Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-18 17:58:54.588 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 17:58:54.397 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 17:58:54.877 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 17:58:55.273 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 17:58:55.355 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 17:59:33.504 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:38320 10 6452 1 2025-12-18 18:00:33.914 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:33138 10 6452 1 2025-12-18 17:57:18.105 00:05:02.503 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 17:57:18.103 00:05:02.508 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 18:01:34.318 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:41900 10 6452 1 2025-12-18 18:02:34.720 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:39622 10 6452 1 2025-12-18 18:03:35.132 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:34758 10 6452 1 2025-12-18 18:03:54.136 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 18:03:54.149 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 18:03:53.847 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:03:53.987 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:03:54.070 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 18:04:35.528 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48198 10 6452 1 2025-12-18 18:05:35.944 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:44750 10 6452 1 2025-12-18 18:06:36.366 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:60326 10 6452 1 2025-12-18 18:03:18.104 00:05:02.509 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 18:03:18.106 00:05:02.504 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 18:07:36.782 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:59492 10 6452 1 2025-12-18 18:08:37.145 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:50814 10 6452 1 2025-12-18 18:08:53.861 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 18:08:53.947 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 18:08:53.786 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:08:54.073 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:08:54.157 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 18:09:37.568 00:00:19.586 TCP 1.101.0.1:3000 -> 23.104.0.1:40146 10 6452 1 2025-12-18 18:10:47.207 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:42022 10 6452 1 2025-12-18 18:11:47.604 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:44532 10 6452 1 2025-12-18 18:12:47.968 00:00:10.339 TCP 1.101.0.1:3000 -> 23.104.0.1:57428 10 6452 1 2025-12-18 18:09:18.103 00:05:02.510 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 18:09:18.106 00:05:02.505 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 18:13:54.599 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 18:13:54.238 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 18:13:54.387 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 18:13:54.402 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:13:54.517 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:13:48.346 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:44756 10 6452 1 2025-12-18 18:14:48.761 00:00:10.382 TCP 1.101.0.1:3000 -> 23.104.0.1:39422 10 6452 1 2025-12-18 18:15:49.182 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:33626 10 6452 1 2025-12-18 18:16:49.586 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:33786 10 6452 1 2025-12-18 18:17:49.997 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:50386 10 6452 1 2025-12-18 18:18:54.957 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 18:18:54.961 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:18:55.053 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 18:18:55.062 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:18:55.144 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 18:18:50.363 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41980 10 6452 1 2025-12-18 18:15:18.111 00:05:02.503 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 18:15:18.109 00:05:02.508 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 18:19:50.765 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:54422 10 6452 1 2025-12-18 18:20:51.181 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:57250 10 6452 1 2025-12-18 18:21:51.579 00:00:10.429 TCP 1.101.0.1:3000 -> 23.104.0.1:37712 11 6504 1 2025-12-18 18:22:52.035 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:43992 10 6452 1 2025-12-18 18:23:54.398 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 18:23:54.317 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 18:23:54.507 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 18:23:54.398 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:23:54.314 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:23:52.437 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:41778 10 6452 1 2025-12-18 18:24:52.798 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40298 10 6452 1 2025-12-18 18:21:18.114 00:05:02.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 18:21:18.113 00:05:02.505 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 18:25:53.206 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35434 10 6452 1 2025-12-18 18:26:53.609 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:36878 10 6452 1 2025-12-18 18:27:54.016 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53862 10 6452 1 2025-12-18 18:28:54.429 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 18:28:54.272 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:28:54.551 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:28:54.551 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 18:28:54.634 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 18:28:54.414 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59062 10 6452 1 2025-12-18 18:29:54.814 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50434 10 6452 1 2025-12-18 18:30:55.212 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41504 10 6452 1 2025-12-18 18:27:18.113 00:05:02.507 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 18:27:18.116 00:05:02.502 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 18:31:55.614 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:47222 10 6452 1 2025-12-18 18:32:56.017 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60434 10 6452 1 2025-12-18 18:33:55.320 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 18:33:55.459 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 18:33:55.480 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:33:55.452 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:33:55.535 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 18:33:56.419 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:50222 10 6452 1 2025-12-18 18:34:56.780 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:51240 10 6452 1 2025-12-18 18:35:57.159 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:49462 10 6452 1 2025-12-18 18:36:57.581 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:50754 10 6452 1 2025-12-18 18:33:18.117 00:05:02.504 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 18:33:18.119 00:05:02.499 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 18:37:58.003 00:00:10.928 TCP 1.101.0.1:3000 -> 23.104.0.1:44614 10 6452 1 2025-12-18 18:38:54.624 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 18:38:54.697 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 18:38:54.557 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:38:54.619 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:38:54.701 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 18:38:58.969 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:55500 10 6452 1 2025-12-18 18:39:59.396 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:37138 10 6452 1 2025-12-18 18:40:59.758 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60526 10 6452 1 2025-12-18 18:42:00.157 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48630 10 6452 1 2025-12-18 18:43:00.563 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:33696 10 6452 1 2025-12-18 18:39:18.118 00:05:02.504 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 18:39:18.121 00:05:02.499 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 18:43:54.767 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 18:43:54.767 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 18:43:54.677 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:43:54.838 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:43:54.924 00:00:00.020 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 18:44:00.989 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:48436 11 6504 1 2025-12-18 18:45:01.449 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:54108 12 10375 1 2025-12-18 18:46:01.881 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:36432 10 6452 1 2025-12-18 18:47:02.242 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59334 10 6452 1 2025-12-18 18:48:02.652 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:44278 10 6452 1 2025-12-18 18:48:54.841 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 18:48:54.763 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 18:48:54.697 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:48:54.894 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:48:54.976 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 18:49:03.020 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50238 10 6452 1 2025-12-18 18:45:18.120 00:05:02.503 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 18:45:18.122 00:05:02.498 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 18:50:03.425 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40926 10 6452 1 2025-12-18 18:51:03.785 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:38912 10 6452 1 2025-12-18 18:52:04.152 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:43310 10 6452 1 2025-12-18 18:53:04.555 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56132 12 6556 1 2025-12-18 18:53:54.964 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 18:53:54.958 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 18:53:54.787 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:53:54.958 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:53:55.040 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 18:54:04.957 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46682 10 6452 1 2025-12-18 18:55:05.364 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53456 10 6452 1 2025-12-18 18:51:18.123 00:05:02.501 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 18:51:18.122 00:05:02.507 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 18:56:05.770 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:56558 10 6452 1 2025-12-18 18:57:06.189 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33012 10 6452 1 2025-12-18 18:58:06.595 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49716 10 6452 1 Summary: total flows: 139, total bytes: 414679, total packets: 1016, avg bps: 906, avg pps: 0, avg bpp: 408 Time window: 2025-12-18 17:57:18 - 2025-12-18 18:58:16 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0046s User: 0.0009s Wall: 0.0017s flows/second: 80337.4 Runtime: 0.0017s