Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-19 16:59:21.547 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 16:59:21.478 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 16:59:21.430 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 16:59:21.489 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 16:59:21.571 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 16:59:25.270 00:00:10.479 TCP 1.101.0.1:3000 -> 23.104.0.1:57162 10 6452 1 2025-12-19 17:00:25.783 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34156 10 6452 1 2025-12-19 16:57:18.664 00:05:02.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 16:57:18.660 00:05:02.493 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 17:01:26.185 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46734 10 6452 1 2025-12-19 17:02:26.550 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:60704 10 6452 1 2025-12-19 17:03:26.951 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:51020 10 6452 1 2025-12-19 17:04:21.653 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 17:04:21.799 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 17:04:21.684 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:04:21.837 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:04:21.920 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 17:04:27.318 00:00:10.985 TCP 1.101.0.1:3000 -> 23.104.0.1:46948 10 6452 1 2025-12-19 17:05:28.341 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:49674 10 6452 1 2025-12-19 17:06:28.704 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41332 10 6452 1 2025-12-19 17:03:18.663 00:05:02.492 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 17:03:18.665 00:05:02.487 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 17:07:29.094 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45650 10 6452 1 2025-12-19 17:08:29.501 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:44698 10 6452 1 2025-12-19 17:09:21.781 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 17:09:21.698 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:09:21.769 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 17:09:21.762 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 17:09:21.629 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:09:29.910 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:33142 10 6452 1 2025-12-19 17:10:30.279 00:00:10.356 TCP 1.101.0.1:3000 -> 23.104.0.1:58708 10 6452 1 2025-12-19 17:11:30.677 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:58820 10 6452 1 2025-12-19 17:12:31.040 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48826 10 6452 1 2025-12-19 17:09:18.665 00:05:02.494 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 17:09:18.667 00:05:02.489 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 17:13:31.455 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47728 10 6452 1 2025-12-19 17:14:22.174 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 17:14:21.977 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 17:14:21.721 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:14:22.009 00:00:00.032 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:14:22.090 00:00:00.034 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 17:14:31.861 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:52028 10 6452 1 2025-12-19 17:15:32.277 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49710 10 6452 1 2025-12-19 17:16:32.677 00:00:10.315 TCP 1.101.0.1:3000 -> 23.104.0.1:55024 10 6452 1 2025-12-19 17:17:33.030 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:59978 10 6452 1 2025-12-19 17:18:33.437 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35952 10 6452 1 2025-12-19 17:19:21.966 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:19:21.963 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 17:15:18.671 00:05:02.485 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 17:19:21.997 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 17:19:21.798 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:19:22.050 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 17:15:18.670 00:05:02.490 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 17:19:33.846 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:57006 10 6452 1 2025-12-19 17:20:34.273 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36872 10 6452 1 2025-12-19 17:21:34.674 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:52980 10 6452 1 2025-12-19 17:22:35.115 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:45562 10 6452 1 2025-12-19 17:23:35.482 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56266 10 6452 1 2025-12-19 17:24:21.993 00:00:00.030 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 17:24:21.872 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:24:21.914 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:24:22.005 00:00:00.044 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 17:24:21.995 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 17:24:35.886 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:50480 10 6452 1 2025-12-19 17:21:18.673 00:05:02.484 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 17:21:18.673 00:05:02.489 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 17:25:36.267 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:44990 12 10369 1 2025-12-19 17:26:36.750 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:47512 10 6452 1 2025-12-19 17:27:37.151 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:57262 10 6452 1 2025-12-19 17:28:37.559 00:00:10.422 TCP 1.101.0.1:3000 -> 23.104.0.1:37888 11 6504 1 2025-12-19 17:29:22.258 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 17:29:22.214 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 17:29:21.856 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:29:22.173 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:29:22.255 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 17:29:38.021 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:47076 10 6452 1 2025-12-19 17:30:38.423 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49050 10 6452 1 2025-12-19 17:27:18.706 00:05:02.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 17:27:18.709 00:05:02.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 17:31:38.827 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45764 10 6452 1 2025-12-19 17:32:39.236 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54218 10 6452 1 2025-12-19 17:33:39.641 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:47744 10 6452 1 2025-12-19 17:34:22.395 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 17:34:22.500 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 17:34:22.011 00:00:00.042 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:34:22.454 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:34:22.537 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 17:34:40.069 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46136 10 6452 1 2025-12-19 17:35:40.475 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:36808 10 6452 1 2025-12-19 17:36:40.882 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:34548 10 6452 1 2025-12-19 17:33:18.714 00:05:02.448 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 17:33:18.711 00:05:02.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 17:37:41.246 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:37316 10 6452 1 2025-12-19 17:38:41.652 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:33150 10 6452 1 2025-12-19 17:39:22.532 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 17:39:22.371 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 17:39:22.535 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 17:39:22.396 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:39:22.450 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:39:42.019 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:53862 10 6452 1 2025-12-19 17:40:42.426 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:53562 10 6452 1 2025-12-19 17:41:42.835 00:00:10.395 TCP 1.101.0.1:3000 -> 23.104.0.1:59516 10 6452 1 2025-12-19 17:42:43.266 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:55938 10 6452 1 2025-12-19 17:39:18.712 00:05:02.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 17:39:18.715 00:05:02.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 17:43:43.672 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:41416 10 6452 1 2025-12-19 17:44:22.470 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 17:44:22.538 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 17:44:22.214 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:44:22.184 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:44:22.267 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 17:44:44.096 00:00:11.099 TCP 1.101.0.1:3000 -> 23.104.0.1:35626 10 6452 1 2025-12-19 17:45:45.231 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41532 10 6452 1 2025-12-19 17:46:45.635 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:41842 10 6452 1 2025-12-19 17:47:46.000 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:35096 10 6452 1 2025-12-19 17:48:46.406 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:39348 10 6452 1 2025-12-19 17:49:22.517 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 17:45:18.717 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 17:49:22.562 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 17:49:22.475 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:49:22.679 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:45:18.716 00:05:02.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 17:49:22.763 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 17:49:46.804 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:32778 10 6452 1 2025-12-19 17:50:47.211 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:48854 10 6452 1 2025-12-19 17:51:47.625 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:33994 10 6452 1 2025-12-19 17:52:48.033 00:00:10.533 TCP 1.101.0.1:3000 -> 23.104.0.1:43202 10 6452 1 2025-12-19 17:53:48.613 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40460 10 6452 1 2025-12-19 17:54:23.133 00:00:00.026 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 17:54:22.762 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 17:54:22.845 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:54:22.914 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 17:54:22.998 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 17:54:49.023 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:39250 10 6452 1 2025-12-19 17:51:18.717 00:05:02.452 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 17:51:18.719 00:05:02.447 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 17:55:49.383 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60662 10 6452 1 2025-12-19 17:56:49.784 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:42216 10 6452 1 2025-12-19 17:57:50.193 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59490 10 6452 1 Summary: total flows: 139, total bytes: 414517, total packets: 1013, avg bps: 910, avg pps: 0, avg bpp: 409 Time window: 2025-12-19 16:57:18 - 2025-12-19 17:58:00 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0039s User: 0.0013s Wall: 0.0031s flows/second: 45292.7 Runtime: 0.0031s