Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-29 17:59:11.585 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-29 17:59:11.657 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-29 17:59:11.304 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 17:59:11.652 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 17:59:11.733 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-29 17:59:19.478 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:35766 10 6452 1 2025-12-29 17:56:23.854 00:05:02.706 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-29 17:56:23.853 00:05:02.710 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-29 18:00:19.891 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:52624 10 6452 1 2025-12-29 18:01:20.316 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:45882 10 6452 1 2025-12-29 18:02:20.718 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:54268 10 6452 1 2025-12-29 18:03:21.143 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:41054 10 6452 1 2025-12-29 18:04:11.593 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-29 18:04:11.728 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-29 18:04:11.529 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:04:11.676 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:04:11.758 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-29 18:04:21.510 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:40312 10 6452 1 2025-12-29 18:05:21.917 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55392 10 6452 1 2025-12-29 18:02:23.853 00:05:02.712 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-29 18:02:23.855 00:05:02.707 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-29 18:06:22.322 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49740 10 6452 1 2025-12-29 18:07:22.730 00:00:17.418 TCP 1.101.0.1:3000 -> 23.104.0.1:38256 10 6452 1 2025-12-29 18:08:30.193 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:46356 10 6452 1 2025-12-29 18:09:11.736 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-29 18:09:11.746 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-29 18:09:11.657 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-29 18:09:11.764 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:09:11.655 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:09:30.603 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:52688 10 6452 1 2025-12-29 18:10:31.014 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:34036 10 6452 1 2025-12-29 18:11:31.417 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:49502 10 6452 1 2025-12-29 18:08:23.854 00:05:02.713 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-29 18:08:23.857 00:05:02.708 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-29 18:12:31.822 00:00:10.849 TCP 1.101.0.1:3000 -> 23.104.0.1:40804 10 6452 1 2025-12-29 18:13:32.709 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:60450 10 6452 1 2025-12-29 18:14:11.616 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-29 18:14:11.982 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-29 18:14:11.791 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:14:11.852 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:14:11.934 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-29 18:14:33.115 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:54744 10 6452 1 2025-12-29 18:15:33.510 00:00:11.158 TCP 1.101.0.1:3000 -> 23.104.0.1:60284 10 6452 1 2025-12-29 18:16:34.704 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:56982 10 6452 1 2025-12-29 18:17:35.117 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:48886 10 6452 1 2025-12-29 18:14:23.866 00:05:02.700 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-29 18:14:23.864 00:05:02.705 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-29 18:18:35.519 00:00:10.553 TCP 1.101.0.1:3000 -> 23.104.0.1:53584 10 6452 1 2025-12-29 18:19:12.106 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-29 18:19:12.050 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-29 18:19:11.855 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:19:12.032 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:19:12.115 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-29 18:19:36.109 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:53598 10 6452 1 2025-12-29 18:20:36.467 00:00:10.318 TCP 1.101.0.1:3000 -> 23.104.0.1:59232 10 6452 1 2025-12-29 18:21:36.821 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:48874 11 6492 1 2025-12-29 18:22:37.229 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:59178 10 6452 1 2025-12-29 18:23:37.595 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:42178 10 6452 1 2025-12-29 18:24:12.136 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-29 18:24:12.139 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-29 18:24:11.899 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:24:12.174 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:24:12.258 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-29 18:20:23.869 00:05:02.700 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-29 18:20:23.868 00:05:02.705 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-29 18:24:37.962 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:47782 10 6452 1 2025-12-29 18:25:38.367 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:34518 10 6452 1 2025-12-29 18:26:38.769 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:47830 10 6452 1 2025-12-29 18:27:39.184 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:33944 10 6452 1 2025-12-29 18:28:39.586 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:37362 10 6452 1 2025-12-29 18:29:12.210 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-29 18:29:12.189 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:29:12.214 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:29:12.145 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-29 18:29:12.297 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-29 18:29:39.993 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:45994 10 6452 1 2025-12-29 18:26:23.871 00:05:02.703 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-29 18:26:23.874 00:05:02.697 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-29 18:30:40.400 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:44270 10 6452 1 2025-12-29 18:31:40.807 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:54980 10 6452 1 2025-12-29 18:32:41.217 00:00:19.060 TCP 1.101.0.1:3000 -> 23.104.0.1:38898 10 6452 1 2025-12-29 18:33:50.336 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:32796 10 6452 1 2025-12-29 18:34:12.269 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-29 18:34:12.189 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-29 18:34:12.120 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:34:12.352 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:34:12.435 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-29 18:34:50.746 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:40316 10 6452 1 2025-12-29 18:35:51.153 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40022 10 6452 1 2025-12-29 18:32:23.871 00:05:02.706 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-29 18:32:23.874 00:05:02.701 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-29 18:36:51.562 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56432 10 6452 1 2025-12-29 18:37:51.969 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51500 10 6452 1 2025-12-29 18:38:52.376 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:51600 10 6452 1 2025-12-29 18:39:12.452 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-29 18:39:12.330 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-29 18:39:12.240 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:39:12.455 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:39:12.538 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-29 18:39:52.774 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:41652 10 6452 1 2025-12-29 18:40:53.182 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:45666 10 6452 1 2025-12-29 18:41:53.583 00:00:11.052 TCP 1.101.0.1:3000 -> 23.104.0.1:39392 10 6452 1 2025-12-29 18:38:23.879 00:05:02.700 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-29 18:38:23.881 00:05:02.695 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-29 18:42:54.674 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47744 10 6452 1 2025-12-29 18:43:55.110 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:57424 10 6452 1 2025-12-29 18:44:12.336 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-29 18:44:12.427 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-29 18:44:12.270 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:44:12.490 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:44:12.574 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-29 18:44:55.473 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:60118 10 6452 1 2025-12-29 18:45:55.870 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:54364 10 6452 1 2025-12-29 18:46:56.281 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:54516 10 6452 1 2025-12-29 18:47:56.686 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36182 10 6452 1 2025-12-29 18:44:23.883 00:05:02.698 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-29 18:44:23.880 00:05:02.704 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-29 18:48:57.112 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55144 10 6452 1 2025-12-29 18:49:12.552 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-29 18:49:12.555 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-29 18:49:12.481 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:49:12.367 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:49:12.451 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-29 18:49:57.531 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60572 10 6452 1 2025-12-29 18:50:57.935 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:52490 10 6452 1 2025-12-29 18:51:58.359 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54518 10 6452 1 2025-12-29 18:52:58.765 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:55068 10 6452 1 2025-12-29 18:53:59.178 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:52966 10 6452 1 2025-12-29 18:54:12.742 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-29 18:54:12.762 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-29 18:54:12.726 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-29 18:54:12.631 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:54:12.660 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-29 18:50:23.918 00:05:02.665 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-29 18:50:23.917 00:05:02.670 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-29 18:54:59.592 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50520 10 6452 1 2025-12-29 18:55:59.995 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:48536 10 6452 1 2025-12-29 18:57:00.370 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:49038 10 6452 1 2025-12-29 18:58:00.777 00:00:24.206 TCP 1.101.0.1:3000 -> 23.104.0.1:58212 10 6452 1 Summary: total flows: 139, total bytes: 410588, total packets: 1011, avg bps: 882, avg pps: 0, avg bpp: 406 Time window: 2025-12-29 17:56:23 - 2025-12-29 18:58:24 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0035s User: 0.0012s Wall: 0.0015s flows/second: 91567.2 Runtime: 0.0015s