Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-18 18:58:55.175 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 18:58:55.195 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:58:55.224 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 18:58:55.175 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 18:58:55.307 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 18:59:06.994 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38364 10 6452 1 2025-12-18 19:00:07.400 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:55604 12 10375 1 2025-12-18 19:01:07.877 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51366 10 6452 1 2025-12-18 18:57:18.124 00:05:02.501 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 18:57:18.122 00:05:02.506 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 19:02:08.281 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:39894 10 6452 1 2025-12-18 19:03:08.689 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:53578 10 6452 1 2025-12-18 19:03:55.159 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 19:03:55.331 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 19:03:55.067 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:03:55.076 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:03:55.179 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 19:04:09.108 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33424 10 6452 1 2025-12-18 19:05:09.512 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56994 10 6452 1 2025-12-18 19:06:09.932 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:39822 10 6452 1 2025-12-18 19:03:18.122 00:05:02.509 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 19:03:18.125 00:05:02.503 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 19:07:10.353 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:32900 10 6452 1 2025-12-18 19:08:10.759 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:44224 10 6452 1 2025-12-18 19:08:55.266 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 19:08:55.268 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 19:08:55.321 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:08:55.413 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:08:55.495 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 19:09:11.172 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46852 10 6452 1 2025-12-18 19:10:11.583 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:36884 10 6452 1 2025-12-18 19:11:11.995 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:45472 10 6452 1 2025-12-18 19:12:12.378 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:46502 10 6452 1 2025-12-18 19:13:12.743 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:55650 10 6452 1 2025-12-18 19:09:18.127 00:05:02.503 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 19:09:18.125 00:05:02.508 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 19:13:55.470 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 19:13:55.343 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:13:55.559 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:13:55.378 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 19:13:55.643 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 19:14:13.122 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50602 10 6452 1 2025-12-18 19:15:13.536 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:54152 10 6452 1 2025-12-18 19:16:13.931 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:33738 10 6452 1 2025-12-18 19:17:14.348 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51330 10 6452 1 2025-12-18 19:18:14.758 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:57270 10 6452 1 2025-12-18 19:18:55.627 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 19:18:55.398 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:18:55.633 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:18:55.633 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 19:18:55.716 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 19:15:18.128 00:05:02.505 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 19:15:18.131 00:05:02.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 19:19:15.181 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54716 10 6452 1 2025-12-18 19:20:15.587 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:39894 10 6452 1 2025-12-18 19:21:15.987 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33076 10 6452 1 2025-12-18 19:22:16.393 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:50668 10 6452 1 2025-12-18 19:23:16.792 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:42562 10 6452 1 2025-12-18 19:23:55.690 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:23:55.484 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 19:23:55.705 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 19:23:55.510 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:23:55.773 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 19:24:17.190 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60602 10 6452 1 2025-12-18 19:21:18.132 00:05:02.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 19:21:18.130 00:05:02.504 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 19:25:17.597 00:00:11.907 TCP 1.101.0.1:3000 -> 23.104.0.1:33670 10 6452 1 2025-12-18 19:26:19.546 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:48568 10 6452 1 2025-12-18 19:27:19.910 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:34770 10 6452 1 2025-12-18 19:28:20.320 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:46522 10 6452 1 2025-12-18 19:28:55.807 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 19:28:55.715 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 19:28:55.615 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:28:55.763 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:28:55.845 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 19:29:20.726 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:33000 10 6452 1 2025-12-18 19:30:21.113 00:00:10.699 TCP 1.101.0.1:3000 -> 23.104.0.1:44268 10 6452 1 2025-12-18 19:27:18.132 00:05:02.505 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 19:27:18.134 00:05:02.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 19:31:21.847 00:00:10.432 TCP 1.101.0.1:3000 -> 23.104.0.1:40630 11 6504 1 2025-12-18 19:32:22.318 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55666 10 6452 1 2025-12-18 19:33:22.726 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:49148 10 6452 1 2025-12-18 19:33:55.953 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 19:33:55.861 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 19:33:55.392 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:33:55.870 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:33:55.751 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 19:34:23.136 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45824 10 6452 1 2025-12-18 19:35:23.542 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39662 10 6452 1 2025-12-18 19:36:23.946 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47900 10 6452 1 2025-12-18 19:33:18.136 00:05:02.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 19:33:18.133 00:05:02.505 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 19:37:24.361 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40166 10 6452 1 2025-12-18 19:38:24.761 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:35598 10 6452 1 2025-12-18 19:38:55.927 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 19:38:55.690 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 19:38:55.846 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:38:55.846 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:38:55.581 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 19:39:25.182 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33270 10 6452 1 2025-12-18 19:40:25.585 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:41524 10 6452 1 2025-12-18 19:41:25.981 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:45962 10 6452 1 2025-12-18 19:42:26.359 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:54726 10 6452 1 2025-12-18 19:39:18.140 00:05:02.499 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 19:39:18.139 00:05:02.504 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 19:43:26.768 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:37244 10 6452 1 2025-12-18 19:43:55.881 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 19:43:55.812 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 19:43:55.638 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:43:55.812 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:43:55.895 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 19:44:27.183 00:00:10.342 TCP 1.101.0.1:3000 -> 23.104.0.1:34850 10 6452 1 2025-12-18 19:45:27.567 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:51058 10 6452 1 2025-12-18 19:46:27.972 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:52978 10 6452 1 2025-12-18 19:47:28.382 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:40506 10 6452 1 2025-12-18 19:48:28.792 00:00:10.344 TCP 1.101.0.1:3000 -> 23.104.0.1:41030 10 6452 1 2025-12-18 19:48:56.052 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:48:56.217 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 19:48:56.249 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 19:48:56.091 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:48:56.134 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 19:45:18.140 00:05:02.504 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 19:45:18.142 00:05:02.500 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 19:49:29.176 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:39598 10 6452 1 2025-12-18 19:50:29.588 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:44410 12 10375 1 2025-12-18 19:51:30.096 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51294 10 6452 1 2025-12-18 19:52:30.499 00:00:10.902 TCP 1.101.0.1:3000 -> 23.104.0.1:38052 10 6452 1 2025-12-18 19:53:31.441 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:36258 10 6452 1 2025-12-18 19:53:56.108 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-18 19:53:56.311 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-18 19:53:55.923 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:53:56.185 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-18 19:53:56.268 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-18 19:54:31.840 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:33668 10 6452 1 2025-12-18 19:51:18.140 00:05:02.505 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-18 19:51:18.143 00:05:02.499 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-18 19:55:32.261 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:60544 10 6452 1 2025-12-18 19:56:32.664 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33606 10 6452 1 2025-12-18 19:57:33.103 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53210 10 6452 1 2025-12-18 19:58:33.511 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:46668 10 6452 1 Summary: total flows: 140, total bytes: 424898, total packets: 1025, avg bps: 922, avg pps: 0, avg bpp: 414 Time window: 2025-12-18 18:57:18 - 2025-12-18 19:58:43 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0060s User: 0.0000s Wall: 0.0018s flows/second: 76748.5 Runtime: 0.0018s