Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-08 08:58:54.199 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 08:58:54.115 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 08:58:54.004 00:00:00.049 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 08:58:54.118 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 08:58:54.005 00:00:00.029 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 08:58:47.950 00:00:10.335 TCP 1.101.0.1:3000 -> 23.104.0.1:37440 10 6452 1 2025-12-08 08:59:48.326 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:51828 10 6452 1 2025-12-08 09:00:48.725 00:00:10.379 TCP 1.101.0.1:3000 -> 23.104.0.1:40602 10 6452 1 2025-12-08 09:01:49.142 00:00:10.359 TCP 1.101.0.1:3000 -> 23.104.0.1:55366 10 6452 1 2025-12-08 08:58:12.635 00:05:02.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 08:58:12.637 00:05:02.448 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 09:02:49.542 00:00:11.067 TCP 1.101.0.1:3000 -> 23.104.0.1:50718 10 6452 1 2025-12-08 09:03:54.331 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 09:03:54.372 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 09:03:54.338 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:03:54.371 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:03:54.454 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 09:03:50.649 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56870 10 6452 1 2025-12-08 09:04:51.062 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:35030 10 6452 1 2025-12-08 09:05:51.467 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:38558 10 6452 1 2025-12-08 09:06:51.826 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:39194 10 6452 1 2025-12-08 09:07:52.230 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:53232 10 6452 1 2025-12-08 09:04:12.641 00:05:02.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 09:04:12.639 00:05:02.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 09:08:54.191 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 09:08:54.775 00:00:00.025 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 09:08:54.210 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 09:08:54.262 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:08:54.109 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:08:52.607 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:53194 10 6452 1 2025-12-08 09:09:53.009 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:37224 10 6452 1 2025-12-08 09:10:53.408 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:33446 10 6452 1 2025-12-08 09:11:53.771 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:43130 10 6452 1 2025-12-08 09:12:54.197 00:00:10.322 TCP 1.101.0.1:3000 -> 23.104.0.1:58050 10 6452 1 2025-12-08 09:13:54.638 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 09:13:54.637 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 09:13:54.722 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:13:54.637 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:13:54.719 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 09:13:54.561 00:00:10.402 TCP 1.101.0.1:3000 -> 23.104.0.1:35826 12 10369 1 2025-12-08 09:10:12.640 00:05:02.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 09:10:12.643 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 09:14:55.002 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:50714 10 6452 1 2025-12-08 09:15:55.372 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:36420 10 6452 1 2025-12-08 09:16:55.779 00:00:10.383 TCP 1.101.0.1:3000 -> 23.104.0.1:58324 10 6452 1 2025-12-08 09:17:56.217 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:49150 10 6452 1 2025-12-08 09:18:54.488 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 09:18:54.596 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 09:18:54.524 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:18:54.601 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:18:54.683 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 09:18:56.619 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:51494 10 6452 1 2025-12-08 09:19:57.034 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:38898 10 6452 1 2025-12-08 09:16:12.646 00:05:02.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 09:16:12.643 00:05:02.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 09:20:57.409 00:00:11.114 TCP 1.101.0.1:3000 -> 23.104.0.1:38924 10 6452 1 2025-12-08 09:21:58.557 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:52034 10 6452 1 2025-12-08 09:22:58.971 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:40894 10 6452 1 2025-12-08 09:23:54.838 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 09:23:54.920 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 09:23:54.701 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:23:54.756 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:23:54.815 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 09:23:59.393 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:35120 10 6452 1 2025-12-08 09:24:59.795 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:48146 10 6452 1 2025-12-08 09:26:00.202 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:35302 10 6452 1 2025-12-08 09:22:12.647 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 09:22:12.645 00:05:02.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 09:27:00.568 00:00:10.417 TCP 1.101.0.1:3000 -> 23.104.0.1:51492 11 6504 1 2025-12-08 09:28:01.027 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:44592 10 6452 1 2025-12-08 09:28:54.696 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 09:28:54.604 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 09:28:54.668 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:28:54.919 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:28:55.004 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 09:29:01.423 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:55064 10 6452 1 2025-12-08 09:30:01.829 00:00:10.321 TCP 1.101.0.1:3000 -> 23.104.0.1:56210 10 6452 1 2025-12-08 09:31:02.195 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58240 10 6452 1 2025-12-08 09:32:02.589 00:00:10.332 TCP 1.101.0.1:3000 -> 23.104.0.1:58496 10 6452 1 2025-12-08 09:28:12.646 00:05:02.453 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 09:28:12.649 00:05:02.448 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 09:33:02.958 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51308 10 6452 1 2025-12-08 09:33:55.837 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 09:33:55.567 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 09:33:55.684 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 09:33:55.522 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:33:55.752 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:34:03.325 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56090 10 6452 1 2025-12-08 09:35:03.732 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:55378 10 6452 1 2025-12-08 09:36:04.147 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:40382 10 6452 1 2025-12-08 09:37:04.548 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:60036 10 6452 1 2025-12-08 09:34:12.655 00:05:02.446 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 09:38:04.956 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:58948 10 6452 1 2025-12-08 09:34:12.651 00:05:02.451 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 09:38:54.913 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 09:38:54.688 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:38:55.150 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 09:38:55.144 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:38:55.227 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 09:39:05.361 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:42076 10 6452 1 2025-12-08 09:40:05.734 00:00:10.386 TCP 1.101.0.1:3000 -> 23.104.0.1:40500 10 6452 1 2025-12-08 09:41:06.152 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:52418 10 6452 1 2025-12-08 09:42:06.554 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:48180 10 6452 1 2025-12-08 09:43:06.960 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:42808 10 6452 1 2025-12-08 09:43:55.141 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 09:43:55.157 00:00:00.021 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 09:43:55.141 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:43:55.074 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:43:55.157 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 09:40:12.654 00:05:02.449 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 09:40:12.657 00:05:02.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 09:44:07.379 00:00:10.442 TCP 1.101.0.1:3000 -> 23.104.0.1:33534 12 10375 1 2025-12-08 09:45:07.859 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:55608 10 6452 1 2025-12-08 09:46:08.274 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:56474 10 6452 1 2025-12-08 09:47:08.679 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:60504 10 6452 1 2025-12-08 09:48:09.066 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:48420 10 6452 1 2025-12-08 09:48:55.159 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 09:48:55.158 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 09:48:55.266 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:48:55.212 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:48:55.294 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 09:49:09.437 00:00:10.440 TCP 1.101.0.1:3000 -> 23.104.0.1:48800 12 10375 1 2025-12-08 09:46:12.658 00:05:02.445 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 09:46:12.656 00:05:02.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 09:50:09.932 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:59586 10 6452 1 2025-12-08 09:51:10.348 00:00:10.372 TCP 1.101.0.1:3000 -> 23.104.0.1:46776 10 6452 1 2025-12-08 09:52:10.769 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:55152 10 6452 1 2025-12-08 09:53:11.177 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52746 10 6452 1 2025-12-08 09:53:55.364 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-08 09:53:55.039 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-08 09:53:55.179 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:53:55.408 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-08 09:53:55.491 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-08 09:54:11.588 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:37040 12 6556 1 2025-12-08 09:55:11.996 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:43422 10 6452 1 2025-12-08 09:52:12.657 00:05:02.450 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-08 09:52:12.659 00:05:02.444 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-08 09:56:12.403 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:59006 10 6452 1 2025-12-08 09:57:12.810 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34302 10 6452 1 2025-12-08 09:58:13.209 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:36152 10 6452 1 Summary: total flows: 140, total bytes: 428919, total packets: 1029, avg bps: 950, avg pps: 0, avg bpp: 416 Time window: 2025-12-08 08:58:12 - 2025-12-08 09:58:23 Total flows processed: 140, passed: 140, Blocks skipped: 0, Bytes read: 14624 Sys: 0.0040s User: 0.0010s Wall: 0.0020s flows/second: 70892.5 Runtime: 0.0020s