Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 05:53:51.257 00:06:00.315 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 05:59:04.964 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 05:59:04.653 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 05:59:04.781 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:59:04.882 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 05:59:04.751 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 05:59:37.703 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35728 10 6452 1 2025-10-28 05:54:51.259 00:06:00.311 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:00:38.102 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:54992 10 6452 1 2025-10-28 06:01:38.510 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:57554 10 6452 1 2025-10-28 06:02:38.872 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:34108 10 6452 1 2025-10-28 06:03:39.276 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:45196 10 6452 1 2025-10-28 06:04:05.298 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:04:05.124 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:04:05.252 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:04:05.247 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:04:05.337 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:04:39.672 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:34016 10 6452 1 2025-10-28 06:05:40.098 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51526 10 6452 1 2025-10-28 06:00:51.258 00:06:00.318 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:06:40.501 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56932 10 6452 1 2025-10-28 06:01:51.261 00:06:00.312 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:07:40.908 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:59398 10 6452 1 2025-10-28 06:08:41.320 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:57244 10 6452 1 2025-10-28 06:09:05.390 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:09:05.307 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:09:04.935 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:09:05.307 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:09:05.307 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:09:41.729 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:42220 10 6452 1 2025-10-28 06:10:42.155 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:43360 10 6452 1 2025-10-28 06:11:42.520 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59150 10 6452 1 2025-10-28 06:07:51.259 00:06:00.319 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:12:42.932 00:00:10.349 TCP 1.101.0.1:3000 -> 23.104.0.1:42108 10 6452 1 2025-10-28 06:08:51.262 00:06:00.314 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:13:43.319 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:45226 10 6452 1 2025-10-28 06:14:05.296 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:14:04.999 00:00:00.033 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:14:04.914 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:14:05.214 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:14:04.995 00:00:00.040 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:14:43.724 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:39472 10 6452 1 2025-10-28 06:15:44.131 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43132 10 6452 1 2025-10-28 06:16:44.492 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44942 10 6452 1 2025-10-28 06:17:44.895 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46378 12 6556 1 2025-10-28 06:18:45.301 00:00:10.658 TCP 1.101.0.1:3000 -> 23.104.0.1:49392 10 6452 1 2025-10-28 06:19:05.337 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:19:05.182 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:19:05.415 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:19:05.457 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:19:05.497 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:14:51.261 00:06:00.322 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:19:46.002 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:38626 10 6452 1 2025-10-28 06:15:51.263 00:06:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:20:46.405 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49218 10 6452 1 2025-10-28 06:21:46.808 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33978 10 6452 1 2025-10-28 06:22:47.232 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:40292 10 6452 1 2025-10-28 06:24:05.651 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:23:47.594 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46144 10 6452 1 2025-10-28 06:24:05.453 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:24:05.356 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:24:05.569 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:24:05.320 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:24:47.998 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45828 10 6452 1 2025-10-28 06:25:48.400 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48710 10 6452 1 2025-10-28 06:21:51.262 00:06:00.323 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:26:48.799 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:33802 10 6452 1 2025-10-28 06:22:51.265 00:06:00.317 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:27:49.204 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33620 10 6452 1 2025-10-28 06:28:49.605 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49236 10 6452 1 2025-10-28 06:29:05.506 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:29:05.377 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:29:05.504 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:29:05.505 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:29:05.587 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:29:50.006 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:55018 10 6452 1 2025-10-28 06:30:50.363 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:54446 10 6452 1 2025-10-28 06:31:50.721 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:46532 10 6452 1 2025-10-28 06:32:51.121 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:36718 10 6452 1 2025-10-28 06:28:51.264 00:06:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:33:51.520 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56374 10 6452 1 2025-10-28 06:34:05.593 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:34:05.352 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:34:05.488 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:34:05.589 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:34:05.572 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:29:51.266 00:06:00.318 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:34:51.927 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:42142 10 6452 1 2025-10-28 06:35:52.307 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:44056 10 6452 1 2025-10-28 06:36:52.678 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:57238 10 6452 1 2025-10-28 06:37:53.112 00:00:10.415 TCP 1.101.0.1:3000 -> 23.104.0.1:57048 11 6504 1 2025-10-28 06:39:05.628 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:39:05.545 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:39:05.536 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:38:53.567 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42838 10 6452 1 2025-10-28 06:39:05.721 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:39:05.497 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:39:53.934 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:37176 10 6452 1 2025-10-28 06:35:51.265 00:06:00.324 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:40:54.375 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50866 10 6452 1 2025-10-28 06:36:51.267 00:06:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:41:54.779 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46594 10 6452 1 2025-10-28 06:42:55.193 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:49940 10 6452 1 2025-10-28 06:44:05.802 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:44:05.921 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:44:05.746 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:44:05.719 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:44:05.792 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:43:55.556 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:58128 12 6556 1 2025-10-28 06:44:55.962 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56928 10 6452 1 2025-10-28 06:45:56.368 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:39422 10 6452 1 2025-10-28 06:46:56.775 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:58552 10 6452 1 2025-10-28 06:42:51.266 00:06:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:47:57.184 00:00:10.557 TCP 1.101.0.1:3000 -> 23.104.0.1:56614 10 6452 1 2025-10-28 06:43:51.269 00:06:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:49:05.898 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:49:05.828 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:49:06.076 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:48:57.777 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34824 10 6452 1 2025-10-28 06:49:05.993 00:00:00.026 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:49:06.050 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:49:58.186 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51178 10 6452 1 2025-10-28 06:50:58.586 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:52796 10 6452 1 2025-10-28 06:51:58.989 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45296 10 6452 1 2025-10-28 06:52:59.399 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:39304 10 6452 1 2025-10-28 06:54:05.757 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 06:53:59.798 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:53638 10 6452 1 2025-10-28 06:54:06.176 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:54:06.154 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 06:54:06.154 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 06:54:06.236 00:00:00.026 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 06:49:51.268 00:06:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 06:55:00.163 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53388 10 6452 1 2025-10-28 06:50:51.270 00:06:00.329 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 06:56:00.561 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37336 10 6452 1 2025-10-28 06:57:00.962 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59692 10 6452 1 2025-10-28 06:58:01.324 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51322 10 6452 1 Summary: total flows: 137, total bytes: 411546, total packets: 1027, avg bps: 852, avg pps: 0, avg bpp: 400 Time window: 2025-10-28 05:53:51 - 2025-10-28 06:58:11 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0019s User: 0.0029s Wall: 0.0026s flows/second: 53245.0 Runtime: 0.0026s