Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 15:59:16.892 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 15:59:16.806 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 15:59:16.830 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 15:59:16.809 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 15:59:16.901 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 15:59:38.654 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:49072 10 6452 1 2025-10-28 16:00:39.067 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44638 10 6452 1 2025-10-28 15:55:51.440 00:06:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 16:01:39.467 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:56958 10 6452 1 2025-10-28 15:56:51.441 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 16:02:39.869 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:35228 12 10369 1 2025-10-28 16:03:40.354 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57756 10 6452 1 2025-10-28 16:04:17.005 00:00:00.047 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 16:04:17.011 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:04:17.115 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:04:17.115 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 16:04:17.197 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 16:04:40.722 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56026 10 6452 1 2025-10-28 16:05:41.133 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:58934 10 6452 1 2025-10-28 16:06:41.490 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:36074 10 6452 1 2025-10-28 16:02:51.441 00:06:00.328 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 16:07:41.897 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:42126 12 6556 1 2025-10-28 16:08:42.316 00:00:11.436 TCP 1.101.0.1:3000 -> 23.104.0.1:54180 10 6452 1 2025-10-28 16:03:51.444 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 16:09:17.080 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:09:17.179 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 16:09:17.074 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 16:09:17.124 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:09:17.162 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 16:09:43.788 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49164 10 6452 1 2025-10-28 16:10:44.187 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36090 10 6452 1 2025-10-28 16:11:44.557 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48588 10 6452 1 2025-10-28 16:12:44.957 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57930 10 6452 1 2025-10-28 16:13:45.365 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60020 10 6452 1 2025-10-28 16:14:17.306 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 16:14:17.034 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 16:14:17.203 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:14:17.225 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:14:17.269 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 16:09:51.446 00:06:00.326 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 16:14:45.764 00:00:10.337 TCP 1.101.0.1:3000 -> 23.104.0.1:40424 10 6452 1 2025-10-28 16:10:51.448 00:06:00.321 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 16:15:46.141 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43860 10 6452 1 2025-10-28 16:16:46.546 00:00:10.452 TCP 1.101.0.1:3000 -> 23.104.0.1:56474 12 10375 1 2025-10-28 16:17:47.041 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:47570 10 6452 1 2025-10-28 16:18:47.408 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:52426 10 6452 1 2025-10-28 16:19:17.408 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 16:19:17.054 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:19:17.403 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:19:17.400 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 16:19:17.485 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 16:19:47.794 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:49362 10 6452 1 2025-10-28 16:20:48.158 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47288 10 6452 1 2025-10-28 16:16:51.448 00:06:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 16:21:48.558 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:42236 10 6452 1 2025-10-28 16:17:51.449 00:06:00.322 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 16:22:48.918 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:55016 10 6452 1 2025-10-28 16:23:49.284 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:41642 10 6452 1 2025-10-28 16:24:17.494 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 16:24:17.318 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:24:17.448 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:24:17.278 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 16:24:17.532 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 16:24:49.686 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:51692 10 6452 1 2025-10-28 16:25:50.108 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:48288 10 6452 1 2025-10-28 16:26:50.471 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38972 10 6452 1 2025-10-28 16:27:50.881 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37136 10 6452 1 2025-10-28 16:23:51.448 00:06:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 16:28:51.284 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49586 10 6452 1 2025-10-28 16:29:17.382 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 16:29:17.538 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 16:29:17.359 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:29:17.299 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:29:17.535 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 16:24:51.452 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 16:29:51.690 00:00:10.418 TCP 1.101.0.1:3000 -> 23.104.0.1:48692 11 6504 1 2025-10-28 16:30:52.150 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:33030 10 6452 1 2025-10-28 16:31:52.508 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36598 10 6452 1 2025-10-28 16:32:52.918 00:00:11.292 TCP 1.101.0.1:3000 -> 23.104.0.1:51412 10 6452 1 2025-10-28 16:33:54.270 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:42182 10 6452 1 2025-10-28 16:34:17.453 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 16:34:17.760 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:34:17.685 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:34:17.632 00:00:00.016 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 16:34:17.768 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 16:34:54.682 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:56576 10 6452 1 2025-10-28 16:30:51.450 00:06:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 16:35:55.111 00:00:11.353 TCP 1.101.0.1:3000 -> 23.104.0.1:46894 10 6452 1 2025-10-28 16:31:51.452 00:06:00.323 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 16:36:56.512 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:43530 10 6452 1 2025-10-28 16:37:56.914 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47880 10 6452 1 2025-10-28 16:38:57.320 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48780 10 6452 1 2025-10-28 16:39:17.710 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 16:39:17.648 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:39:17.529 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:39:17.626 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 16:39:17.613 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 16:39:57.724 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:38422 10 6452 1 2025-10-28 16:40:58.111 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37458 10 6452 1 2025-10-28 16:41:58.514 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53442 10 6452 1 2025-10-28 16:37:51.453 00:06:00.327 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 16:42:58.916 00:00:10.792 TCP 1.101.0.1:3000 -> 23.104.0.1:49258 10 6452 1 2025-10-28 16:38:51.456 00:06:00.320 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 16:43:59.752 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49472 10 6452 1 2025-10-28 16:44:17.751 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 16:44:17.774 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:44:17.745 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:44:17.739 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 16:44:17.827 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 16:45:00.153 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:40120 10 6452 1 2025-10-28 16:46:00.519 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34600 10 6452 1 2025-10-28 16:47:00.881 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34128 10 6452 1 2025-10-28 16:48:01.296 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44492 10 6452 1 2025-10-28 16:49:01.692 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:49966 10 6452 1 2025-10-28 16:49:18.474 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 16:49:18.395 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 16:49:18.306 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:49:18.391 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:49:18.228 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 16:44:51.455 00:06:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 16:50:02.117 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:54974 10 6452 1 2025-10-28 16:45:51.458 00:06:00.322 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 16:51:02.525 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35382 10 6452 1 2025-10-28 16:52:02.938 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:57310 10 6452 1 2025-10-28 16:53:03.390 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:48212 10 6452 1 2025-10-28 16:54:03.791 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43352 10 6452 1 2025-10-28 16:54:18.180 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 16:54:17.961 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:54:18.110 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 16:54:18.118 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 16:54:18.194 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 16:55:04.154 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:37656 10 6452 1 2025-10-28 16:56:04.556 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:59046 10 6452 1 2025-10-28 16:51:51.458 00:06:00.325 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 16:57:04.971 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:35830 10 6452 1 2025-10-28 16:52:51.461 00:06:00.319 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 16:58:05.389 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57332 10 6452 1 Summary: total flows: 137, total bytes: 419282, total packets: 1029, avg bps: 887, avg pps: 0, avg bpp: 407 Time window: 2025-10-28 15:55:51 - 2025-10-28 16:58:51 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0040s User: 0.0020s Wall: 0.0027s flows/second: 51004.8 Runtime: 0.0027s