Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-08 20:59:08.575 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 20:59:08.695 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 20:59:08.639 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 20:59:08.685 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 20:59:08.768 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 20:59:21.723 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36578 10 6452 1 2025-12-08 21:00:22.133 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59280 10 6452 1 2025-12-08 21:01:22.537 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38592 10 6452 1 2025-12-08 20:58:12.901 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 20:58:12.899 00:05:02.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 21:02:22.943 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:51030 10 6452 1 2025-12-08 21:03:23.315 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:47246 10 6452 1 2025-12-08 21:04:08.829 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 21:04:08.747 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:04:08.747 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 21:04:08.841 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 21:04:08.581 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:04:23.720 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:39532 10 6452 1 2025-12-08 21:05:24.133 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:40256 10 6452 1 2025-12-08 21:06:24.545 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45830 10 6452 1 2025-12-08 21:07:24.957 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:48602 10 6452 1 2025-12-08 21:04:12.901 00:05:02.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 21:04:12.902 00:05:02.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 21:08:25.320 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:52420 10 6452 1 2025-12-08 21:09:09.074 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 21:09:08.945 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:09:08.689 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:09:09.073 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 21:09:08.772 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 21:09:25.720 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:60544 11 6492 1 2025-12-08 21:10:26.129 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46724 10 6452 1 2025-12-08 21:11:26.531 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:45630 10 6452 1 2025-12-08 21:12:26.945 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:54422 10 6452 1 2025-12-08 21:13:27.368 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:56558 10 6452 1 2025-12-08 21:14:09.006 00:00:00.046 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 21:14:09.248 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 21:14:09.131 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:14:09.363 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:14:09.446 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 21:10:12.906 00:05:02.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 21:10:12.904 00:05:02.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 21:14:27.765 00:00:10.447 TCP 1.101.0.1:3000 -> 23.104.0.1:33124 12 10369 1 2025-12-08 21:15:28.247 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39222 10 6452 1 2025-12-08 21:16:28.650 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55230 10 6452 1 2025-12-08 21:17:29.053 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42112 10 6452 1 2025-12-08 21:18:29.456 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35798 10 6452 1 2025-12-08 21:19:08.947 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 21:19:08.976 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 21:19:08.970 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 21:19:09.079 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:19:08.864 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:19:29.861 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:34198 10 6452 1 2025-12-08 21:16:12.904 00:05:02.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 21:16:12.907 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 21:20:30.276 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44728 10 6452 1 2025-12-08 21:21:30.678 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:57240 10 6452 1 2025-12-08 21:22:31.103 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:39538 10 6452 1 2025-12-08 21:23:31.498 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47300 10 6452 1 2025-12-08 21:24:09.364 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 21:24:09.230 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 21:24:09.142 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 21:24:08.920 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:24:09.283 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:24:31.896 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:43506 10 6452 1 2025-12-08 21:25:32.309 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51952 10 6452 1 2025-12-08 21:22:12.911 00:05:02.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 21:22:12.908 00:05:02.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 21:26:32.708 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:43496 10 6452 1 2025-12-08 21:27:33.104 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:59640 10 6452 1 2025-12-08 21:28:33.511 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:56740 10 6452 1 2025-12-08 21:29:09.189 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 21:29:09.410 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 21:29:09.067 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:29:09.265 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:29:09.348 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 21:29:33.918 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44690 10 6452 1 2025-12-08 21:30:34.328 00:00:10.317 TCP 1.101.0.1:3000 -> 23.104.0.1:48518 10 6452 1 2025-12-08 21:31:34.685 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:55788 10 6452 1 2025-12-08 21:28:12.914 00:05:02.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 21:28:12.912 00:05:02.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 21:32:35.047 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49816 10 6452 1 2025-12-08 21:33:35.449 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:53156 10 6452 1 2025-12-08 21:34:09.202 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:34:09.357 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 21:34:09.362 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 21:34:09.227 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:34:09.285 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 21:34:35.809 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:52494 10 6452 1 2025-12-08 21:35:36.189 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52908 10 6452 1 2025-12-08 21:36:36.593 00:00:10.423 TCP 1.101.0.1:3000 -> 23.104.0.1:49234 10 6452 1 2025-12-08 21:37:37.054 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:38168 10 6452 1 2025-12-08 21:34:12.912 00:05:02.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 21:34:12.915 00:05:02.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 21:38:37.460 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37856 10 6452 1 2025-12-08 21:39:09.429 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 21:39:09.501 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 21:39:09.262 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:39:09.577 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:39:09.658 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 21:39:37.867 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54102 10 6452 1 2025-12-08 21:40:38.294 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:46296 10 6452 1 2025-12-08 21:41:38.669 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:50862 10 6452 1 2025-12-08 21:42:39.098 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:45008 10 6452 1 2025-12-08 21:43:39.499 00:00:10.320 TCP 1.101.0.1:3000 -> 23.104.0.1:57932 10 6452 1 2025-12-08 21:44:09.620 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 21:44:09.498 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 21:44:09.428 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:44:09.630 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:44:09.714 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 21:40:12.914 00:05:02.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 21:40:12.916 00:05:02.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 21:44:39.860 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:46722 10 6452 1 2025-12-08 21:45:40.277 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:46900 10 6452 1 2025-12-08 21:46:40.681 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34320 10 6452 1 2025-12-08 21:47:41.047 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:32870 10 6452 1 2025-12-08 21:48:41.407 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34412 10 6452 1 2025-12-08 21:49:09.586 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 21:49:09.662 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 21:49:09.545 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:49:09.657 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:49:09.740 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 21:49:41.811 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:55620 10 6452 1 2025-12-08 21:46:12.917 00:05:02.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 21:46:12.919 00:05:02.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 21:50:42.184 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39008 10 6452 1 2025-12-08 21:51:42.583 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:42524 10 6452 1 2025-12-08 21:52:42.985 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:35878 10 6452 1 2025-12-08 21:53:43.361 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:57772 10 6452 1 2025-12-08 21:54:09.701 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 21:54:09.513 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:54:09.690 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 21:54:09.772 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 21:54:10.078 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 21:54:43.763 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:60132 10 6452 1 2025-12-08 21:55:44.181 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46646 10 6452 1 2025-12-08 21:52:12.923 00:05:02.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 21:52:12.922 00:05:02.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 21:56:44.541 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:50934 10 6452 1 2025-12-08 21:57:44.942 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55920 10 6452 1 Summary: total flows: 139, total bytes: 414505, total packets: 1013, avg bps: 925, avg pps: 0, avg bpp: 409 Time window: 2025-12-08 20:58:12 - 2025-12-08 21:57:55 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0049s User: 0.0020s Wall: 0.0023s flows/second: 60409.1 Runtime: 0.0023s