Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-08 18:59:06.244 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 18:59:06.084 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 18:59:05.803 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:59:06.240 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 18:59:06.322 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 18:59:27.513 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37650 10 6452 1 2025-12-08 19:00:27.917 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53938 10 6452 1 2025-12-08 19:01:28.316 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42962 10 6452 1 2025-12-08 18:58:12.858 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 18:58:12.855 00:05:02.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 19:02:28.719 00:00:10.341 TCP 1.101.0.1:3000 -> 23.104.0.1:36428 10 6452 1 2025-12-08 19:03:29.099 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:34982 10 6452 1 2025-12-08 19:04:06.550 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 19:04:06.348 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:04:06.468 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:04:06.355 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 19:04:06.469 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 19:04:29.525 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59216 10 6452 1 2025-12-08 19:05:29.929 00:00:11.876 TCP 1.101.0.1:3000 -> 23.104.0.1:35520 10 6452 1 2025-12-08 19:06:31.854 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:34550 10 6452 1 2025-12-08 19:07:32.274 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44674 12 6556 1 2025-12-08 19:04:12.856 00:05:02.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 19:04:12.860 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 19:08:32.680 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:45622 10 6452 1 2025-12-08 19:09:06.604 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 19:09:06.607 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 19:09:06.705 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:09:06.690 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:09:06.774 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 19:09:33.041 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39532 10 6452 1 2025-12-08 19:10:33.442 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:59858 10 6452 1 2025-12-08 19:11:33.818 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:54970 10 6452 1 2025-12-08 19:12:34.216 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48392 10 6452 1 2025-12-08 19:13:34.631 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:57020 10 6452 1 2025-12-08 19:14:06.440 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 19:14:06.516 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 19:14:06.543 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:14:06.442 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:14:06.524 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 19:10:12.861 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 19:10:12.858 00:05:02.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 19:14:35.000 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37748 10 6452 1 2025-12-08 19:15:35.403 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:37292 10 6452 1 2025-12-08 19:16:35.804 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47024 10 6452 1 2025-12-08 19:17:36.216 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59946 10 6452 1 2025-12-08 19:18:36.616 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:57806 10 6452 1 2025-12-08 19:19:06.661 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 19:19:06.670 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 19:19:06.568 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 19:19:06.406 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:19:06.577 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:19:37.030 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:58366 10 6452 1 2025-12-08 19:16:12.859 00:05:02.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 19:16:12.861 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 19:20:37.437 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46586 10 6452 1 2025-12-08 19:21:37.841 00:00:10.355 TCP 1.101.0.1:3000 -> 23.104.0.1:36518 10 6452 1 2025-12-08 19:22:38.230 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35744 10 6452 1 2025-12-08 19:23:38.634 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:57910 10 6452 1 2025-12-08 19:24:06.814 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 19:24:06.886 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 19:24:06.786 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:24:06.758 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:24:06.840 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 19:24:39.034 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:33030 10 6452 1 2025-12-08 19:25:39.432 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46972 10 6452 1 2025-12-08 19:22:12.860 00:05:02.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 19:22:12.864 00:05:02.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 19:26:39.838 00:00:10.401 TCP 1.101.0.1:3000 -> 23.104.0.1:34036 10 6452 1 2025-12-08 19:27:40.279 00:00:11.470 TCP 1.101.0.1:3000 -> 23.104.0.1:56258 10 6452 1 2025-12-08 19:28:41.785 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:54164 10 6452 1 2025-12-08 19:29:06.625 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 19:29:07.508 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 19:29:06.747 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:29:07.316 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:29:07.401 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 19:29:42.198 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33586 10 6452 1 2025-12-08 19:30:42.559 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42002 10 6452 1 2025-12-08 19:31:42.954 00:00:10.982 TCP 1.101.0.1:3000 -> 23.104.0.1:41086 10 6452 1 2025-12-08 19:28:12.864 00:05:02.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 19:28:12.861 00:05:02.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 19:32:43.973 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35368 10 6452 1 2025-12-08 19:33:44.380 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50290 10 6452 1 2025-12-08 19:34:07.395 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 19:34:07.222 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:34:07.335 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:34:07.004 00:00:00.052 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 19:34:07.417 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 19:34:44.793 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:52348 10 6452 1 2025-12-08 19:35:45.191 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47210 10 6452 1 2025-12-08 19:36:45.599 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:60114 10 6452 1 2025-12-08 19:37:45.968 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:42938 10 6452 1 2025-12-08 19:34:12.864 00:05:02.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 19:34:12.867 00:05:02.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 19:38:46.370 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:56636 10 6452 1 2025-12-08 19:39:06.848 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 19:39:07.074 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 19:39:07.075 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:39:07.072 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:39:07.156 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 19:39:46.773 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:45008 10 6452 1 2025-12-08 19:40:47.182 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:58528 10 6452 1 2025-12-08 19:41:47.584 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:50670 10 6452 1 2025-12-08 19:42:48.020 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:59042 10 6452 1 2025-12-08 19:43:48.422 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33650 10 6452 1 2025-12-08 19:44:07.251 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 19:44:07.247 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 19:44:06.973 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:44:07.096 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:44:07.179 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 19:40:12.869 00:05:02.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 19:40:12.866 00:05:02.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 19:44:48.831 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:56356 10 6452 1 2025-12-08 19:45:49.206 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:57936 10 6452 1 2025-12-08 19:46:49.566 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59266 10 6452 1 2025-12-08 19:47:49.971 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:57080 10 6452 1 2025-12-08 19:48:50.378 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46742 10 6452 1 2025-12-08 19:49:07.268 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 19:49:07.310 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 19:49:07.313 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 19:49:07.130 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:49:07.186 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:49:50.790 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:39386 12 10375 1 2025-12-08 19:46:12.868 00:05:02.454 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 19:46:12.870 00:05:02.449 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 19:50:51.273 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:47910 10 6452 1 2025-12-08 19:51:51.695 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:34428 10 6452 1 2025-12-08 19:52:52.081 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44694 10 6452 1 2025-12-08 19:53:52.446 00:00:11.089 TCP 1.101.0.1:3000 -> 23.104.0.1:42410 10 6452 1 2025-12-08 19:54:07.429 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 19:54:07.557 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 19:54:07.442 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:54:07.301 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 19:54:07.384 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 19:54:53.573 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51128 10 6452 1 2025-12-08 19:55:53.974 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42394 10 6452 1 2025-12-08 19:52:12.871 00:05:02.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 19:52:12.873 00:05:02.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 19:56:54.390 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:40524 10 6452 1 2025-12-08 19:57:54.799 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:36918 10 6452 1 Summary: total flows: 139, total bytes: 414575, total packets: 1014, avg bps: 923, avg pps: 0, avg bpp: 408 Time window: 2025-12-08 18:58:12 - 2025-12-08 19:58:05 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0028s User: 0.0019s Wall: 0.0020s flows/second: 70770.6 Runtime: 0.0020s