Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-09 18:59:35.162 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:59:34.982 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 18:59:35.172 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 18:59:35.104 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 18:59:35.244 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 18:59:29.426 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:53944 10 6452 1 2025-12-09 19:00:29.827 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:56596 10 6452 1 2025-12-09 18:57:13.428 00:05:02.417 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 18:57:13.426 00:05:02.423 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:01:30.228 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:34388 10 6452 1 2025-12-09 19:02:30.590 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:47426 10 6452 1 2025-12-09 19:03:31.002 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:48210 10 6452 1 2025-12-09 19:04:35.371 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:04:35.291 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:04:35.262 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:04:35.288 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:04:35.344 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:04:31.409 00:00:10.396 TCP 1.101.0.1:3000 -> 23.104.0.1:39296 12 10375 1 2025-12-09 19:05:31.847 00:00:10.388 TCP 1.101.0.1:3000 -> 23.104.0.1:57180 10 6452 1 2025-12-09 19:06:32.270 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:34656 10 6452 1 2025-12-09 19:03:13.426 00:05:02.422 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:03:13.429 00:05:02.417 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:07:32.634 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41322 10 6452 1 2025-12-09 19:08:33.039 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:41258 10 6452 1 2025-12-09 19:09:35.509 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:09:35.380 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:09:35.249 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:09:35.426 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:09:35.384 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:09:33.445 00:00:11.301 TCP 1.101.0.1:3000 -> 23.104.0.1:47666 10 6452 1 2025-12-09 19:10:34.786 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:46128 10 6452 1 2025-12-09 19:11:35.157 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:39796 10 6452 1 2025-12-09 19:12:35.558 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:51174 10 6452 1 2025-12-09 19:09:13.431 00:05:02.419 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:09:13.434 00:05:02.414 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:13:35.917 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:56724 10 6452 1 2025-12-09 19:14:35.267 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:14:35.379 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:14:35.388 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:14:35.185 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:14:35.459 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:14:36.328 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:45892 10 6452 1 2025-12-09 19:15:36.729 00:00:10.384 TCP 1.101.0.1:3000 -> 23.104.0.1:47328 10 6452 1 2025-12-09 19:16:37.143 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:40560 10 6452 1 2025-12-09 19:17:37.507 00:00:10.380 TCP 1.101.0.1:3000 -> 23.104.0.1:59782 10 6452 1 2025-12-09 19:18:37.925 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:59904 10 6452 1 2025-12-09 19:15:13.433 00:05:02.421 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:15:13.435 00:05:02.416 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:19:35.438 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:19:35.177 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:19:35.599 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:19:35.591 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:19:35.681 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:19:38.347 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:56050 10 6452 1 2025-12-09 19:20:38.740 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:42510 10 6452 1 2025-12-09 19:21:39.147 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:43194 10 6452 1 2025-12-09 19:22:39.516 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:36112 10 6452 1 2025-12-09 19:23:39.930 00:00:10.343 TCP 1.101.0.1:3000 -> 23.104.0.1:55146 10 6452 1 2025-12-09 19:24:35.774 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:24:35.594 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:24:35.374 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:24:35.377 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:24:35.456 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:24:40.314 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42746 10 6452 1 2025-12-09 19:21:13.434 00:05:02.424 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:21:13.438 00:05:02.419 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:25:40.723 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:35346 10 6452 1 2025-12-09 19:26:41.108 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:36312 10 6452 1 2025-12-09 19:27:41.556 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:49278 10 6452 1 2025-12-09 19:28:41.958 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:49382 10 6452 1 2025-12-09 19:29:35.911 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:29:35.593 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:29:35.630 00:00:00.027 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:29:35.829 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:29:35.691 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:29:42.364 00:00:10.358 TCP 1.101.0.1:3000 -> 23.104.0.1:59998 10 6452 1 2025-12-09 19:30:42.762 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:35180 10 6452 1 2025-12-09 19:27:13.438 00:05:02.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:27:13.436 00:05:02.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:31:43.184 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:55494 10 6452 1 2025-12-09 19:32:43.602 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:46204 10 6452 1 2025-12-09 19:33:44.003 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:35710 10 6452 1 2025-12-09 19:34:36.162 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:34:35.764 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:34:36.069 00:00:00.024 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:34:36.081 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:34:36.113 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:34:44.411 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:49248 10 6452 1 2025-12-09 19:35:44.817 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:41492 10 6452 1 2025-12-09 19:36:45.218 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:59726 10 6452 1 2025-12-09 19:33:13.437 00:05:02.429 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:33:13.440 00:05:02.424 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:37:45.581 00:00:10.336 TCP 1.101.0.1:3000 -> 23.104.0.1:41348 10 6452 1 2025-12-09 19:38:45.942 00:00:10.381 TCP 1.101.0.1:3000 -> 23.104.0.1:41178 10 6452 1 2025-12-09 19:39:35.888 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:39:35.963 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:39:36.440 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:39:36.357 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:39:36.169 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:39:46.356 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:47132 10 6452 1 2025-12-09 19:40:46.763 00:00:10.338 TCP 1.101.0.1:3000 -> 23.104.0.1:47338 10 6452 1 2025-12-09 19:41:47.142 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35164 10 6452 1 2025-12-09 19:42:47.545 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:34098 10 6452 1 2025-12-09 19:39:13.438 00:05:02.430 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:39:13.440 00:05:02.425 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:43:47.955 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:57840 10 6452 1 2025-12-09 19:44:35.635 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:44:36.107 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:44:36.068 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:44:36.058 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:44:36.151 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:44:48.368 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40162 10 6452 1 2025-12-09 19:45:48.770 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:46812 10 6452 1 2025-12-09 19:46:49.202 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:42268 10 6452 1 2025-12-09 19:47:49.605 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:34684 10 6452 1 2025-12-09 19:48:50.009 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:45724 10 6452 1 2025-12-09 19:45:13.440 00:05:02.431 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:45:13.443 00:05:02.426 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:49:36.211 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:49:36.182 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:49:36.157 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:49:36.161 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:49:36.238 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:49:50.379 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53772 10 6452 1 2025-12-09 19:50:50.782 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:60028 10 6452 1 2025-12-09 19:51:51.146 00:00:10.389 TCP 1.101.0.1:3000 -> 23.104.0.1:41268 12 6556 1 2025-12-09 19:52:51.589 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:43560 10 6452 1 2025-12-09 19:53:51.992 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:53116 10 6452 1 2025-12-09 19:54:36.191 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-09 19:54:36.264 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-09 19:54:36.230 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:54:36.109 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-09 19:54:36.255 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-09 19:54:52.365 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:34610 10 6452 1 2025-12-09 19:51:13.445 00:05:02.426 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-09 19:51:13.441 00:05:02.431 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-09 19:55:52.726 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:42554 10 6452 1 2025-12-09 19:56:53.140 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:59800 10 6452 1 2025-12-09 19:57:53.539 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:58904 10 6452 1 Summary: total flows: 139, total bytes: 414575, total packets: 1014, avg bps: 908, avg pps: 0, avg bpp: 408 Time window: 2025-12-09 18:57:13 - 2025-12-09 19:58:03 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0039s User: 0.0020s Wall: 0.0018s flows/second: 78530.2 Runtime: 0.0018s