Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-19 18:59:24.315 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 18:59:24.232 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 18:59:24.135 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 18:59:24.099 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:59:24.233 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 18:59:16.591 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:56804 10 6452 1 2025-12-19 19:00:16.951 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:58602 10 6452 1 2025-12-19 18:57:18.739 00:05:02.455 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 18:57:18.743 00:05:02.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 19:01:17.315 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59452 10 6452 1 2025-12-19 19:02:17.721 00:00:10.753 TCP 1.101.0.1:3000 -> 23.104.0.1:48432 10 6452 1 2025-12-19 19:03:18.521 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:49280 10 6452 1 2025-12-19 19:04:23.928 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 19:04:24.011 00:00:00.039 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 19:04:23.823 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:04:24.043 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:04:24.125 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 19:04:18.922 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:57290 10 6452 1 2025-12-19 19:05:19.321 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54292 10 6452 1 2025-12-19 19:06:19.728 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:32942 10 6452 1 2025-12-19 19:03:18.740 00:05:02.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 19:03:18.743 00:05:02.450 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 19:07:20.129 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:38350 10 6452 1 2025-12-19 19:08:20.536 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49676 10 6452 1 2025-12-19 19:09:24.162 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 19:09:24.149 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 19:09:24.204 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 19:09:23.696 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:09:24.080 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:09:20.942 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:56394 10 6452 1 2025-12-19 19:10:21.357 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:50706 10 6452 1 2025-12-19 19:11:21.759 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:44412 10 6452 1 2025-12-19 19:12:22.181 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:50040 10 6452 1 2025-12-19 19:09:18.746 00:05:02.451 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 19:09:18.744 00:05:02.456 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 19:13:22.538 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58018 10 6452 1 2025-12-19 19:14:24.372 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 19:14:24.290 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 19:14:24.225 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 19:14:23.933 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:14:24.291 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:14:22.941 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:39814 10 6452 1 2025-12-19 19:15:23.358 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39460 10 6452 1 2025-12-19 19:16:23.762 00:00:10.333 TCP 1.101.0.1:3000 -> 23.104.0.1:35194 10 6452 1 2025-12-19 19:17:24.130 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43942 10 6452 1 2025-12-19 19:18:24.537 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:51156 10 6452 1 2025-12-19 19:19:24.304 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 19:15:18.747 00:05:02.452 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 19:19:24.372 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 19:19:24.142 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:19:24.373 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:15:18.746 00:05:02.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 19:19:24.457 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 19:19:24.941 00:00:11.045 TCP 1.101.0.1:3000 -> 23.104.0.1:36616 10 6452 1 2025-12-19 19:20:26.027 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:40116 10 6452 1 2025-12-19 19:21:26.392 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36540 10 6452 1 2025-12-19 19:22:26.798 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:41030 10 6452 1 2025-12-19 19:23:27.211 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40270 10 6452 1 2025-12-19 19:24:24.351 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 19:24:24.351 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 19:24:24.477 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:24:24.529 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:24:24.611 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 19:24:27.614 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47768 10 6452 1 2025-12-19 19:21:18.747 00:05:02.457 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 19:21:18.749 00:05:02.453 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 19:25:28.018 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:38740 10 6452 1 2025-12-19 19:26:28.422 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:46730 10 6452 1 2025-12-19 19:27:28.827 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59544 10 6452 1 2025-12-19 19:28:29.228 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:56012 10 6452 1 2025-12-19 19:29:24.427 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 19:29:24.643 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 19:29:24.707 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:29:24.823 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:29:24.908 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 19:29:29.636 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:44516 10 6452 1 2025-12-19 19:30:30.039 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37216 10 6452 1 2025-12-19 19:27:18.747 00:05:02.464 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 19:27:18.751 00:05:02.459 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 19:31:30.441 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49286 10 6452 1 2025-12-19 19:32:30.869 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41694 10 6452 1 2025-12-19 19:33:31.275 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:60340 10 6452 1 2025-12-19 19:34:24.661 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 19:34:24.667 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 19:34:24.411 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:34:24.608 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:34:24.692 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 19:34:31.671 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:48666 10 6452 1 2025-12-19 19:35:32.098 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50138 10 6452 1 2025-12-19 19:36:32.503 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60066 10 6452 1 2025-12-19 19:33:18.751 00:05:02.464 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 19:33:18.749 00:05:02.468 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 19:37:32.873 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:39984 10 6452 1 2025-12-19 19:38:33.273 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48164 10 6452 1 2025-12-19 19:39:24.737 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 19:39:24.531 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 19:39:24.652 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:39:24.739 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:39:24.822 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 19:39:33.676 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:38278 10 6452 1 2025-12-19 19:40:34.114 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:45486 10 6452 1 2025-12-19 19:41:34.482 00:00:11.440 TCP 1.101.0.1:3000 -> 23.104.0.1:51612 10 6452 1 2025-12-19 19:42:35.965 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:59284 10 6452 1 2025-12-19 19:39:18.751 00:05:02.478 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 19:39:18.753 00:05:02.473 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 19:43:36.378 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35854 10 6452 1 2025-12-19 19:44:24.862 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 19:44:24.846 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:44:25.230 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 19:44:25.505 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:44:25.588 00:00:00.025 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 19:44:36.776 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:48550 10 6452 1 2025-12-19 19:45:37.187 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:59808 10 6452 1 2025-12-19 19:46:37.592 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:44272 10 6452 1 2025-12-19 19:47:37.954 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:51140 10 6452 1 2025-12-19 19:48:38.326 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:54784 10 6452 1 2025-12-19 19:49:24.964 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 19:45:18.754 00:05:02.475 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 19:49:24.951 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:49:24.881 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:49:24.914 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 19:45:18.756 00:05:02.470 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 19:49:25.044 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 19:49:38.750 00:00:10.686 TCP 1.101.0.1:3000 -> 23.104.0.1:47402 10 6452 1 2025-12-19 19:50:39.477 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47326 10 6452 1 2025-12-19 19:51:39.888 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:55086 12 6556 1 2025-12-19 19:52:40.299 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34000 10 6452 1 2025-12-19 19:53:40.713 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:60896 10 6452 1 2025-12-19 19:54:24.931 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-19 19:54:24.777 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:54:25.080 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-19 19:54:25.074 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-19 19:54:25.157 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-19 19:54:41.173 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46802 10 6452 1 2025-12-19 19:51:18.758 00:05:02.472 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-19 19:51:18.760 00:05:02.468 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-19 19:55:41.582 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:47560 10 6452 1 2025-12-19 19:56:42.004 00:00:10.412 TCP 1.101.0.1:3000 -> 23.104.0.1:52974 11 6504 1 2025-12-19 19:57:42.456 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49280 10 6452 1 Summary: total flows: 139, total bytes: 410704, total packets: 1013, avg bps: 904, avg pps: 0, avg bpp: 405 Time window: 2025-12-19 18:57:18 - 2025-12-19 19:57:52 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0042s User: 0.0010s Wall: 0.0026s flows/second: 52952.6 Runtime: 0.0026s