Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 17:59:19.363 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 17:59:19.312 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 17:59:19.292 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 17:59:19.281 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 17:59:19.196 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 17:59:30.916 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39800 10 6452 1 2025-10-28 17:54:51.471 00:06:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 18:00:31.324 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:53802 10 6452 1 2025-10-28 17:55:51.475 00:06:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 18:01:31.679 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44908 10 6452 1 2025-10-28 18:02:32.104 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42540 10 6452 1 2025-10-28 18:03:32.470 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:48562 10 6452 1 2025-10-28 18:04:19.502 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 18:04:19.408 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:04:19.544 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:04:19.382 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 18:04:19.625 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 18:04:32.869 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36096 10 6452 1 2025-10-28 18:05:33.276 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38772 10 6452 1 2025-10-28 18:06:33.679 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60374 10 6452 1 2025-10-28 18:01:51.473 00:06:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 18:07:34.107 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53150 10 6452 1 2025-10-28 18:02:51.476 00:06:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 18:08:34.505 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34706 10 6452 1 2025-10-28 18:09:19.925 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 18:09:19.540 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:09:20.089 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:09:19.836 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 18:09:20.172 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 18:09:34.871 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:48624 10 6452 1 2025-10-28 18:10:35.280 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:35412 10 6452 1 2025-10-28 18:11:35.696 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:60210 10 6452 1 2025-10-28 18:12:36.100 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:54694 10 6452 1 2025-10-28 18:13:36.461 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:44674 10 6452 1 2025-10-28 18:08:51.476 00:06:00.335 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 18:14:19.751 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 18:14:19.731 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:14:19.483 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:14:19.488 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 18:14:19.566 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 18:14:36.867 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:50210 10 6452 1 2025-10-28 18:09:51.479 00:06:00.330 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 18:15:37.291 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34498 10 6452 1 2025-10-28 18:16:37.694 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56288 10 6452 1 2025-10-28 18:17:38.115 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:46214 10 6452 1 2025-10-28 18:18:38.513 00:00:10.722 TCP 1.101.0.1:3000 -> 23.104.0.1:42248 10 6452 1 2025-10-28 18:19:20.437 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 18:19:20.457 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 18:19:20.377 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:19:20.355 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:19:20.457 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 18:19:39.271 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:60958 10 6452 1 2025-10-28 18:20:39.633 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:42992 10 6452 1 2025-10-28 18:15:51.477 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 18:21:40.002 00:00:10.354 TCP 1.101.0.1:3000 -> 23.104.0.1:34264 10 6452 1 2025-10-28 18:16:51.479 00:06:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 18:22:40.399 00:00:10.605 TCP 1.101.0.1:3000 -> 23.104.0.1:49470 10 6452 1 2025-10-28 18:23:41.039 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:40044 10 6452 1 2025-10-28 18:24:19.755 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 18:24:19.674 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 18:24:19.712 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:24:19.673 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:24:19.728 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 18:24:41.401 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51626 10 6452 1 2025-10-28 18:25:41.764 00:00:10.826 TCP 1.101.0.1:3000 -> 23.104.0.1:42658 10 6452 1 2025-10-28 18:26:42.629 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47518 10 6452 1 2025-10-28 18:27:43.037 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54774 10 6452 1 2025-10-28 18:22:51.479 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 18:23:51.481 00:06:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 18:28:43.444 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46218 10 6452 1 2025-10-28 18:29:19.875 00:00:00.028 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 18:29:19.771 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:29:19.929 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:29:19.808 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 18:29:20.013 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 18:29:43.839 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:36428 10 6452 1 2025-10-28 18:30:44.258 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41624 10 6452 1 2025-10-28 18:31:44.614 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46354 10 6452 1 2025-10-28 18:32:45.017 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:48980 10 6452 1 2025-10-28 18:33:45.376 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:56274 10 6452 1 2025-10-28 18:34:20.142 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 18:34:19.975 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 18:34:19.606 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:34:20.060 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:34:20.059 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 18:29:51.481 00:06:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 18:34:45.774 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:56132 10 6452 1 2025-10-28 18:30:51.484 00:06:00.332 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 18:35:46.185 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56470 10 6452 1 2025-10-28 18:36:46.590 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:60792 10 6452 1 2025-10-28 18:37:46.994 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:44256 10 6452 1 2025-10-28 18:38:47.403 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:44094 10 6452 1 2025-10-28 18:39:20.155 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 18:39:20.152 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 18:39:20.138 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:39:20.073 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:39:20.216 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 18:39:47.801 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:50848 10 6452 1 2025-10-28 18:40:48.203 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:36790 10 6452 1 2025-10-28 18:36:51.483 00:06:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 18:41:48.569 00:00:10.436 TCP 1.101.0.1:3000 -> 23.104.0.1:51076 12 10375 1 2025-10-28 18:37:51.487 00:06:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 18:42:49.040 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51048 10 6452 1 2025-10-28 18:43:49.410 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34264 10 6452 1 2025-10-28 18:44:20.446 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 18:44:20.157 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 18:44:20.321 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:44:20.364 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:44:20.232 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 18:44:49.811 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56850 10 6452 1 2025-10-28 18:45:50.217 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47340 10 6452 1 2025-10-28 18:46:50.617 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58940 10 6452 1 2025-10-28 18:47:51.023 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:53190 10 6452 1 2025-10-28 18:43:51.485 00:06:00.338 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 18:48:51.423 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60128 10 6452 1 2025-10-28 18:49:20.420 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 18:49:20.336 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 18:49:20.418 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:49:20.338 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:49:20.461 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 18:44:51.487 00:06:00.333 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 18:49:51.831 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54982 10 6452 1 2025-10-28 18:50:52.241 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49142 10 6452 1 2025-10-28 18:51:52.648 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:60082 10 6452 1 2025-10-28 18:52:53.008 00:00:10.601 TCP 1.101.0.1:3000 -> 23.104.0.1:41652 10 6452 1 2025-10-28 18:53:53.650 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59938 10 6452 1 2025-10-28 18:54:20.504 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-10-28 18:54:20.420 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-10-28 18:54:20.114 00:00:00.030 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:54:20.421 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-10-28 18:54:20.573 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-10-28 18:54:54.017 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36760 10 6452 1 2025-10-28 18:50:51.486 00:06:00.337 TCP 179.21.23.23:179 -> 179.21.23.21:38570 14 861 1 2025-10-28 18:55:54.425 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39328 10 6452 1 2025-10-28 18:51:51.489 00:06:00.331 TCP 179.21.23.21:38570 -> 179.21.23.23:179 14 861 1 2025-10-28 18:56:54.834 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:53684 10 6452 1 2025-10-28 18:57:55.239 00:00:10.428 TCP 1.101.0.1:3000 -> 23.104.0.1:44780 10 6452 1 Summary: total flows: 137, total bytes: 415209, total packets: 1024, avg bps: 875, avg pps: 0, avg bpp: 405 Time window: 2025-10-28 17:54:51 - 2025-10-28 18:58:05 Total flows processed: 137, passed: 137, Blocks skipped: 0, Bytes read: 14312 Sys: 0.0049s User: 0.0012s Wall: 0.0030s flows/second: 45575.8 Runtime: 0.0030s