59:04.838 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 04:59:04.835 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:59:04.851 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 04:59:04.911 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 04:59:02.089 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40354 10 6452 1 2025-10-28 05:00:02.494 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59742 10 6452 1 2025-10-28 05:01:02.858 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53214 10 6452 1 2025-10-28 05:02:03.272 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46728 10 6452 1 2025-10-28 04:57:51.245 00:06:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 05:03:03.635 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44292 10 6452 1 2025-10-28 04:58:51.248 00:06:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 05:04:03.860 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 05:04:03.781 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 05:04:03.658 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:04:03.778 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:04:03.777 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 05:04:04.033 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:35800 10 6452 1 2025-10-28 05:05:04.394 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46994 10 6452 1 2025-10-28 05:06:04.796 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34632 10 6452 1 2025-10-28 05:07:05.201 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:36144 10 6452 1 2025-10-28 05:08:05.571 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57028 10 6452 1 2025-10-28 05:09:04.212 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 05:09:03.977 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 05:09:04.102 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:09:04.131 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:09:03.964 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 05:09:05.975 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:38846 10 6452 1 2025-10-28 05:04:51.249 00:06:00.309 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 05:10:06.394 00:00:10.452 TCP 1.101.0.1:3000 -> 23.104.0.1:60778 10 6452 1 2025-10-28 05:05:51.252 00:06:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 05:11:06.883 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50166 10 6452 1 2025-10-28 05:12:07.288 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56508 10 6452 1 2025-10-28 05:13:07.694 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:43534 10 6452 1 2025-10-28 05:14:04.266 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 05:14:03.761 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:14:04.227 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:14:04.229 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 05:14:04.311 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 05:14:08.112 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53834 10 6452 1 2025-10-28 05:15:08.522 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:50538 10 6452 1 2025-10-28 05:16:08.899 00:00:10.348 TCP 1.101.0.1:3000 -> 23.104.0.1:44566 10 6452 1 2025-10-28 05:11:51.249 00:06:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 05:17:09.302 00:00:18.733 TCP 1.101.0.1:3000 -> 23.104.0.1:52700 10 6452 1 2025-10-28 05:12:51.252 00:06:00.306 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 05:18:18.109 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54818 10 6452 1 2025-10-28 05:19:04.056 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 05:19:03.973 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 05:19:03.989 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:19:03.974 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:19:03.972 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 05:19:18.512 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:50418 10 6452 1 2025-10-28 05:20:18.873 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:40774 10 6452 1 2025-10-28 05:21:19.279 00:00:11.315 TCP 1.101.0.1:3000 -> 23.104.0.1:41768 10 6452 1 2025-10-28 05:22:20.633 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36834 10 6452 1 2025-10-28 05:23:21.038 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56114 10 6452 1 2025-10-28 05:18:51.251 00:06:00.310 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 05:24:05.268 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 05:24:04.940 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 05:24:03.936 00:00:00.047 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:24:05.185 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:24:04.942 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 05:24:21.435 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45644 10 6452 1 2025-10-28 05:19:51.254 00:06:00.304 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 05:25:21.793 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52420 10 6452 1 2025-10-28 05:26:22.202 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56498 10 6452 1 2025-10-28 05:27:22.606 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43146 10 6452 1 2025-10-28 05:28:23.010 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:48258 10 6452 1 2025-10-28 05:29:04.578 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 05:29:04.377 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 05:29:04.181 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:29:04.496 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:29:04.375 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 05:29:23.405 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:47664 10 6452 1 2025-10-28 05:30:23.769 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43280 10 6452 1 2025-10-28 05:25:51.251 00:06:00.311 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 05:31:24.139 00:00:10.573 TCP 1.101.0.1:3000 -> 23.104.0.1:58192 10 6452 1 2025-10-28 05:26:51.255 00:06:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 05:32:24.748 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57630 10 6452 1 2025-10-28 05:33:25.148 00:00:12.103 TCP 1.101.0.1:3000 -> 23.104.0.1:56254 10 6452 1 2025-10-28 05:34:04.719 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 05:34:04.567 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 05:34:04.416 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:34:04.637 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:34:04.348 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 05:34:27.319 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:59072 10 6452 1 2025-10-28 05:35:27.677 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:50152 10 6452 1 2025-10-28 05:36:28.038 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35860 10 6452 1 2025-10-28 05:37:28.442 00:00:10.345 TCP 1.101.0.1:3000 -> 23.104.0.1:41232 10 6452 1 2025-10-28 05:32:51.252 00:06:00.312 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 05:38:28.819 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:50280 10 6452 1 2025-10-28 05:33:51.256 00:06:00.305 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 05:39:04.574 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 05:39:04.475 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 05:39:04.432 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:39:04.491 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:39:04.574 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 05:39:29.219 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:54244 10 6452 1 2025-10-28 05:40:29.583 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:35990 10 6452 1 2025-10-28 05:41:29.999 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37444 12 6556 1 2025-10-28 05:42:30.402 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:56032 10 6452 1 2025-10-28 05:43:30.813 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44166 10 6452 1 2025-10-28 05:44:04.866 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 05:44:04.786 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 05:44:04.672 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:44:04.783 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:44:04.767 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 05:44:31.222 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45544 10 6452 1 2025-10-28 05:39:51.255 00:06:00.311 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 05:45:31.590 00:00:10.945 TCP 1.101.0.1:3000 -> 23.104.0.1:39490 10 6452 1 2025-10-28 05:40:51.257 00:06:00.307 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 05:46:32.571 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35432 10 6452 1 2025-10-28 05:47:32.976 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:51314 10 6452 1 2025-10-28 05:48:33.382 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:42936 10 6452 1 2025-10-28 05:49:04.732 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:49:04.559 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 05:49:04.561 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 05:49:04.579 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:49:04.816 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 05:49:33.791 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38538 10 6452 1 2025-10-28 05:50:34.152 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49900 10 6452 1 2025-10-28 05:51:34.558 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54964 10 6452 1 2025-10-28 05:46:51.256 00:06:00.314 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 05:52:34.955 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48214 10 6452 1 2025-10-28 05:47:51.259 00:06:00.309 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 05:53:35.361 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:51638 10 6452 1 2025-10-28 05:54:04.811 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 05:54:04.868 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 05:54:04.721 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:54:04.729 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:54:04.726 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 05:54:35.723 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46002 10 6452 1 2025-10-28 05:55:36.136 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49124 10 6452 1 2025-10-28 05:56:36.543 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36768 10 6452 1 2025-10-28 05:57:36.951 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:37738 10 6452 1 2025-10-28 05:58:37.330 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:37406 10 6452 1 Summary: total flows: 136, total bytes: 416120, total packets: 1006, avg bps: 910, avg pps: 0, avg bpp: 413 Time window: 2025-10-28 04:57:51 - 2025-10-28 05:58:47 Total flows processed: 136, passed: 136, Blocks skipped: 0, Bytes read: 14208 Sys: 0.0050s User: 0.0017s Wall: 0.0018s flows/second: 76229.5 Runtime: 0.0018s