Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-19 06:59:09.595 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 06:59:09.588 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 06:59:09.494 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 06:59:09.368 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 06:59:09.511 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 06:59:14.390 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43452 10 6452 1 2025-12-19 07:00:14.790 00:00:10.437 TCP 1.101.0.1:3000 -> 23.104.0.1:57614 12 10375 1 2025-12-19 06:57:18.442 00:05:02.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 06:57:18.440 00:05:02.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 07:01:15.266 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:38658 10 6452 1 2025-12-19 07:02:15.668 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:53036 10 6452 1 2025-12-19 07:03:16.108 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53264 10 6452 1 2025-12-19 07:04:09.601 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 07:04:09.549 00:00:00.026 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 07:04:09.668 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:04:09.549 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:04:09.631 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 07:04:16.519 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:59776 10 6452 1 2025-12-19 07:05:16.879 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:48314 10 6452 1 2025-12-19 07:06:17.287 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:37910 10 6452 1 2025-12-19 07:03:18.441 00:05:02.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 07:03:18.443 00:05:02.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 07:07:17.643 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60552 10 6452 1 2025-12-19 07:08:18.060 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36518 10 6452 1 2025-12-19 07:09:09.775 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 07:09:09.827 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 07:09:09.767 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:09:09.693 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:09:10.070 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 07:09:18.459 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:33212 10 6452 1 2025-12-19 07:10:18.872 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:46894 10 6452 1 2025-12-19 07:11:19.282 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36464 10 6452 1 2025-12-19 07:12:19.678 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:40118 10 6452 1 2025-12-19 07:09:18.446 00:05:02.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 07:09:18.443 00:05:02.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 07:13:20.107 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43674 10 6452 1 2025-12-19 07:14:09.940 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 07:14:09.815 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 07:14:09.857 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 07:14:09.873 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:14:09.857 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:14:20.506 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:59096 10 6452 1 2025-12-19 07:15:20.873 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:54430 10 6452 1 2025-12-19 07:16:21.277 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:49710 10 6452 1 2025-12-19 07:17:21.645 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57660 10 6452 1 2025-12-19 07:18:22.072 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55376 10 6452 1 2025-12-19 07:19:09.733 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 07:19:09.593 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 07:19:09.766 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:19:09.805 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:19:09.888 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 07:15:18.447 00:05:02.448 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 07:15:18.445 00:05:02.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 07:19:22.477 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:34770 10 6452 1 2025-12-19 07:20:22.887 00:00:10.462 TCP 1.101.0.1:3000 -> 23.104.0.1:43166 14 10479 1 2025-12-19 07:21:23.394 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:41756 10 6452 1 2025-12-19 07:22:23.767 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:54848 10 6452 1 2025-12-19 07:23:24.182 00:00:10.319 TCP 1.101.0.1:3000 -> 23.104.0.1:36760 10 6452 1 2025-12-19 07:24:09.916 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 07:24:09.828 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:24:09.833 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:24:10.086 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 07:24:09.998 00:00:00.033 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 07:24:24.543 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:45462 10 6452 1 2025-12-19 07:21:18.450 00:05:02.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 07:21:18.447 00:05:02.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 07:25:24.910 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55074 10 6452 1 2025-12-19 07:26:25.319 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:37874 10 6452 1 2025-12-19 07:27:25.718 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:60228 10 6452 1 2025-12-19 07:28:26.143 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45240 10 6452 1 2025-12-19 07:29:10.682 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 07:29:10.313 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:29:10.759 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:29:10.760 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 07:29:10.842 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 07:29:26.550 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:38026 10 6452 1 2025-12-19 07:30:26.951 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:52536 10 6452 1 2025-12-19 07:27:18.451 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 07:27:18.447 00:05:02.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 07:31:27.378 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:56302 10 6452 1 2025-12-19 07:32:27.765 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:53766 10 6452 1 2025-12-19 07:33:28.178 00:00:11.028 TCP 1.101.0.1:3000 -> 23.104.0.1:49094 10 6452 1 2025-12-19 07:34:09.955 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:34:10.350 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 07:34:10.268 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 07:34:10.120 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 07:34:10.267 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:34:29.244 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:37790 10 6452 1 2025-12-19 07:35:29.604 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:39080 10 6452 1 2025-12-19 07:36:29.971 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:33452 10 6452 1 2025-12-19 07:33:18.454 00:05:02.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 07:33:18.451 00:05:02.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 07:37:30.397 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49638 10 6452 1 2025-12-19 07:38:30.805 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:41386 10 6452 1 2025-12-19 07:39:10.428 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 07:39:10.267 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:39:10.432 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:39:10.151 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 07:39:10.515 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 07:39:31.217 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:38846 10 6452 1 2025-12-19 07:40:31.576 00:00:10.750 TCP 1.101.0.1:3000 -> 23.104.0.1:60532 10 6452 1 2025-12-19 07:41:32.362 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:58930 10 6452 1 2025-12-19 07:42:32.722 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:51906 10 6452 1 2025-12-19 07:39:18.454 00:05:02.448 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 07:39:18.458 00:05:02.442 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 07:43:33.136 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:33400 10 6452 1 2025-12-19 07:44:10.445 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 07:44:10.180 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 07:44:10.288 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 07:44:10.346 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:44:10.363 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:44:33.499 00:00:10.868 TCP 1.101.0.1:3000 -> 23.104.0.1:43836 10 6452 1 2025-12-19 07:45:34.407 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:46454 10 6452 1 2025-12-19 07:46:34.774 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:55220 10 6452 1 2025-12-19 07:47:35.146 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:50000 10 6452 1 2025-12-19 07:48:35.549 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:48254 10 6452 1 2025-12-19 07:49:10.436 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 07:49:10.249 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 07:49:10.313 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:49:10.433 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:49:10.515 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 07:45:18.461 00:05:02.441 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 07:45:18.458 00:05:02.446 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 07:49:35.956 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:59986 10 6452 1 2025-12-19 07:50:36.322 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:56820 10 6452 1 2025-12-19 07:51:36.686 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55324 10 6452 1 2025-12-19 07:52:37.105 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50656 10 6452 1 2025-12-19 07:53:37.512 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:58752 10 6452 1 2025-12-19 07:54:10.540 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 07:54:10.439 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 07:54:10.674 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:54:10.547 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 07:54:10.629 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 07:54:37.915 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34932 10 6452 1 2025-12-19 07:51:18.464 00:05:02.439 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 07:51:18.463 00:05:02.444 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 07:55:38.340 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50528 10 6452 1 2025-12-19 07:56:38.701 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44680 10 6452 1 2025-12-19 07:57:39.111 00:00:11.809 TCP 1.101.0.1:3000 -> 23.104.0.1:48796 10 6452 1 Summary: total flows: 139, total bytes: 418498, total packets: 1016, avg bps: 921, avg pps: 0, avg bpp: 411 Time window: 2025-12-19 06:57:18 - 2025-12-19 07:57:50 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0044s User: 0.0011s Wall: 0.0023s flows/second: 59478.5 Runtime: 0.0024s